dbench-4.0/ 0002775 0001133 0000144 00000000000 10756153037 013243 5 ustar tridge users 0000000 0000000 dbench-4.0/COPYING 0000664 0001133 0001133 00000104513 10756153025 014411 0 ustar tridge tridge 0000000 0000000 GNU GENERAL PUBLIC LICENSE
Version 3, 29 June 2007
Copyright (C) 2007 Free Software Foundation, Inc.
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.
Preamble
The GNU General Public License is a free, copyleft license for
software and other kinds of works.
The licenses for most software and other practical works are designed
to take away your freedom to share and change the works. By contrast,
the GNU General Public License is intended to guarantee your freedom to
share and change all versions of a program--to make sure it remains free
software for all its users. We, the Free Software Foundation, use the
GNU General Public License for most of our software; it applies also to
any other work released this way by its authors. You can apply it to
your programs, too.
When we speak of free software, we are referring to freedom, not
price. Our General Public Licenses are designed to make sure that you
have the freedom to distribute copies of free software (and charge for
them if you wish), that you receive source code or can get it if you
want it, that you can change the software or use pieces of it in new
free programs, and that you know you can do these things.
To protect your rights, we need to prevent others from denying you
these rights or asking you to surrender the rights. Therefore, you have
certain responsibilities if you distribute copies of the software, or if
you modify it: responsibilities to respect the freedom of others.
For example, if you distribute copies of such a program, whether
gratis or for a fee, you must pass on to the recipients the same
freedoms that you received. You must make sure that they, too, receive
or can get the source code. And you must show them these terms so they
know their rights.
Developers that use the GNU GPL protect your rights with two steps:
(1) assert copyright on the software, and (2) offer you this License
giving you legal permission to copy, distribute and/or modify it.
For the developers' and authors' protection, the GPL clearly explains
that there is no warranty for this free software. For both users' and
authors' sake, the GPL requires that modified versions be marked as
changed, so that their problems will not be attributed erroneously to
authors of previous versions.
Some devices are designed to deny users access to install or run
modified versions of the software inside them, although the manufacturer
can do so. This is fundamentally incompatible with the aim of
protecting users' freedom to change the software. The systematic
pattern of such abuse occurs in the area of products for individuals to
use, which is precisely where it is most unacceptable. Therefore, we
have designed this version of the GPL to prohibit the practice for those
products. If such problems arise substantially in other domains, we
stand ready to extend this provision to those domains in future versions
of the GPL, as needed to protect the freedom of users.
Finally, every program is threatened constantly by software patents.
States should not allow patents to restrict development and use of
software on general-purpose computers, but in those that do, we wish to
avoid the special danger that patents applied to a free program could
make it effectively proprietary. To prevent this, the GPL assures that
patents cannot be used to render the program non-free.
The precise terms and conditions for copying, distribution and
modification follow.
TERMS AND CONDITIONS
0. Definitions.
"This License" refers to version 3 of the GNU General Public License.
"Copyright" also means copyright-like laws that apply to other kinds of
works, such as semiconductor masks.
"The Program" refers to any copyrightable work licensed under this
License. Each licensee is addressed as "you". "Licensees" and
"recipients" may be individuals or organizations.
To "modify" a work means to copy from or adapt all or part of the work
in a fashion requiring copyright permission, other than the making of an
exact copy. The resulting work is called a "modified version" of the
earlier work or a work "based on" the earlier work.
A "covered work" means either the unmodified Program or a work based
on the Program.
To "propagate" a work means to do anything with it that, without
permission, would make you directly or secondarily liable for
infringement under applicable copyright law, except executing it on a
computer or modifying a private copy. Propagation includes copying,
distribution (with or without modification), making available to the
public, and in some countries other activities as well.
To "convey" a work means any kind of propagation that enables other
parties to make or receive copies. Mere interaction with a user through
a computer network, with no transfer of a copy, is not conveying.
An interactive user interface displays "Appropriate Legal Notices"
to the extent that it includes a convenient and prominently visible
feature that (1) displays an appropriate copyright notice, and (2)
tells the user that there is no warranty for the work (except to the
extent that warranties are provided), that licensees may convey the
work under this License, and how to view a copy of this License. If
the interface presents a list of user commands or options, such as a
menu, a prominent item in the list meets this criterion.
1. Source Code.
The "source code" for a work means the preferred form of the work
for making modifications to it. "Object code" means any non-source
form of a work.
A "Standard Interface" means an interface that either is an official
standard defined by a recognized standards body, or, in the case of
interfaces specified for a particular programming language, one that
is widely used among developers working in that language.
The "System Libraries" of an executable work include anything, other
than the work as a whole, that (a) is included in the normal form of
packaging a Major Component, but which is not part of that Major
Component, and (b) serves only to enable use of the work with that
Major Component, or to implement a Standard Interface for which an
implementation is available to the public in source code form. A
"Major Component", in this context, means a major essential component
(kernel, window system, and so on) of the specific operating system
(if any) on which the executable work runs, or a compiler used to
produce the work, or an object code interpreter used to run it.
The "Corresponding Source" for a work in object code form means all
the source code needed to generate, install, and (for an executable
work) run the object code and to modify the work, including scripts to
control those activities. However, it does not include the work's
System Libraries, or general-purpose tools or generally available free
programs which are used unmodified in performing those activities but
which are not part of the work. For example, Corresponding Source
includes interface definition files associated with source files for
the work, and the source code for shared libraries and dynamically
linked subprograms that the work is specifically designed to require,
such as by intimate data communication or control flow between those
subprograms and other parts of the work.
The Corresponding Source need not include anything that users
can regenerate automatically from other parts of the Corresponding
Source.
The Corresponding Source for a work in source code form is that
same work.
2. Basic Permissions.
All rights granted under this License are granted for the term of
copyright on the Program, and are irrevocable provided the stated
conditions are met. This License explicitly affirms your unlimited
permission to run the unmodified Program. The output from running a
covered work is covered by this License only if the output, given its
content, constitutes a covered work. This License acknowledges your
rights of fair use or other equivalent, as provided by copyright law.
You may make, run and propagate covered works that you do not
convey, without conditions so long as your license otherwise remains
in force. You may convey covered works to others for the sole purpose
of having them make modifications exclusively for you, or provide you
with facilities for running those works, provided that you comply with
the terms of this License in conveying all material for which you do
not control copyright. Those thus making or running the covered works
for you must do so exclusively on your behalf, under your direction
and control, on terms that prohibit them from making any copies of
your copyrighted material outside their relationship with you.
Conveying under any other circumstances is permitted solely under
the conditions stated below. Sublicensing is not allowed; section 10
makes it unnecessary.
3. Protecting Users' Legal Rights From Anti-Circumvention Law.
No covered work shall be deemed part of an effective technological
measure under any applicable law fulfilling obligations under article
11 of the WIPO copyright treaty adopted on 20 December 1996, or
similar laws prohibiting or restricting circumvention of such
measures.
When you convey a covered work, you waive any legal power to forbid
circumvention of technological measures to the extent such circumvention
is effected by exercising rights under this License with respect to
the covered work, and you disclaim any intention to limit operation or
modification of the work as a means of enforcing, against the work's
users, your or third parties' legal rights to forbid circumvention of
technological measures.
4. Conveying Verbatim Copies.
You may convey verbatim copies of the Program's source code as you
receive it, in any medium, provided that you conspicuously and
appropriately publish on each copy an appropriate copyright notice;
keep intact all notices stating that this License and any
non-permissive terms added in accord with section 7 apply to the code;
keep intact all notices of the absence of any warranty; and give all
recipients a copy of this License along with the Program.
You may charge any price or no price for each copy that you convey,
and you may offer support or warranty protection for a fee.
5. Conveying Modified Source Versions.
You may convey a work based on the Program, or the modifications to
produce it from the Program, in the form of source code under the
terms of section 4, provided that you also meet all of these conditions:
a) The work must carry prominent notices stating that you modified
it, and giving a relevant date.
b) The work must carry prominent notices stating that it is
released under this License and any conditions added under section
7. This requirement modifies the requirement in section 4 to
"keep intact all notices".
c) You must license the entire work, as a whole, under this
License to anyone who comes into possession of a copy. This
License will therefore apply, along with any applicable section 7
additional terms, to the whole of the work, and all its parts,
regardless of how they are packaged. This License gives no
permission to license the work in any other way, but it does not
invalidate such permission if you have separately received it.
d) If the work has interactive user interfaces, each must display
Appropriate Legal Notices; however, if the Program has interactive
interfaces that do not display Appropriate Legal Notices, your
work need not make them do so.
A compilation of a covered work with other separate and independent
works, which are not by their nature extensions of the covered work,
and which are not combined with it such as to form a larger program,
in or on a volume of a storage or distribution medium, is called an
"aggregate" if the compilation and its resulting copyright are not
used to limit the access or legal rights of the compilation's users
beyond what the individual works permit. Inclusion of a covered work
in an aggregate does not cause this License to apply to the other
parts of the aggregate.
6. Conveying Non-Source Forms.
You may convey a covered work in object code form under the terms
of sections 4 and 5, provided that you also convey the
machine-readable Corresponding Source under the terms of this License,
in one of these ways:
a) Convey the object code in, or embodied in, a physical product
(including a physical distribution medium), accompanied by the
Corresponding Source fixed on a durable physical medium
customarily used for software interchange.
b) Convey the object code in, or embodied in, a physical product
(including a physical distribution medium), accompanied by a
written offer, valid for at least three years and valid for as
long as you offer spare parts or customer support for that product
model, to give anyone who possesses the object code either (1) a
copy of the Corresponding Source for all the software in the
product that is covered by this License, on a durable physical
medium customarily used for software interchange, for a price no
more than your reasonable cost of physically performing this
conveying of source, or (2) access to copy the
Corresponding Source from a network server at no charge.
c) Convey individual copies of the object code with a copy of the
written offer to provide the Corresponding Source. This
alternative is allowed only occasionally and noncommercially, and
only if you received the object code with such an offer, in accord
with subsection 6b.
d) Convey the object code by offering access from a designated
place (gratis or for a charge), and offer equivalent access to the
Corresponding Source in the same way through the same place at no
further charge. You need not require recipients to copy the
Corresponding Source along with the object code. If the place to
copy the object code is a network server, the Corresponding Source
may be on a different server (operated by you or a third party)
that supports equivalent copying facilities, provided you maintain
clear directions next to the object code saying where to find the
Corresponding Source. Regardless of what server hosts the
Corresponding Source, you remain obligated to ensure that it is
available for as long as needed to satisfy these requirements.
e) Convey the object code using peer-to-peer transmission, provided
you inform other peers where the object code and Corresponding
Source of the work are being offered to the general public at no
charge under subsection 6d.
A separable portion of the object code, whose source code is excluded
from the Corresponding Source as a System Library, need not be
included in conveying the object code work.
A "User Product" is either (1) a "consumer product", which means any
tangible personal property which is normally used for personal, family,
or household purposes, or (2) anything designed or sold for incorporation
into a dwelling. In determining whether a product is a consumer product,
doubtful cases shall be resolved in favor of coverage. For a particular
product received by a particular user, "normally used" refers to a
typical or common use of that class of product, regardless of the status
of the particular user or of the way in which the particular user
actually uses, or expects or is expected to use, the product. A product
is a consumer product regardless of whether the product has substantial
commercial, industrial or non-consumer uses, unless such uses represent
the only significant mode of use of the product.
"Installation Information" for a User Product means any methods,
procedures, authorization keys, or other information required to install
and execute modified versions of a covered work in that User Product from
a modified version of its Corresponding Source. The information must
suffice to ensure that the continued functioning of the modified object
code is in no case prevented or interfered with solely because
modification has been made.
If you convey an object code work under this section in, or with, or
specifically for use in, a User Product, and the conveying occurs as
part of a transaction in which the right of possession and use of the
User Product is transferred to the recipient in perpetuity or for a
fixed term (regardless of how the transaction is characterized), the
Corresponding Source conveyed under this section must be accompanied
by the Installation Information. But this requirement does not apply
if neither you nor any third party retains the ability to install
modified object code on the User Product (for example, the work has
been installed in ROM).
The requirement to provide Installation Information does not include a
requirement to continue to provide support service, warranty, or updates
for a work that has been modified or installed by the recipient, or for
the User Product in which it has been modified or installed. Access to a
network may be denied when the modification itself materially and
adversely affects the operation of the network or violates the rules and
protocols for communication across the network.
Corresponding Source conveyed, and Installation Information provided,
in accord with this section must be in a format that is publicly
documented (and with an implementation available to the public in
source code form), and must require no special password or key for
unpacking, reading or copying.
7. Additional Terms.
"Additional permissions" are terms that supplement the terms of this
License by making exceptions from one or more of its conditions.
Additional permissions that are applicable to the entire Program shall
be treated as though they were included in this License, to the extent
that they are valid under applicable law. If additional permissions
apply only to part of the Program, that part may be used separately
under those permissions, but the entire Program remains governed by
this License without regard to the additional permissions.
When you convey a copy of a covered work, you may at your option
remove any additional permissions from that copy, or from any part of
it. (Additional permissions may be written to require their own
removal in certain cases when you modify the work.) You may place
additional permissions on material, added by you to a covered work,
for which you have or can give appropriate copyright permission.
Notwithstanding any other provision of this License, for material you
add to a covered work, you may (if authorized by the copyright holders of
that material) supplement the terms of this License with terms:
a) Disclaiming warranty or limiting liability differently from the
terms of sections 15 and 16 of this License; or
b) Requiring preservation of specified reasonable legal notices or
author attributions in that material or in the Appropriate Legal
Notices displayed by works containing it; or
c) Prohibiting misrepresentation of the origin of that material, or
requiring that modified versions of such material be marked in
reasonable ways as different from the original version; or
d) Limiting the use for publicity purposes of names of licensors or
authors of the material; or
e) Declining to grant rights under trademark law for use of some
trade names, trademarks, or service marks; or
f) Requiring indemnification of licensors and authors of that
material by anyone who conveys the material (or modified versions of
it) with contractual assumptions of liability to the recipient, for
any liability that these contractual assumptions directly impose on
those licensors and authors.
All other non-permissive additional terms are considered "further
restrictions" within the meaning of section 10. If the Program as you
received it, or any part of it, contains a notice stating that it is
governed by this License along with a term that is a further
restriction, you may remove that term. If a license document contains
a further restriction but permits relicensing or conveying under this
License, you may add to a covered work material governed by the terms
of that license document, provided that the further restriction does
not survive such relicensing or conveying.
If you add terms to a covered work in accord with this section, you
must place, in the relevant source files, a statement of the
additional terms that apply to those files, or a notice indicating
where to find the applicable terms.
Additional terms, permissive or non-permissive, may be stated in the
form of a separately written license, or stated as exceptions;
the above requirements apply either way.
8. Termination.
You may not propagate or modify a covered work except as expressly
provided under this License. Any attempt otherwise to propagate or
modify it is void, and will automatically terminate your rights under
this License (including any patent licenses granted under the third
paragraph of section 11).
However, if you cease all violation of this License, then your
license from a particular copyright holder is reinstated (a)
provisionally, unless and until the copyright holder explicitly and
finally terminates your license, and (b) permanently, if the copyright
holder fails to notify you of the violation by some reasonable means
prior to 60 days after the cessation.
Moreover, your license from a particular copyright holder is
reinstated permanently if the copyright holder notifies you of the
violation by some reasonable means, this is the first time you have
received notice of violation of this License (for any work) from that
copyright holder, and you cure the violation prior to 30 days after
your receipt of the notice.
Termination of your rights under this section does not terminate the
licenses of parties who have received copies or rights from you under
this License. If your rights have been terminated and not permanently
reinstated, you do not qualify to receive new licenses for the same
material under section 10.
9. Acceptance Not Required for Having Copies.
You are not required to accept this License in order to receive or
run a copy of the Program. Ancillary propagation of a covered work
occurring solely as a consequence of using peer-to-peer transmission
to receive a copy likewise does not require acceptance. However,
nothing other than this License grants you permission to propagate or
modify any covered work. These actions infringe copyright if you do
not accept this License. Therefore, by modifying or propagating a
covered work, you indicate your acceptance of this License to do so.
10. Automatic Licensing of Downstream Recipients.
Each time you convey a covered work, the recipient automatically
receives a license from the original licensors, to run, modify and
propagate that work, subject to this License. You are not responsible
for enforcing compliance by third parties with this License.
An "entity transaction" is a transaction transferring control of an
organization, or substantially all assets of one, or subdividing an
organization, or merging organizations. If propagation of a covered
work results from an entity transaction, each party to that
transaction who receives a copy of the work also receives whatever
licenses to the work the party's predecessor in interest had or could
give under the previous paragraph, plus a right to possession of the
Corresponding Source of the work from the predecessor in interest, if
the predecessor has it or can get it with reasonable efforts.
You may not impose any further restrictions on the exercise of the
rights granted or affirmed under this License. For example, you may
not impose a license fee, royalty, or other charge for exercise of
rights granted under this License, and you may not initiate litigation
(including a cross-claim or counterclaim in a lawsuit) alleging that
any patent claim is infringed by making, using, selling, offering for
sale, or importing the Program or any portion of it.
11. Patents.
A "contributor" is a copyright holder who authorizes use under this
License of the Program or a work on which the Program is based. The
work thus licensed is called the contributor's "contributor version".
A contributor's "essential patent claims" are all patent claims
owned or controlled by the contributor, whether already acquired or
hereafter acquired, that would be infringed by some manner, permitted
by this License, of making, using, or selling its contributor version,
but do not include claims that would be infringed only as a
consequence of further modification of the contributor version. For
purposes of this definition, "control" includes the right to grant
patent sublicenses in a manner consistent with the requirements of
this License.
Each contributor grants you a non-exclusive, worldwide, royalty-free
patent license under the contributor's essential patent claims, to
make, use, sell, offer for sale, import and otherwise run, modify and
propagate the contents of its contributor version.
In the following three paragraphs, a "patent license" is any express
agreement or commitment, however denominated, not to enforce a patent
(such as an express permission to practice a patent or covenant not to
sue for patent infringement). To "grant" such a patent license to a
party means to make such an agreement or commitment not to enforce a
patent against the party.
If you convey a covered work, knowingly relying on a patent license,
and the Corresponding Source of the work is not available for anyone
to copy, free of charge and under the terms of this License, through a
publicly available network server or other readily accessible means,
then you must either (1) cause the Corresponding Source to be so
available, or (2) arrange to deprive yourself of the benefit of the
patent license for this particular work, or (3) arrange, in a manner
consistent with the requirements of this License, to extend the patent
license to downstream recipients. "Knowingly relying" means you have
actual knowledge that, but for the patent license, your conveying the
covered work in a country, or your recipient's use of the covered work
in a country, would infringe one or more identifiable patents in that
country that you have reason to believe are valid.
If, pursuant to or in connection with a single transaction or
arrangement, you convey, or propagate by procuring conveyance of, a
covered work, and grant a patent license to some of the parties
receiving the covered work authorizing them to use, propagate, modify
or convey a specific copy of the covered work, then the patent license
you grant is automatically extended to all recipients of the covered
work and works based on it.
A patent license is "discriminatory" if it does not include within
the scope of its coverage, prohibits the exercise of, or is
conditioned on the non-exercise of one or more of the rights that are
specifically granted under this License. You may not convey a covered
work if you are a party to an arrangement with a third party that is
in the business of distributing software, under which you make payment
to the third party based on the extent of your activity of conveying
the work, and under which the third party grants, to any of the
parties who would receive the covered work from you, a discriminatory
patent license (a) in connection with copies of the covered work
conveyed by you (or copies made from those copies), or (b) primarily
for and in connection with specific products or compilations that
contain the covered work, unless you entered into that arrangement,
or that patent license was granted, prior to 28 March 2007.
Nothing in this License shall be construed as excluding or limiting
any implied license or other defenses to infringement that may
otherwise be available to you under applicable patent law.
12. No Surrender of Others' Freedom.
If conditions are imposed on you (whether by court order, agreement or
otherwise) that contradict the conditions of this License, they do not
excuse you from the conditions of this License. If you cannot convey a
covered work so as to satisfy simultaneously your obligations under this
License and any other pertinent obligations, then as a consequence you may
not convey it at all. For example, if you agree to terms that obligate you
to collect a royalty for further conveying from those to whom you convey
the Program, the only way you could satisfy both those terms and this
License would be to refrain entirely from conveying the Program.
13. Use with the GNU Affero General Public License.
Notwithstanding any other provision of this License, you have
permission to link or combine any covered work with a work licensed
under version 3 of the GNU Affero General Public License into a single
combined work, and to convey the resulting work. The terms of this
License will continue to apply to the part which is the covered work,
but the special requirements of the GNU Affero General Public License,
section 13, concerning interaction through a network will apply to the
combination as such.
14. Revised Versions of this License.
The Free Software Foundation may publish revised and/or new versions of
the GNU General Public License from time to time. Such new versions will
be similar in spirit to the present version, but may differ in detail to
address new problems or concerns.
Each version is given a distinguishing version number. If the
Program specifies that a certain numbered version of the GNU General
Public License "or any later version" applies to it, you have the
option of following the terms and conditions either of that numbered
version or of any later version published by the Free Software
Foundation. If the Program does not specify a version number of the
GNU General Public License, you may choose any version ever published
by the Free Software Foundation.
If the Program specifies that a proxy can decide which future
versions of the GNU General Public License can be used, that proxy's
public statement of acceptance of a version permanently authorizes you
to choose that version for the Program.
Later license versions may give you additional or different
permissions. However, no additional obligations are imposed on any
author or copyright holder as a result of your choosing to follow a
later version.
15. Disclaimer of Warranty.
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
16. Limitation of Liability.
IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
SUCH DAMAGES.
17. Interpretation of Sections 15 and 16.
If the disclaimer of warranty and limitation of liability provided
above cannot be given local legal effect according to their terms,
reviewing courts shall apply local law that most closely approximates
an absolute waiver of all civil liability in connection with the
Program, unless a warranty or assumption of liability accompanies a
copy of the Program in return for a fee.
END OF TERMS AND CONDITIONS
How to Apply These Terms to Your New Programs
If you develop a new program, and you want it to be of the greatest
possible use to the public, the best way to achieve this is to make it
free software which everyone can redistribute and change under these terms.
To do so, attach the following notices to the program. It is safest
to attach them to the start of each source file to most effectively
state the exclusion of warranty; and each file should have at least
the "copyright" line and a pointer to where the full notice is found.
Copyright (C)
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Also add information on how to contact you by electronic and paper mail.
If the program does terminal interaction, make it output a short
notice like this when it starts in an interactive mode:
Copyright (C)
This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.
The hypothetical commands `show w' and `show c' should show the appropriate
parts of the General Public License. Of course, your program's commands
might be different; for a GUI interface, you would use an "about box".
You should also get your employer (if you work as a programmer) or school,
if any, to sign a "copyright disclaimer" for the program, if necessary.
For more information on this, and how to apply and follow the GNU GPL, see
.
The GNU General Public License does not permit incorporating your program
into proprietary programs. If your program is a subroutine library, you
may consider it more useful to permit linking proprietary applications with
the library. If this is what you want to do, use the GNU Lesser General
Public License instead of this License. But first, please read
.
dbench-4.0/INSTALL 0000664 0001133 0001133 00000000417 10756153025 014405 0 ustar tridge tridge 0000000 0000000 Quick guide to installing/running dbench & co:
1) Run 'make' in the source directory
2) cd into the directory in which you wish to run the benchmark
3) either copy client.txt into that directory, or specify it's path
with -c
4) run the appropriate benchmark program
dbench-4.0/Makefile.in 0000664 0001133 0001133 00000002016 10756153025 015416 0 ustar tridge tridge 0000000 0000000 VERSION=4.00
srcdir=@srcdir@
VPATH=@srcdir@
prefix=@prefix@
exec_prefix=@exec_prefix@
bindir=@bindir@
mandir=@mandir@
datadir=@datadir@
INSTALLCMD=@INSTALL@
LIBS=@LIBS@ -lpopt
CC=@CC@
CFLAGS=@CFLAGS@ -I. -DVERSION=\"$(VERSION)\" -DDATADIR=\"$(datadir)\"
EXEEXT=@EXEEXT@
DB_OBJS = fileio.o util.o dbench.o child.o system.o snprintf.o
TB_OBJS = sockio.o util.o dbench.o child.o socklib.o snprintf.o
SRV_OBJS = util.o tbench_srv.o socklib.o
all: dbench tbench tbench_srv
dbench: $(DB_OBJS)
$(CC) -o $@ $(DB_OBJS) $(LIBS)
tbench: $(TB_OBJS)
$(CC) -o $@ $(TB_OBJS) $(LIBS)
tbench_srv: $(SRV_OBJS)
$(CC) -o $@ $(SRV_OBJS) $(LIBS)
# Careful here: don't install client.txt over itself.
install: all
${INSTALLCMD} -d $(bindir) $(datadir) $(mandir)
${INSTALLCMD} dbench tbench tbench_srv $(bindir)
${INSTALLCMD} client.txt $(datadir)
${INSTALLCMD} -m644 dbench.1 $(mandir)
ln -sf dbench.1 $(mandir)/tbench.1
ln -sf dbench.1 $(mandir)/tbench_srv.1
clean:
rm -f *.o *~ dbench tbench tbench_srv
proto:
./mkproto.pl *.c > proto.h
dbench-4.0/README 0000664 0001133 0001133 00000021346 10756153025 014240 0 ustar tridge tridge 0000000 0000000 Emulating Netbench
==================
Netbench is a terrible benchmark, but it's an "industry standard" and
it's what is used in the press to rate windows fileservers like Samba
and WindowsNT.
The big problem with netbench for the open source community is that
very few people who work on open source software have the facilities
to run it properly. You need a lab with between 60 and 150 windows PC,
all on switched fast ethernet and a really grunty server (say a quad
xeon with 1GB ram and hardware raid). Then you need some way to nurse
all those machines along so they will run a very fussy benchmark suite
without crashing. Not easy and very expensive. Only one person in the
open source community that I know of has access to such a lab (Jeremy
Allison at SGI).
In order for the development methodologies of the open source
community to work we need to be able to run this benchmark in an
environment that a bunch of us have access to. We need the source to
the benchmark so we can see what it does. We need to be able to split
it into pieces to look for individual bottlenecks. In short, we need
to open up netbench to the masses.
To do this I have written three tools, dbench, tbench and
smbtorture. All three read a load description file called client.txt
that was derived from a network sniffer dump of a real netbench
run. client.txt is about 4MB and describes the 90 thousand operations
that a netbench client does in a typical netbench run. They parse
client.txt and use it to produce the same load without having to buy a
huge lab. They can simulate any number of simultaneous clients.
client.txt must either be in the working directory, or specified on
the command line with the -c option.
dbench
------
dbench produces only the filesystem load. It does all the same IO
calls that the smbd server in Samba would produce when confronted with
a netbench run. It does no networking calls.
You can get dbench from ftp://samba.org/pub/tridge/dbench/
You run it as "dbench N" where N is the number of clients to
simulate. It gives out three numbers like this (this is from a 144
client run on a quad xeon box):
Throughput 40.6701 MB/sec (NB=50.8376 MB/sec 406.701 MBit/sec)
the first is the true throughput as seen by dbench. The second and
third numbers are "netbench scaled" numbers that give the throughput
that would be seen by Win9X boxes after taking into account the client
file cacheing performed by oplocks. They are given in both MB/sec and
MBit/sec as different netbench reports use different scales.
tbench
------
tbench produces only the TCP and process load. It does the same socket
calls that smbd would do under a netbench load. It does no filesystem
calls. The idea behind tbench is to eliminate smbd from the netbench
test, as though the smbd code could be made infinately fast. The
throughput results of tbench tell us how fast a netbench run could go
if we eliminated all filesystem IO and SMB packet processing. tbench
is built as part of the dbench package.
To run tbench first run tbench_srv on the server. Then run "tbench N SERVER"
on the client. N is the number of clients to simulate and SERVER is
the hostname of the server. The results are given in the same format
as dbench.
smbtorture
----------
smbtorture is the stress tester from the Samba suite. I've recently
added a stress test that allows you to simulate the full netbench
benchmark, including all network traffic and filesystem IO.
To run smbtorture you first need to install Samba version 2.0.X. The
binary distrubtions at ftp://ftp.samba.org/pub/samba/bin-pkgs/redhat/
would do fine if you don't want to compile it yourself. Then setup a
netbench share on the fastest disk you have, making sure you have at
least 25MB free per simulated client. The simplest smb.conf would look
something like this:
[global]
security = share
[netbench]
path = /data/netbench
read only = no
guest ok = yes
Then you need smbtorture. You can either grab a precompiled i386
Redhat5.2 binary from ftp://samba.org/pub/tridge/dbench/smbtorture.gz
or you can follow the instructions at http://samba.org/cvs.html to
download the SAMBA_2_0 branch of the Samba cvs tree and use
"make smbtorture" to build it.
Finally, you'll need client.txt from
ftp://samba.org/pub/tridge/dbench/dbench.tgz in the same directory
that you run smbtorture from.
To run it you do this:
smbtorture //localhost/netbench -U% -N 32 NBW95
that will run a 32 client load. You can, of course, also run
smbtorture against a dfferent SMB server (such as a NT server) to give
comparitive results for any client load that the server can handle.
Even better is to run smbtorture on one machine and smbd on another,
connected by a very fast network (such as gigabit ethernet). That will
stop the smbtorture code itself from loading the server and will also
test the network driver instead of the loopback driver.
results
-------
To give you an idea of what to expect here are some results on a quad
xeon machine running Linux 2.2.9 with 1GB of memory (it has 4GB but
Linux only uses 1GB by default). The machine also has a 45GB hardware
raid system and a Alteon AceNIC gigabit network card.
The results below are in netbench MB/sec (the NB= number in the
result). Multiply by 8 to get the MBit/sec numbers that Mindcraft used
in their graphs. The first column is the number of simulated clients,
the second is the result.
With dbench I get:
16 118
32 103
48 81
64 74
80 67
96 57
112 57
128 54
With tbench on loopback I get:
16 31
32 30
48 29
64 29
80 28
With tbench running across the gigabit network (using a dual
processor Origin200 as the client) I get:
16 29
32 29
48 29
64 29
With smbtorture running over loopback I get:
16 18
32 18
48 18
64 17
80 16
With smbtorture running across the gigabit network (using a dual
processor Origin200 as the client) I get:
16 16
32 20
48 21
64 20
80 19
With smbtorture running across the gigabit network but with smbd
modified so that write_file() and read_file() are null operations
(which eliminates the file IO) I get:
16 17
32 22
48 24
64 24
80 24
The above results show that, at least for this hardware configuration,
the problem isn't the filesystem code or the raid drivers. More tests
will be needed to find out exactly what the problem is but it looks
like a TCP scaling problem.
comparison with NT
------------------
Hopefully Jeremy will be able to run smbtorture against NT on the same
hardwre sometime in the next week so we have direct numbers for
comparison, but from looking at the mindcraft numbers under netbench
we would expect NT to get about the following:
16 8
32 14
48 21
64 27
80 31
so we do well by comparison with small client loads but fall behind
quite a lot with large loads. Note that the numbers in the mindcraft
report for Linux/Samba are quite a long way behind what I give above
because mindcraft did a hopeless job of tuning Linux/Samba.
comparison with netbench
------------------------
An initial comparison with real netbench results shows that smbtorture
does produce very similar throughput numbers. They aren't exactly the
same but they are similar enough for us to target our tuning efforts
and expect to see improvements reflected in real netbench runs. When
we find something that looks promising we can get Jeremy to run a real
netbench test.
a quick hack
------------
the tbench results really pointed at the problem being the Linux TCP
stack. I made a quick (and very unsafe!) hack to Samba and the Linux
kernel to see if I could remove the lock_kernel() in sys_sendto() and
sys_recvfrom() for smbd processes by passing a MSG_NOLOCK flag in
send() and recv(). That gave an enormous improvement in the loopback
tbench results:
16 31->51
32 30->49
48 29->47
64 29->46
80 28->44
and in the loopback smbtorture results I also saw a big improvement:
16 18->26
32 18->27
48 18->26
64 17->25
80 16->24
that's a 50% improvement. I suspect the numbers will be higher with a
real netbench run as it won't have the overhead of running 80
smbtorture clients on the same box as the server.
realistic load?
---------------
One question some people may ask is whether the above represents a
realistic load on a fileserver. It doesn't. Nearly 90% of the
read/write IO operations in netbench are writes whereas in a "normal"
office load reads dominate. Also, the load is *much* higher than a
normal office PC would put on a server. There aren't many office PCs
that write over a hundred megabytes of data to a server in a few
minutes, unless maybe they are copying a CD.
That doesn't mean the benchmark is useless, it just means you
shouldn't use this for purchasing decisions unless you really
understand the results and how they relate to your environment.
license
-------
smbtorture and dbench are released under the terms of the GNU Public
License version 3 or later.
Andrew Tridgell
tridge@samba.org
dbench-4.0/autogen.sh 0000775 0001133 0001133 00000000074 10756153025 015354 0 ustar tridge tridge 0000000 0000000 #!/bin/sh
autoheader || exit 1
autoconf || exit 1
exit 0
dbench-4.0/child.c 0000664 0001133 0001133 00000017057 10756153025 014613 0 ustar tridge tridge 0000000 0000000 /*
dbench version 3
Copyright (C) Andrew Tridgell 1999-2004
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, see .
*/
/* This file links against either fileio.c to do operations against a
local filesystem (making dbench), or sockio.c to issue SMB-like
command packets over a socket (making tbench).
So, the pattern of operations and the control structure is the same
for both benchmarks, but the operations performed are different.
*/
#include "dbench.h"
#define ival(s) strtol(s, NULL, 0)
static void nb_target_rate(struct child_struct *child, double rate)
{
double tdelay;
if (child->rate.last_bytes == 0) {
child->rate.last_bytes = child->bytes;
child->rate.last_time = timeval_current();
return;
}
if (rate != 0) {
tdelay = (child->bytes - child->rate.last_bytes)/(1.0e6*rate) -
timeval_elapsed(&child->rate.last_time);
} else {
tdelay = - timeval_elapsed(&child->rate.last_time);
}
if (tdelay > 0 && rate != 0) {
msleep(tdelay*1000);
} else {
child->max_latency = MAX(child->max_latency, -tdelay);
}
child->rate.last_time = timeval_current();
child->rate.last_bytes = child->bytes;
}
static void nb_time_reset(struct child_struct *child)
{
child->starttime = timeval_current();
memset(&child->rate, 0, sizeof(child->rate));
}
static void nb_time_delay(struct child_struct *child, double targett)
{
double elapsed = timeval_elapsed(&child->starttime);
if (targett > elapsed) {
msleep(1000*(targett - elapsed));
} else if (elapsed - targett > child->max_latency) {
child->max_latency = MAX(elapsed - targett, child->max_latency);
}
}
static void finish_op(struct child_struct *child, struct op *op)
{
double t = timeval_elapsed(&child->lasttime);
op->count++;
op->total_time += t;
if (t > op->max_latency) {
op->max_latency = t;
}
}
#define OP_LATENCY(opname) finish_op(child, &child->op.op_ ## opname)
/*
one child operation
*/
static void child_op(struct child_struct *child, char **params,
const char *fname, const char *fname2, const char *status)
{
child->lasttime = timeval_current();
if (!strcmp(params[0],"NTCreateX")) {
nb_createx(child, fname, ival(params[2]), ival(params[3]),
ival(params[4]), status);
OP_LATENCY(NTCreateX);
} else if (!strcmp(params[0],"Close")) {
nb_close(child, ival(params[1]), status);
OP_LATENCY(Close);
} else if (!strcmp(params[0],"Rename")) {
nb_rename(child, fname, fname2, status);
OP_LATENCY(Rename);
} else if (!strcmp(params[0],"Unlink")) {
nb_unlink(child, fname, ival(params[2]), status);
OP_LATENCY(Unlink);
} else if (!strcmp(params[0],"Deltree")) {
nb_deltree(child, fname);
OP_LATENCY(Deltree);
} else if (!strcmp(params[0],"Rmdir")) {
nb_rmdir(child, fname, status);
OP_LATENCY(Rmdir);
} else if (!strcmp(params[0],"Mkdir")) {
nb_mkdir(child, fname, status);
OP_LATENCY(Mkdir);
} else if (!strcmp(params[0],"QUERY_PATH_INFORMATION")) {
nb_qpathinfo(child, fname, ival(params[2]), status);
OP_LATENCY(Qpathinfo);
} else if (!strcmp(params[0],"QUERY_FILE_INFORMATION")) {
nb_qfileinfo(child, ival(params[1]), ival(params[2]), status);
OP_LATENCY(Qfileinfo);
} else if (!strcmp(params[0],"QUERY_FS_INFORMATION")) {
nb_qfsinfo(child, ival(params[1]), status);
OP_LATENCY(Qfsinfo);
} else if (!strcmp(params[0],"SET_FILE_INFORMATION")) {
nb_sfileinfo(child, ival(params[1]), ival(params[2]), status);
OP_LATENCY(Sfileinfo);
} else if (!strcmp(params[0],"FIND_FIRST")) {
nb_findfirst(child, fname, ival(params[2]),
ival(params[3]), ival(params[4]), status);
OP_LATENCY(Find);
} else if (!strcmp(params[0],"WriteX")) {
nb_writex(child, ival(params[1]),
ival(params[2]), ival(params[3]), ival(params[4]),
status);
OP_LATENCY(WriteX);
} else if (!strcmp(params[0],"LockX")) {
nb_lockx(child, ival(params[1]),
ival(params[2]), ival(params[3]), status);
OP_LATENCY(LockX);
} else if (!strcmp(params[0],"UnlockX")) {
nb_unlockx(child, ival(params[1]),
ival(params[2]), ival(params[3]), status);
OP_LATENCY(UnlockX);
} else if (!strcmp(params[0],"ReadX")) {
nb_readx(child, ival(params[1]),
ival(params[2]), ival(params[3]), ival(params[4]),
status);
OP_LATENCY(ReadX);
} else if (!strcmp(params[0],"Flush")) {
nb_flush(child, ival(params[1]), status);
OP_LATENCY(Flush);
} else if (!strcmp(params[0],"Sleep")) {
nb_sleep(child, ival(params[1]), status);
} else {
printf("[%d] Unknown operation %s in pid %d\n",
child->line, params[0], getpid());
}
}
/* run a test that simulates an approximate netbench client load */
void child_run(struct child_struct *child0, const char *loadfile)
{
int i;
char line[1024], fname[1024], fname2[1024];
char **sparams, **params;
char *p;
const char *status;
FILE *f;
pid_t parent = getppid();
double targett;
struct child_struct *child;
for (child=child0;childline = 0;
asprintf(&child->cname,"client%d", child->id);
}
sparams = calloc(20, sizeof(char *));
for (i=0;i<20;i++) {
sparams[i] = malloc(100);
}
f = fopen(loadfile, "r");
if (f == NULL) {
perror(loadfile);
exit(1);
}
again:
for (child=child0;childdone) goto done;
child->line++;
}
line[strlen(line)-1] = 0;
all_string_sub(line,"\\", "/");
all_string_sub(line," /", " ");
p = line;
for (i=0;
i<19 && next_token(&p, params[i], " ");
i++) ;
params[i][0] = 0;
if (i < 2 || params[0][0] == '#') continue;
if (!strncmp(params[0],"SMB", 3)) {
printf("ERROR: You are using a dbench 1 load file\n");
exit(1);
}
if (i > 0 && isdigit(params[0][0])) {
targett = strtod(params[0], NULL);
params++;
i--;
} else {
targett = 0.0;
}
if (strncmp(params[i-1], "NT_STATUS_", 10) != 0 &&
strncmp(params[i-1], "0x", 2) != 0) {
printf("Badly formed status at line %d\n", child->line);
continue;
}
status = params[i-1];
for (child=child0;child1 && params[1][0] == '/') {
snprintf(fname, sizeof(fname), "%s%s", child->directory, params[1]);
all_string_sub(fname,"client1", child->cname);
}
if (i>2 && params[2][0] == '/') {
snprintf(fname2, sizeof(fname2), "%s%s", child->directory, params[2]);
all_string_sub(fname2,"client1", child->cname);
}
if (options.targetrate != 0 || targett == 0.0) {
nb_target_rate(child, options.targetrate);
} else {
nb_time_delay(child, targett);
}
child_op(child, params, fname, fname2, status);
}
}
rewind(f);
goto again;
done:
fclose(f);
for (child=child0;childcleanup = 1;
fflush(stdout);
if (!options.skip_cleanup) {
nb_cleanup(child);
}
child->cleanup_finished = 1;
}
}
dbench-4.0/client.txt 0000664 0001133 0001133 00144000001 10756153037 015374 0 ustar tridge tridge 0000000 0000000 Deltree "\clients\client1" NT_STATUS_OK
Mkdir "\clients" NT_STATUS_OK
NTCreateX "\clients\client1" 0x1 0x2 16385 NT_STATUS_OK
Close 16385 NT_STATUS_OK
NTCreateX "\clients\client1\mixfile" 0x40 0x1 9935 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\FILLER.*" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp" 0x1 0x2 9937 NT_STATUS_OK
Close 9937 NT_STATUS_OK
NTCreateX "\clients\client1\filler.000" 0x40 0x2 9938 NT_STATUS_OK
QUERY_FS_INFORMATION 1 NT_STATUS_OK
WriteX 9938 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9938 258 NT_STATUS_OK
WriteX 9938 0 65536 65536 NT_STATUS_OK
WriteX 9938 65536 65536 65536 NT_STATUS_OK
WriteX 9938 131072 65536 65536 NT_STATUS_OK
WriteX 9938 196608 65536 65536 NT_STATUS_OK
WriteX 9938 262144 65536 65536 NT_STATUS_OK
WriteX 9938 327680 65536 65536 NT_STATUS_OK
WriteX 9938 393216 65536 65536 NT_STATUS_OK
WriteX 9938 458752 65536 65536 NT_STATUS_OK
WriteX 9938 524288 65536 65536 NT_STATUS_OK
WriteX 9938 589824 65536 65536 NT_STATUS_OK
WriteX 9938 655360 65536 65536 NT_STATUS_OK
WriteX 9938 720896 65536 65536 NT_STATUS_OK
WriteX 9938 786432 65536 65536 NT_STATUS_OK
WriteX 9938 851968 65536 65536 NT_STATUS_OK
WriteX 9938 917504 65536 65536 NT_STATUS_OK
WriteX 9938 983040 65536 65536 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\filler.001" 0x40 0x2 9939 NT_STATUS_OK
WriteX 9939 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9939 258 NT_STATUS_OK
WriteX 9939 0 65536 65536 NT_STATUS_OK
WriteX 9939 65536 65536 65536 NT_STATUS_OK
WriteX 9939 131072 65536 65536 NT_STATUS_OK
WriteX 9939 196608 65536 65536 NT_STATUS_OK
WriteX 9939 262144 65536 65536 NT_STATUS_OK
WriteX 9939 327680 65536 65536 NT_STATUS_OK
WriteX 9939 393216 65536 65536 NT_STATUS_OK
WriteX 9939 458752 65536 65536 NT_STATUS_OK
WriteX 9939 524288 65536 65536 NT_STATUS_OK
WriteX 9939 589824 65536 65536 NT_STATUS_OK
WriteX 9939 655360 65536 65536 NT_STATUS_OK
WriteX 9939 720896 65536 65536 NT_STATUS_OK
WriteX 9939 786432 65536 65536 NT_STATUS_OK
WriteX 9939 851968 65536 65536 NT_STATUS_OK
WriteX 9939 917504 65536 65536 NT_STATUS_OK
WriteX 9939 983040 65536 65536 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\filler.002" 0x40 0x2 9940 NT_STATUS_OK
WriteX 9940 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9940 258 NT_STATUS_OK
WriteX 9940 0 65536 65536 NT_STATUS_OK
WriteX 9940 65536 65536 65536 NT_STATUS_OK
WriteX 9940 131072 65536 65536 NT_STATUS_OK
WriteX 9940 196608 65536 65536 NT_STATUS_OK
WriteX 9940 262144 65536 65536 NT_STATUS_OK
WriteX 9940 327680 65536 65536 NT_STATUS_OK
WriteX 9940 393216 65536 65536 NT_STATUS_OK
WriteX 9940 458752 65536 65536 NT_STATUS_OK
WriteX 9940 524288 65536 65536 NT_STATUS_OK
WriteX 9940 589824 65536 65536 NT_STATUS_OK
WriteX 9940 655360 65536 65536 NT_STATUS_OK
WriteX 9940 720896 65536 65536 NT_STATUS_OK
WriteX 9940 786432 65536 65536 NT_STATUS_OK
WriteX 9940 851968 65536 65536 NT_STATUS_OK
WriteX 9940 917504 65536 65536 NT_STATUS_OK
WriteX 9940 983040 65536 65536 NT_STATUS_OK
Close 9940 NT_STATUS_OK
NTCreateX "\clients\client1\filler.003" 0x40 0x2 9941 NT_STATUS_OK
WriteX 9941 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9941 258 NT_STATUS_OK
WriteX 9941 0 65536 65536 NT_STATUS_OK
WriteX 9941 65536 65536 65536 NT_STATUS_OK
WriteX 9941 131072 65536 65536 NT_STATUS_OK
WriteX 9941 196608 65536 65536 NT_STATUS_OK
WriteX 9941 262144 65536 65536 NT_STATUS_OK
WriteX 9941 327680 65536 65536 NT_STATUS_OK
WriteX 9941 393216 65536 65536 NT_STATUS_OK
WriteX 9941 458752 65536 65536 NT_STATUS_OK
WriteX 9941 524288 65536 65536 NT_STATUS_OK
WriteX 9941 589824 65536 65536 NT_STATUS_OK
WriteX 9941 655360 65536 65536 NT_STATUS_OK
WriteX 9941 720896 65536 65536 NT_STATUS_OK
WriteX 9941 786432 65536 65536 NT_STATUS_OK
WriteX 9941 851968 65536 65536 NT_STATUS_OK
WriteX 9941 917504 65536 65536 NT_STATUS_OK
WriteX 9941 983040 65536 65536 NT_STATUS_OK
Close 9941 NT_STATUS_OK
NTCreateX "\clients\client1\filler.004" 0x40 0x2 9942 NT_STATUS_OK
WriteX 9942 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9942 258 NT_STATUS_OK
WriteX 9942 0 65536 65536 NT_STATUS_OK
WriteX 9942 65536 65536 65536 NT_STATUS_OK
WriteX 9942 131072 65536 65536 NT_STATUS_OK
WriteX 9942 196608 65536 65536 NT_STATUS_OK
WriteX 9942 262144 65536 65536 NT_STATUS_OK
WriteX 9942 327680 65536 65536 NT_STATUS_OK
WriteX 9942 393216 65536 65536 NT_STATUS_OK
WriteX 9942 458752 65536 65536 NT_STATUS_OK
WriteX 9942 524288 65536 65536 NT_STATUS_OK
WriteX 9942 589824 65536 65536 NT_STATUS_OK
WriteX 9942 655360 65536 65536 NT_STATUS_OK
WriteX 9942 720896 65536 65536 NT_STATUS_OK
WriteX 9942 786432 65536 65536 NT_STATUS_OK
WriteX 9942 851968 65536 65536 NT_STATUS_OK
WriteX 9942 917504 65536 65536 NT_STATUS_OK
WriteX 9942 983040 65536 65536 NT_STATUS_OK
Close 9942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD" 0x1 0x2 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x2 9944 NT_STATUS_OK
WriteX 9944 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9944 258 NT_STATUS_OK
WriteX 9944 0 65536 65536 NT_STATUS_OK
WriteX 9944 65536 65536 65536 NT_STATUS_OK
WriteX 9944 131072 65536 65536 NT_STATUS_OK
WriteX 9944 196608 63488 63488 NT_STATUS_OK
Close 9944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x2 9945 NT_STATUS_OK
WriteX 9945 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9945 258 NT_STATUS_OK
WriteX 9945 0 65536 65536 NT_STATUS_OK
WriteX 9945 65536 65536 65536 NT_STATUS_OK
WriteX 9945 131072 65536 65536 NT_STATUS_OK
WriteX 9945 196608 63488 63488 NT_STATUS_OK
Close 9945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 65536 65536 NT_STATUS_OK
WriteX 9946 65536 65536 65536 NT_STATUS_OK
WriteX 9946 131072 65536 65536 NT_STATUS_OK
WriteX 9946 196608 63488 63488 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL" 0x1 0x2 9947 NT_STATUS_OK
Close 9947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x2 9948 NT_STATUS_OK
WriteX 9948 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9948 258 NT_STATUS_OK
WriteX 9948 0 65536 65536 NT_STATUS_OK
WriteX 9948 65536 65536 65536 NT_STATUS_OK
WriteX 9948 131072 65536 65536 NT_STATUS_OK
WriteX 9948 196608 63488 63488 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x2 9949 NT_STATUS_OK
WriteX 9949 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9949 258 NT_STATUS_OK
WriteX 9949 0 65536 65536 NT_STATUS_OK
WriteX 9949 65536 65536 65536 NT_STATUS_OK
WriteX 9949 131072 65536 65536 NT_STATUS_OK
WriteX 9949 196608 63488 63488 NT_STATUS_OK
Close 9949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT" 0x1 0x2 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x2 9951 NT_STATUS_OK
WriteX 9951 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9951 258 NT_STATUS_OK
WriteX 9951 0 65536 65536 NT_STATUS_OK
WriteX 9951 65536 65536 65536 NT_STATUS_OK
WriteX 9951 131072 65536 65536 NT_STATUS_OK
WriteX 9951 196608 63488 63488 NT_STATUS_OK
Close 9951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x2 9952 NT_STATUS_OK
WriteX 9952 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9952 258 NT_STATUS_OK
WriteX 9952 0 65536 65536 NT_STATUS_OK
WriteX 9952 65536 65536 65536 NT_STATUS_OK
WriteX 9952 131072 65536 65536 NT_STATUS_OK
WriteX 9952 196608 63488 63488 NT_STATUS_OK
Close 9952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x2 9953 NT_STATUS_OK
WriteX 9953 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9953 258 NT_STATUS_OK
WriteX 9953 0 65536 65536 NT_STATUS_OK
WriteX 9953 65536 65536 65536 NT_STATUS_OK
WriteX 9953 131072 65536 65536 NT_STATUS_OK
WriteX 9953 196608 63488 63488 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x2 9954 NT_STATUS_OK
WriteX 9954 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9954 258 NT_STATUS_OK
WriteX 9954 0 65536 65536 NT_STATUS_OK
WriteX 9954 65536 65536 65536 NT_STATUS_OK
WriteX 9954 131072 65536 65536 NT_STATUS_OK
WriteX 9954 196608 63488 63488 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x2 9955 NT_STATUS_OK
WriteX 9955 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9955 258 NT_STATUS_OK
WriteX 9955 0 65536 65536 NT_STATUS_OK
WriteX 9955 65536 65536 65536 NT_STATUS_OK
WriteX 9955 131072 65536 65536 NT_STATUS_OK
WriteX 9955 196608 63488 63488 NT_STATUS_OK
Close 9955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL" 0x1 0x2 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x2 9957 NT_STATUS_OK
WriteX 9957 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9957 258 NT_STATUS_OK
WriteX 9957 0 65536 65536 NT_STATUS_OK
WriteX 9957 65536 65536 65536 NT_STATUS_OK
WriteX 9957 131072 65536 65536 NT_STATUS_OK
WriteX 9957 196608 63488 63488 NT_STATUS_OK
Close 9957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x2 9958 NT_STATUS_OK
WriteX 9958 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9958 258 NT_STATUS_OK
WriteX 9958 0 65536 65536 NT_STATUS_OK
WriteX 9958 65536 65536 65536 NT_STATUS_OK
WriteX 9958 131072 65536 65536 NT_STATUS_OK
WriteX 9958 196608 63488 63488 NT_STATUS_OK
Close 9958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x2 9959 NT_STATUS_OK
WriteX 9959 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9959 258 NT_STATUS_OK
WriteX 9959 0 65536 65536 NT_STATUS_OK
WriteX 9959 65536 65536 65536 NT_STATUS_OK
WriteX 9959 131072 65536 65536 NT_STATUS_OK
WriteX 9959 196608 63488 63488 NT_STATUS_OK
Close 9959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x2 9960 NT_STATUS_OK
WriteX 9960 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9960 258 NT_STATUS_OK
WriteX 9960 0 65536 65536 NT_STATUS_OK
WriteX 9960 65536 65536 65536 NT_STATUS_OK
WriteX 9960 131072 65536 65536 NT_STATUS_OK
WriteX 9960 196608 63488 63488 NT_STATUS_OK
Close 9960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x2 9961 NT_STATUS_OK
WriteX 9961 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9961 258 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 65536 65536 NT_STATUS_OK
WriteX 9961 131072 65536 65536 NT_STATUS_OK
WriteX 9961 196608 63488 63488 NT_STATUS_OK
Close 9961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x2 9962 NT_STATUS_OK
WriteX 9962 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 258 NT_STATUS_OK
WriteX 9962 0 65536 65536 NT_STATUS_OK
WriteX 9962 65536 65536 65536 NT_STATUS_OK
WriteX 9962 131072 65536 65536 NT_STATUS_OK
WriteX 9962 196608 63488 63488 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x2 9963 NT_STATUS_OK
WriteX 9963 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9963 258 NT_STATUS_OK
WriteX 9963 0 65536 65536 NT_STATUS_OK
WriteX 9963 65536 65536 65536 NT_STATUS_OK
WriteX 9963 131072 65536 65536 NT_STATUS_OK
WriteX 9963 196608 63488 63488 NT_STATUS_OK
Close 9963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x2 9964 NT_STATUS_OK
WriteX 9964 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9964 258 NT_STATUS_OK
WriteX 9964 0 65536 65536 NT_STATUS_OK
WriteX 9964 65536 65536 65536 NT_STATUS_OK
WriteX 9964 131072 65536 65536 NT_STATUS_OK
WriteX 9964 196608 63488 63488 NT_STATUS_OK
Close 9964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x2 9965 NT_STATUS_OK
WriteX 9965 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9965 258 NT_STATUS_OK
WriteX 9965 0 65536 65536 NT_STATUS_OK
WriteX 9965 65536 65536 65536 NT_STATUS_OK
WriteX 9965 131072 65536 65536 NT_STATUS_OK
WriteX 9965 196608 63488 63488 NT_STATUS_OK
Close 9965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x2 9966 NT_STATUS_OK
WriteX 9966 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9966 258 NT_STATUS_OK
WriteX 9966 0 65536 65536 NT_STATUS_OK
WriteX 9966 65536 65536 65536 NT_STATUS_OK
WriteX 9966 131072 65536 65536 NT_STATUS_OK
WriteX 9966 196608 63488 63488 NT_STATUS_OK
Close 9966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x2 9967 NT_STATUS_OK
WriteX 9967 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9967 258 NT_STATUS_OK
WriteX 9967 0 65536 65536 NT_STATUS_OK
WriteX 9967 65536 65536 65536 NT_STATUS_OK
WriteX 9967 131072 65536 65536 NT_STATUS_OK
WriteX 9967 196608 63488 63488 NT_STATUS_OK
Close 9967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO" 0x1 0x2 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x2 9969 NT_STATUS_OK
WriteX 9969 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9969 258 NT_STATUS_OK
WriteX 9969 0 65536 65536 NT_STATUS_OK
WriteX 9969 65536 65536 65536 NT_STATUS_OK
WriteX 9969 131072 65536 65536 NT_STATUS_OK
WriteX 9969 196608 63488 63488 NT_STATUS_OK
Close 9969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x2 9970 NT_STATUS_OK
WriteX 9970 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9970 258 NT_STATUS_OK
WriteX 9970 0 65536 65536 NT_STATUS_OK
WriteX 9970 65536 65536 65536 NT_STATUS_OK
WriteX 9970 131072 65536 65536 NT_STATUS_OK
WriteX 9970 196608 63488 63488 NT_STATUS_OK
Close 9970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x2 9971 NT_STATUS_OK
WriteX 9971 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 258 NT_STATUS_OK
WriteX 9971 0 65536 65536 NT_STATUS_OK
WriteX 9971 65536 65536 65536 NT_STATUS_OK
WriteX 9971 131072 65536 65536 NT_STATUS_OK
WriteX 9971 196608 63488 63488 NT_STATUS_OK
Close 9971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM" 0x1 0x2 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x2 9973 NT_STATUS_OK
WriteX 9973 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9973 258 NT_STATUS_OK
WriteX 9973 0 65536 65536 NT_STATUS_OK
WriteX 9973 65536 65536 65536 NT_STATUS_OK
WriteX 9973 131072 65536 65536 NT_STATUS_OK
WriteX 9973 196608 63488 63488 NT_STATUS_OK
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x2 9974 NT_STATUS_OK
WriteX 9974 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9974 258 NT_STATUS_OK
WriteX 9974 0 65536 65536 NT_STATUS_OK
WriteX 9974 65536 65536 65536 NT_STATUS_OK
WriteX 9974 131072 65536 65536 NT_STATUS_OK
WriteX 9974 196608 63488 63488 NT_STATUS_OK
Close 9974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
WriteX 9975 0 65536 65536 NT_STATUS_OK
WriteX 9975 65536 65536 65536 NT_STATUS_OK
WriteX 9975 131072 65536 65536 NT_STATUS_OK
WriteX 9975 196608 63488 63488 NT_STATUS_OK
Close 9975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX" 0x1 0x2 9976 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x2 9977 NT_STATUS_OK
WriteX 9977 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9977 258 NT_STATUS_OK
WriteX 9977 0 65536 65536 NT_STATUS_OK
WriteX 9977 65536 65536 65536 NT_STATUS_OK
WriteX 9977 131072 65536 65536 NT_STATUS_OK
WriteX 9977 196608 63488 63488 NT_STATUS_OK
Close 9977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x2 9978 NT_STATUS_OK
WriteX 9978 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9978 258 NT_STATUS_OK
WriteX 9978 0 65536 65536 NT_STATUS_OK
WriteX 9978 65536 65536 65536 NT_STATUS_OK
WriteX 9978 131072 65536 65536 NT_STATUS_OK
WriteX 9978 196608 63488 63488 NT_STATUS_OK
Close 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x2 9979 NT_STATUS_OK
WriteX 9979 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9979 258 NT_STATUS_OK
WriteX 9979 0 65536 65536 NT_STATUS_OK
WriteX 9979 65536 65536 65536 NT_STATUS_OK
WriteX 9979 131072 65536 65536 NT_STATUS_OK
WriteX 9979 196608 63488 63488 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x2 9980 NT_STATUS_OK
WriteX 9980 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9980 258 NT_STATUS_OK
WriteX 9980 0 65536 65536 NT_STATUS_OK
WriteX 9980 65536 65536 65536 NT_STATUS_OK
WriteX 9980 131072 65536 65536 NT_STATUS_OK
WriteX 9980 196608 63488 63488 NT_STATUS_OK
Close 9980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x2 9981 NT_STATUS_OK
WriteX 9981 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9981 258 NT_STATUS_OK
WriteX 9981 0 65536 65536 NT_STATUS_OK
WriteX 9981 65536 65536 65536 NT_STATUS_OK
WriteX 9981 131072 65536 65536 NT_STATUS_OK
WriteX 9981 196608 63488 63488 NT_STATUS_OK
Close 9981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x2 9982 NT_STATUS_OK
WriteX 9982 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9982 258 NT_STATUS_OK
WriteX 9982 0 65536 65536 NT_STATUS_OK
WriteX 9982 65536 65536 65536 NT_STATUS_OK
WriteX 9982 131072 65536 65536 NT_STATUS_OK
WriteX 9982 196608 63488 63488 NT_STATUS_OK
Close 9982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x2 9983 NT_STATUS_OK
WriteX 9983 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9983 258 NT_STATUS_OK
WriteX 9983 0 65536 65536 NT_STATUS_OK
WriteX 9983 65536 65536 65536 NT_STATUS_OK
WriteX 9983 131072 65536 65536 NT_STATUS_OK
WriteX 9983 196608 63488 63488 NT_STATUS_OK
Close 9983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x2 9984 NT_STATUS_OK
WriteX 9984 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9984 258 NT_STATUS_OK
WriteX 9984 0 65536 65536 NT_STATUS_OK
WriteX 9984 65536 65536 65536 NT_STATUS_OK
WriteX 9984 131072 65536 65536 NT_STATUS_OK
WriteX 9984 196608 63488 63488 NT_STATUS_OK
Close 9984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x2 9985 NT_STATUS_OK
WriteX 9985 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9985 258 NT_STATUS_OK
WriteX 9985 0 65536 65536 NT_STATUS_OK
WriteX 9985 65536 65536 65536 NT_STATUS_OK
WriteX 9985 131072 65536 65536 NT_STATUS_OK
WriteX 9985 196608 63488 63488 NT_STATUS_OK
Close 9985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x2 9986 NT_STATUS_OK
WriteX 9986 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9986 258 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 65536 65536 NT_STATUS_OK
WriteX 9986 131072 65536 65536 NT_STATUS_OK
WriteX 9986 196608 63488 63488 NT_STATUS_OK
Close 9986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x2 9987 NT_STATUS_OK
WriteX 9987 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9987 258 NT_STATUS_OK
WriteX 9987 0 65536 65536 NT_STATUS_OK
WriteX 9987 65536 65536 65536 NT_STATUS_OK
WriteX 9987 131072 65536 65536 NT_STATUS_OK
WriteX 9987 196608 63488 63488 NT_STATUS_OK
Close 9987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x2 9988 NT_STATUS_OK
WriteX 9988 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9988 258 NT_STATUS_OK
WriteX 9988 0 65536 65536 NT_STATUS_OK
WriteX 9988 65536 65536 65536 NT_STATUS_OK
WriteX 9988 131072 65536 65536 NT_STATUS_OK
WriteX 9988 196608 63488 63488 NT_STATUS_OK
Close 9988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x2 9989 NT_STATUS_OK
WriteX 9989 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 258 NT_STATUS_OK
WriteX 9989 0 65536 65536 NT_STATUS_OK
WriteX 9989 65536 65536 65536 NT_STATUS_OK
WriteX 9989 131072 65536 65536 NT_STATUS_OK
WriteX 9989 196608 63488 63488 NT_STATUS_OK
Close 9989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x2 9990 NT_STATUS_OK
WriteX 9990 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9990 258 NT_STATUS_OK
WriteX 9990 0 65536 65536 NT_STATUS_OK
WriteX 9990 65536 65536 65536 NT_STATUS_OK
WriteX 9990 131072 65536 65536 NT_STATUS_OK
WriteX 9990 196608 63488 63488 NT_STATUS_OK
Close 9990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x2 9991 NT_STATUS_OK
WriteX 9991 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 258 NT_STATUS_OK
WriteX 9991 0 65536 65536 NT_STATUS_OK
WriteX 9991 65536 65536 65536 NT_STATUS_OK
WriteX 9991 131072 65536 65536 NT_STATUS_OK
WriteX 9991 196608 63488 63488 NT_STATUS_OK
Close 9991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x2 9992 NT_STATUS_OK
WriteX 9992 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9992 258 NT_STATUS_OK
WriteX 9992 0 65536 65536 NT_STATUS_OK
WriteX 9992 65536 65536 65536 NT_STATUS_OK
WriteX 9992 131072 65536 65536 NT_STATUS_OK
WriteX 9992 196608 63488 63488 NT_STATUS_OK
Close 9992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x2 9993 NT_STATUS_OK
WriteX 9993 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9993 258 NT_STATUS_OK
WriteX 9993 0 65536 65536 NT_STATUS_OK
WriteX 9993 65536 65536 65536 NT_STATUS_OK
WriteX 9993 131072 65536 65536 NT_STATUS_OK
WriteX 9993 196608 63488 63488 NT_STATUS_OK
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x2 9994 NT_STATUS_OK
WriteX 9994 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9994 258 NT_STATUS_OK
WriteX 9994 0 65536 65536 NT_STATUS_OK
WriteX 9994 65536 65536 65536 NT_STATUS_OK
WriteX 9994 131072 65536 65536 NT_STATUS_OK
WriteX 9994 196608 63488 63488 NT_STATUS_OK
Close 9994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x2 9995 NT_STATUS_OK
WriteX 9995 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9995 258 NT_STATUS_OK
WriteX 9995 0 65536 65536 NT_STATUS_OK
WriteX 9995 65536 65536 65536 NT_STATUS_OK
WriteX 9995 131072 65536 65536 NT_STATUS_OK
WriteX 9995 196608 63488 63488 NT_STATUS_OK
Close 9995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x2 9996 NT_STATUS_OK
WriteX 9996 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9996 258 NT_STATUS_OK
WriteX 9996 0 65536 65536 NT_STATUS_OK
WriteX 9996 65536 65536 65536 NT_STATUS_OK
WriteX 9996 131072 65536 65536 NT_STATUS_OK
WriteX 9996 196608 63488 63488 NT_STATUS_OK
Close 9996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS" 0x1 0x2 9997 NT_STATUS_OK
Close 9997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x2 9998 NT_STATUS_OK
WriteX 9998 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9998 258 NT_STATUS_OK
WriteX 9998 0 65536 65536 NT_STATUS_OK
WriteX 9998 65536 65536 65536 NT_STATUS_OK
WriteX 9998 131072 65536 65536 NT_STATUS_OK
WriteX 9998 196608 63488 63488 NT_STATUS_OK
Close 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED" 0x1 0x2 9999 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x2 10000 NT_STATUS_OK
WriteX 10000 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10000 258 NT_STATUS_OK
WriteX 10000 0 65536 65536 NT_STATUS_OK
WriteX 10000 65536 65536 65536 NT_STATUS_OK
WriteX 10000 131072 65536 65536 NT_STATUS_OK
WriteX 10000 196608 65536 65536 NT_STATUS_OK
WriteX 10000 262144 65536 65536 NT_STATUS_OK
Close 10000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x2 10001 NT_STATUS_OK
WriteX 10001 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10001 258 NT_STATUS_OK
WriteX 10001 0 65536 65536 NT_STATUS_OK
WriteX 10001 65536 65536 65536 NT_STATUS_OK
WriteX 10001 131072 65536 65536 NT_STATUS_OK
WriteX 10001 196608 65536 65536 NT_STATUS_OK
WriteX 10001 262144 65536 65536 NT_STATUS_OK
WriteX 10001 327680 65536 65536 NT_STATUS_OK
WriteX 10001 393216 65536 65536 NT_STATUS_OK
WriteX 10001 458752 65536 65536 NT_STATUS_OK
WriteX 10001 524288 65536 65536 NT_STATUS_OK
WriteX 10001 589824 65536 65536 NT_STATUS_OK
WriteX 10001 655360 65536 65536 NT_STATUS_OK
WriteX 10001 720896 65536 65536 NT_STATUS_OK
WriteX 10001 786432 65536 65536 NT_STATUS_OK
WriteX 10001 851968 65536 65536 NT_STATUS_OK
WriteX 10001 917504 65536 65536 NT_STATUS_OK
WriteX 10001 983040 65536 65536 NT_STATUS_OK
Close 10001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x2 10002 NT_STATUS_OK
WriteX 10002 65534 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1114094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1179629 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1245164 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1310699 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1376234 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1441769 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1507304 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1572839 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1638374 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1703909 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1769444 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1834979 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 1867775 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10002 258 NT_STATUS_OK
WriteX 10002 0 65536 65536 NT_STATUS_OK
WriteX 10002 65536 65536 65536 NT_STATUS_OK
WriteX 10002 131072 65536 65536 NT_STATUS_OK
WriteX 10002 196608 65536 65536 NT_STATUS_OK
WriteX 10002 262144 65536 65536 NT_STATUS_OK
WriteX 10002 327680 65536 65536 NT_STATUS_OK
WriteX 10002 393216 65536 65536 NT_STATUS_OK
WriteX 10002 458752 65536 65536 NT_STATUS_OK
WriteX 10002 524288 65536 65536 NT_STATUS_OK
WriteX 10002 589824 65536 65536 NT_STATUS_OK
WriteX 10002 655360 65536 65536 NT_STATUS_OK
WriteX 10002 720896 65536 65536 NT_STATUS_OK
WriteX 10002 786432 65536 65536 NT_STATUS_OK
WriteX 10002 851968 65536 65536 NT_STATUS_OK
WriteX 10002 917504 65536 65536 NT_STATUS_OK
WriteX 10002 983040 65536 65536 NT_STATUS_OK
WriteX 10002 1048576 65536 65536 NT_STATUS_OK
WriteX 10002 1114112 65536 65536 NT_STATUS_OK
WriteX 10002 1179648 65536 65536 NT_STATUS_OK
WriteX 10002 1245184 65536 65536 NT_STATUS_OK
WriteX 10002 1310720 65536 65536 NT_STATUS_OK
WriteX 10002 1376256 65536 65536 NT_STATUS_OK
WriteX 10002 1441792 65536 65536 NT_STATUS_OK
WriteX 10002 1507328 65536 65536 NT_STATUS_OK
WriteX 10002 1572864 65536 65536 NT_STATUS_OK
WriteX 10002 1638400 65536 65536 NT_STATUS_OK
WriteX 10002 1703936 65536 65536 NT_STATUS_OK
WriteX 10002 1769472 65536 65536 NT_STATUS_OK
WriteX 10002 1835008 32768 32768 NT_STATUS_OK
Close 10002 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10003 0 4096 4096 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10005 NT_STATUS_OK
ReadX 10005 0 4096 4096 NT_STATUS_OK
ReadX 10005 4096 4096 4096 NT_STATUS_OK
ReadX 10005 8192 4096 4096 NT_STATUS_OK
ReadX 10005 12288 4096 4096 NT_STATUS_OK
ReadX 10005 16384 4096 4096 NT_STATUS_OK
ReadX 10005 20480 4096 4096 NT_STATUS_OK
ReadX 10005 24576 4096 4096 NT_STATUS_OK
ReadX 10005 28672 4096 4096 NT_STATUS_OK
ReadX 10005 32768 4096 4096 NT_STATUS_OK
ReadX 10005 36864 4096 4096 NT_STATUS_OK
ReadX 10005 40960 4096 4096 NT_STATUS_OK
ReadX 10005 45056 4096 4096 NT_STATUS_OK
ReadX 10005 49152 4096 4096 NT_STATUS_OK
ReadX 10005 53248 4096 4096 NT_STATUS_OK
ReadX 10005 57344 4096 4096 NT_STATUS_OK
ReadX 10005 61440 4096 4096 NT_STATUS_OK
ReadX 10005 65536 4096 4096 NT_STATUS_OK
ReadX 10005 69632 4096 4096 NT_STATUS_OK
ReadX 10005 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10005 1004 NT_STATUS_OK
WriteX 10005 0 4096 4096 NT_STATUS_OK
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10006 NT_STATUS_OK
SET_FILE_INFORMATION 10006 1004 NT_STATUS_OK
Close 10006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10007 NT_STATUS_OK
ReadX 10007 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 18432 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10011 NT_STATUS_OK
WriteX 10011 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 258 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 19979 19979 NT_STATUS_OK
Close 10011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 4096 4096 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
QUERY_FILE_INFORMATION 10012 1004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
SET_FILE_INFORMATION 10012 1004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 0 4096 4096 NT_STATUS_OK
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10015 NT_STATUS_OK
ReadX 10015 0 4096 4096 NT_STATUS_OK
Close 10015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10016 NT_STATUS_OK
ReadX 10016 0 4096 4096 NT_STATUS_OK
Close 10016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10017 1004 NT_STATUS_OK
WriteX 10017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10018 NT_STATUS_OK
Close 10018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Close 10017 NT_STATUS_OK
Close 10007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10020 NT_STATUS_OK
Close 10020 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10023 NT_STATUS_OK
WriteX 10023 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10023 258 NT_STATUS_OK
WriteX 10023 0 65536 65536 NT_STATUS_OK
WriteX 10023 65536 17654 17654 NT_STATUS_OK
Close 10023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
QUERY_FILE_INFORMATION 10024 1004 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
SET_FILE_INFORMATION 10024 1004 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
Close 10024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10025 NT_STATUS_OK
SET_FILE_INFORMATION 10025 1004 NT_STATUS_OK
Close 10025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
ReadX 10029 4096 4096 4096 NT_STATUS_OK
ReadX 10029 8192 4096 4096 NT_STATUS_OK
ReadX 10029 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10029 16384 4096 4096 NT_STATUS_OK
ReadX 10029 20480 4096 4096 NT_STATUS_OK
ReadX 10029 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 0 4096 4096 NT_STATUS_OK
Close 10030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10031 NT_STATUS_OK
ReadX 10031 0 4096 4096 NT_STATUS_OK
Close 10031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10032 1004 NT_STATUS_OK
WriteX 10032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10033 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10035 NT_STATUS_OK
Close 10035 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10038 NT_STATUS_OK
WriteX 10038 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10038 258 NT_STATUS_OK
WriteX 10038 0 65536 65536 NT_STATUS_OK
WriteX 10038 65536 19490 19490 NT_STATUS_OK
Close 10038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
QUERY_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Flush 10039 NT_STATUS_OK
Close 10039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10040 NT_STATUS_OK
SET_FILE_INFORMATION 10040 1004 NT_STATUS_OK
Close 10040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10041 NT_STATUS_OK
ReadX 10041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10044 0 4096 4096 NT_STATUS_OK
Close 10044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10045 NT_STATUS_OK
ReadX 10045 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10046 NT_STATUS_OK
ReadX 10046 0 4096 4096 NT_STATUS_OK
ReadX 10046 4096 4096 4096 NT_STATUS_OK
ReadX 10046 8192 4096 4096 NT_STATUS_OK
ReadX 10046 12288 4096 4096 NT_STATUS_OK
ReadX 10046 16384 4096 4096 NT_STATUS_OK
ReadX 10046 20480 4096 4096 NT_STATUS_OK
ReadX 10046 24576 4096 4096 NT_STATUS_OK
ReadX 10046 28672 4096 4096 NT_STATUS_OK
ReadX 10046 32768 4096 4096 NT_STATUS_OK
ReadX 10046 36864 4096 4096 NT_STATUS_OK
ReadX 10046 40960 4096 4096 NT_STATUS_OK
ReadX 10046 45056 4096 4096 NT_STATUS_OK
ReadX 10046 49152 4096 4096 NT_STATUS_OK
ReadX 10046 53248 4096 4096 NT_STATUS_OK
ReadX 10046 57344 4096 4096 NT_STATUS_OK
ReadX 10046 61440 4096 4096 NT_STATUS_OK
ReadX 10046 65536 4096 4096 NT_STATUS_OK
ReadX 10046 69632 4096 4096 NT_STATUS_OK
ReadX 10046 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Close 10046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10047 NT_STATUS_OK
SET_FILE_INFORMATION 10047 1004 NT_STATUS_OK
Close 10047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10049 NT_STATUS_OK
Close 10049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10041 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 18432 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10052 NT_STATUS_OK
WriteX 10052 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10052 258 NT_STATUS_OK
WriteX 10052 0 65536 65536 NT_STATUS_OK
WriteX 10052 65536 8866 8866 NT_STATUS_OK
Close 10052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 4096 4096 NT_STATUS_OK
WriteX 10053 0 4096 4096 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
WriteX 10053 0 4096 4096 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
Close 10053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10054 NT_STATUS_OK
ReadX 10054 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10055 NT_STATUS_OK
ReadX 10055 0 4096 4096 NT_STATUS_OK
Close 10055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10056 NT_STATUS_OK
ReadX 10056 0 4096 4096 NT_STATUS_OK
Close 10056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10057 NT_STATUS_OK
ReadX 10057 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10057 1004 NT_STATUS_OK
WriteX 10057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10058 NT_STATUS_OK
Close 10058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10057 NT_STATUS_OK
Close 10048 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10060 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10063 NT_STATUS_OK
WriteX 10063 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10063 258 NT_STATUS_OK
WriteX 10063 0 65536 65536 NT_STATUS_OK
WriteX 10063 65536 9298 9298 NT_STATUS_OK
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
WriteX 10064 0 4096 4096 NT_STATUS_OK
Flush 10064 NT_STATUS_OK
SET_FILE_INFORMATION 10064 1004 NT_STATUS_OK
WriteX 10064 0 4096 4096 NT_STATUS_OK
Flush 10064 NT_STATUS_OK
Close 10064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10065 NT_STATUS_OK
SET_FILE_INFORMATION 10065 1004 NT_STATUS_OK
Close 10065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10070 0 4096 4096 NT_STATUS_OK
Close 10070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10071 NT_STATUS_OK
ReadX 10071 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10071 4096 4096 4096 NT_STATUS_OK
ReadX 10071 8192 4096 4096 NT_STATUS_OK
ReadX 10071 12288 4096 4096 NT_STATUS_OK
ReadX 10071 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 4096 4096 NT_STATUS_OK
Close 10072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10073 NT_STATUS_OK
ReadX 10073 0 4096 4096 NT_STATUS_OK
Close 10073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10074 1004 NT_STATUS_OK
WriteX 10074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10071 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10077 NT_STATUS_OK
Close 10077 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10080 NT_STATUS_OK
WriteX 10080 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 258 NT_STATUS_OK
WriteX 10080 0 65536 65536 NT_STATUS_OK
WriteX 10080 65536 11540 11540 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 4096 4096 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
Flush 10081 NT_STATUS_OK
SET_FILE_INFORMATION 10081 1004 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
Flush 10081 NT_STATUS_OK
Close 10081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10082 NT_STATUS_OK
SET_FILE_INFORMATION 10082 1004 NT_STATUS_OK
Close 10082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10083 NT_STATUS_OK
ReadX 10083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10084 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10086 NT_STATUS_OK
ReadX 10086 61440 4096 4096 NT_STATUS_OK
ReadX 10086 126976 4096 4096 NT_STATUS_OK
WriteX 10086 0 65536 65536 NT_STATUS_OK
WriteX 10086 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 61440 4096 4096 NT_STATUS_OK
ReadX 10087 126976 4096 4096 NT_STATUS_OK
ReadX 10087 192512 4096 4096 NT_STATUS_OK
ReadX 10087 258048 4096 4096 NT_STATUS_OK
WriteX 10087 0 65536 65536 NT_STATUS_OK
WriteX 10087 65536 65536 65536 NT_STATUS_OK
WriteX 10087 131072 65536 65536 NT_STATUS_OK
WriteX 10087 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10088 NT_STATUS_OK
ReadX 10088 61440 4096 4096 NT_STATUS_OK
ReadX 10088 126976 4096 4096 NT_STATUS_OK
ReadX 10088 192512 4096 4096 NT_STATUS_OK
ReadX 10088 258048 4096 4096 NT_STATUS_OK
ReadX 10088 323584 4096 4096 NT_STATUS_OK
ReadX 10088 389120 4096 4096 NT_STATUS_OK
ReadX 10088 454656 4096 4096 NT_STATUS_OK
ReadX 10088 520192 4096 4096 NT_STATUS_OK
WriteX 10088 0 65536 65536 NT_STATUS_OK
WriteX 10088 65536 65536 65536 NT_STATUS_OK
WriteX 10088 131072 65536 65536 NT_STATUS_OK
WriteX 10088 196608 65536 65536 NT_STATUS_OK
WriteX 10088 262144 65536 65536 NT_STATUS_OK
WriteX 10088 327680 65536 65536 NT_STATUS_OK
WriteX 10088 393216 65536 65536 NT_STATUS_OK
WriteX 10088 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
ReadX 10089 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10090 NT_STATUS_OK
WriteX 10090 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10090 258 NT_STATUS_OK
WriteX 10090 0 53 53 NT_STATUS_OK
Close 10090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10091 NT_STATUS_OK
Close 10091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Close 10029 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Close 10088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10089 8192 4096 4096 NT_STATUS_OK
ReadX 10089 12288 4096 4096 NT_STATUS_OK
WriteX 10093 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10093 258 NT_STATUS_OK
ReadX 10089 16384 4096 4096 NT_STATUS_OK
ReadX 10089 20480 4096 4096 NT_STATUS_OK
WriteX 10093 0 15360 15360 NT_STATUS_OK
Close 10093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10094 NT_STATUS_OK
ReadX 10094 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10094 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10094 1004 NT_STATUS_OK
WriteX 10094 0 4096 4096 NT_STATUS_OK
Close 10094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10095 NT_STATUS_OK
Close 10095 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10097 NT_STATUS_OK
ReadX 10097 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10098 NT_STATUS_OK
Close 10098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10097 4096 4096 4096 NT_STATUS_OK
ReadX 10097 8192 4096 4096 NT_STATUS_OK
ReadX 10097 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10100 NT_STATUS_OK
ReadX 10100 0 4096 4096 NT_STATUS_OK
ReadX 10100 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
ReadX 10101 4096 4096 4096 NT_STATUS_OK
ReadX 10101 8192 4096 4096 NT_STATUS_OK
Close 10100 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10102 NT_STATUS_OK
WriteX 10102 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10102 258 NT_STATUS_OK
WriteX 10102 0 15360 15360 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10103 NT_STATUS_OK
ReadX 10103 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10103 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10103 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10104 NT_STATUS_OK
Close 10104 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10106 NT_STATUS_OK
ReadX 10106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10107 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
Close 10107 NT_STATUS_OK
WriteX 10103 0 4096 4096 NT_STATUS_OK
Close 10103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10108 NT_STATUS_OK
Close 10108 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10110 NT_STATUS_OK
ReadX 10110 0 4096 4096 NT_STATUS_OK
ReadX 10110 4096 4096 4096 NT_STATUS_OK
ReadX 10110 8192 4096 4096 NT_STATUS_OK
ReadX 10110 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10110 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10110 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10112 NT_STATUS_OK
WriteX 10112 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10112 258 NT_STATUS_OK
WriteX 10112 0 53 53 NT_STATUS_OK
Close 10112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10113 NT_STATUS_OK
Close 10113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10111 4096 4096 4096 NT_STATUS_OK
ReadX 10111 8192 4096 4096 NT_STATUS_OK
ReadX 10111 12288 4096 4096 NT_STATUS_OK
WriteX 10115 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10115 258 NT_STATUS_OK
WriteX 10115 0 12006 12006 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10116 NT_STATUS_OK
ReadX 10116 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10116 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10116 1004 NT_STATUS_OK
WriteX 10116 0 4096 4096 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10117 NT_STATUS_OK
Close 10117 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10120 NT_STATUS_OK
Close 10120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10119 4096 4096 4096 NT_STATUS_OK
ReadX 10119 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10122 NT_STATUS_OK
WriteX 10122 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 258 NT_STATUS_OK
WriteX 10122 0 11991 11991 NT_STATUS_OK
Close 10122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10123 NT_STATUS_OK
ReadX 10123 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10123 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10123 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10124 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10127 NT_STATUS_OK
SET_FILE_INFORMATION 10127 1004 NT_STATUS_OK
Close 10127 NT_STATUS_OK
WriteX 10123 0 4096 4096 NT_STATUS_OK
Close 10123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10128 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10131 NT_STATUS_OK
Close 10131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10130 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
ReadX 10130 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
WriteX 10130 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10130 1004 NT_STATUS_OK
Close 10106 NT_STATUS_OK
WriteX 10110 0 19054 19054 NT_STATUS_OK
WriteX 10130 0 12288 12288 NT_STATUS_OK
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10133 NT_STATUS_OK
Close 10133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10110 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10137 NT_STATUS_OK
ReadX 10137 0 61440 61440 NT_STATUS_OK
ReadX 10137 61440 4096 4096 NT_STATUS_OK
ReadX 10137 65536 61440 61440 NT_STATUS_OK
ReadX 10137 126976 4096 4096 NT_STATUS_OK
ReadX 10137 131072 61440 61440 NT_STATUS_OK
ReadX 10137 192512 4096 4096 NT_STATUS_OK
ReadX 10137 196608 61440 61440 NT_STATUS_OK
ReadX 10137 258048 4096 4096 NT_STATUS_OK
ReadX 10137 262144 61440 61440 NT_STATUS_OK
ReadX 10137 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10138 NT_STATUS_OK
ReadX 10138 0 61440 61440 NT_STATUS_OK
ReadX 10138 61440 4096 4096 NT_STATUS_OK
ReadX 10138 65536 61440 61440 NT_STATUS_OK
ReadX 10138 126976 4096 4096 NT_STATUS_OK
ReadX 10138 131072 61440 61440 NT_STATUS_OK
ReadX 10138 192512 4096 4096 NT_STATUS_OK
ReadX 10138 196608 61440 61440 NT_STATUS_OK
ReadX 10138 258048 4096 4096 NT_STATUS_OK
ReadX 10138 262144 61440 61440 NT_STATUS_OK
ReadX 10138 323584 4096 4096 NT_STATUS_OK
ReadX 10138 327680 61440 61440 NT_STATUS_OK
ReadX 10138 389120 4096 4096 NT_STATUS_OK
ReadX 10138 393216 61440 61440 NT_STATUS_OK
ReadX 10138 454656 4096 4096 NT_STATUS_OK
ReadX 10138 458752 61440 61440 NT_STATUS_OK
ReadX 10138 520192 4096 4096 NT_STATUS_OK
ReadX 10138 524288 61440 61440 NT_STATUS_OK
ReadX 10138 585728 4096 4096 NT_STATUS_OK
ReadX 10138 589824 61440 61440 NT_STATUS_OK
ReadX 10138 651264 4096 4096 NT_STATUS_OK
ReadX 10138 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10139 NT_STATUS_OK
ReadX 10139 0 61440 61440 NT_STATUS_OK
ReadX 10139 61440 4096 4096 NT_STATUS_OK
ReadX 10139 65536 61440 61440 NT_STATUS_OK
ReadX 10139 126976 4096 4096 NT_STATUS_OK
ReadX 10139 131072 61440 61440 NT_STATUS_OK
ReadX 10139 192512 4096 4096 NT_STATUS_OK
ReadX 10139 196608 61440 61440 NT_STATUS_OK
ReadX 10139 258048 4096 4096 NT_STATUS_OK
ReadX 10139 262144 61440 61440 NT_STATUS_OK
ReadX 10139 323584 4096 4096 NT_STATUS_OK
ReadX 10139 327680 61440 61440 NT_STATUS_OK
ReadX 10139 389120 4096 4096 NT_STATUS_OK
ReadX 10139 393216 61440 61440 NT_STATUS_OK
ReadX 10139 454656 4096 4096 NT_STATUS_OK
ReadX 10139 458752 61440 61440 NT_STATUS_OK
ReadX 10139 520192 4096 4096 NT_STATUS_OK
ReadX 10139 524288 61440 61440 NT_STATUS_OK
ReadX 10139 585728 4096 4096 NT_STATUS_OK
ReadX 10139 589824 61440 61440 NT_STATUS_OK
ReadX 10139 651264 4096 4096 NT_STATUS_OK
ReadX 10139 655360 61440 61440 NT_STATUS_OK
ReadX 10139 716800 4096 4096 NT_STATUS_OK
ReadX 10139 720896 61440 61440 NT_STATUS_OK
ReadX 10139 782336 4096 4096 NT_STATUS_OK
ReadX 10139 786432 61440 61440 NT_STATUS_OK
ReadX 10139 847872 4096 4096 NT_STATUS_OK
ReadX 10139 851968 61440 61440 NT_STATUS_OK
ReadX 10139 913408 4096 4096 NT_STATUS_OK
ReadX 10139 917504 61440 61440 NT_STATUS_OK
ReadX 10139 978944 4096 4096 NT_STATUS_OK
ReadX 10139 983040 61440 61440 NT_STATUS_OK
ReadX 10139 1044480 4096 4096 NT_STATUS_OK
ReadX 10139 1048576 61440 61440 NT_STATUS_OK
ReadX 10139 1110016 4096 4096 NT_STATUS_OK
ReadX 10139 1114112 61440 61440 NT_STATUS_OK
ReadX 10139 1175552 4096 4096 NT_STATUS_OK
ReadX 10139 1179648 61440 61440 NT_STATUS_OK
ReadX 10139 1241088 4096 4096 NT_STATUS_OK
ReadX 10139 1245184 61440 61440 NT_STATUS_OK
ReadX 10139 1306624 4096 4096 NT_STATUS_OK
ReadX 10139 1310720 61440 61440 NT_STATUS_OK
ReadX 10139 1372160 4096 4096 NT_STATUS_OK
ReadX 10139 1376256 61440 61440 NT_STATUS_OK
ReadX 10139 1437696 4096 4096 NT_STATUS_OK
ReadX 10139 1441792 61440 61440 NT_STATUS_OK
ReadX 10139 1503232 4096 4096 NT_STATUS_OK
ReadX 10139 1507328 61440 61440 NT_STATUS_OK
ReadX 10139 1568768 4096 4096 NT_STATUS_OK
ReadX 10139 1572864 61440 61440 NT_STATUS_OK
ReadX 10139 1634304 4096 4096 NT_STATUS_OK
ReadX 10139 1638400 61440 61440 NT_STATUS_OK
ReadX 10139 1699840 4096 4096 NT_STATUS_OK
ReadX 10139 1703936 61440 61440 NT_STATUS_OK
ReadX 10139 1765376 4096 4096 NT_STATUS_OK
ReadX 10139 1769472 61440 61440 NT_STATUS_OK
ReadX 10139 1830912 4096 4096 NT_STATUS_OK
ReadX 10139 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10142 NT_STATUS_OK
ReadX 10142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10143 NT_STATUS_OK
ReadX 10143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10146 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 1004 NT_STATUS_OK
WriteX 10146 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10147 NT_STATUS_OK
Close 10147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10148 NT_STATUS_OK
WriteX 10148 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 258 NT_STATUS_OK
WriteX 10148 0 491 491 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10149 NT_STATUS_OK
ReadX 10149 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10146 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10152 NT_STATUS_OK
WriteX 10152 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10152 258 NT_STATUS_OK
WriteX 10152 0 543 543 NT_STATUS_OK
Close 10152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10153 NT_STATUS_OK
ReadX 10153 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10137 NT_STATUS_OK
Close 10138 NT_STATUS_OK
Close 10139 NT_STATUS_OK
Close 10153 NT_STATUS_OK
Close 10141 NT_STATUS_OK
Close 10142 NT_STATUS_OK
Close 10143 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10166 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 1004 NT_STATUS_OK
WriteX 10166 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 258 NT_STATUS_OK
WriteX 10166 0 2048 2048 NT_STATUS_OK
Close 10166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10167 0 4096 4096 NT_STATUS_OK
Flush 10167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10167 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 29816 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10172 NT_STATUS_OK
WriteX 10172 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10172 258 NT_STATUS_OK
WriteX 10172 0 2048 2048 NT_STATUS_OK
Close 10172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10177 NT_STATUS_OK
Close 10177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10178 NT_STATUS_OK
WriteX 10178 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10178 258 NT_STATUS_OK
WriteX 10178 0 2048 2048 NT_STATUS_OK
Close 10178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 2048 2048 NT_STATUS_OK
ReadX 10157 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10173 0 4096 4096 NT_STATUS_OK
WriteX 10157 0 8192 8192 NT_STATUS_OK
WriteX 10158 0 4096 4096 NT_STATUS_OK
WriteX 10159 0 4096 4096 NT_STATUS_OK
ReadX 10173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10183 NT_STATUS_OK
QUERY_FILE_INFORMATION 10183 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10182 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10188 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10195 NT_STATUS_OK
ReadX 10195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10196 NT_STATUS_OK
ReadX 10196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10203 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 1004 NT_STATUS_OK
WriteX 10203 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
WriteX 10203 0 2048 2048 NT_STATUS_OK
Close 10203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10204 NT_STATUS_OK
ReadX 10204 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10206 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10206 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10211 NT_STATUS_OK
QUERY_FILE_INFORMATION 10211 1004 NT_STATUS_OK
WriteX 10211 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10211 258 NT_STATUS_OK
WriteX 10211 0 2048 2048 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10204 0 4096 4096 NT_STATUS_OK
Flush 10204 NT_STATUS_OK
WriteX 10212 0 4096 4096 NT_STATUS_OK
Flush 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10204 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10212 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10206 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10214 NT_STATUS_OK
WriteX 10214 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10214 258 NT_STATUS_OK
WriteX 10214 0 4096 4096 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10216 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10217 NT_STATUS_OK
WriteX 10217 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10217 258 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
Close 10217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10218 0 4096 4096 NT_STATUS_OK
Close 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Close 10206 NT_STATUS_OK
Close 10195 NT_STATUS_OK
Close 10196 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Close 10193 NT_STATUS_OK
Close 10186 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10221 NT_STATUS_OK
Close 10221 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10225 NT_STATUS_OK
WriteX 10225 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10225 258 NT_STATUS_OK
WriteX 10225 0 2048 2048 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10240 NT_STATUS_OK
QUERY_FILE_INFORMATION 10240 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10229 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10242 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10248 NT_STATUS_OK
ReadX 10248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10249 NT_STATUS_OK
ReadX 10249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10250 NT_STATUS_OK
ReadX 10250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10262 NT_STATUS_OK
QUERY_FILE_INFORMATION 10262 1004 NT_STATUS_OK
WriteX 10262 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10262 258 NT_STATUS_OK
WriteX 10262 0 2048 2048 NT_STATUS_OK
Close 10262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10274 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 1004 NT_STATUS_OK
WriteX 10274 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 258 NT_STATUS_OK
WriteX 10274 0 2048 2048 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10275 NT_STATUS_OK
ReadX 10275 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10277 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10282 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 1004 NT_STATUS_OK
WriteX 10282 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 258 NT_STATUS_OK
WriteX 10282 0 2048 2048 NT_STATUS_OK
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10263 0 4096 4096 NT_STATUS_OK
Flush 10263 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
Flush 10275 NT_STATUS_OK
WriteX 10283 0 4096 4096 NT_STATUS_OK
Flush 10283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10263 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10265 4096 16384 16384 NT_STATUS_OK
ReadX 10245 4096 16384 16384 NT_STATUS_OK
ReadX 10277 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10284 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 2048 2048 NT_STATUS_OK
WriteX 10285 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10286 NT_STATUS_OK
QUERY_FILE_INFORMATION 10286 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10249 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10277 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10288 NT_STATUS_OK
QUERY_FILE_INFORMATION 10288 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10290 NT_STATUS_OK
QUERY_FILE_INFORMATION 10290 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10294 NT_STATUS_OK
ReadX 10294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10293 4096 16384 16384 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
WriteX 10296 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10302 NT_STATUS_OK
ReadX 10302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10306 NT_STATUS_OK
ReadX 10306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10307 NT_STATUS_OK
ReadX 10307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10310 NT_STATUS_OK
ReadX 10310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 8192 8192 NT_STATUS_OK
ReadX 10299 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10313 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10313 0 4096 4096 NT_STATUS_OK
ReadX 10313 4096 4096 4096 NT_STATUS_OK
ReadX 10313 8192 4096 4096 NT_STATUS_OK
WriteX 10299 0 4096 4096 NT_STATUS_OK
WriteX 10300 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
ReadX 10314 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
WriteX 10296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12660 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12660 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12660 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10319 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 1004 NT_STATUS_OK
WriteX 10319 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 258 NT_STATUS_OK
WriteX 10319 0 2048 2048 NT_STATUS_OK
Close 10319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10321 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 4096 4096 NT_STATUS_OK
ReadX 10322 4096 4096 4096 NT_STATUS_OK
WriteX 10322 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10323 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 4096 4096 NT_STATUS_OK
ReadX 10324 4096 4096 4096 NT_STATUS_OK
WriteX 10324 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10325 NT_STATUS_OK
QUERY_FILE_INFORMATION 10325 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Close 10296 NT_STATUS_OK
Close 10305 NT_STATUS_OK
Close 10310 NT_STATUS_OK
Close 10306 NT_STATUS_OK
Close 10307 NT_STATUS_OK
Close 10308 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Close 10304 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Close 10324 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Close 10314 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10327 0 4096 4096 NT_STATUS_OK
ReadX 10327 4096 4096 4096 NT_STATUS_OK
ReadX 10327 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10328 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10335 NT_STATUS_OK
ReadX 10335 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 4096 4096 NT_STATUS_OK
ReadX 10328 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10345 NT_STATUS_OK
QUERY_FILE_INFORMATION 10345 1004 NT_STATUS_OK
WriteX 10345 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10345 258 NT_STATUS_OK
WriteX 10345 0 2048 2048 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10346 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10350 NT_STATUS_OK
Close 10350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10351 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1004 NT_STATUS_OK
WriteX 10351 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 258 NT_STATUS_OK
WriteX 10351 0 2048 2048 NT_STATUS_OK
Close 10351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10335 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10353 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Close 10334 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Close 10336 NT_STATUS_OK
Close 10337 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10355 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 61440 4096 4096 NT_STATUS_OK
ReadX 10357 126976 4096 4096 NT_STATUS_OK
WriteX 10357 0 65536 65536 NT_STATUS_OK
WriteX 10357 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 61440 4096 4096 NT_STATUS_OK
ReadX 10358 126976 4096 4096 NT_STATUS_OK
ReadX 10358 192512 4096 4096 NT_STATUS_OK
ReadX 10358 258048 4096 4096 NT_STATUS_OK
WriteX 10358 0 65536 65536 NT_STATUS_OK
WriteX 10358 65536 65536 65536 NT_STATUS_OK
WriteX 10358 131072 65536 65536 NT_STATUS_OK
WriteX 10358 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 61440 4096 4096 NT_STATUS_OK
ReadX 10359 126976 4096 4096 NT_STATUS_OK
ReadX 10359 192512 4096 4096 NT_STATUS_OK
ReadX 10359 258048 4096 4096 NT_STATUS_OK
ReadX 10359 323584 4096 4096 NT_STATUS_OK
ReadX 10359 389120 4096 4096 NT_STATUS_OK
ReadX 10359 454656 4096 4096 NT_STATUS_OK
ReadX 10359 520192 4096 4096 NT_STATUS_OK
WriteX 10359 0 65536 65536 NT_STATUS_OK
WriteX 10359 65536 65536 65536 NT_STATUS_OK
WriteX 10359 131072 65536 65536 NT_STATUS_OK
WriteX 10359 196608 65536 65536 NT_STATUS_OK
WriteX 10359 262144 65536 65536 NT_STATUS_OK
WriteX 10359 327680 65536 65536 NT_STATUS_OK
WriteX 10359 393216 65536 65536 NT_STATUS_OK
WriteX 10359 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10360 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10360 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10360 8192 4096 4096 NT_STATUS_OK
ReadX 10360 12288 4096 4096 NT_STATUS_OK
ReadX 10360 16384 4096 4096 NT_STATUS_OK
ReadX 10360 20480 4096 4096 NT_STATUS_OK
ReadX 10360 24576 4096 4096 NT_STATUS_OK
ReadX 10360 28672 4096 4096 NT_STATUS_OK
ReadX 10360 32768 4096 4096 NT_STATUS_OK
ReadX 10360 36864 4096 4096 NT_STATUS_OK
ReadX 10360 40960 4096 4096 NT_STATUS_OK
ReadX 10360 45056 4096 4096 NT_STATUS_OK
ReadX 10360 49152 4096 4096 NT_STATUS_OK
ReadX 10360 53248 4096 4096 NT_STATUS_OK
ReadX 10360 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10360 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10361 NT_STATUS_OK
Close 10361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10359 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10363 NT_STATUS_OK
WriteX 10363 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10363 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10363 1004 NT_STATUS_OK
WriteX 10363 0 57088 57088 NT_STATUS_OK
WriteX 10363 0 4096 4096 NT_STATUS_OK
Flush 10363 NT_STATUS_OK
Close 10360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10364 NT_STATUS_OK
SET_FILE_INFORMATION 10364 1004 NT_STATUS_OK
Close 10364 NT_STATUS_OK
SET_FILE_INFORMATION 10363 1004 NT_STATUS_OK
WriteX 10363 0 4096 4096 NT_STATUS_OK
Close 10363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10367 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10368 NT_STATUS_OK
WriteX 10368 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10368 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
WriteX 10368 0 51456 51456 NT_STATUS_OK
WriteX 10368 0 4096 4096 NT_STATUS_OK
Flush 10368 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10368 1004 NT_STATUS_OK
WriteX 10368 0 4096 4096 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Close 10367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10370 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10372 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10374 NT_STATUS_OK
Close 10374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10377 NT_STATUS_OK
WriteX 10377 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10377 258 NT_STATUS_OK
WriteX 10377 0 53077 53077 NT_STATUS_OK
Close 10377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10378 NT_STATUS_OK
WriteX 10378 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10378 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
WriteX 10378 0 65536 65536 NT_STATUS_OK
WriteX 10378 65536 1856 1856 NT_STATUS_OK
WriteX 10378 0 4096 4096 NT_STATUS_OK
Flush 10378 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
WriteX 10378 0 4096 4096 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Close 10372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10380 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10384 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10387 NT_STATUS_OK
WriteX 10387 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10387 258 NT_STATUS_OK
WriteX 10387 0 7983 7983 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10389 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10392 NT_STATUS_OK
WriteX 10392 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10392 258 NT_STATUS_OK
WriteX 10392 0 65536 65536 NT_STATUS_OK
WriteX 10392 65536 65536 65536 NT_STATUS_OK
WriteX 10392 131072 65536 65536 NT_STATUS_OK
WriteX 10392 196608 65536 65536 NT_STATUS_OK
WriteX 10392 262144 65536 65536 NT_STATUS_OK
WriteX 10392 327680 65536 65536 NT_STATUS_OK
WriteX 10392 393216 65536 65536 NT_STATUS_OK
WriteX 10392 458752 46731 46731 NT_STATUS_OK
Close 10392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10393 NT_STATUS_OK
WriteX 10393 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10393 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10382 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10393 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
WriteX 10393 0 65536 65536 NT_STATUS_OK
WriteX 10393 65536 22848 22848 NT_STATUS_OK
WriteX 10393 0 4096 4096 NT_STATUS_OK
Flush 10393 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10393 1004 NT_STATUS_OK
WriteX 10393 0 4096 4096 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Close 10382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10395 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10397 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10398 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10398 1004 NT_STATUS_OK
ReadX 10398 8192 4096 4096 NT_STATUS_OK
ReadX 10398 12288 4096 4096 NT_STATUS_OK
ReadX 10398 16384 4096 4096 NT_STATUS_OK
ReadX 10398 20480 4096 4096 NT_STATUS_OK
ReadX 10398 24576 4096 4096 NT_STATUS_OK
ReadX 10398 28672 4096 4096 NT_STATUS_OK
ReadX 10398 32768 4096 4096 NT_STATUS_OK
ReadX 10398 36864 4096 4096 NT_STATUS_OK
ReadX 10398 40960 4096 4096 NT_STATUS_OK
ReadX 10398 45056 4096 4096 NT_STATUS_OK
ReadX 10398 49152 4096 4096 NT_STATUS_OK
ReadX 10398 53248 4096 4096 NT_STATUS_OK
ReadX 10398 57344 4096 4096 NT_STATUS_OK
ReadX 10398 61440 4096 4096 NT_STATUS_OK
ReadX 10398 65536 4096 4096 NT_STATUS_OK
ReadX 10398 69632 4096 4096 NT_STATUS_OK
ReadX 10398 73728 4096 4096 NT_STATUS_OK
ReadX 10398 77824 4096 4096 NT_STATUS_OK
ReadX 10398 81920 4096 4096 NT_STATUS_OK
ReadX 10398 86016 4096 4096 NT_STATUS_OK
ReadX 10398 90112 4096 4096 NT_STATUS_OK
ReadX 10398 94208 4096 4096 NT_STATUS_OK
ReadX 10398 98304 4096 4096 NT_STATUS_OK
ReadX 10398 102400 4096 4096 NT_STATUS_OK
ReadX 10398 106496 4096 4096 NT_STATUS_OK
ReadX 10398 110592 4096 4096 NT_STATUS_OK
ReadX 10398 114688 4096 4096 NT_STATUS_OK
ReadX 10398 118784 4096 4096 NT_STATUS_OK
ReadX 10398 122880 4096 4096 NT_STATUS_OK
ReadX 10398 126976 4096 4096 NT_STATUS_OK
ReadX 10398 131072 4096 4096 NT_STATUS_OK
ReadX 10398 135168 4096 4096 NT_STATUS_OK
ReadX 10398 139264 4096 4096 NT_STATUS_OK
ReadX 10398 143360 4096 4096 NT_STATUS_OK
ReadX 10398 147456 4096 4096 NT_STATUS_OK
ReadX 10398 151552 4096 4096 NT_STATUS_OK
ReadX 10398 155648 4096 4096 NT_STATUS_OK
ReadX 10398 159744 4096 4096 NT_STATUS_OK
ReadX 10398 163840 4096 4096 NT_STATUS_OK
ReadX 10398 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10398 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10401 NT_STATUS_OK
WriteX 10401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10401 258 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10402 NT_STATUS_OK
SET_FILE_INFORMATION 10402 1004 NT_STATUS_OK
Close 10402 NT_STATUS_OK
WriteX 10401 0 42388 42388 NT_STATUS_OK
Close 10401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10403 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
ReadX 10405 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10406 NT_STATUS_OK
WriteX 10406 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10406 258 NT_STATUS_OK
SET_FILE_INFORMATION 10406 1004 NT_STATUS_OK
WriteX 10406 0 42652 42652 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Close 10405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10410 NT_STATUS_OK
ReadX 10410 0 4096 4096 NT_STATUS_OK
ReadX 10410 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 69 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10412 NT_STATUS_OK
Close 10412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10415 NT_STATUS_OK
WriteX 10415 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10415 258 NT_STATUS_OK
WriteX 10415 0 65536 65536 NT_STATUS_OK
WriteX 10415 65536 49 49 NT_STATUS_OK
Close 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 61440 61440 NT_STATUS_OK
ReadX 10416 61440 4096 4096 NT_STATUS_OK
ReadX 10416 65536 61440 61440 NT_STATUS_OK
ReadX 10416 126976 4096 4096 NT_STATUS_OK
ReadX 10416 131072 61440 61440 NT_STATUS_OK
ReadX 10416 192512 4096 4096 NT_STATUS_OK
ReadX 10416 196608 61440 61440 NT_STATUS_OK
ReadX 10416 258048 4096 4096 NT_STATUS_OK
ReadX 10416 262144 61440 61440 NT_STATUS_OK
ReadX 10416 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 61440 61440 NT_STATUS_OK
ReadX 10417 61440 4096 4096 NT_STATUS_OK
ReadX 10417 65536 61440 61440 NT_STATUS_OK
ReadX 10417 126976 4096 4096 NT_STATUS_OK
ReadX 10417 131072 61440 61440 NT_STATUS_OK
ReadX 10417 192512 4096 4096 NT_STATUS_OK
ReadX 10417 196608 61440 61440 NT_STATUS_OK
ReadX 10417 258048 4096 4096 NT_STATUS_OK
ReadX 10417 262144 61440 61440 NT_STATUS_OK
ReadX 10417 323584 4096 4096 NT_STATUS_OK
ReadX 10417 327680 61440 61440 NT_STATUS_OK
ReadX 10417 389120 4096 4096 NT_STATUS_OK
ReadX 10417 393216 61440 61440 NT_STATUS_OK
ReadX 10417 454656 4096 4096 NT_STATUS_OK
ReadX 10417 458752 61440 61440 NT_STATUS_OK
ReadX 10417 520192 4096 4096 NT_STATUS_OK
ReadX 10417 524288 61440 61440 NT_STATUS_OK
ReadX 10417 585728 4096 4096 NT_STATUS_OK
ReadX 10417 589824 61440 61440 NT_STATUS_OK
ReadX 10417 651264 4096 4096 NT_STATUS_OK
ReadX 10417 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 61440 61440 NT_STATUS_OK
ReadX 10418 61440 4096 4096 NT_STATUS_OK
ReadX 10418 65536 61440 61440 NT_STATUS_OK
ReadX 10418 126976 4096 4096 NT_STATUS_OK
ReadX 10418 131072 61440 61440 NT_STATUS_OK
ReadX 10418 192512 4096 4096 NT_STATUS_OK
ReadX 10418 196608 61440 61440 NT_STATUS_OK
ReadX 10418 258048 4096 4096 NT_STATUS_OK
ReadX 10418 262144 61440 61440 NT_STATUS_OK
ReadX 10418 323584 4096 4096 NT_STATUS_OK
ReadX 10418 327680 61440 61440 NT_STATUS_OK
ReadX 10418 389120 4096 4096 NT_STATUS_OK
ReadX 10418 393216 61440 61440 NT_STATUS_OK
ReadX 10418 454656 4096 4096 NT_STATUS_OK
ReadX 10418 458752 61440 61440 NT_STATUS_OK
ReadX 10418 520192 4096 4096 NT_STATUS_OK
ReadX 10418 524288 61440 61440 NT_STATUS_OK
ReadX 10418 585728 4096 4096 NT_STATUS_OK
ReadX 10418 589824 61440 61440 NT_STATUS_OK
ReadX 10418 651264 4096 4096 NT_STATUS_OK
ReadX 10418 655360 61440 61440 NT_STATUS_OK
ReadX 10418 716800 4096 4096 NT_STATUS_OK
ReadX 10418 720896 61440 61440 NT_STATUS_OK
ReadX 10418 782336 4096 4096 NT_STATUS_OK
ReadX 10418 786432 61440 61440 NT_STATUS_OK
ReadX 10418 847872 4096 4096 NT_STATUS_OK
ReadX 10418 851968 61440 61440 NT_STATUS_OK
ReadX 10418 913408 4096 4096 NT_STATUS_OK
ReadX 10418 917504 61440 61440 NT_STATUS_OK
ReadX 10418 978944 4096 4096 NT_STATUS_OK
ReadX 10418 983040 61440 61440 NT_STATUS_OK
ReadX 10418 1044480 4096 4096 NT_STATUS_OK
ReadX 10418 1048576 61440 61440 NT_STATUS_OK
ReadX 10418 1110016 4096 4096 NT_STATUS_OK
ReadX 10418 1114112 61440 61440 NT_STATUS_OK
ReadX 10418 1175552 4096 4096 NT_STATUS_OK
ReadX 10418 1179648 61440 61440 NT_STATUS_OK
ReadX 10418 1241088 4096 4096 NT_STATUS_OK
ReadX 10418 1245184 61440 61440 NT_STATUS_OK
ReadX 10418 1306624 4096 4096 NT_STATUS_OK
ReadX 10418 1310720 61440 61440 NT_STATUS_OK
ReadX 10418 1372160 4096 4096 NT_STATUS_OK
ReadX 10418 1376256 61440 61440 NT_STATUS_OK
ReadX 10418 1437696 4096 4096 NT_STATUS_OK
ReadX 10418 1441792 61440 61440 NT_STATUS_OK
ReadX 10418 1503232 4096 4096 NT_STATUS_OK
ReadX 10418 1507328 61440 61440 NT_STATUS_OK
ReadX 10418 1568768 4096 4096 NT_STATUS_OK
ReadX 10418 1572864 61440 61440 NT_STATUS_OK
ReadX 10418 1634304 4096 4096 NT_STATUS_OK
ReadX 10418 1638400 61440 61440 NT_STATUS_OK
ReadX 10418 1699840 4096 4096 NT_STATUS_OK
ReadX 10418 1703936 61440 61440 NT_STATUS_OK
ReadX 10418 1765376 4096 4096 NT_STATUS_OK
ReadX 10418 1769472 61440 61440 NT_STATUS_OK
ReadX 10418 1830912 4096 4096 NT_STATUS_OK
ReadX 10418 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10420 NT_STATUS_OK
QUERY_FILE_INFORMATION 10420 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10420 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10420 1005 NT_STATUS_OK
ReadX 10420 2156 24 24 NT_STATUS_OK
ReadX 10420 2139 276 276 NT_STATUS_OK
ReadX 10420 2136 14 14 NT_STATUS_OK
ReadX 10420 2136 7 7 NT_STATUS_OK
ReadX 10420 2138 12 12 NT_STATUS_OK
ReadX 10420 2137 8 8 NT_STATUS_OK
ReadX 10420 2135 15 15 NT_STATUS_OK
ReadX 10420 0 16 16 NT_STATUS_OK
ReadX 10420 16 2048 2048 NT_STATUS_OK
ReadX 10420 2064 2048 2048 NT_STATUS_OK
ReadX 10420 257 2048 2048 NT_STATUS_OK
ReadX 10420 385 2048 2048 NT_STATUS_OK
ReadX 10420 513 2048 2048 NT_STATUS_OK
ReadX 10420 641 2048 2048 NT_STATUS_OK
ReadX 10420 769 2048 2048 NT_STATUS_OK
ReadX 10420 897 2048 2048 NT_STATUS_OK
ReadX 10420 1025 2048 2048 NT_STATUS_OK
ReadX 10420 1153 2048 2048 NT_STATUS_OK
ReadX 10420 1281 2048 2048 NT_STATUS_OK
ReadX 10420 1409 2048 2048 NT_STATUS_OK
ReadX 10420 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10422 NT_STATUS_OK
Close 10422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10410 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10425 NT_STATUS_OK
WriteX 10425 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10425 258 NT_STATUS_OK
WriteX 10425 0 10575 10575 NT_STATUS_OK
Flush 10425 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10426 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 4096 4096 NT_STATUS_OK
Close 10420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10430 NT_STATUS_OK
LockX 10430 2147483538 1 NT_STATUS_OK
UnlockX 10430 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1005 NT_STATUS_OK
ReadX 10430 0 512 512 NT_STATUS_OK
ReadX 10430 512 512 512 NT_STATUS_OK
ReadX 10430 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10430 1004 NT_STATUS_OK
Close 10430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10431 NT_STATUS_OK
QUERY_FILE_INFORMATION 10431 1005 NT_STATUS_OK
ReadX 10431 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10432 NT_STATUS_OK
LockX 10432 2147483538 1 NT_STATUS_OK
UnlockX 10432 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 1005 NT_STATUS_OK
ReadX 10432 0 512 512 NT_STATUS_OK
ReadX 10432 512 512 512 NT_STATUS_OK
ReadX 10432 1024 512 512 NT_STATUS_OK
ReadX 10432 288 20 20 NT_STATUS_OK
ReadX 10432 308 2084 2084 NT_STATUS_OK
ReadX 10432 388 2084 2084 NT_STATUS_OK
ReadX 10432 388 2084 2084 NT_STATUS_OK
ReadX 10419 2157 1386 1386 NT_STATUS_OK
ReadX 10432 2472 399 399 NT_STATUS_OK
ReadX 10432 3072 1536 1536 NT_STATUS_OK
ReadX 10432 544 149 149 NT_STATUS_OK
ReadX 10432 693 485 485 NT_STATUS_OK
Close 10432 NT_STATUS_OK
ReadX 10419 2157 4096 4096 NT_STATUS_OK
ReadX 10419 6253 4096 4096 NT_STATUS_OK
ReadX 10419 10349 4096 4096 NT_STATUS_OK
ReadX 10419 14445 4096 4096 NT_STATUS_OK
ReadX 10419 18541 4096 4096 NT_STATUS_OK
ReadX 10419 22637 256 256 NT_STATUS_OK
ReadX 10419 22893 4096 4096 NT_STATUS_OK
ReadX 10419 26989 4096 4096 NT_STATUS_OK
ReadX 10419 31085 4096 4096 NT_STATUS_OK
ReadX 10419 35181 4096 4096 NT_STATUS_OK
ReadX 10419 39277 4096 4096 NT_STATUS_OK
ReadX 10419 43373 4096 4096 NT_STATUS_OK
ReadX 10419 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10419 2157 1024 1024 NT_STATUS_OK
ReadX 10419 1667 4688 4688 NT_STATUS_OK
ReadX 10419 6355 3516 3516 NT_STATUS_OK
ReadX 10419 9871 16384 16384 NT_STATUS_OK
ReadX 10419 26255 3771 3771 NT_STATUS_OK
ReadX 10419 30026 2048 2048 NT_STATUS_OK
ReadX 10419 32074 1024 1024 NT_STATUS_OK
ReadX 10419 33098 6652 6652 NT_STATUS_OK
ReadX 10419 39750 16384 16384 NT_STATUS_OK
ReadX 10419 56134 10496 10496 NT_STATUS_OK
ReadX 10419 66630 1784 1784 NT_STATUS_OK
ReadX 10419 68414 90 90 NT_STATUS_OK
ReadX 10419 68504 273 273 NT_STATUS_OK
ReadX 10419 68777 1600 1600 NT_STATUS_OK
ReadX 10419 70377 640 640 NT_STATUS_OK
ReadX 10419 71017 1280 1280 NT_STATUS_OK
ReadX 10419 72297 8464 8464 NT_STATUS_OK
ReadX 10419 80761 158 158 NT_STATUS_OK
ReadX 10419 80919 912 912 NT_STATUS_OK
ReadX 10419 81831 1980 1980 NT_STATUS_OK
ReadX 10419 83811 2256 2256 NT_STATUS_OK
ReadX 10419 86067 400 400 NT_STATUS_OK
ReadX 10419 86467 252 252 NT_STATUS_OK
ReadX 10419 86719 42 42 NT_STATUS_OK
ReadX 10419 86761 725 725 NT_STATUS_OK
ReadX 10419 2009 512 512 NT_STATUS_OK
ReadX 10419 3895 9 9 NT_STATUS_OK
ReadX 10419 3781 46 46 NT_STATUS_OK
ReadX 10419 4059 92 92 NT_STATUS_OK
ReadX 10419 3781 92 92 NT_STATUS_OK
ReadX 10419 3986 184 184 NT_STATUS_OK
ReadX 10419 3987 16384 16384 NT_STATUS_OK
ReadX 10419 3902 16384 16384 NT_STATUS_OK
ReadX 10419 3781 10240 10240 NT_STATUS_OK
ReadX 10419 3821 16384 16384 NT_STATUS_OK
ReadX 10419 3891 935 935 NT_STATUS_OK
ReadX 10419 4060 10240 10240 NT_STATUS_OK
ReadX 10419 4059 184 184 NT_STATUS_OK
ReadX 10419 256 184 184 NT_STATUS_OK
ReadX 10419 256 1026 1026 NT_STATUS_OK
ReadX 10419 3901 326 326 NT_STATUS_OK
ReadX 10419 3899 652 652 NT_STATUS_OK
ReadX 10419 256 2 2 NT_STATUS_OK
ReadX 10419 258 4948 4948 NT_STATUS_OK
Close 10419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10437 NT_STATUS_OK
WriteX 10437 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10437 258 NT_STATUS_OK
WriteX 10437 0 65536 65536 NT_STATUS_OK
WriteX 10437 65536 65536 65536 NT_STATUS_OK
WriteX 10437 131072 65536 65536 NT_STATUS_OK
WriteX 10437 196608 65536 65536 NT_STATUS_OK
WriteX 10437 262144 65536 65536 NT_STATUS_OK
WriteX 10437 327680 65536 65536 NT_STATUS_OK
WriteX 10437 393216 65536 65536 NT_STATUS_OK
WriteX 10437 458752 65536 65536 NT_STATUS_OK
WriteX 10437 524288 65536 65536 NT_STATUS_OK
WriteX 10437 589824 35257 35257 NT_STATUS_OK
Close 10437 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10439 NT_STATUS_OK
Close 10439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10442 NT_STATUS_OK
WriteX 10442 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10442 258 NT_STATUS_OK
WriteX 10442 0 65536 65536 NT_STATUS_OK
WriteX 10442 65536 65536 65536 NT_STATUS_OK
WriteX 10442 131072 65536 65536 NT_STATUS_OK
WriteX 10442 196608 65536 65536 NT_STATUS_OK
WriteX 10442 262144 65536 65536 NT_STATUS_OK
WriteX 10442 327680 65536 65536 NT_STATUS_OK
WriteX 10442 393216 65536 65536 NT_STATUS_OK
WriteX 10442 458752 65536 65536 NT_STATUS_OK
WriteX 10442 524288 65536 65536 NT_STATUS_OK
WriteX 10442 589824 57598 57598 NT_STATUS_OK
Close 10442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10444 NT_STATUS_OK
WriteX 10444 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 258 NT_STATUS_OK
WriteX 10444 0 12543 12543 NT_STATUS_OK
Flush 10444 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10446 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10450 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10450 1005 NT_STATUS_OK
ReadX 10450 1938 24 24 NT_STATUS_OK
ReadX 10450 1920 276 276 NT_STATUS_OK
ReadX 10450 1918 14 14 NT_STATUS_OK
ReadX 10450 1918 7 7 NT_STATUS_OK
ReadX 10450 1919 12 12 NT_STATUS_OK
ReadX 10450 1919 8 8 NT_STATUS_OK
ReadX 10450 1917 15 15 NT_STATUS_OK
ReadX 10450 0 16 16 NT_STATUS_OK
ReadX 10450 16 2048 2048 NT_STATUS_OK
ReadX 10450 2064 2048 2048 NT_STATUS_OK
ReadX 10450 257 2048 2048 NT_STATUS_OK
ReadX 10450 385 2048 2048 NT_STATUS_OK
ReadX 10450 513 2048 2048 NT_STATUS_OK
ReadX 10450 641 2048 2048 NT_STATUS_OK
ReadX 10450 769 2048 2048 NT_STATUS_OK
ReadX 10450 897 2048 2048 NT_STATUS_OK
ReadX 10450 1025 2048 2048 NT_STATUS_OK
ReadX 10450 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10455 NT_STATUS_OK
WriteX 10455 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10455 258 NT_STATUS_OK
WriteX 10455 0 11588 11588 NT_STATUS_OK
Flush 10455 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
Close 10450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10460 NT_STATUS_OK
WriteX 10460 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 258 NT_STATUS_OK
WriteX 10460 0 11615 11615 NT_STATUS_OK
Flush 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10462 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10466 NT_STATUS_OK
Close 10466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10469 NT_STATUS_OK
WriteX 10469 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 258 NT_STATUS_OK
WriteX 10469 0 65536 65536 NT_STATUS_OK
WriteX 10469 65536 16050 16050 NT_STATUS_OK
Close 10469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10449 1939 64 64 NT_STATUS_OK
ReadX 10449 128 248 248 NT_STATUS_OK
ReadX 10449 128 568 568 NT_STATUS_OK
ReadX 10449 3872 1536 1536 NT_STATUS_OK
ReadX 10449 3456 2560 2560 NT_STATUS_OK
ReadX 10449 3136 512 512 NT_STATUS_OK
ReadX 10449 2880 4096 4096 NT_STATUS_OK
ReadX 10449 3264 3072 3072 NT_STATUS_OK
ReadX 10449 320 4096 4096 NT_STATUS_OK
ReadX 10449 1024 4096 4096 NT_STATUS_OK
ReadX 10449 3616 4096 4096 NT_STATUS_OK
ReadX 10449 1939 64 64 NT_STATUS_OK
ReadX 10449 128 248 248 NT_STATUS_OK
ReadX 10449 128 608 608 NT_STATUS_OK
ReadX 10449 2858 1024 1024 NT_STATUS_OK
ReadX 10449 2810 4096 4096 NT_STATUS_OK
ReadX 10449 2826 4096 4096 NT_STATUS_OK
ReadX 10449 2580 2048 2048 NT_STATUS_OK
ReadX 10449 2800 2560 2560 NT_STATUS_OK
ReadX 10449 2100 4096 4096 NT_STATUS_OK
ReadX 10449 2084 4096 4096 NT_STATUS_OK
ReadX 10449 868 4096 4096 NT_STATUS_OK
ReadX 10449 2324 4096 4096 NT_STATUS_OK
ReadX 10449 884 4096 4096 NT_STATUS_OK
ReadX 10449 2604 1024 1024 NT_STATUS_OK
ReadX 10449 580 4096 4096 NT_STATUS_OK
ReadX 10449 596 4096 4096 NT_STATUS_OK
ReadX 10449 2752 4096 4096 NT_STATUS_OK
ReadX 10449 2842 1024 1024 NT_STATUS_OK
ReadX 10449 660 4096 4096 NT_STATUS_OK
ReadX 10449 2720 4096 4096 NT_STATUS_OK
ReadX 10449 2736 4096 4096 NT_STATUS_OK
ReadX 10449 628 4096 4096 NT_STATUS_OK
ReadX 10449 2704 4096 4096 NT_STATUS_OK
ReadX 10449 1556 4096 4096 NT_STATUS_OK
ReadX 10449 576 4096 4096 NT_STATUS_OK
ReadX 10449 3168 1536 1536 NT_STATUS_OK
ReadX 10449 832 4096 4096 NT_STATUS_OK
ReadX 10449 1088 4096 4096 NT_STATUS_OK
ReadX 10449 1344 4096 4096 NT_STATUS_OK
ReadX 10449 1600 4096 4096 NT_STATUS_OK
ReadX 10449 1856 4096 4096 NT_STATUS_OK
ReadX 10449 2112 4096 4096 NT_STATUS_OK
ReadX 10449 1892 4096 4096 NT_STATUS_OK
ReadX 10449 820 4096 4096 NT_STATUS_OK
ReadX 10449 788 4096 4096 NT_STATUS_OK
ReadX 10449 1604 4096 4096 NT_STATUS_OK
ReadX 10449 3648 4096 4096 NT_STATUS_OK
ReadX 10449 2608 4096 4096 NT_STATUS_OK
ReadX 10449 548 4096 4096 NT_STATUS_OK
ReadX 10449 740 4096 4096 NT_STATUS_OK
ReadX 10449 1344 4096 4096 NT_STATUS_OK
ReadX 10449 3392 4096 4096 NT_STATUS_OK
ReadX 10449 3904 4096 4096 NT_STATUS_OK
ReadX 10449 644 4096 4096 NT_STATUS_OK
ReadX 10449 676 4096 4096 NT_STATUS_OK
ReadX 10449 2688 4096 4096 NT_STATUS_OK
ReadX 10449 320 4096 4096 NT_STATUS_OK
ReadX 10449 900 4096 4096 NT_STATUS_OK
ReadX 10449 1908 4096 4096 NT_STATUS_OK
ReadX 10449 852 4096 4096 NT_STATUS_OK
ReadX 10449 724 4096 4096 NT_STATUS_OK
ReadX 10449 2292 4096 4096 NT_STATUS_OK
ReadX 10449 612 4096 4096 NT_STATUS_OK
ReadX 10449 388 4096 4096 NT_STATUS_OK
ReadX 10449 2368 4096 4096 NT_STATUS_OK
ReadX 10449 2624 4096 4096 NT_STATUS_OK
ReadX 10449 500 4096 4096 NT_STATUS_OK
ReadX 10449 356 4096 4096 NT_STATUS_OK
ReadX 10449 1024 4096 4096 NT_STATUS_OK
ReadX 10449 576 4096 4096 NT_STATUS_OK
ReadX 10449 340 4096 4096 NT_STATUS_OK
ReadX 10449 420 4096 4096 NT_STATUS_OK
ReadX 10449 1600 4096 4096 NT_STATUS_OK
ReadX 10449 404 4096 4096 NT_STATUS_OK
ReadX 10449 1428 4096 4096 NT_STATUS_OK
ReadX 10449 2656 4096 4096 NT_STATUS_OK
ReadX 10449 2624 4096 4096 NT_STATUS_OK
ReadX 10449 452 4096 4096 NT_STATUS_OK
ReadX 10449 692 4096 4096 NT_STATUS_OK
ReadX 10449 564 4096 4096 NT_STATUS_OK
ReadX 10449 372 4096 4096 NT_STATUS_OK
ReadX 10449 468 4096 4096 NT_STATUS_OK
ReadX 10449 484 4096 4096 NT_STATUS_OK
ReadX 10449 1088 4096 4096 NT_STATUS_OK
ReadX 10449 1924 4096 4096 NT_STATUS_OK
ReadX 10449 2768 4096 4096 NT_STATUS_OK
ReadX 10449 832 4096 4096 NT_STATUS_OK
ReadX 10449 836 4096 4096 NT_STATUS_OK
ReadX 10449 1856 4096 4096 NT_STATUS_OK
ReadX 10449 2640 4096 4096 NT_STATUS_OK
ReadX 10449 436 4096 4096 NT_STATUS_OK
ReadX 10449 1828 4096 4096 NT_STATUS_OK
ReadX 10449 804 4096 4096 NT_STATUS_OK
ReadX 10449 1860 4096 4096 NT_STATUS_OK
ReadX 10449 1812 4096 4096 NT_STATUS_OK
ReadX 10449 756 4096 4096 NT_STATUS_OK
ReadX 10449 1636 4096 4096 NT_STATUS_OK
ReadX 10449 772 4096 4096 NT_STATUS_OK
ReadX 10449 2036 4096 4096 NT_STATUS_OK
ReadX 10449 1220 4096 4096 NT_STATUS_OK
ReadX 10449 1652 4096 4096 NT_STATUS_OK
ReadX 10449 2588 4096 4096 NT_STATUS_OK
ReadX 10449 916 4096 4096 NT_STATUS_OK
ReadX 10449 260 4096 4096 NT_STATUS_OK
ReadX 10449 932 4096 4096 NT_STATUS_OK
ReadX 10449 2624 4096 4096 NT_STATUS_OK
ReadX 10449 308 4096 4096 NT_STATUS_OK
ReadX 10449 292 4096 4096 NT_STATUS_OK
ReadX 10449 1140 4096 4096 NT_STATUS_OK
ReadX 10449 276 4096 4096 NT_STATUS_OK
ReadX 10449 2020 4096 4096 NT_STATUS_OK
ReadX 10449 2880 4096 4096 NT_STATUS_OK
ReadX 10449 516 4096 4096 NT_STATUS_OK
ReadX 10449 1844 4096 4096 NT_STATUS_OK
ReadX 10449 1124 4096 4096 NT_STATUS_OK
ReadX 10449 3136 4096 4096 NT_STATUS_OK
ReadX 10449 324 4096 4096 NT_STATUS_OK
ReadX 10449 1156 4096 4096 NT_STATUS_OK
ReadX 10449 1172 4096 4096 NT_STATUS_OK
ReadX 10449 2112 4096 4096 NT_STATUS_OK
ReadX 10449 2368 4096 4096 NT_STATUS_OK
ReadX 10449 964 4096 4096 NT_STATUS_OK
ReadX 10449 980 4096 4096 NT_STATUS_OK
ReadX 10449 1012 4096 4096 NT_STATUS_OK
ReadX 10449 532 4096 4096 NT_STATUS_OK
ReadX 10449 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10449 1620 4096 4096 NT_STATUS_OK
ReadX 10449 1604 4096 4096 NT_STATUS_OK
ReadX 10449 2116 4096 4096 NT_STATUS_OK
ReadX 10449 2132 4096 4096 NT_STATUS_OK
ReadX 10449 2148 4096 4096 NT_STATUS_OK
ReadX 10449 2276 4096 4096 NT_STATUS_OK
ReadX 10449 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10471 NT_STATUS_OK
Close 10471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10474 NT_STATUS_OK
QUERY_FILE_INFORMATION 10429 1004 NT_STATUS_OK
Close 10429 NT_STATUS_OK
WriteX 10474 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10474 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10431 1004 NT_STATUS_OK
Close 10431 NT_STATUS_OK
WriteX 10474 0 65536 65536 NT_STATUS_OK
WriteX 10474 65536 64850 64850 NT_STATUS_OK
Close 10474 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10476 NT_STATUS_OK
WriteX 10476 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10476 258 NT_STATUS_OK
ReadX 10449 2068 4096 4096 NT_STATUS_OK
ReadX 10449 1588 4096 4096 NT_STATUS_OK
ReadX 10449 1572 4096 4096 NT_STATUS_OK
WriteX 10476 0 18630 18630 NT_STATUS_OK
Flush 10476 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10449 612 4096 4096 NT_STATUS_OK
ReadX 10449 564 4096 4096 NT_STATUS_OK
ReadX 10449 1876 4096 4096 NT_STATUS_OK
ReadX 10449 628 4096 4096 NT_STATUS_OK
ReadX 10449 740 4096 4096 NT_STATUS_OK
ReadX 10449 724 4096 4096 NT_STATUS_OK
ReadX 10449 644 4096 4096 NT_STATUS_OK
ReadX 10449 2324 4096 4096 NT_STATUS_OK
ReadX 10449 660 4096 4096 NT_STATUS_OK
ReadX 10449 852 4096 4096 NT_STATUS_OK
ReadX 10449 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10449 2368 4096 4096 NT_STATUS_OK
ReadX 10449 1024 4096 4096 NT_STATUS_OK
ReadX 10449 320 4096 4096 NT_STATUS_OK
ReadX 10449 580 4096 4096 NT_STATUS_OK
ReadX 10449 3136 512 512 NT_STATUS_OK
ReadX 10449 2880 4096 4096 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 61440 4096 4096 NT_STATUS_OK
ReadX 10481 126976 4096 4096 NT_STATUS_OK
WriteX 10481 0 65536 65536 NT_STATUS_OK
WriteX 10481 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 61440 4096 4096 NT_STATUS_OK
ReadX 10482 126976 4096 4096 NT_STATUS_OK
ReadX 10482 192512 4096 4096 NT_STATUS_OK
ReadX 10482 258048 4096 4096 NT_STATUS_OK
WriteX 10482 0 65536 65536 NT_STATUS_OK
WriteX 10482 65536 65536 65536 NT_STATUS_OK
WriteX 10482 131072 65536 65536 NT_STATUS_OK
WriteX 10482 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10483 NT_STATUS_OK
ReadX 10483 61440 4096 4096 NT_STATUS_OK
ReadX 10483 126976 4096 4096 NT_STATUS_OK
ReadX 10483 192512 4096 4096 NT_STATUS_OK
ReadX 10483 258048 4096 4096 NT_STATUS_OK
ReadX 10483 323584 4096 4096 NT_STATUS_OK
ReadX 10483 389120 4096 4096 NT_STATUS_OK
ReadX 10483 454656 4096 4096 NT_STATUS_OK
ReadX 10483 520192 4096 4096 NT_STATUS_OK
WriteX 10483 0 65536 65536 NT_STATUS_OK
WriteX 10483 65536 65536 65536 NT_STATUS_OK
WriteX 10483 131072 65536 65536 NT_STATUS_OK
WriteX 10483 196608 65536 65536 NT_STATUS_OK
WriteX 10483 262144 65536 65536 NT_STATUS_OK
WriteX 10483 327680 65536 65536 NT_STATUS_OK
WriteX 10483 393216 65536 65536 NT_STATUS_OK
WriteX 10483 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10485 NT_STATUS_OK
Close 10485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10486 NT_STATUS_OK
WriteX 10486 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10486 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10484 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10484 0 8192 8192 NT_STATUS_OK
Flush 10484 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10488 NT_STATUS_OK
Close 10488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10483 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10491 NT_STATUS_OK
WriteX 10491 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10491 258 NT_STATUS_OK
WriteX 10491 0 62591 62591 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10493 NT_STATUS_OK
Close 10493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10496 NT_STATUS_OK
WriteX 10496 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10496 258 NT_STATUS_OK
WriteX 10496 0 10845 10845 NT_STATUS_OK
Close 10496 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10501 NT_STATUS_OK
WriteX 10501 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10501 258 NT_STATUS_OK
WriteX 10501 0 30118 30118 NT_STATUS_OK
Close 10501 NT_STATUS_OK
WriteX 10484 0 4096 4096 NT_STATUS_OK
WriteX 10486 0 64 64 NT_STATUS_OK
Close 10486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10503 NT_STATUS_OK
ReadX 10503 0 61440 61440 NT_STATUS_OK
ReadX 10503 61440 4096 4096 NT_STATUS_OK
ReadX 10503 65536 61440 61440 NT_STATUS_OK
ReadX 10503 126976 4096 4096 NT_STATUS_OK
ReadX 10503 131072 61440 61440 NT_STATUS_OK
ReadX 10503 192512 4096 4096 NT_STATUS_OK
ReadX 10503 196608 61440 61440 NT_STATUS_OK
ReadX 10503 258048 4096 4096 NT_STATUS_OK
ReadX 10503 262144 61440 61440 NT_STATUS_OK
ReadX 10503 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 61440 61440 NT_STATUS_OK
ReadX 10504 61440 4096 4096 NT_STATUS_OK
ReadX 10504 65536 61440 61440 NT_STATUS_OK
ReadX 10504 126976 4096 4096 NT_STATUS_OK
ReadX 10504 131072 61440 61440 NT_STATUS_OK
ReadX 10504 192512 4096 4096 NT_STATUS_OK
ReadX 10504 196608 61440 61440 NT_STATUS_OK
ReadX 10504 258048 4096 4096 NT_STATUS_OK
ReadX 10504 262144 61440 61440 NT_STATUS_OK
ReadX 10504 323584 4096 4096 NT_STATUS_OK
ReadX 10504 327680 61440 61440 NT_STATUS_OK
ReadX 10504 389120 4096 4096 NT_STATUS_OK
ReadX 10504 393216 61440 61440 NT_STATUS_OK
ReadX 10504 454656 4096 4096 NT_STATUS_OK
ReadX 10504 458752 61440 61440 NT_STATUS_OK
ReadX 10504 520192 4096 4096 NT_STATUS_OK
ReadX 10504 524288 61440 61440 NT_STATUS_OK
ReadX 10504 585728 4096 4096 NT_STATUS_OK
ReadX 10504 589824 61440 61440 NT_STATUS_OK
ReadX 10504 651264 4096 4096 NT_STATUS_OK
ReadX 10504 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 61440 61440 NT_STATUS_OK
ReadX 10505 61440 4096 4096 NT_STATUS_OK
ReadX 10505 65536 61440 61440 NT_STATUS_OK
ReadX 10505 126976 4096 4096 NT_STATUS_OK
ReadX 10505 131072 61440 61440 NT_STATUS_OK
ReadX 10505 192512 4096 4096 NT_STATUS_OK
ReadX 10505 196608 61440 61440 NT_STATUS_OK
ReadX 10505 258048 4096 4096 NT_STATUS_OK
ReadX 10505 262144 61440 61440 NT_STATUS_OK
ReadX 10505 323584 4096 4096 NT_STATUS_OK
ReadX 10505 327680 61440 61440 NT_STATUS_OK
ReadX 10505 389120 4096 4096 NT_STATUS_OK
ReadX 10505 393216 61440 61440 NT_STATUS_OK
ReadX 10505 454656 4096 4096 NT_STATUS_OK
ReadX 10505 458752 61440 61440 NT_STATUS_OK
ReadX 10505 520192 4096 4096 NT_STATUS_OK
ReadX 10505 524288 61440 61440 NT_STATUS_OK
ReadX 10505 585728 4096 4096 NT_STATUS_OK
ReadX 10505 589824 61440 61440 NT_STATUS_OK
ReadX 10505 651264 4096 4096 NT_STATUS_OK
ReadX 10505 655360 61440 61440 NT_STATUS_OK
ReadX 10505 716800 4096 4096 NT_STATUS_OK
ReadX 10505 720896 61440 61440 NT_STATUS_OK
ReadX 10505 782336 4096 4096 NT_STATUS_OK
ReadX 10505 786432 61440 61440 NT_STATUS_OK
ReadX 10505 847872 4096 4096 NT_STATUS_OK
ReadX 10505 851968 61440 61440 NT_STATUS_OK
ReadX 10505 913408 4096 4096 NT_STATUS_OK
ReadX 10505 917504 61440 61440 NT_STATUS_OK
ReadX 10505 978944 4096 4096 NT_STATUS_OK
ReadX 10505 983040 61440 61440 NT_STATUS_OK
ReadX 10505 1044480 4096 4096 NT_STATUS_OK
ReadX 10505 1048576 61440 61440 NT_STATUS_OK
ReadX 10505 1110016 4096 4096 NT_STATUS_OK
ReadX 10505 1114112 61440 61440 NT_STATUS_OK
ReadX 10505 1175552 4096 4096 NT_STATUS_OK
ReadX 10505 1179648 61440 61440 NT_STATUS_OK
ReadX 10505 1241088 4096 4096 NT_STATUS_OK
ReadX 10505 1245184 61440 61440 NT_STATUS_OK
ReadX 10505 1306624 4096 4096 NT_STATUS_OK
ReadX 10505 1310720 61440 61440 NT_STATUS_OK
ReadX 10505 1372160 4096 4096 NT_STATUS_OK
ReadX 10505 1376256 61440 61440 NT_STATUS_OK
ReadX 10505 1437696 4096 4096 NT_STATUS_OK
ReadX 10505 1441792 61440 61440 NT_STATUS_OK
ReadX 10505 1503232 4096 4096 NT_STATUS_OK
ReadX 10505 1507328 61440 61440 NT_STATUS_OK
ReadX 10505 1568768 4096 4096 NT_STATUS_OK
ReadX 10505 1572864 61440 61440 NT_STATUS_OK
ReadX 10505 1634304 4096 4096 NT_STATUS_OK
ReadX 10505 1638400 61440 61440 NT_STATUS_OK
ReadX 10505 1699840 4096 4096 NT_STATUS_OK
ReadX 10505 1703936 61440 61440 NT_STATUS_OK
ReadX 10505 1765376 4096 4096 NT_STATUS_OK
ReadX 10505 1769472 61440 61440 NT_STATUS_OK
ReadX 10505 1830912 4096 4096 NT_STATUS_OK
ReadX 10505 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10506 NT_STATUS_OK
Close 10506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Close 10504 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10510 NT_STATUS_OK
ReadX 10510 0 4096 4096 NT_STATUS_OK
ReadX 10510 4096 4096 4096 NT_STATUS_OK
ReadX 10510 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10511 NT_STATUS_OK
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10513 NT_STATUS_OK
ReadX 10513 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10514 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10515 NT_STATUS_OK
Close 10515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10513 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 8192 8192 NT_STATUS_OK
ReadX 10518 8192 8192 8192 NT_STATUS_OK
ReadX 10518 16384 8192 8192 NT_STATUS_OK
ReadX 10518 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10523 NT_STATUS_OK
WriteX 10523 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10523 258 NT_STATUS_OK
WriteX 10523 0 10438 10438 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10524 NT_STATUS_OK
Close 10524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10526 NT_STATUS_OK
Close 10526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10527 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10528 NT_STATUS_OK
Close 10528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10529 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10532 NT_STATUS_OK
ReadX 10532 0 4096 4096 NT_STATUS_OK
ReadX 10532 4096 4096 4096 NT_STATUS_OK
ReadX 10532 8192 4096 4096 NT_STATUS_OK
ReadX 10532 12288 8192 8192 NT_STATUS_OK
ReadX 10532 20480 8192 8192 NT_STATUS_OK
ReadX 10532 28672 8192 8192 NT_STATUS_OK
ReadX 10532 36864 8192 8192 NT_STATUS_OK
ReadX 10532 45056 8192 8192 NT_STATUS_OK
ReadX 10532 53248 8192 8192 NT_STATUS_OK
ReadX 10532 61440 8192 8192 NT_STATUS_OK
ReadX 10532 69632 8192 8192 NT_STATUS_OK
ReadX 10532 77824 8192 8192 NT_STATUS_OK
ReadX 10532 86016 8192 8192 NT_STATUS_OK
ReadX 10532 94208 8192 8192 NT_STATUS_OK
ReadX 10532 102400 8192 8192 NT_STATUS_OK
ReadX 10532 110592 8192 8192 NT_STATUS_OK
ReadX 10532 118784 8192 8192 NT_STATUS_OK
ReadX 10532 126976 8192 8192 NT_STATUS_OK
ReadX 10532 135168 8192 8192 NT_STATUS_OK
ReadX 10532 143360 8192 8192 NT_STATUS_OK
ReadX 10532 151552 8192 8192 NT_STATUS_OK
ReadX 10532 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10532 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10537 NT_STATUS_OK
WriteX 10537 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10537 258 NT_STATUS_OK
WriteX 10537 0 28489 28489 NT_STATUS_OK
Close 10537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10540 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 8192 8192 NT_STATUS_OK
ReadX 10544 8192 8192 8192 NT_STATUS_OK
ReadX 10544 16384 8192 8192 NT_STATUS_OK
ReadX 10544 24576 8192 8192 NT_STATUS_OK
ReadX 10544 32768 16384 16384 NT_STATUS_OK
ReadX 10544 49152 8192 8192 NT_STATUS_OK
ReadX 10544 57344 8192 8192 NT_STATUS_OK
ReadX 10544 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10546 NT_STATUS_OK
Close 10546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10549 NT_STATUS_OK
WriteX 10549 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10549 258 NT_STATUS_OK
WriteX 10549 0 29253 29253 NT_STATUS_OK
Close 10549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\ROSE.CPT" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10551 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10553 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10556 NT_STATUS_OK
WriteX 10556 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10556 258 NT_STATUS_OK
WriteX 10556 0 30183 30183 NT_STATUS_OK
Close 10556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10557 NT_STATUS_OK
Close 10557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10559 NT_STATUS_OK
WriteX 10559 0 510 510 NT_STATUS_OK
WriteX 10559 510 512 512 NT_STATUS_OK
WriteX 10559 1022 510 510 NT_STATUS_OK
WriteX 10559 1532 510 510 NT_STATUS_OK
WriteX 10559 2042 168 168 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10560 NT_STATUS_OK
Close 10560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 4096 4096 NT_STATUS_OK
WriteX 10562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 61440 4096 4096 NT_STATUS_OK
ReadX 10563 126976 4096 4096 NT_STATUS_OK
WriteX 10563 0 65536 65536 NT_STATUS_OK
WriteX 10563 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 61440 4096 4096 NT_STATUS_OK
ReadX 10564 126976 4096 4096 NT_STATUS_OK
ReadX 10564 192512 4096 4096 NT_STATUS_OK
ReadX 10564 258048 4096 4096 NT_STATUS_OK
WriteX 10564 0 65536 65536 NT_STATUS_OK
WriteX 10564 65536 65536 65536 NT_STATUS_OK
WriteX 10564 131072 65536 65536 NT_STATUS_OK
WriteX 10564 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 61440 4096 4096 NT_STATUS_OK
ReadX 10565 126976 4096 4096 NT_STATUS_OK
ReadX 10565 192512 4096 4096 NT_STATUS_OK
ReadX 10565 258048 4096 4096 NT_STATUS_OK
ReadX 10565 323584 4096 4096 NT_STATUS_OK
ReadX 10565 389120 4096 4096 NT_STATUS_OK
ReadX 10565 454656 4096 4096 NT_STATUS_OK
ReadX 10565 520192 4096 4096 NT_STATUS_OK
WriteX 10565 0 65536 65536 NT_STATUS_OK
WriteX 10565 65536 65536 65536 NT_STATUS_OK
WriteX 10565 131072 65536 65536 NT_STATUS_OK
WriteX 10565 196608 65536 65536 NT_STATUS_OK
WriteX 10565 262144 65536 65536 NT_STATUS_OK
WriteX 10565 327680 65536 65536 NT_STATUS_OK
WriteX 10565 393216 65536 65536 NT_STATUS_OK
WriteX 10565 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10566 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10564 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10568 NT_STATUS_OK
Close 10568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10572 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10577 NT_STATUS_OK
Close 10577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10581 NT_STATUS_OK
Close 10581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10586 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10595 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10600 NT_STATUS_OK
Close 10600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10605 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10615 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10628 NT_STATUS_OK
Close 10628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10634 NT_STATUS_OK
WriteX 10634 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10634 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10634 0 65536 65536 NT_STATUS_OK
WriteX 10634 65536 65536 65536 NT_STATUS_OK
WriteX 10634 131072 65536 65536 NT_STATUS_OK
WriteX 10634 196608 65536 65536 NT_STATUS_OK
WriteX 10634 262144 26634 26634 NT_STATUS_OK
Close 10634 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 28004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
Close 10641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10642 NT_STATUS_OK
ReadX 10642 0 4096 4096 NT_STATUS_OK
ReadX 10642 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10643 NT_STATUS_OK
Close 10643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10642 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10647 NT_STATUS_OK
Close 10647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10650 NT_STATUS_OK
Close 10650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10652 NT_STATUS_OK
Close 10652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10659 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10661 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10670 NT_STATUS_OK
Close 10670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10675 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10680 NT_STATUS_OK
Close 10680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10685 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10690 NT_STATUS_OK
Close 10690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10699 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 101 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10707 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10709 NT_STATUS_OK
Close 10709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 452 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10720 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
Close 10721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 0 4096 4096 NT_STATUS_OK
Close 10722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 28004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 49152 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10733 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 0 4096 4096 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10736 NT_STATUS_OK
ReadX 10736 0 4096 4096 NT_STATUS_OK
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10766 0 4096 4096 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10768 NT_STATUS_OK
ReadX 10768 0 4096 4096 NT_STATUS_OK
ReadX 10768 4096 4096 4096 NT_STATUS_OK
ReadX 10768 8192 4096 4096 NT_STATUS_OK
ReadX 10768 12288 4096 4096 NT_STATUS_OK
ReadX 10768 16384 4096 4096 NT_STATUS_OK
ReadX 10768 20480 4096 4096 NT_STATUS_OK
ReadX 10768 24576 4096 4096 NT_STATUS_OK
ReadX 10768 28672 4096 4096 NT_STATUS_OK
ReadX 10768 32768 4096 4096 NT_STATUS_OK
ReadX 10768 36864 4096 4096 NT_STATUS_OK
ReadX 10768 40960 4096 4096 NT_STATUS_OK
ReadX 10768 45056 4096 4096 NT_STATUS_OK
ReadX 10768 49152 4096 4096 NT_STATUS_OK
ReadX 10768 53248 4096 4096 NT_STATUS_OK
ReadX 10768 57344 4096 4096 NT_STATUS_OK
ReadX 10768 61440 4096 4096 NT_STATUS_OK
ReadX 10768 65536 4096 4096 NT_STATUS_OK
ReadX 10768 69632 4096 4096 NT_STATUS_OK
ReadX 10768 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
WriteX 10768 0 4096 4096 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10769 NT_STATUS_OK
SET_FILE_INFORMATION 10769 1004 NT_STATUS_OK
Close 10769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10770 NT_STATUS_OK
ReadX 10770 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10774 NT_STATUS_OK
WriteX 10774 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 19979 19979 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
QUERY_FILE_INFORMATION 10775 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
SET_FILE_INFORMATION 10775 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10778 NT_STATUS_OK
ReadX 10778 0 4096 4096 NT_STATUS_OK
Close 10778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10779 NT_STATUS_OK
ReadX 10779 0 4096 4096 NT_STATUS_OK
Close 10779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10780 1004 NT_STATUS_OK
WriteX 10780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10781 NT_STATUS_OK
Close 10781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10770 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10783 NT_STATUS_OK
Close 10783 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10786 NT_STATUS_OK
WriteX 10786 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10786 258 NT_STATUS_OK
WriteX 10786 0 65536 65536 NT_STATUS_OK
WriteX 10786 65536 17654 17654 NT_STATUS_OK
Close 10786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
QUERY_FILE_INFORMATION 10787 1004 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
SET_FILE_INFORMATION 10787 1004 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10788 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
Close 10788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
ReadX 10792 4096 4096 4096 NT_STATUS_OK
ReadX 10792 8192 4096 4096 NT_STATUS_OK
ReadX 10792 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10792 16384 4096 4096 NT_STATUS_OK
ReadX 10792 20480 4096 4096 NT_STATUS_OK
ReadX 10792 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
Close 10793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
Close 10794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10795 1004 NT_STATUS_OK
WriteX 10795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10796 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10801 NT_STATUS_OK
WriteX 10801 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 65536 65536 NT_STATUS_OK
WriteX 10801 65536 19490 19490 NT_STATUS_OK
Close 10801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
QUERY_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Flush 10802 NT_STATUS_OK
Close 10802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10803 NT_STATUS_OK
SET_FILE_INFORMATION 10803 1004 NT_STATUS_OK
Close 10803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10807 0 4096 4096 NT_STATUS_OK
Close 10807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10808 NT_STATUS_OK
ReadX 10808 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10809 NT_STATUS_OK
ReadX 10809 0 4096 4096 NT_STATUS_OK
ReadX 10809 4096 4096 4096 NT_STATUS_OK
ReadX 10809 8192 4096 4096 NT_STATUS_OK
ReadX 10809 12288 4096 4096 NT_STATUS_OK
ReadX 10809 16384 4096 4096 NT_STATUS_OK
ReadX 10809 20480 4096 4096 NT_STATUS_OK
ReadX 10809 24576 4096 4096 NT_STATUS_OK
ReadX 10809 28672 4096 4096 NT_STATUS_OK
ReadX 10809 32768 4096 4096 NT_STATUS_OK
ReadX 10809 36864 4096 4096 NT_STATUS_OK
ReadX 10809 40960 4096 4096 NT_STATUS_OK
ReadX 10809 45056 4096 4096 NT_STATUS_OK
ReadX 10809 49152 4096 4096 NT_STATUS_OK
ReadX 10809 53248 4096 4096 NT_STATUS_OK
ReadX 10809 57344 4096 4096 NT_STATUS_OK
ReadX 10809 61440 4096 4096 NT_STATUS_OK
ReadX 10809 65536 4096 4096 NT_STATUS_OK
ReadX 10809 69632 4096 4096 NT_STATUS_OK
ReadX 10809 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Close 10809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10810 NT_STATUS_OK
SET_FILE_INFORMATION 10810 1004 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10812 NT_STATUS_OK
Close 10812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10815 NT_STATUS_OK
WriteX 10815 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10815 258 NT_STATUS_OK
WriteX 10815 0 65536 65536 NT_STATUS_OK
WriteX 10815 65536 8866 8866 NT_STATUS_OK
Close 10815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
WriteX 10816 0 4096 4096 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
WriteX 10816 0 4096 4096 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
Close 10816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10817 NT_STATUS_OK
ReadX 10817 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10818 NT_STATUS_OK
ReadX 10818 0 4096 4096 NT_STATUS_OK
Close 10818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10819 NT_STATUS_OK
ReadX 10819 0 4096 4096 NT_STATUS_OK
Close 10819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10820 1004 NT_STATUS_OK
WriteX 10820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10821 NT_STATUS_OK
Close 10821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10811 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10823 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10826 NT_STATUS_OK
WriteX 10826 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10826 258 NT_STATUS_OK
WriteX 10826 0 65536 65536 NT_STATUS_OK
WriteX 10826 65536 9298 9298 NT_STATUS_OK
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
WriteX 10827 0 4096 4096 NT_STATUS_OK
Flush 10827 NT_STATUS_OK
SET_FILE_INFORMATION 10827 1004 NT_STATUS_OK
WriteX 10827 0 4096 4096 NT_STATUS_OK
Flush 10827 NT_STATUS_OK
Close 10827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10828 NT_STATUS_OK
SET_FILE_INFORMATION 10828 1004 NT_STATUS_OK
Close 10828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10833 0 4096 4096 NT_STATUS_OK
Close 10833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10834 4096 4096 4096 NT_STATUS_OK
ReadX 10834 8192 4096 4096 NT_STATUS_OK
ReadX 10834 12288 4096 4096 NT_STATUS_OK
ReadX 10834 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 4096 4096 NT_STATUS_OK
Close 10835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
Close 10836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10837 1004 NT_STATUS_OK
WriteX 10837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10834 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10840 NT_STATUS_OK
Close 10840 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10843 NT_STATUS_OK
WriteX 10843 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 258 NT_STATUS_OK
WriteX 10843 0 65536 65536 NT_STATUS_OK
WriteX 10843 65536 11540 11540 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
Flush 10844 NT_STATUS_OK
SET_FILE_INFORMATION 10844 1004 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
Flush 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10845 NT_STATUS_OK
SET_FILE_INFORMATION 10845 1004 NT_STATUS_OK
Close 10845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10846 NT_STATUS_OK
ReadX 10846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10847 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 61440 4096 4096 NT_STATUS_OK
ReadX 10849 126976 4096 4096 NT_STATUS_OK
WriteX 10849 0 65536 65536 NT_STATUS_OK
WriteX 10849 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 61440 4096 4096 NT_STATUS_OK
ReadX 10850 126976 4096 4096 NT_STATUS_OK
ReadX 10850 192512 4096 4096 NT_STATUS_OK
ReadX 10850 258048 4096 4096 NT_STATUS_OK
WriteX 10850 0 65536 65536 NT_STATUS_OK
WriteX 10850 65536 65536 65536 NT_STATUS_OK
WriteX 10850 131072 65536 65536 NT_STATUS_OK
WriteX 10850 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 61440 4096 4096 NT_STATUS_OK
ReadX 10851 126976 4096 4096 NT_STATUS_OK
ReadX 10851 192512 4096 4096 NT_STATUS_OK
ReadX 10851 258048 4096 4096 NT_STATUS_OK
ReadX 10851 323584 4096 4096 NT_STATUS_OK
ReadX 10851 389120 4096 4096 NT_STATUS_OK
ReadX 10851 454656 4096 4096 NT_STATUS_OK
ReadX 10851 520192 4096 4096 NT_STATUS_OK
WriteX 10851 0 65536 65536 NT_STATUS_OK
WriteX 10851 65536 65536 65536 NT_STATUS_OK
WriteX 10851 131072 65536 65536 NT_STATUS_OK
WriteX 10851 196608 65536 65536 NT_STATUS_OK
WriteX 10851 262144 65536 65536 NT_STATUS_OK
WriteX 10851 327680 65536 65536 NT_STATUS_OK
WriteX 10851 393216 65536 65536 NT_STATUS_OK
WriteX 10851 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
ReadX 10852 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10853 NT_STATUS_OK
WriteX 10853 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10853 258 NT_STATUS_OK
WriteX 10853 0 53 53 NT_STATUS_OK
Close 10853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10854 NT_STATUS_OK
Close 10854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Close 10792 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10852 8192 4096 4096 NT_STATUS_OK
ReadX 10852 12288 4096 4096 NT_STATUS_OK
WriteX 10856 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10856 258 NT_STATUS_OK
ReadX 10852 16384 4096 4096 NT_STATUS_OK
ReadX 10852 20480 4096 4096 NT_STATUS_OK
WriteX 10856 0 15360 15360 NT_STATUS_OK
Close 10856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10857 NT_STATUS_OK
ReadX 10857 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10857 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10857 1004 NT_STATUS_OK
WriteX 10857 0 4096 4096 NT_STATUS_OK
Close 10857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10858 NT_STATUS_OK
Close 10858 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10860 NT_STATUS_OK
ReadX 10860 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10861 NT_STATUS_OK
Close 10861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10860 4096 4096 4096 NT_STATUS_OK
ReadX 10860 8192 4096 4096 NT_STATUS_OK
ReadX 10860 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10863 NT_STATUS_OK
ReadX 10863 0 4096 4096 NT_STATUS_OK
ReadX 10863 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
ReadX 10864 4096 4096 4096 NT_STATUS_OK
ReadX 10864 8192 4096 4096 NT_STATUS_OK
Close 10863 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10865 NT_STATUS_OK
WriteX 10865 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10865 258 NT_STATUS_OK
WriteX 10865 0 15360 15360 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10866 NT_STATUS_OK
ReadX 10866 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10866 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10866 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10867 NT_STATUS_OK
Close 10867 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10869 NT_STATUS_OK
ReadX 10869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10870 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
Close 10870 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Close 10866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10871 NT_STATUS_OK
Close 10871 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
ReadX 10873 4096 4096 4096 NT_STATUS_OK
ReadX 10873 8192 4096 4096 NT_STATUS_OK
ReadX 10873 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10873 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10873 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10875 NT_STATUS_OK
WriteX 10875 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10875 258 NT_STATUS_OK
WriteX 10875 0 53 53 NT_STATUS_OK
Close 10875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10874 4096 4096 4096 NT_STATUS_OK
ReadX 10874 8192 4096 4096 NT_STATUS_OK
ReadX 10874 12288 4096 4096 NT_STATUS_OK
WriteX 10878 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10878 258 NT_STATUS_OK
WriteX 10878 0 12006 12006 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10879 NT_STATUS_OK
ReadX 10879 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10879 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10879 1004 NT_STATUS_OK
WriteX 10879 0 4096 4096 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10880 NT_STATUS_OK
Close 10880 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10883 NT_STATUS_OK
Close 10883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10882 4096 4096 4096 NT_STATUS_OK
ReadX 10882 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10885 NT_STATUS_OK
WriteX 10885 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 258 NT_STATUS_OK
WriteX 10885 0 11991 11991 NT_STATUS_OK
Close 10885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10886 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10886 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10890 NT_STATUS_OK
SET_FILE_INFORMATION 10890 1004 NT_STATUS_OK
Close 10890 NT_STATUS_OK
WriteX 10886 0 4096 4096 NT_STATUS_OK
Close 10886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10891 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10894 NT_STATUS_OK
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10893 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
ReadX 10893 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
WriteX 10893 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10893 1004 NT_STATUS_OK
Close 10869 NT_STATUS_OK
WriteX 10873 0 19054 19054 NT_STATUS_OK
WriteX 10893 0 12288 12288 NT_STATUS_OK
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10896 NT_STATUS_OK
Close 10896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10873 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10900 NT_STATUS_OK
ReadX 10900 0 61440 61440 NT_STATUS_OK
ReadX 10900 61440 4096 4096 NT_STATUS_OK
ReadX 10900 65536 61440 61440 NT_STATUS_OK
ReadX 10900 126976 4096 4096 NT_STATUS_OK
ReadX 10900 131072 61440 61440 NT_STATUS_OK
ReadX 10900 192512 4096 4096 NT_STATUS_OK
ReadX 10900 196608 61440 61440 NT_STATUS_OK
ReadX 10900 258048 4096 4096 NT_STATUS_OK
ReadX 10900 262144 61440 61440 NT_STATUS_OK
ReadX 10900 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 61440 61440 NT_STATUS_OK
ReadX 10901 61440 4096 4096 NT_STATUS_OK
ReadX 10901 65536 61440 61440 NT_STATUS_OK
ReadX 10901 126976 4096 4096 NT_STATUS_OK
ReadX 10901 131072 61440 61440 NT_STATUS_OK
ReadX 10901 192512 4096 4096 NT_STATUS_OK
ReadX 10901 196608 61440 61440 NT_STATUS_OK
ReadX 10901 258048 4096 4096 NT_STATUS_OK
ReadX 10901 262144 61440 61440 NT_STATUS_OK
ReadX 10901 323584 4096 4096 NT_STATUS_OK
ReadX 10901 327680 61440 61440 NT_STATUS_OK
ReadX 10901 389120 4096 4096 NT_STATUS_OK
ReadX 10901 393216 61440 61440 NT_STATUS_OK
ReadX 10901 454656 4096 4096 NT_STATUS_OK
ReadX 10901 458752 61440 61440 NT_STATUS_OK
ReadX 10901 520192 4096 4096 NT_STATUS_OK
ReadX 10901 524288 61440 61440 NT_STATUS_OK
ReadX 10901 585728 4096 4096 NT_STATUS_OK
ReadX 10901 589824 61440 61440 NT_STATUS_OK
ReadX 10901 651264 4096 4096 NT_STATUS_OK
ReadX 10901 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10902 NT_STATUS_OK
ReadX 10902 0 61440 61440 NT_STATUS_OK
ReadX 10902 61440 4096 4096 NT_STATUS_OK
ReadX 10902 65536 61440 61440 NT_STATUS_OK
ReadX 10902 126976 4096 4096 NT_STATUS_OK
ReadX 10902 131072 61440 61440 NT_STATUS_OK
ReadX 10902 192512 4096 4096 NT_STATUS_OK
ReadX 10902 196608 61440 61440 NT_STATUS_OK
ReadX 10902 258048 4096 4096 NT_STATUS_OK
ReadX 10902 262144 61440 61440 NT_STATUS_OK
ReadX 10902 323584 4096 4096 NT_STATUS_OK
ReadX 10902 327680 61440 61440 NT_STATUS_OK
ReadX 10902 389120 4096 4096 NT_STATUS_OK
ReadX 10902 393216 61440 61440 NT_STATUS_OK
ReadX 10902 454656 4096 4096 NT_STATUS_OK
ReadX 10902 458752 61440 61440 NT_STATUS_OK
ReadX 10902 520192 4096 4096 NT_STATUS_OK
ReadX 10902 524288 61440 61440 NT_STATUS_OK
ReadX 10902 585728 4096 4096 NT_STATUS_OK
ReadX 10902 589824 61440 61440 NT_STATUS_OK
ReadX 10902 651264 4096 4096 NT_STATUS_OK
ReadX 10902 655360 61440 61440 NT_STATUS_OK
ReadX 10902 716800 4096 4096 NT_STATUS_OK
ReadX 10902 720896 61440 61440 NT_STATUS_OK
ReadX 10902 782336 4096 4096 NT_STATUS_OK
ReadX 10902 786432 61440 61440 NT_STATUS_OK
ReadX 10902 847872 4096 4096 NT_STATUS_OK
ReadX 10902 851968 61440 61440 NT_STATUS_OK
ReadX 10902 913408 4096 4096 NT_STATUS_OK
ReadX 10902 917504 61440 61440 NT_STATUS_OK
ReadX 10902 978944 4096 4096 NT_STATUS_OK
ReadX 10902 983040 61440 61440 NT_STATUS_OK
ReadX 10902 1044480 4096 4096 NT_STATUS_OK
ReadX 10902 1048576 61440 61440 NT_STATUS_OK
ReadX 10902 1110016 4096 4096 NT_STATUS_OK
ReadX 10902 1114112 61440 61440 NT_STATUS_OK
ReadX 10902 1175552 4096 4096 NT_STATUS_OK
ReadX 10902 1179648 61440 61440 NT_STATUS_OK
ReadX 10902 1241088 4096 4096 NT_STATUS_OK
ReadX 10902 1245184 61440 61440 NT_STATUS_OK
ReadX 10902 1306624 4096 4096 NT_STATUS_OK
ReadX 10902 1310720 61440 61440 NT_STATUS_OK
ReadX 10902 1372160 4096 4096 NT_STATUS_OK
ReadX 10902 1376256 61440 61440 NT_STATUS_OK
ReadX 10902 1437696 4096 4096 NT_STATUS_OK
ReadX 10902 1441792 61440 61440 NT_STATUS_OK
ReadX 10902 1503232 4096 4096 NT_STATUS_OK
ReadX 10902 1507328 61440 61440 NT_STATUS_OK
ReadX 10902 1568768 4096 4096 NT_STATUS_OK
ReadX 10902 1572864 61440 61440 NT_STATUS_OK
ReadX 10902 1634304 4096 4096 NT_STATUS_OK
ReadX 10902 1638400 61440 61440 NT_STATUS_OK
ReadX 10902 1699840 4096 4096 NT_STATUS_OK
ReadX 10902 1703936 61440 61440 NT_STATUS_OK
ReadX 10902 1765376 4096 4096 NT_STATUS_OK
ReadX 10902 1769472 61440 61440 NT_STATUS_OK
ReadX 10902 1830912 4096 4096 NT_STATUS_OK
ReadX 10902 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10905 NT_STATUS_OK
ReadX 10905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10909 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 1004 NT_STATUS_OK
WriteX 10909 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10910 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10911 NT_STATUS_OK
WriteX 10911 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 258 NT_STATUS_OK
WriteX 10911 0 491 491 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10912 NT_STATUS_OK
ReadX 10912 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10909 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10914 NT_STATUS_OK
Close 10914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10915 NT_STATUS_OK
WriteX 10915 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10915 258 NT_STATUS_OK
WriteX 10915 0 543 543 NT_STATUS_OK
Close 10915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10916 NT_STATUS_OK
ReadX 10916 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Close 10916 NT_STATUS_OK
Close 10904 NT_STATUS_OK
Close 10905 NT_STATUS_OK
Close 10906 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10929 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 1004 NT_STATUS_OK
WriteX 10929 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
WriteX 10929 0 2048 2048 NT_STATUS_OK
Close 10929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
Flush 10930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10935 NT_STATUS_OK
WriteX 10935 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10935 258 NT_STATUS_OK
WriteX 10935 0 2048 2048 NT_STATUS_OK
Close 10935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10940 NT_STATUS_OK
Close 10940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10941 NT_STATUS_OK
WriteX 10941 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10941 258 NT_STATUS_OK
WriteX 10941 0 2048 2048 NT_STATUS_OK
Close 10941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 2048 2048 NT_STATUS_OK
ReadX 10920 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 2088 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10936 0 4096 4096 NT_STATUS_OK
WriteX 10920 0 8192 8192 NT_STATUS_OK
WriteX 10921 0 4096 4096 NT_STATUS_OK
WriteX 10922 0 4096 4096 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10946 NT_STATUS_OK
QUERY_FILE_INFORMATION 10946 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10945 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10951 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10958 NT_STATUS_OK
ReadX 10958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10959 NT_STATUS_OK
ReadX 10959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10966 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 1004 NT_STATUS_OK
WriteX 10966 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
WriteX 10966 0 2048 2048 NT_STATUS_OK
Close 10966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10967 NT_STATUS_OK
ReadX 10967 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10969 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10974 NT_STATUS_OK
QUERY_FILE_INFORMATION 10974 1004 NT_STATUS_OK
WriteX 10974 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10974 258 NT_STATUS_OK
WriteX 10974 0 2048 2048 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10967 0 4096 4096 NT_STATUS_OK
Flush 10967 NT_STATUS_OK
WriteX 10975 0 4096 4096 NT_STATUS_OK
Flush 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10967 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10975 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10969 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10977 NT_STATUS_OK
WriteX 10977 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10977 258 NT_STATUS_OK
WriteX 10977 0 4096 4096 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10979 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10980 NT_STATUS_OK
WriteX 10980 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10980 258 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
Close 10980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10981 0 4096 4096 NT_STATUS_OK
Close 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Close 10969 NT_STATUS_OK
Close 10958 NT_STATUS_OK
Close 10959 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Close 10956 NT_STATUS_OK
Close 10949 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10984 NT_STATUS_OK
Close 10984 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10988 NT_STATUS_OK
WriteX 10988 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10988 258 NT_STATUS_OK
WriteX 10988 0 2048 2048 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11003 NT_STATUS_OK
QUERY_FILE_INFORMATION 11003 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10992 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11011 NT_STATUS_OK
ReadX 11011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11012 NT_STATUS_OK
ReadX 11012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11013 NT_STATUS_OK
ReadX 11013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11025 NT_STATUS_OK
QUERY_FILE_INFORMATION 11025 1004 NT_STATUS_OK
WriteX 11025 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11025 258 NT_STATUS_OK
WriteX 11025 0 2048 2048 NT_STATUS_OK
Close 11025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11037 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 1004 NT_STATUS_OK
WriteX 11037 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 258 NT_STATUS_OK
WriteX 11037 0 2048 2048 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11038 NT_STATUS_OK
ReadX 11038 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11040 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11045 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 1004 NT_STATUS_OK
WriteX 11045 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 258 NT_STATUS_OK
WriteX 11045 0 2048 2048 NT_STATUS_OK
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11026 0 4096 4096 NT_STATUS_OK
Flush 11026 NT_STATUS_OK
WriteX 11038 0 4096 4096 NT_STATUS_OK
Flush 11038 NT_STATUS_OK
WriteX 11046 0 4096 4096 NT_STATUS_OK
Flush 11046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11026 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11028 4096 16384 16384 NT_STATUS_OK
ReadX 11008 4096 16384 16384 NT_STATUS_OK
ReadX 11040 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11048 NT_STATUS_OK
ReadX 11048 0 2048 2048 NT_STATUS_OK
WriteX 11048 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11049 NT_STATUS_OK
QUERY_FILE_INFORMATION 11049 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11012 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Close 11029 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11040 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 11011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11051 NT_STATUS_OK
QUERY_FILE_INFORMATION 11051 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11053 NT_STATUS_OK
QUERY_FILE_INFORMATION 11053 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11057 NT_STATUS_OK
ReadX 11057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11056 4096 16384 16384 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
WriteX 11059 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11073 NT_STATUS_OK
ReadX 11073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11075 NT_STATUS_OK
ReadX 11075 0 8192 8192 NT_STATUS_OK
ReadX 11062 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11076 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11076 0 4096 4096 NT_STATUS_OK
ReadX 11076 4096 4096 4096 NT_STATUS_OK
ReadX 11076 8192 4096 4096 NT_STATUS_OK
WriteX 11062 0 4096 4096 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
ReadX 11077 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
WriteX 11059 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11082 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 1004 NT_STATUS_OK
WriteX 11082 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 258 NT_STATUS_OK
WriteX 11082 0 2048 2048 NT_STATUS_OK
Close 11082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11083 NT_STATUS_OK
ReadX 11083 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11084 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11085 NT_STATUS_OK
ReadX 11085 0 4096 4096 NT_STATUS_OK
ReadX 11085 4096 4096 4096 NT_STATUS_OK
WriteX 11085 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11086 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 4096 4096 NT_STATUS_OK
ReadX 11087 4096 4096 4096 NT_STATUS_OK
WriteX 11087 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11088 NT_STATUS_OK
QUERY_FILE_INFORMATION 11088 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Close 11068 NT_STATUS_OK
Close 11073 NT_STATUS_OK
Close 11069 NT_STATUS_OK
Close 11070 NT_STATUS_OK
Close 11071 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Close 11067 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Close 11077 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11090 0 4096 4096 NT_STATUS_OK
ReadX 11090 4096 4096 4096 NT_STATUS_OK
ReadX 11090 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11091 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11098 NT_STATUS_OK
ReadX 11098 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 4096 4096 NT_STATUS_OK
ReadX 11091 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11107 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11108 NT_STATUS_OK
QUERY_FILE_INFORMATION 11108 1004 NT_STATUS_OK
WriteX 11108 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11108 258 NT_STATUS_OK
WriteX 11108 0 2048 2048 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11109 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11113 NT_STATUS_OK
Close 11113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11114 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1004 NT_STATUS_OK
WriteX 11114 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 258 NT_STATUS_OK
WriteX 11114 0 2048 2048 NT_STATUS_OK
Close 11114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11115 NT_STATUS_OK
ReadX 11115 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11115 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11098 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11116 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11097 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11095 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Close 11099 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11118 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 61440 4096 4096 NT_STATUS_OK
ReadX 11120 126976 4096 4096 NT_STATUS_OK
WriteX 11120 0 65536 65536 NT_STATUS_OK
WriteX 11120 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 61440 4096 4096 NT_STATUS_OK
ReadX 11121 126976 4096 4096 NT_STATUS_OK
ReadX 11121 192512 4096 4096 NT_STATUS_OK
ReadX 11121 258048 4096 4096 NT_STATUS_OK
WriteX 11121 0 65536 65536 NT_STATUS_OK
WriteX 11121 65536 65536 65536 NT_STATUS_OK
WriteX 11121 131072 65536 65536 NT_STATUS_OK
WriteX 11121 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 61440 4096 4096 NT_STATUS_OK
ReadX 11122 126976 4096 4096 NT_STATUS_OK
ReadX 11122 192512 4096 4096 NT_STATUS_OK
ReadX 11122 258048 4096 4096 NT_STATUS_OK
ReadX 11122 323584 4096 4096 NT_STATUS_OK
ReadX 11122 389120 4096 4096 NT_STATUS_OK
ReadX 11122 454656 4096 4096 NT_STATUS_OK
ReadX 11122 520192 4096 4096 NT_STATUS_OK
WriteX 11122 0 65536 65536 NT_STATUS_OK
WriteX 11122 65536 65536 65536 NT_STATUS_OK
WriteX 11122 131072 65536 65536 NT_STATUS_OK
WriteX 11122 196608 65536 65536 NT_STATUS_OK
WriteX 11122 262144 65536 65536 NT_STATUS_OK
WriteX 11122 327680 65536 65536 NT_STATUS_OK
WriteX 11122 393216 65536 65536 NT_STATUS_OK
WriteX 11122 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11123 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11123 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11123 8192 4096 4096 NT_STATUS_OK
ReadX 11123 12288 4096 4096 NT_STATUS_OK
ReadX 11123 16384 4096 4096 NT_STATUS_OK
ReadX 11123 20480 4096 4096 NT_STATUS_OK
ReadX 11123 24576 4096 4096 NT_STATUS_OK
ReadX 11123 28672 4096 4096 NT_STATUS_OK
ReadX 11123 32768 4096 4096 NT_STATUS_OK
ReadX 11123 36864 4096 4096 NT_STATUS_OK
ReadX 11123 40960 4096 4096 NT_STATUS_OK
ReadX 11123 45056 4096 4096 NT_STATUS_OK
ReadX 11123 49152 4096 4096 NT_STATUS_OK
ReadX 11123 53248 4096 4096 NT_STATUS_OK
ReadX 11123 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11123 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11124 NT_STATUS_OK
Close 11124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11122 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11126 NT_STATUS_OK
WriteX 11126 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11126 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11126 1004 NT_STATUS_OK
WriteX 11126 0 57088 57088 NT_STATUS_OK
WriteX 11126 0 4096 4096 NT_STATUS_OK
Flush 11126 NT_STATUS_OK
Close 11123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11127 NT_STATUS_OK
SET_FILE_INFORMATION 11127 1004 NT_STATUS_OK
Close 11127 NT_STATUS_OK
SET_FILE_INFORMATION 11126 1004 NT_STATUS_OK
WriteX 11126 0 4096 4096 NT_STATUS_OK
Close 11126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11130 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11131 NT_STATUS_OK
WriteX 11131 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11131 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11131 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11131 1004 NT_STATUS_OK
WriteX 11131 0 51456 51456 NT_STATUS_OK
WriteX 11131 0 4096 4096 NT_STATUS_OK
Flush 11131 NT_STATUS_OK
SET_FILE_INFORMATION 11131 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11131 1004 NT_STATUS_OK
WriteX 11131 0 4096 4096 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Close 11130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11133 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11135 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11140 NT_STATUS_OK
WriteX 11140 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11140 258 NT_STATUS_OK
WriteX 11140 0 53077 53077 NT_STATUS_OK
Close 11140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11141 NT_STATUS_OK
WriteX 11141 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11141 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
WriteX 11141 0 65536 65536 NT_STATUS_OK
WriteX 11141 65536 1856 1856 NT_STATUS_OK
WriteX 11141 0 4096 4096 NT_STATUS_OK
Flush 11141 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
WriteX 11141 0 4096 4096 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Close 11135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11143 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11150 NT_STATUS_OK
WriteX 11150 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11150 258 NT_STATUS_OK
WriteX 11150 0 7983 7983 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11152 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11155 NT_STATUS_OK
WriteX 11155 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11155 258 NT_STATUS_OK
WriteX 11155 0 65536 65536 NT_STATUS_OK
WriteX 11155 65536 65536 65536 NT_STATUS_OK
WriteX 11155 131072 65536 65536 NT_STATUS_OK
WriteX 11155 196608 65536 65536 NT_STATUS_OK
WriteX 11155 262144 65536 65536 NT_STATUS_OK
WriteX 11155 327680 65536 65536 NT_STATUS_OK
WriteX 11155 393216 65536 65536 NT_STATUS_OK
WriteX 11155 458752 46731 46731 NT_STATUS_OK
Close 11155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11156 NT_STATUS_OK
WriteX 11156 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11156 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11145 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11156 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
WriteX 11156 0 65536 65536 NT_STATUS_OK
WriteX 11156 65536 22848 22848 NT_STATUS_OK
WriteX 11156 0 4096 4096 NT_STATUS_OK
Flush 11156 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11156 1004 NT_STATUS_OK
WriteX 11156 0 4096 4096 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Close 11145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11158 NT_STATUS_OK
Close 11158 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11160 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11161 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11161 1004 NT_STATUS_OK
ReadX 11161 8192 4096 4096 NT_STATUS_OK
ReadX 11161 12288 4096 4096 NT_STATUS_OK
ReadX 11161 16384 4096 4096 NT_STATUS_OK
ReadX 11161 20480 4096 4096 NT_STATUS_OK
ReadX 11161 24576 4096 4096 NT_STATUS_OK
ReadX 11161 28672 4096 4096 NT_STATUS_OK
ReadX 11161 32768 4096 4096 NT_STATUS_OK
ReadX 11161 36864 4096 4096 NT_STATUS_OK
ReadX 11161 40960 4096 4096 NT_STATUS_OK
ReadX 11161 45056 4096 4096 NT_STATUS_OK
ReadX 11161 49152 4096 4096 NT_STATUS_OK
ReadX 11161 53248 4096 4096 NT_STATUS_OK
ReadX 11161 57344 4096 4096 NT_STATUS_OK
ReadX 11161 61440 4096 4096 NT_STATUS_OK
ReadX 11161 65536 4096 4096 NT_STATUS_OK
ReadX 11161 69632 4096 4096 NT_STATUS_OK
ReadX 11161 73728 4096 4096 NT_STATUS_OK
ReadX 11161 77824 4096 4096 NT_STATUS_OK
ReadX 11161 81920 4096 4096 NT_STATUS_OK
ReadX 11161 86016 4096 4096 NT_STATUS_OK
ReadX 11161 90112 4096 4096 NT_STATUS_OK
ReadX 11161 94208 4096 4096 NT_STATUS_OK
ReadX 11161 98304 4096 4096 NT_STATUS_OK
ReadX 11161 102400 4096 4096 NT_STATUS_OK
ReadX 11161 106496 4096 4096 NT_STATUS_OK
ReadX 11161 110592 4096 4096 NT_STATUS_OK
ReadX 11161 114688 4096 4096 NT_STATUS_OK
ReadX 11161 118784 4096 4096 NT_STATUS_OK
ReadX 11161 122880 4096 4096 NT_STATUS_OK
ReadX 11161 126976 4096 4096 NT_STATUS_OK
ReadX 11161 131072 4096 4096 NT_STATUS_OK
ReadX 11161 135168 4096 4096 NT_STATUS_OK
ReadX 11161 139264 4096 4096 NT_STATUS_OK
ReadX 11161 143360 4096 4096 NT_STATUS_OK
ReadX 11161 147456 4096 4096 NT_STATUS_OK
ReadX 11161 151552 4096 4096 NT_STATUS_OK
ReadX 11161 155648 4096 4096 NT_STATUS_OK
ReadX 11161 159744 4096 4096 NT_STATUS_OK
ReadX 11161 163840 4096 4096 NT_STATUS_OK
ReadX 11161 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11161 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11164 NT_STATUS_OK
WriteX 11164 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11164 258 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11165 NT_STATUS_OK
SET_FILE_INFORMATION 11165 1004 NT_STATUS_OK
Close 11165 NT_STATUS_OK
WriteX 11164 0 42388 42388 NT_STATUS_OK
Close 11164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11166 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
ReadX 11168 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11169 NT_STATUS_OK
WriteX 11169 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11169 258 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
WriteX 11169 0 42652 42652 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Close 11168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11173 NT_STATUS_OK
ReadX 11173 0 4096 4096 NT_STATUS_OK
ReadX 11173 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11175 NT_STATUS_OK
Close 11175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11178 NT_STATUS_OK
WriteX 11178 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11178 258 NT_STATUS_OK
WriteX 11178 0 65536 65536 NT_STATUS_OK
WriteX 11178 65536 49 49 NT_STATUS_OK
Close 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 61440 61440 NT_STATUS_OK
ReadX 11179 61440 4096 4096 NT_STATUS_OK
ReadX 11179 65536 61440 61440 NT_STATUS_OK
ReadX 11179 126976 4096 4096 NT_STATUS_OK
ReadX 11179 131072 61440 61440 NT_STATUS_OK
ReadX 11179 192512 4096 4096 NT_STATUS_OK
ReadX 11179 196608 61440 61440 NT_STATUS_OK
ReadX 11179 258048 4096 4096 NT_STATUS_OK
ReadX 11179 262144 61440 61440 NT_STATUS_OK
ReadX 11179 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 61440 61440 NT_STATUS_OK
ReadX 11180 61440 4096 4096 NT_STATUS_OK
ReadX 11180 65536 61440 61440 NT_STATUS_OK
ReadX 11180 126976 4096 4096 NT_STATUS_OK
ReadX 11180 131072 61440 61440 NT_STATUS_OK
ReadX 11180 192512 4096 4096 NT_STATUS_OK
ReadX 11180 196608 61440 61440 NT_STATUS_OK
ReadX 11180 258048 4096 4096 NT_STATUS_OK
ReadX 11180 262144 61440 61440 NT_STATUS_OK
ReadX 11180 323584 4096 4096 NT_STATUS_OK
ReadX 11180 327680 61440 61440 NT_STATUS_OK
ReadX 11180 389120 4096 4096 NT_STATUS_OK
ReadX 11180 393216 61440 61440 NT_STATUS_OK
ReadX 11180 454656 4096 4096 NT_STATUS_OK
ReadX 11180 458752 61440 61440 NT_STATUS_OK
ReadX 11180 520192 4096 4096 NT_STATUS_OK
ReadX 11180 524288 61440 61440 NT_STATUS_OK
ReadX 11180 585728 4096 4096 NT_STATUS_OK
ReadX 11180 589824 61440 61440 NT_STATUS_OK
ReadX 11180 651264 4096 4096 NT_STATUS_OK
ReadX 11180 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 61440 61440 NT_STATUS_OK
ReadX 11181 61440 4096 4096 NT_STATUS_OK
ReadX 11181 65536 61440 61440 NT_STATUS_OK
ReadX 11181 126976 4096 4096 NT_STATUS_OK
ReadX 11181 131072 61440 61440 NT_STATUS_OK
ReadX 11181 192512 4096 4096 NT_STATUS_OK
ReadX 11181 196608 61440 61440 NT_STATUS_OK
ReadX 11181 258048 4096 4096 NT_STATUS_OK
ReadX 11181 262144 61440 61440 NT_STATUS_OK
ReadX 11181 323584 4096 4096 NT_STATUS_OK
ReadX 11181 327680 61440 61440 NT_STATUS_OK
ReadX 11181 389120 4096 4096 NT_STATUS_OK
ReadX 11181 393216 61440 61440 NT_STATUS_OK
ReadX 11181 454656 4096 4096 NT_STATUS_OK
ReadX 11181 458752 61440 61440 NT_STATUS_OK
ReadX 11181 520192 4096 4096 NT_STATUS_OK
ReadX 11181 524288 61440 61440 NT_STATUS_OK
ReadX 11181 585728 4096 4096 NT_STATUS_OK
ReadX 11181 589824 61440 61440 NT_STATUS_OK
ReadX 11181 651264 4096 4096 NT_STATUS_OK
ReadX 11181 655360 61440 61440 NT_STATUS_OK
ReadX 11181 716800 4096 4096 NT_STATUS_OK
ReadX 11181 720896 61440 61440 NT_STATUS_OK
ReadX 11181 782336 4096 4096 NT_STATUS_OK
ReadX 11181 786432 61440 61440 NT_STATUS_OK
ReadX 11181 847872 4096 4096 NT_STATUS_OK
ReadX 11181 851968 61440 61440 NT_STATUS_OK
ReadX 11181 913408 4096 4096 NT_STATUS_OK
ReadX 11181 917504 61440 61440 NT_STATUS_OK
ReadX 11181 978944 4096 4096 NT_STATUS_OK
ReadX 11181 983040 61440 61440 NT_STATUS_OK
ReadX 11181 1044480 4096 4096 NT_STATUS_OK
ReadX 11181 1048576 61440 61440 NT_STATUS_OK
ReadX 11181 1110016 4096 4096 NT_STATUS_OK
ReadX 11181 1114112 61440 61440 NT_STATUS_OK
ReadX 11181 1175552 4096 4096 NT_STATUS_OK
ReadX 11181 1179648 61440 61440 NT_STATUS_OK
ReadX 11181 1241088 4096 4096 NT_STATUS_OK
ReadX 11181 1245184 61440 61440 NT_STATUS_OK
ReadX 11181 1306624 4096 4096 NT_STATUS_OK
ReadX 11181 1310720 61440 61440 NT_STATUS_OK
ReadX 11181 1372160 4096 4096 NT_STATUS_OK
ReadX 11181 1376256 61440 61440 NT_STATUS_OK
ReadX 11181 1437696 4096 4096 NT_STATUS_OK
ReadX 11181 1441792 61440 61440 NT_STATUS_OK
ReadX 11181 1503232 4096 4096 NT_STATUS_OK
ReadX 11181 1507328 61440 61440 NT_STATUS_OK
ReadX 11181 1568768 4096 4096 NT_STATUS_OK
ReadX 11181 1572864 61440 61440 NT_STATUS_OK
ReadX 11181 1634304 4096 4096 NT_STATUS_OK
ReadX 11181 1638400 61440 61440 NT_STATUS_OK
ReadX 11181 1699840 4096 4096 NT_STATUS_OK
ReadX 11181 1703936 61440 61440 NT_STATUS_OK
ReadX 11181 1765376 4096 4096 NT_STATUS_OK
ReadX 11181 1769472 61440 61440 NT_STATUS_OK
ReadX 11181 1830912 4096 4096 NT_STATUS_OK
ReadX 11181 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11183 NT_STATUS_OK
QUERY_FILE_INFORMATION 11183 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11183 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11183 1005 NT_STATUS_OK
ReadX 11183 2156 24 24 NT_STATUS_OK
ReadX 11183 2139 276 276 NT_STATUS_OK
ReadX 11183 2136 14 14 NT_STATUS_OK
ReadX 11183 2136 7 7 NT_STATUS_OK
ReadX 11183 2138 12 12 NT_STATUS_OK
ReadX 11183 2137 8 8 NT_STATUS_OK
ReadX 11183 2135 15 15 NT_STATUS_OK
ReadX 11183 0 16 16 NT_STATUS_OK
ReadX 11183 16 2048 2048 NT_STATUS_OK
ReadX 11183 2064 2048 2048 NT_STATUS_OK
ReadX 11183 257 2048 2048 NT_STATUS_OK
ReadX 11183 385 2048 2048 NT_STATUS_OK
ReadX 11183 513 2048 2048 NT_STATUS_OK
ReadX 11183 641 2048 2048 NT_STATUS_OK
ReadX 11183 769 2048 2048 NT_STATUS_OK
ReadX 11183 897 2048 2048 NT_STATUS_OK
ReadX 11183 1025 2048 2048 NT_STATUS_OK
ReadX 11183 1153 2048 2048 NT_STATUS_OK
ReadX 11183 1281 2048 2048 NT_STATUS_OK
ReadX 11183 1409 2048 2048 NT_STATUS_OK
ReadX 11183 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11185 NT_STATUS_OK
Close 11185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11188 NT_STATUS_OK
WriteX 11188 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11188 258 NT_STATUS_OK
WriteX 11188 0 10575 10575 NT_STATUS_OK
Flush 11188 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11189 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 4096 4096 NT_STATUS_OK
Close 11183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11193 NT_STATUS_OK
LockX 11193 2147483538 1 NT_STATUS_OK
UnlockX 11193 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1005 NT_STATUS_OK
ReadX 11193 0 512 512 NT_STATUS_OK
ReadX 11193 512 512 512 NT_STATUS_OK
ReadX 11193 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11193 1004 NT_STATUS_OK
Close 11193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11194 NT_STATUS_OK
QUERY_FILE_INFORMATION 11194 1005 NT_STATUS_OK
ReadX 11194 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11195 NT_STATUS_OK
LockX 11195 2147483538 1 NT_STATUS_OK
UnlockX 11195 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11195 1005 NT_STATUS_OK
ReadX 11195 0 512 512 NT_STATUS_OK
ReadX 11195 512 512 512 NT_STATUS_OK
ReadX 11195 1024 512 512 NT_STATUS_OK
ReadX 11195 288 20 20 NT_STATUS_OK
ReadX 11195 308 2084 2084 NT_STATUS_OK
ReadX 11195 388 2084 2084 NT_STATUS_OK
ReadX 11195 388 2084 2084 NT_STATUS_OK
ReadX 11182 2157 1386 1386 NT_STATUS_OK
ReadX 11195 2472 399 399 NT_STATUS_OK
ReadX 11195 3072 1536 1536 NT_STATUS_OK
ReadX 11195 544 149 149 NT_STATUS_OK
ReadX 11195 693 485 485 NT_STATUS_OK
Close 11195 NT_STATUS_OK
ReadX 11182 2157 4096 4096 NT_STATUS_OK
ReadX 11182 6253 4096 4096 NT_STATUS_OK
ReadX 11182 10349 4096 4096 NT_STATUS_OK
ReadX 11182 14445 4096 4096 NT_STATUS_OK
ReadX 11182 18541 4096 4096 NT_STATUS_OK
ReadX 11182 22637 256 256 NT_STATUS_OK
ReadX 11182 22893 4096 4096 NT_STATUS_OK
ReadX 11182 26989 4096 4096 NT_STATUS_OK
ReadX 11182 31085 4096 4096 NT_STATUS_OK
ReadX 11182 35181 4096 4096 NT_STATUS_OK
ReadX 11182 39277 4096 4096 NT_STATUS_OK
ReadX 11182 43373 4096 4096 NT_STATUS_OK
ReadX 11182 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11182 2157 1024 1024 NT_STATUS_OK
ReadX 11182 1667 4688 4688 NT_STATUS_OK
ReadX 11182 6355 3516 3516 NT_STATUS_OK
ReadX 11182 9871 16384 16384 NT_STATUS_OK
ReadX 11182 26255 3771 3771 NT_STATUS_OK
ReadX 11182 30026 2048 2048 NT_STATUS_OK
ReadX 11182 32074 1024 1024 NT_STATUS_OK
ReadX 11182 33098 6652 6652 NT_STATUS_OK
ReadX 11182 39750 16384 16384 NT_STATUS_OK
ReadX 11182 56134 10496 10496 NT_STATUS_OK
ReadX 11182 66630 1784 1784 NT_STATUS_OK
ReadX 11182 68414 90 90 NT_STATUS_OK
ReadX 11182 68504 273 273 NT_STATUS_OK
ReadX 11182 68777 1600 1600 NT_STATUS_OK
ReadX 11182 70377 640 640 NT_STATUS_OK
ReadX 11182 71017 1280 1280 NT_STATUS_OK
ReadX 11182 72297 8464 8464 NT_STATUS_OK
ReadX 11182 80761 158 158 NT_STATUS_OK
ReadX 11182 80919 912 912 NT_STATUS_OK
ReadX 11182 81831 1980 1980 NT_STATUS_OK
ReadX 11182 83811 2256 2256 NT_STATUS_OK
ReadX 11182 86067 400 400 NT_STATUS_OK
ReadX 11182 86467 252 252 NT_STATUS_OK
ReadX 11182 86719 42 42 NT_STATUS_OK
ReadX 11182 86761 725 725 NT_STATUS_OK
ReadX 11182 2009 512 512 NT_STATUS_OK
ReadX 11182 3895 9 9 NT_STATUS_OK
ReadX 11182 3781 46 46 NT_STATUS_OK
ReadX 11182 4059 92 92 NT_STATUS_OK
ReadX 11182 3781 92 92 NT_STATUS_OK
ReadX 11182 3986 184 184 NT_STATUS_OK
ReadX 11182 3987 16384 16384 NT_STATUS_OK
ReadX 11182 3902 16384 16384 NT_STATUS_OK
ReadX 11182 3781 10240 10240 NT_STATUS_OK
ReadX 11182 3821 16384 16384 NT_STATUS_OK
ReadX 11182 3891 935 935 NT_STATUS_OK
ReadX 11182 4060 10240 10240 NT_STATUS_OK
ReadX 11182 4059 184 184 NT_STATUS_OK
ReadX 11182 256 184 184 NT_STATUS_OK
ReadX 11182 256 1026 1026 NT_STATUS_OK
ReadX 11182 3901 326 326 NT_STATUS_OK
ReadX 11182 3899 652 652 NT_STATUS_OK
ReadX 11182 256 2 2 NT_STATUS_OK
ReadX 11182 258 4948 4948 NT_STATUS_OK
Close 11182 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11200 NT_STATUS_OK
WriteX 11200 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11200 258 NT_STATUS_OK
WriteX 11200 0 65536 65536 NT_STATUS_OK
WriteX 11200 65536 65536 65536 NT_STATUS_OK
WriteX 11200 131072 65536 65536 NT_STATUS_OK
WriteX 11200 196608 65536 65536 NT_STATUS_OK
WriteX 11200 262144 65536 65536 NT_STATUS_OK
WriteX 11200 327680 65536 65536 NT_STATUS_OK
WriteX 11200 393216 65536 65536 NT_STATUS_OK
WriteX 11200 458752 65536 65536 NT_STATUS_OK
WriteX 11200 524288 65536 65536 NT_STATUS_OK
WriteX 11200 589824 35257 35257 NT_STATUS_OK
Close 11200 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11202 NT_STATUS_OK
Close 11202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11205 NT_STATUS_OK
WriteX 11205 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11205 258 NT_STATUS_OK
WriteX 11205 0 65536 65536 NT_STATUS_OK
WriteX 11205 65536 65536 65536 NT_STATUS_OK
WriteX 11205 131072 65536 65536 NT_STATUS_OK
WriteX 11205 196608 65536 65536 NT_STATUS_OK
WriteX 11205 262144 65536 65536 NT_STATUS_OK
WriteX 11205 327680 65536 65536 NT_STATUS_OK
WriteX 11205 393216 65536 65536 NT_STATUS_OK
WriteX 11205 458752 65536 65536 NT_STATUS_OK
WriteX 11205 524288 65536 65536 NT_STATUS_OK
WriteX 11205 589824 57598 57598 NT_STATUS_OK
Close 11205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11207 NT_STATUS_OK
WriteX 11207 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11207 258 NT_STATUS_OK
WriteX 11207 0 12543 12543 NT_STATUS_OK
Flush 11207 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11209 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11213 NT_STATUS_OK
QUERY_FILE_INFORMATION 11213 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11213 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11213 1005 NT_STATUS_OK
ReadX 11213 1938 24 24 NT_STATUS_OK
ReadX 11213 1920 276 276 NT_STATUS_OK
ReadX 11213 1918 14 14 NT_STATUS_OK
ReadX 11213 1918 7 7 NT_STATUS_OK
ReadX 11213 1919 12 12 NT_STATUS_OK
ReadX 11213 1919 8 8 NT_STATUS_OK
ReadX 11213 1917 15 15 NT_STATUS_OK
ReadX 11213 0 16 16 NT_STATUS_OK
ReadX 11213 16 2048 2048 NT_STATUS_OK
ReadX 11213 2064 2048 2048 NT_STATUS_OK
ReadX 11213 257 2048 2048 NT_STATUS_OK
ReadX 11213 385 2048 2048 NT_STATUS_OK
ReadX 11213 513 2048 2048 NT_STATUS_OK
ReadX 11213 641 2048 2048 NT_STATUS_OK
ReadX 11213 769 2048 2048 NT_STATUS_OK
ReadX 11213 897 2048 2048 NT_STATUS_OK
ReadX 11213 1025 2048 2048 NT_STATUS_OK
ReadX 11213 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11218 NT_STATUS_OK
WriteX 11218 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11218 258 NT_STATUS_OK
WriteX 11218 0 11588 11588 NT_STATUS_OK
Flush 11218 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
Close 11213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11223 NT_STATUS_OK
WriteX 11223 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11223 258 NT_STATUS_OK
WriteX 11223 0 11615 11615 NT_STATUS_OK
Flush 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11225 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 87 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11229 NT_STATUS_OK
Close 11229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11232 NT_STATUS_OK
WriteX 11232 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11232 258 NT_STATUS_OK
WriteX 11232 0 65536 65536 NT_STATUS_OK
WriteX 11232 65536 16050 16050 NT_STATUS_OK
Close 11232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11212 1939 64 64 NT_STATUS_OK
ReadX 11212 128 248 248 NT_STATUS_OK
ReadX 11212 128 568 568 NT_STATUS_OK
ReadX 11212 3872 1536 1536 NT_STATUS_OK
ReadX 11212 3456 2560 2560 NT_STATUS_OK
ReadX 11212 3136 512 512 NT_STATUS_OK
ReadX 11212 2880 4096 4096 NT_STATUS_OK
ReadX 11212 3264 3072 3072 NT_STATUS_OK
ReadX 11212 320 4096 4096 NT_STATUS_OK
ReadX 11212 1024 4096 4096 NT_STATUS_OK
ReadX 11212 3616 4096 4096 NT_STATUS_OK
ReadX 11212 1939 64 64 NT_STATUS_OK
ReadX 11212 128 248 248 NT_STATUS_OK
ReadX 11212 128 608 608 NT_STATUS_OK
ReadX 11212 2858 1024 1024 NT_STATUS_OK
ReadX 11212 2810 4096 4096 NT_STATUS_OK
ReadX 11212 2826 4096 4096 NT_STATUS_OK
ReadX 11212 2580 2048 2048 NT_STATUS_OK
ReadX 11212 2800 2560 2560 NT_STATUS_OK
ReadX 11212 2100 4096 4096 NT_STATUS_OK
ReadX 11212 2084 4096 4096 NT_STATUS_OK
ReadX 11212 868 4096 4096 NT_STATUS_OK
ReadX 11212 2324 4096 4096 NT_STATUS_OK
ReadX 11212 884 4096 4096 NT_STATUS_OK
ReadX 11212 2604 1024 1024 NT_STATUS_OK
ReadX 11212 580 4096 4096 NT_STATUS_OK
ReadX 11212 596 4096 4096 NT_STATUS_OK
ReadX 11212 2752 4096 4096 NT_STATUS_OK
ReadX 11212 2842 1024 1024 NT_STATUS_OK
ReadX 11212 660 4096 4096 NT_STATUS_OK
ReadX 11212 2720 4096 4096 NT_STATUS_OK
ReadX 11212 2736 4096 4096 NT_STATUS_OK
ReadX 11212 628 4096 4096 NT_STATUS_OK
ReadX 11212 2704 4096 4096 NT_STATUS_OK
ReadX 11212 1556 4096 4096 NT_STATUS_OK
ReadX 11212 576 4096 4096 NT_STATUS_OK
ReadX 11212 3168 1536 1536 NT_STATUS_OK
ReadX 11212 832 4096 4096 NT_STATUS_OK
ReadX 11212 1088 4096 4096 NT_STATUS_OK
ReadX 11212 1344 4096 4096 NT_STATUS_OK
ReadX 11212 1600 4096 4096 NT_STATUS_OK
ReadX 11212 1856 4096 4096 NT_STATUS_OK
ReadX 11212 2112 4096 4096 NT_STATUS_OK
ReadX 11212 1892 4096 4096 NT_STATUS_OK
ReadX 11212 820 4096 4096 NT_STATUS_OK
ReadX 11212 788 4096 4096 NT_STATUS_OK
ReadX 11212 1604 4096 4096 NT_STATUS_OK
ReadX 11212 3648 4096 4096 NT_STATUS_OK
ReadX 11212 2608 4096 4096 NT_STATUS_OK
ReadX 11212 548 4096 4096 NT_STATUS_OK
ReadX 11212 740 4096 4096 NT_STATUS_OK
ReadX 11212 1344 4096 4096 NT_STATUS_OK
ReadX 11212 3392 4096 4096 NT_STATUS_OK
ReadX 11212 3904 4096 4096 NT_STATUS_OK
ReadX 11212 644 4096 4096 NT_STATUS_OK
ReadX 11212 676 4096 4096 NT_STATUS_OK
ReadX 11212 2688 4096 4096 NT_STATUS_OK
ReadX 11212 320 4096 4096 NT_STATUS_OK
ReadX 11212 900 4096 4096 NT_STATUS_OK
ReadX 11212 1908 4096 4096 NT_STATUS_OK
ReadX 11212 852 4096 4096 NT_STATUS_OK
ReadX 11212 724 4096 4096 NT_STATUS_OK
ReadX 11212 2292 4096 4096 NT_STATUS_OK
ReadX 11212 612 4096 4096 NT_STATUS_OK
ReadX 11212 388 4096 4096 NT_STATUS_OK
ReadX 11212 2368 4096 4096 NT_STATUS_OK
ReadX 11212 2624 4096 4096 NT_STATUS_OK
ReadX 11212 500 4096 4096 NT_STATUS_OK
ReadX 11212 356 4096 4096 NT_STATUS_OK
ReadX 11212 1024 4096 4096 NT_STATUS_OK
ReadX 11212 576 4096 4096 NT_STATUS_OK
ReadX 11212 340 4096 4096 NT_STATUS_OK
ReadX 11212 420 4096 4096 NT_STATUS_OK
ReadX 11212 1600 4096 4096 NT_STATUS_OK
ReadX 11212 404 4096 4096 NT_STATUS_OK
ReadX 11212 1428 4096 4096 NT_STATUS_OK
ReadX 11212 2656 4096 4096 NT_STATUS_OK
ReadX 11212 2624 4096 4096 NT_STATUS_OK
ReadX 11212 452 4096 4096 NT_STATUS_OK
ReadX 11212 692 4096 4096 NT_STATUS_OK
ReadX 11212 564 4096 4096 NT_STATUS_OK
ReadX 11212 372 4096 4096 NT_STATUS_OK
ReadX 11212 468 4096 4096 NT_STATUS_OK
ReadX 11212 484 4096 4096 NT_STATUS_OK
ReadX 11212 1088 4096 4096 NT_STATUS_OK
ReadX 11212 1924 4096 4096 NT_STATUS_OK
ReadX 11212 2768 4096 4096 NT_STATUS_OK
ReadX 11212 832 4096 4096 NT_STATUS_OK
ReadX 11212 836 4096 4096 NT_STATUS_OK
ReadX 11212 1856 4096 4096 NT_STATUS_OK
ReadX 11212 2640 4096 4096 NT_STATUS_OK
ReadX 11212 436 4096 4096 NT_STATUS_OK
ReadX 11212 1828 4096 4096 NT_STATUS_OK
ReadX 11212 804 4096 4096 NT_STATUS_OK
ReadX 11212 1860 4096 4096 NT_STATUS_OK
ReadX 11212 1812 4096 4096 NT_STATUS_OK
ReadX 11212 756 4096 4096 NT_STATUS_OK
ReadX 11212 1636 4096 4096 NT_STATUS_OK
ReadX 11212 772 4096 4096 NT_STATUS_OK
ReadX 11212 2036 4096 4096 NT_STATUS_OK
ReadX 11212 1220 4096 4096 NT_STATUS_OK
ReadX 11212 1652 4096 4096 NT_STATUS_OK
ReadX 11212 2588 4096 4096 NT_STATUS_OK
ReadX 11212 916 4096 4096 NT_STATUS_OK
ReadX 11212 260 4096 4096 NT_STATUS_OK
ReadX 11212 932 4096 4096 NT_STATUS_OK
ReadX 11212 2624 4096 4096 NT_STATUS_OK
ReadX 11212 308 4096 4096 NT_STATUS_OK
ReadX 11212 292 4096 4096 NT_STATUS_OK
ReadX 11212 1140 4096 4096 NT_STATUS_OK
ReadX 11212 276 4096 4096 NT_STATUS_OK
ReadX 11212 2020 4096 4096 NT_STATUS_OK
ReadX 11212 2880 4096 4096 NT_STATUS_OK
ReadX 11212 516 4096 4096 NT_STATUS_OK
ReadX 11212 1844 4096 4096 NT_STATUS_OK
ReadX 11212 1124 4096 4096 NT_STATUS_OK
ReadX 11212 3136 4096 4096 NT_STATUS_OK
ReadX 11212 324 4096 4096 NT_STATUS_OK
ReadX 11212 1156 4096 4096 NT_STATUS_OK
ReadX 11212 1172 4096 4096 NT_STATUS_OK
ReadX 11212 2112 4096 4096 NT_STATUS_OK
ReadX 11212 2368 4096 4096 NT_STATUS_OK
ReadX 11212 964 4096 4096 NT_STATUS_OK
ReadX 11212 980 4096 4096 NT_STATUS_OK
ReadX 11212 1012 4096 4096 NT_STATUS_OK
ReadX 11212 532 4096 4096 NT_STATUS_OK
ReadX 11212 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11212 1620 4096 4096 NT_STATUS_OK
ReadX 11212 1604 4096 4096 NT_STATUS_OK
ReadX 11212 2116 4096 4096 NT_STATUS_OK
ReadX 11212 2132 4096 4096 NT_STATUS_OK
ReadX 11212 2148 4096 4096 NT_STATUS_OK
ReadX 11212 2276 4096 4096 NT_STATUS_OK
ReadX 11212 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11234 NT_STATUS_OK
Close 11234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11237 NT_STATUS_OK
QUERY_FILE_INFORMATION 11192 1004 NT_STATUS_OK
Close 11192 NT_STATUS_OK
WriteX 11237 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11237 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11194 1004 NT_STATUS_OK
Close 11194 NT_STATUS_OK
WriteX 11237 0 65536 65536 NT_STATUS_OK
WriteX 11237 65536 64850 64850 NT_STATUS_OK
Close 11237 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11239 NT_STATUS_OK
WriteX 11239 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11239 258 NT_STATUS_OK
ReadX 11212 2068 4096 4096 NT_STATUS_OK
ReadX 11212 1588 4096 4096 NT_STATUS_OK
ReadX 11212 1572 4096 4096 NT_STATUS_OK
WriteX 11239 0 18630 18630 NT_STATUS_OK
Flush 11239 NT_STATUS_OK
Close 11239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11212 612 4096 4096 NT_STATUS_OK
ReadX 11212 564 4096 4096 NT_STATUS_OK
ReadX 11212 1876 4096 4096 NT_STATUS_OK
ReadX 11212 628 4096 4096 NT_STATUS_OK
ReadX 11212 740 4096 4096 NT_STATUS_OK
ReadX 11212 724 4096 4096 NT_STATUS_OK
ReadX 11212 644 4096 4096 NT_STATUS_OK
ReadX 11212 2324 4096 4096 NT_STATUS_OK
ReadX 11212 660 4096 4096 NT_STATUS_OK
ReadX 11212 852 4096 4096 NT_STATUS_OK
ReadX 11212 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11212 2368 4096 4096 NT_STATUS_OK
ReadX 11212 1024 4096 4096 NT_STATUS_OK
ReadX 11212 320 4096 4096 NT_STATUS_OK
ReadX 11212 580 4096 4096 NT_STATUS_OK
ReadX 11212 3136 512 512 NT_STATUS_OK
ReadX 11212 2880 4096 4096 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 61440 4096 4096 NT_STATUS_OK
ReadX 11244 126976 4096 4096 NT_STATUS_OK
WriteX 11244 0 65536 65536 NT_STATUS_OK
WriteX 11244 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 61440 4096 4096 NT_STATUS_OK
ReadX 11245 126976 4096 4096 NT_STATUS_OK
ReadX 11245 192512 4096 4096 NT_STATUS_OK
ReadX 11245 258048 4096 4096 NT_STATUS_OK
WriteX 11245 0 65536 65536 NT_STATUS_OK
WriteX 11245 65536 65536 65536 NT_STATUS_OK
WriteX 11245 131072 65536 65536 NT_STATUS_OK
WriteX 11245 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11246 NT_STATUS_OK
ReadX 11246 61440 4096 4096 NT_STATUS_OK
ReadX 11246 126976 4096 4096 NT_STATUS_OK
ReadX 11246 192512 4096 4096 NT_STATUS_OK
ReadX 11246 258048 4096 4096 NT_STATUS_OK
ReadX 11246 323584 4096 4096 NT_STATUS_OK
ReadX 11246 389120 4096 4096 NT_STATUS_OK
ReadX 11246 454656 4096 4096 NT_STATUS_OK
ReadX 11246 520192 4096 4096 NT_STATUS_OK
WriteX 11246 0 65536 65536 NT_STATUS_OK
WriteX 11246 65536 65536 65536 NT_STATUS_OK
WriteX 11246 131072 65536 65536 NT_STATUS_OK
WriteX 11246 196608 65536 65536 NT_STATUS_OK
WriteX 11246 262144 65536 65536 NT_STATUS_OK
WriteX 11246 327680 65536 65536 NT_STATUS_OK
WriteX 11246 393216 65536 65536 NT_STATUS_OK
WriteX 11246 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11248 NT_STATUS_OK
Close 11248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11249 NT_STATUS_OK
WriteX 11249 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11249 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11247 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11247 0 8192 8192 NT_STATUS_OK
Flush 11247 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 65 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11251 NT_STATUS_OK
Close 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11254 NT_STATUS_OK
WriteX 11254 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11254 258 NT_STATUS_OK
WriteX 11254 0 62591 62591 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 65 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11256 NT_STATUS_OK
Close 11256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11259 NT_STATUS_OK
WriteX 11259 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11259 258 NT_STATUS_OK
WriteX 11259 0 10845 10845 NT_STATUS_OK
Close 11259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 65 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11264 NT_STATUS_OK
WriteX 11264 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11264 258 NT_STATUS_OK
WriteX 11264 0 30118 30118 NT_STATUS_OK
Close 11264 NT_STATUS_OK
WriteX 11247 0 4096 4096 NT_STATUS_OK
WriteX 11249 0 64 64 NT_STATUS_OK
Close 11249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11266 NT_STATUS_OK
ReadX 11266 0 61440 61440 NT_STATUS_OK
ReadX 11266 61440 4096 4096 NT_STATUS_OK
ReadX 11266 65536 61440 61440 NT_STATUS_OK
ReadX 11266 126976 4096 4096 NT_STATUS_OK
ReadX 11266 131072 61440 61440 NT_STATUS_OK
ReadX 11266 192512 4096 4096 NT_STATUS_OK
ReadX 11266 196608 61440 61440 NT_STATUS_OK
ReadX 11266 258048 4096 4096 NT_STATUS_OK
ReadX 11266 262144 61440 61440 NT_STATUS_OK
ReadX 11266 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 61440 61440 NT_STATUS_OK
ReadX 11267 61440 4096 4096 NT_STATUS_OK
ReadX 11267 65536 61440 61440 NT_STATUS_OK
ReadX 11267 126976 4096 4096 NT_STATUS_OK
ReadX 11267 131072 61440 61440 NT_STATUS_OK
ReadX 11267 192512 4096 4096 NT_STATUS_OK
ReadX 11267 196608 61440 61440 NT_STATUS_OK
ReadX 11267 258048 4096 4096 NT_STATUS_OK
ReadX 11267 262144 61440 61440 NT_STATUS_OK
ReadX 11267 323584 4096 4096 NT_STATUS_OK
ReadX 11267 327680 61440 61440 NT_STATUS_OK
ReadX 11267 389120 4096 4096 NT_STATUS_OK
ReadX 11267 393216 61440 61440 NT_STATUS_OK
ReadX 11267 454656 4096 4096 NT_STATUS_OK
ReadX 11267 458752 61440 61440 NT_STATUS_OK
ReadX 11267 520192 4096 4096 NT_STATUS_OK
ReadX 11267 524288 61440 61440 NT_STATUS_OK
ReadX 11267 585728 4096 4096 NT_STATUS_OK
ReadX 11267 589824 61440 61440 NT_STATUS_OK
ReadX 11267 651264 4096 4096 NT_STATUS_OK
ReadX 11267 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 61440 61440 NT_STATUS_OK
ReadX 11268 61440 4096 4096 NT_STATUS_OK
ReadX 11268 65536 61440 61440 NT_STATUS_OK
ReadX 11268 126976 4096 4096 NT_STATUS_OK
ReadX 11268 131072 61440 61440 NT_STATUS_OK
ReadX 11268 192512 4096 4096 NT_STATUS_OK
ReadX 11268 196608 61440 61440 NT_STATUS_OK
ReadX 11268 258048 4096 4096 NT_STATUS_OK
ReadX 11268 262144 61440 61440 NT_STATUS_OK
ReadX 11268 323584 4096 4096 NT_STATUS_OK
ReadX 11268 327680 61440 61440 NT_STATUS_OK
ReadX 11268 389120 4096 4096 NT_STATUS_OK
ReadX 11268 393216 61440 61440 NT_STATUS_OK
ReadX 11268 454656 4096 4096 NT_STATUS_OK
ReadX 11268 458752 61440 61440 NT_STATUS_OK
ReadX 11268 520192 4096 4096 NT_STATUS_OK
ReadX 11268 524288 61440 61440 NT_STATUS_OK
ReadX 11268 585728 4096 4096 NT_STATUS_OK
ReadX 11268 589824 61440 61440 NT_STATUS_OK
ReadX 11268 651264 4096 4096 NT_STATUS_OK
ReadX 11268 655360 61440 61440 NT_STATUS_OK
ReadX 11268 716800 4096 4096 NT_STATUS_OK
ReadX 11268 720896 61440 61440 NT_STATUS_OK
ReadX 11268 782336 4096 4096 NT_STATUS_OK
ReadX 11268 786432 61440 61440 NT_STATUS_OK
ReadX 11268 847872 4096 4096 NT_STATUS_OK
ReadX 11268 851968 61440 61440 NT_STATUS_OK
ReadX 11268 913408 4096 4096 NT_STATUS_OK
ReadX 11268 917504 61440 61440 NT_STATUS_OK
ReadX 11268 978944 4096 4096 NT_STATUS_OK
ReadX 11268 983040 61440 61440 NT_STATUS_OK
ReadX 11268 1044480 4096 4096 NT_STATUS_OK
ReadX 11268 1048576 61440 61440 NT_STATUS_OK
ReadX 11268 1110016 4096 4096 NT_STATUS_OK
ReadX 11268 1114112 61440 61440 NT_STATUS_OK
ReadX 11268 1175552 4096 4096 NT_STATUS_OK
ReadX 11268 1179648 61440 61440 NT_STATUS_OK
ReadX 11268 1241088 4096 4096 NT_STATUS_OK
ReadX 11268 1245184 61440 61440 NT_STATUS_OK
ReadX 11268 1306624 4096 4096 NT_STATUS_OK
ReadX 11268 1310720 61440 61440 NT_STATUS_OK
ReadX 11268 1372160 4096 4096 NT_STATUS_OK
ReadX 11268 1376256 61440 61440 NT_STATUS_OK
ReadX 11268 1437696 4096 4096 NT_STATUS_OK
ReadX 11268 1441792 61440 61440 NT_STATUS_OK
ReadX 11268 1503232 4096 4096 NT_STATUS_OK
ReadX 11268 1507328 61440 61440 NT_STATUS_OK
ReadX 11268 1568768 4096 4096 NT_STATUS_OK
ReadX 11268 1572864 61440 61440 NT_STATUS_OK
ReadX 11268 1634304 4096 4096 NT_STATUS_OK
ReadX 11268 1638400 61440 61440 NT_STATUS_OK
ReadX 11268 1699840 4096 4096 NT_STATUS_OK
ReadX 11268 1703936 61440 61440 NT_STATUS_OK
ReadX 11268 1765376 4096 4096 NT_STATUS_OK
ReadX 11268 1769472 61440 61440 NT_STATUS_OK
ReadX 11268 1830912 4096 4096 NT_STATUS_OK
ReadX 11268 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11269 NT_STATUS_OK
Close 11269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Close 11267 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11273 NT_STATUS_OK
ReadX 11273 0 4096 4096 NT_STATUS_OK
ReadX 11273 4096 4096 4096 NT_STATUS_OK
ReadX 11273 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11274 NT_STATUS_OK
Close 11274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11276 NT_STATUS_OK
ReadX 11276 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11277 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11278 NT_STATUS_OK
Close 11278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 8192 8192 NT_STATUS_OK
ReadX 11281 8192 8192 8192 NT_STATUS_OK
ReadX 11281 16384 8192 8192 NT_STATUS_OK
ReadX 11281 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11283 NT_STATUS_OK
Close 11283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11286 NT_STATUS_OK
WriteX 11286 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11286 258 NT_STATUS_OK
WriteX 11286 0 10438 10438 NT_STATUS_OK
Close 11286 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11287 NT_STATUS_OK
Close 11287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11289 NT_STATUS_OK
Close 11289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11290 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11291 NT_STATUS_OK
Close 11291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11292 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11293 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11294 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11295 NT_STATUS_OK
ReadX 11295 0 4096 4096 NT_STATUS_OK
ReadX 11295 4096 4096 4096 NT_STATUS_OK
ReadX 11295 8192 4096 4096 NT_STATUS_OK
ReadX 11295 12288 8192 8192 NT_STATUS_OK
ReadX 11295 20480 8192 8192 NT_STATUS_OK
ReadX 11295 28672 8192 8192 NT_STATUS_OK
ReadX 11295 36864 8192 8192 NT_STATUS_OK
ReadX 11295 45056 8192 8192 NT_STATUS_OK
ReadX 11295 53248 8192 8192 NT_STATUS_OK
ReadX 11295 61440 8192 8192 NT_STATUS_OK
ReadX 11295 69632 8192 8192 NT_STATUS_OK
ReadX 11295 77824 8192 8192 NT_STATUS_OK
ReadX 11295 86016 8192 8192 NT_STATUS_OK
ReadX 11295 94208 8192 8192 NT_STATUS_OK
ReadX 11295 102400 8192 8192 NT_STATUS_OK
ReadX 11295 110592 8192 8192 NT_STATUS_OK
ReadX 11295 118784 8192 8192 NT_STATUS_OK
ReadX 11295 126976 8192 8192 NT_STATUS_OK
ReadX 11295 135168 8192 8192 NT_STATUS_OK
ReadX 11295 143360 8192 8192 NT_STATUS_OK
ReadX 11295 151552 8192 8192 NT_STATUS_OK
ReadX 11295 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11295 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Close 11292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 25961 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11300 NT_STATUS_OK
WriteX 11300 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11300 258 NT_STATUS_OK
WriteX 11300 0 28489 28489 NT_STATUS_OK
Close 11300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11301 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11303 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 8192 8192 NT_STATUS_OK
ReadX 11307 8192 8192 8192 NT_STATUS_OK
ReadX 11307 16384 8192 8192 NT_STATUS_OK
ReadX 11307 24576 8192 8192 NT_STATUS_OK
ReadX 11307 32768 16384 16384 NT_STATUS_OK
ReadX 11307 49152 8192 8192 NT_STATUS_OK
ReadX 11307 57344 8192 8192 NT_STATUS_OK
ReadX 11307 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 67 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11309 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 67 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11312 NT_STATUS_OK
WriteX 11312 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11312 258 NT_STATUS_OK
WriteX 11312 0 29253 29253 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11313 NT_STATUS_OK
Close 11313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11316 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 25961 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11319 NT_STATUS_OK
WriteX 11319 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11319 258 NT_STATUS_OK
WriteX 11319 0 30183 30183 NT_STATUS_OK
Close 11319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11320 NT_STATUS_OK
Close 11320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11322 NT_STATUS_OK
WriteX 11322 0 510 510 NT_STATUS_OK
WriteX 11322 510 512 512 NT_STATUS_OK
WriteX 11322 1022 510 510 NT_STATUS_OK
WriteX 11322 1532 510 510 NT_STATUS_OK
WriteX 11322 2042 168 168 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11323 NT_STATUS_OK
Close 11323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 4096 4096 NT_STATUS_OK
WriteX 11325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 61440 4096 4096 NT_STATUS_OK
ReadX 11326 126976 4096 4096 NT_STATUS_OK
WriteX 11326 0 65536 65536 NT_STATUS_OK
WriteX 11326 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 61440 4096 4096 NT_STATUS_OK
ReadX 11327 126976 4096 4096 NT_STATUS_OK
ReadX 11327 192512 4096 4096 NT_STATUS_OK
ReadX 11327 258048 4096 4096 NT_STATUS_OK
WriteX 11327 0 65536 65536 NT_STATUS_OK
WriteX 11327 65536 65536 65536 NT_STATUS_OK
WriteX 11327 131072 65536 65536 NT_STATUS_OK
WriteX 11327 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 61440 4096 4096 NT_STATUS_OK
ReadX 11328 126976 4096 4096 NT_STATUS_OK
ReadX 11328 192512 4096 4096 NT_STATUS_OK
ReadX 11328 258048 4096 4096 NT_STATUS_OK
ReadX 11328 323584 4096 4096 NT_STATUS_OK
ReadX 11328 389120 4096 4096 NT_STATUS_OK
ReadX 11328 454656 4096 4096 NT_STATUS_OK
ReadX 11328 520192 4096 4096 NT_STATUS_OK
WriteX 11328 0 65536 65536 NT_STATUS_OK
WriteX 11328 65536 65536 65536 NT_STATUS_OK
WriteX 11328 131072 65536 65536 NT_STATUS_OK
WriteX 11328 196608 65536 65536 NT_STATUS_OK
WriteX 11328 262144 65536 65536 NT_STATUS_OK
WriteX 11328 327680 65536 65536 NT_STATUS_OK
WriteX 11328 393216 65536 65536 NT_STATUS_OK
WriteX 11328 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11329 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11325 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11331 NT_STATUS_OK
Close 11331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11335 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11340 NT_STATUS_OK
Close 11340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11344 NT_STATUS_OK
Close 11344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11349 NT_STATUS_OK
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11358 NT_STATUS_OK
Close 11358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11363 NT_STATUS_OK
Close 11363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11391 NT_STATUS_OK
Close 11391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11397 NT_STATUS_OK
WriteX 11397 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11397 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11397 0 65536 65536 NT_STATUS_OK
WriteX 11397 65536 65536 65536 NT_STATUS_OK
WriteX 11397 131072 65536 65536 NT_STATUS_OK
WriteX 11397 196608 65536 65536 NT_STATUS_OK
WriteX 11397 262144 26634 26634 NT_STATUS_OK
Close 11397 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
Close 11404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11405 NT_STATUS_OK
ReadX 11405 0 4096 4096 NT_STATUS_OK
ReadX 11405 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11406 NT_STATUS_OK
Close 11406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11405 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11413 NT_STATUS_OK
Close 11413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11415 NT_STATUS_OK
Close 11415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11424 NT_STATUS_OK
Close 11424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 92 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11428 NT_STATUS_OK
Close 11428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11433 NT_STATUS_OK
Close 11433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11438 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11443 NT_STATUS_OK
Close 11443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11448 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11453 NT_STATUS_OK
Close 11453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 80 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11457 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11462 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 116 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11470 NT_STATUS_OK
Close 11470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11472 NT_STATUS_OK
Close 11472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 110 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
Close 11484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 0 4096 4096 NT_STATUS_OK
Close 11485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11496 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 0 4096 4096 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 0 4096 4096 NT_STATUS_OK
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11529 0 4096 4096 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11531 NT_STATUS_OK
ReadX 11531 0 4096 4096 NT_STATUS_OK
ReadX 11531 4096 4096 4096 NT_STATUS_OK
ReadX 11531 8192 4096 4096 NT_STATUS_OK
ReadX 11531 12288 4096 4096 NT_STATUS_OK
ReadX 11531 16384 4096 4096 NT_STATUS_OK
ReadX 11531 20480 4096 4096 NT_STATUS_OK
ReadX 11531 24576 4096 4096 NT_STATUS_OK
ReadX 11531 28672 4096 4096 NT_STATUS_OK
ReadX 11531 32768 4096 4096 NT_STATUS_OK
ReadX 11531 36864 4096 4096 NT_STATUS_OK
ReadX 11531 40960 4096 4096 NT_STATUS_OK
ReadX 11531 45056 4096 4096 NT_STATUS_OK
ReadX 11531 49152 4096 4096 NT_STATUS_OK
ReadX 11531 53248 4096 4096 NT_STATUS_OK
ReadX 11531 57344 4096 4096 NT_STATUS_OK
ReadX 11531 61440 4096 4096 NT_STATUS_OK
ReadX 11531 65536 4096 4096 NT_STATUS_OK
ReadX 11531 69632 4096 4096 NT_STATUS_OK
ReadX 11531 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
WriteX 11531 0 4096 4096 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11532 NT_STATUS_OK
SET_FILE_INFORMATION 11532 1004 NT_STATUS_OK
Close 11532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11533 NT_STATUS_OK
ReadX 11533 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11537 NT_STATUS_OK
WriteX 11537 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 19979 19979 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
QUERY_FILE_INFORMATION 11538 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
SET_FILE_INFORMATION 11538 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11541 NT_STATUS_OK
ReadX 11541 0 4096 4096 NT_STATUS_OK
Close 11541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11542 NT_STATUS_OK
ReadX 11542 0 4096 4096 NT_STATUS_OK
Close 11542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11543 1004 NT_STATUS_OK
WriteX 11543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11533 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11546 NT_STATUS_OK
Close 11546 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11549 NT_STATUS_OK
WriteX 11549 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11549 258 NT_STATUS_OK
WriteX 11549 0 65536 65536 NT_STATUS_OK
WriteX 11549 65536 17654 17654 NT_STATUS_OK
Close 11549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
QUERY_FILE_INFORMATION 11550 1004 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
SET_FILE_INFORMATION 11550 1004 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11551 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
Close 11551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
ReadX 11555 4096 4096 4096 NT_STATUS_OK
ReadX 11555 8192 4096 4096 NT_STATUS_OK
ReadX 11555 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11555 16384 4096 4096 NT_STATUS_OK
ReadX 11555 20480 4096 4096 NT_STATUS_OK
ReadX 11555 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 4096 4096 NT_STATUS_OK
Close 11556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
Close 11557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11558 1004 NT_STATUS_OK
WriteX 11558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11559 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11561 NT_STATUS_OK
Close 11561 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 26988 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11564 NT_STATUS_OK
WriteX 11564 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 65536 65536 NT_STATUS_OK
WriteX 11564 65536 19490 19490 NT_STATUS_OK
Close 11564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
QUERY_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Flush 11565 NT_STATUS_OK
Close 11565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11566 NT_STATUS_OK
SET_FILE_INFORMATION 11566 1004 NT_STATUS_OK
Close 11566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11570 0 4096 4096 NT_STATUS_OK
Close 11570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11571 NT_STATUS_OK
ReadX 11571 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
ReadX 11572 4096 4096 4096 NT_STATUS_OK
ReadX 11572 8192 4096 4096 NT_STATUS_OK
ReadX 11572 12288 4096 4096 NT_STATUS_OK
ReadX 11572 16384 4096 4096 NT_STATUS_OK
ReadX 11572 20480 4096 4096 NT_STATUS_OK
ReadX 11572 24576 4096 4096 NT_STATUS_OK
ReadX 11572 28672 4096 4096 NT_STATUS_OK
ReadX 11572 32768 4096 4096 NT_STATUS_OK
ReadX 11572 36864 4096 4096 NT_STATUS_OK
ReadX 11572 40960 4096 4096 NT_STATUS_OK
ReadX 11572 45056 4096 4096 NT_STATUS_OK
ReadX 11572 49152 4096 4096 NT_STATUS_OK
ReadX 11572 53248 4096 4096 NT_STATUS_OK
ReadX 11572 57344 4096 4096 NT_STATUS_OK
ReadX 11572 61440 4096 4096 NT_STATUS_OK
ReadX 11572 65536 4096 4096 NT_STATUS_OK
ReadX 11572 69632 4096 4096 NT_STATUS_OK
ReadX 11572 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Close 11572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11573 NT_STATUS_OK
SET_FILE_INFORMATION 11573 1004 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11574 NT_STATUS_OK
ReadX 11574 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11575 NT_STATUS_OK
Close 11575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11578 NT_STATUS_OK
WriteX 11578 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11578 258 NT_STATUS_OK
WriteX 11578 0 65536 65536 NT_STATUS_OK
WriteX 11578 65536 8866 8866 NT_STATUS_OK
Close 11578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
WriteX 11579 0 4096 4096 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
WriteX 11579 0 4096 4096 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
Close 11579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11580 NT_STATUS_OK
ReadX 11580 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11581 NT_STATUS_OK
ReadX 11581 0 4096 4096 NT_STATUS_OK
Close 11581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11582 NT_STATUS_OK
ReadX 11582 0 4096 4096 NT_STATUS_OK
Close 11582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11583 1004 NT_STATUS_OK
WriteX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11574 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 27747 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11589 NT_STATUS_OK
WriteX 11589 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11589 258 NT_STATUS_OK
WriteX 11589 0 65536 65536 NT_STATUS_OK
WriteX 11589 65536 9298 9298 NT_STATUS_OK
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
WriteX 11590 0 4096 4096 NT_STATUS_OK
Flush 11590 NT_STATUS_OK
SET_FILE_INFORMATION 11590 1004 NT_STATUS_OK
WriteX 11590 0 4096 4096 NT_STATUS_OK
Flush 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11591 NT_STATUS_OK
SET_FILE_INFORMATION 11591 1004 NT_STATUS_OK
Close 11591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11596 0 4096 4096 NT_STATUS_OK
Close 11596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11597 4096 4096 4096 NT_STATUS_OK
ReadX 11597 8192 4096 4096 NT_STATUS_OK
ReadX 11597 12288 4096 4096 NT_STATUS_OK
ReadX 11597 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 4096 4096 NT_STATUS_OK
Close 11598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
Close 11599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11600 1004 NT_STATUS_OK
WriteX 11600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11597 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11603 NT_STATUS_OK
Close 11603 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 27747 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11606 NT_STATUS_OK
WriteX 11606 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 258 NT_STATUS_OK
WriteX 11606 0 65536 65536 NT_STATUS_OK
WriteX 11606 65536 11540 11540 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
Flush 11607 NT_STATUS_OK
SET_FILE_INFORMATION 11607 1004 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
Flush 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11608 NT_STATUS_OK
SET_FILE_INFORMATION 11608 1004 NT_STATUS_OK
Close 11608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11609 NT_STATUS_OK
ReadX 11609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11610 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 61440 4096 4096 NT_STATUS_OK
ReadX 11612 126976 4096 4096 NT_STATUS_OK
WriteX 11612 0 65536 65536 NT_STATUS_OK
WriteX 11612 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 61440 4096 4096 NT_STATUS_OK
ReadX 11613 126976 4096 4096 NT_STATUS_OK
ReadX 11613 192512 4096 4096 NT_STATUS_OK
ReadX 11613 258048 4096 4096 NT_STATUS_OK
WriteX 11613 0 65536 65536 NT_STATUS_OK
WriteX 11613 65536 65536 65536 NT_STATUS_OK
WriteX 11613 131072 65536 65536 NT_STATUS_OK
WriteX 11613 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 61440 4096 4096 NT_STATUS_OK
ReadX 11614 126976 4096 4096 NT_STATUS_OK
ReadX 11614 192512 4096 4096 NT_STATUS_OK
ReadX 11614 258048 4096 4096 NT_STATUS_OK
ReadX 11614 323584 4096 4096 NT_STATUS_OK
ReadX 11614 389120 4096 4096 NT_STATUS_OK
ReadX 11614 454656 4096 4096 NT_STATUS_OK
ReadX 11614 520192 4096 4096 NT_STATUS_OK
WriteX 11614 0 65536 65536 NT_STATUS_OK
WriteX 11614 65536 65536 65536 NT_STATUS_OK
WriteX 11614 131072 65536 65536 NT_STATUS_OK
WriteX 11614 196608 65536 65536 NT_STATUS_OK
WriteX 11614 262144 65536 65536 NT_STATUS_OK
WriteX 11614 327680 65536 65536 NT_STATUS_OK
WriteX 11614 393216 65536 65536 NT_STATUS_OK
WriteX 11614 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
ReadX 11615 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11616 NT_STATUS_OK
WriteX 11616 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11616 258 NT_STATUS_OK
WriteX 11616 0 53 53 NT_STATUS_OK
Close 11616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11617 NT_STATUS_OK
Close 11617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Close 11555 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11615 8192 4096 4096 NT_STATUS_OK
ReadX 11615 12288 4096 4096 NT_STATUS_OK
WriteX 11619 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11619 258 NT_STATUS_OK
ReadX 11615 16384 4096 4096 NT_STATUS_OK
ReadX 11615 20480 4096 4096 NT_STATUS_OK
WriteX 11619 0 15360 15360 NT_STATUS_OK
Close 11619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11620 NT_STATUS_OK
ReadX 11620 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11620 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11620 1004 NT_STATUS_OK
WriteX 11620 0 4096 4096 NT_STATUS_OK
Close 11620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11621 NT_STATUS_OK
Close 11621 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11623 NT_STATUS_OK
ReadX 11623 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11624 NT_STATUS_OK
Close 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11623 4096 4096 4096 NT_STATUS_OK
ReadX 11623 8192 4096 4096 NT_STATUS_OK
ReadX 11623 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11626 NT_STATUS_OK
ReadX 11626 0 4096 4096 NT_STATUS_OK
ReadX 11626 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
ReadX 11627 4096 4096 4096 NT_STATUS_OK
ReadX 11627 8192 4096 4096 NT_STATUS_OK
Close 11626 NT_STATUS_OK
Close 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11628 NT_STATUS_OK
WriteX 11628 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11628 258 NT_STATUS_OK
WriteX 11628 0 15360 15360 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11629 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11629 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11630 NT_STATUS_OK
Close 11630 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11632 NT_STATUS_OK
ReadX 11632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11633 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
Close 11633 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Close 11629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11634 NT_STATUS_OK
Close 11634 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
ReadX 11636 4096 4096 4096 NT_STATUS_OK
ReadX 11636 8192 4096 4096 NT_STATUS_OK
ReadX 11636 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11636 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11636 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11638 NT_STATUS_OK
WriteX 11638 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11638 258 NT_STATUS_OK
WriteX 11638 0 53 53 NT_STATUS_OK
Close 11638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11637 4096 4096 4096 NT_STATUS_OK
ReadX 11637 8192 4096 4096 NT_STATUS_OK
ReadX 11637 12288 4096 4096 NT_STATUS_OK
WriteX 11641 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11641 258 NT_STATUS_OK
WriteX 11641 0 12006 12006 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11642 NT_STATUS_OK
ReadX 11642 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11642 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11642 1004 NT_STATUS_OK
WriteX 11642 0 4096 4096 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11643 NT_STATUS_OK
Close 11643 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11646 NT_STATUS_OK
Close 11646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11645 4096 4096 4096 NT_STATUS_OK
ReadX 11645 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11648 NT_STATUS_OK
WriteX 11648 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 258 NT_STATUS_OK
WriteX 11648 0 11991 11991 NT_STATUS_OK
Close 11648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11649 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11649 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11653 NT_STATUS_OK
SET_FILE_INFORMATION 11653 1004 NT_STATUS_OK
Close 11653 NT_STATUS_OK
WriteX 11649 0 4096 4096 NT_STATUS_OK
Close 11649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11654 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11657 NT_STATUS_OK
Close 11657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11656 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
ReadX 11656 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
WriteX 11656 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11656 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11656 1004 NT_STATUS_OK
Close 11632 NT_STATUS_OK
WriteX 11636 0 19054 19054 NT_STATUS_OK
WriteX 11656 0 12288 12288 NT_STATUS_OK
Close 11652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11659 NT_STATUS_OK
Close 11659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11636 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11663 NT_STATUS_OK
ReadX 11663 0 61440 61440 NT_STATUS_OK
ReadX 11663 61440 4096 4096 NT_STATUS_OK
ReadX 11663 65536 61440 61440 NT_STATUS_OK
ReadX 11663 126976 4096 4096 NT_STATUS_OK
ReadX 11663 131072 61440 61440 NT_STATUS_OK
ReadX 11663 192512 4096 4096 NT_STATUS_OK
ReadX 11663 196608 61440 61440 NT_STATUS_OK
ReadX 11663 258048 4096 4096 NT_STATUS_OK
ReadX 11663 262144 61440 61440 NT_STATUS_OK
ReadX 11663 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 61440 61440 NT_STATUS_OK
ReadX 11664 61440 4096 4096 NT_STATUS_OK
ReadX 11664 65536 61440 61440 NT_STATUS_OK
ReadX 11664 126976 4096 4096 NT_STATUS_OK
ReadX 11664 131072 61440 61440 NT_STATUS_OK
ReadX 11664 192512 4096 4096 NT_STATUS_OK
ReadX 11664 196608 61440 61440 NT_STATUS_OK
ReadX 11664 258048 4096 4096 NT_STATUS_OK
ReadX 11664 262144 61440 61440 NT_STATUS_OK
ReadX 11664 323584 4096 4096 NT_STATUS_OK
ReadX 11664 327680 61440 61440 NT_STATUS_OK
ReadX 11664 389120 4096 4096 NT_STATUS_OK
ReadX 11664 393216 61440 61440 NT_STATUS_OK
ReadX 11664 454656 4096 4096 NT_STATUS_OK
ReadX 11664 458752 61440 61440 NT_STATUS_OK
ReadX 11664 520192 4096 4096 NT_STATUS_OK
ReadX 11664 524288 61440 61440 NT_STATUS_OK
ReadX 11664 585728 4096 4096 NT_STATUS_OK
ReadX 11664 589824 61440 61440 NT_STATUS_OK
ReadX 11664 651264 4096 4096 NT_STATUS_OK
ReadX 11664 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11665 NT_STATUS_OK
ReadX 11665 0 61440 61440 NT_STATUS_OK
ReadX 11665 61440 4096 4096 NT_STATUS_OK
ReadX 11665 65536 61440 61440 NT_STATUS_OK
ReadX 11665 126976 4096 4096 NT_STATUS_OK
ReadX 11665 131072 61440 61440 NT_STATUS_OK
ReadX 11665 192512 4096 4096 NT_STATUS_OK
ReadX 11665 196608 61440 61440 NT_STATUS_OK
ReadX 11665 258048 4096 4096 NT_STATUS_OK
ReadX 11665 262144 61440 61440 NT_STATUS_OK
ReadX 11665 323584 4096 4096 NT_STATUS_OK
ReadX 11665 327680 61440 61440 NT_STATUS_OK
ReadX 11665 389120 4096 4096 NT_STATUS_OK
ReadX 11665 393216 61440 61440 NT_STATUS_OK
ReadX 11665 454656 4096 4096 NT_STATUS_OK
ReadX 11665 458752 61440 61440 NT_STATUS_OK
ReadX 11665 520192 4096 4096 NT_STATUS_OK
ReadX 11665 524288 61440 61440 NT_STATUS_OK
ReadX 11665 585728 4096 4096 NT_STATUS_OK
ReadX 11665 589824 61440 61440 NT_STATUS_OK
ReadX 11665 651264 4096 4096 NT_STATUS_OK
ReadX 11665 655360 61440 61440 NT_STATUS_OK
ReadX 11665 716800 4096 4096 NT_STATUS_OK
ReadX 11665 720896 61440 61440 NT_STATUS_OK
ReadX 11665 782336 4096 4096 NT_STATUS_OK
ReadX 11665 786432 61440 61440 NT_STATUS_OK
ReadX 11665 847872 4096 4096 NT_STATUS_OK
ReadX 11665 851968 61440 61440 NT_STATUS_OK
ReadX 11665 913408 4096 4096 NT_STATUS_OK
ReadX 11665 917504 61440 61440 NT_STATUS_OK
ReadX 11665 978944 4096 4096 NT_STATUS_OK
ReadX 11665 983040 61440 61440 NT_STATUS_OK
ReadX 11665 1044480 4096 4096 NT_STATUS_OK
ReadX 11665 1048576 61440 61440 NT_STATUS_OK
ReadX 11665 1110016 4096 4096 NT_STATUS_OK
ReadX 11665 1114112 61440 61440 NT_STATUS_OK
ReadX 11665 1175552 4096 4096 NT_STATUS_OK
ReadX 11665 1179648 61440 61440 NT_STATUS_OK
ReadX 11665 1241088 4096 4096 NT_STATUS_OK
ReadX 11665 1245184 61440 61440 NT_STATUS_OK
ReadX 11665 1306624 4096 4096 NT_STATUS_OK
ReadX 11665 1310720 61440 61440 NT_STATUS_OK
ReadX 11665 1372160 4096 4096 NT_STATUS_OK
ReadX 11665 1376256 61440 61440 NT_STATUS_OK
ReadX 11665 1437696 4096 4096 NT_STATUS_OK
ReadX 11665 1441792 61440 61440 NT_STATUS_OK
ReadX 11665 1503232 4096 4096 NT_STATUS_OK
ReadX 11665 1507328 61440 61440 NT_STATUS_OK
ReadX 11665 1568768 4096 4096 NT_STATUS_OK
ReadX 11665 1572864 61440 61440 NT_STATUS_OK
ReadX 11665 1634304 4096 4096 NT_STATUS_OK
ReadX 11665 1638400 61440 61440 NT_STATUS_OK
ReadX 11665 1699840 4096 4096 NT_STATUS_OK
ReadX 11665 1703936 61440 61440 NT_STATUS_OK
ReadX 11665 1765376 4096 4096 NT_STATUS_OK
ReadX 11665 1769472 61440 61440 NT_STATUS_OK
ReadX 11665 1830912 4096 4096 NT_STATUS_OK
ReadX 11665 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11668 NT_STATUS_OK
ReadX 11668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11672 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 1004 NT_STATUS_OK
WriteX 11672 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11673 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11674 NT_STATUS_OK
WriteX 11674 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11674 258 NT_STATUS_OK
WriteX 11674 0 491 491 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11675 NT_STATUS_OK
ReadX 11675 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11672 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11677 NT_STATUS_OK
Close 11677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11678 NT_STATUS_OK
WriteX 11678 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11678 258 NT_STATUS_OK
WriteX 11678 0 543 543 NT_STATUS_OK
Close 11678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11679 NT_STATUS_OK
ReadX 11679 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Close 11679 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Close 11668 NT_STATUS_OK
Close 11669 NT_STATUS_OK
Close 11670 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11692 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 1004 NT_STATUS_OK
WriteX 11692 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 258 NT_STATUS_OK
WriteX 11692 0 2048 2048 NT_STATUS_OK
Close 11692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
Flush 11693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11698 NT_STATUS_OK
WriteX 11698 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11698 258 NT_STATUS_OK
WriteX 11698 0 2048 2048 NT_STATUS_OK
Close 11698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11703 NT_STATUS_OK
Close 11703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11704 NT_STATUS_OK
WriteX 11704 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11704 258 NT_STATUS_OK
WriteX 11704 0 2048 2048 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 2048 2048 NT_STATUS_OK
ReadX 11683 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11699 0 4096 4096 NT_STATUS_OK
WriteX 11683 0 8192 8192 NT_STATUS_OK
WriteX 11684 0 4096 4096 NT_STATUS_OK
WriteX 11685 0 4096 4096 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11708 NT_STATUS_OK
ReadX 11708 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11709 NT_STATUS_OK
QUERY_FILE_INFORMATION 11709 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11708 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11722 NT_STATUS_OK
ReadX 11722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11728 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11729 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 1004 NT_STATUS_OK
WriteX 11729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
WriteX 11729 0 2048 2048 NT_STATUS_OK
Close 11729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11730 NT_STATUS_OK
ReadX 11730 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11732 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11737 NT_STATUS_OK
QUERY_FILE_INFORMATION 11737 1004 NT_STATUS_OK
WriteX 11737 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11737 258 NT_STATUS_OK
WriteX 11737 0 2048 2048 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11730 0 4096 4096 NT_STATUS_OK
Flush 11730 NT_STATUS_OK
WriteX 11738 0 4096 4096 NT_STATUS_OK
Flush 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11730 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11738 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11732 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11740 NT_STATUS_OK
WriteX 11740 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11740 258 NT_STATUS_OK
WriteX 11740 0 4096 4096 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11742 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11743 NT_STATUS_OK
WriteX 11743 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11743 258 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
Close 11743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11744 0 4096 4096 NT_STATUS_OK
Close 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Close 11721 NT_STATUS_OK
Close 11722 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Close 11719 NT_STATUS_OK
Close 11712 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Close 11716 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11747 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11751 NT_STATUS_OK
WriteX 11751 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11751 258 NT_STATUS_OK
WriteX 11751 0 2048 2048 NT_STATUS_OK
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11762 NT_STATUS_OK
ReadX 11762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11766 NT_STATUS_OK
QUERY_FILE_INFORMATION 11766 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11768 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11774 NT_STATUS_OK
ReadX 11774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11775 NT_STATUS_OK
ReadX 11775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11776 NT_STATUS_OK
ReadX 11776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11788 NT_STATUS_OK
QUERY_FILE_INFORMATION 11788 1004 NT_STATUS_OK
WriteX 11788 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11788 258 NT_STATUS_OK
WriteX 11788 0 2048 2048 NT_STATUS_OK
Close 11788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11791 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11800 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 1004 NT_STATUS_OK
WriteX 11800 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 258 NT_STATUS_OK
WriteX 11800 0 2048 2048 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11801 NT_STATUS_OK
ReadX 11801 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11802 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11803 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11808 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 1004 NT_STATUS_OK
WriteX 11808 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 258 NT_STATUS_OK
WriteX 11808 0 2048 2048 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11789 0 4096 4096 NT_STATUS_OK
Flush 11789 NT_STATUS_OK
WriteX 11801 0 4096 4096 NT_STATUS_OK
Flush 11801 NT_STATUS_OK
WriteX 11809 0 4096 4096 NT_STATUS_OK
Flush 11809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11789 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11791 4096 16384 16384 NT_STATUS_OK
ReadX 11771 4096 16384 16384 NT_STATUS_OK
ReadX 11803 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 2048 2048 NT_STATUS_OK
WriteX 11811 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11812 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11775 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11803 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Close 11773 NT_STATUS_OK
Close 11774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11814 NT_STATUS_OK
QUERY_FILE_INFORMATION 11814 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11816 NT_STATUS_OK
QUERY_FILE_INFORMATION 11816 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11818 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11822 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11819 4096 16384 16384 NT_STATUS_OK
WriteX 11819 0 4096 4096 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
WriteX 11822 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11824 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11833 NT_STATUS_OK
ReadX 11833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11838 NT_STATUS_OK
ReadX 11838 0 8192 8192 NT_STATUS_OK
ReadX 11825 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11839 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11839 0 4096 4096 NT_STATUS_OK
ReadX 11839 4096 4096 4096 NT_STATUS_OK
ReadX 11839 8192 4096 4096 NT_STATUS_OK
WriteX 11825 0 4096 4096 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11840 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
ReadX 11840 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11819 0 4096 4096 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
WriteX 11822 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11844 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11845 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 1004 NT_STATUS_OK
WriteX 11845 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 258 NT_STATUS_OK
WriteX 11845 0 2048 2048 NT_STATUS_OK
Close 11845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11847 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 4096 4096 NT_STATUS_OK
ReadX 11848 4096 4096 4096 NT_STATUS_OK
WriteX 11848 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11846 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11849 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 4096 4096 NT_STATUS_OK
ReadX 11850 4096 4096 4096 NT_STATUS_OK
WriteX 11850 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11851 NT_STATUS_OK
QUERY_FILE_INFORMATION 11851 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Close 11820 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Close 11831 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11832 NT_STATUS_OK
Close 11833 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Close 11830 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Close 11840 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11853 0 4096 4096 NT_STATUS_OK
ReadX 11853 4096 4096 4096 NT_STATUS_OK
ReadX 11853 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11854 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11861 NT_STATUS_OK
ReadX 11861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 4096 4096 NT_STATUS_OK
ReadX 11854 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11871 NT_STATUS_OK
QUERY_FILE_INFORMATION 11871 1004 NT_STATUS_OK
WriteX 11871 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11871 258 NT_STATUS_OK
WriteX 11871 0 2048 2048 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11872 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11876 NT_STATUS_OK
Close 11876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11877 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1004 NT_STATUS_OK
WriteX 11877 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 258 NT_STATUS_OK
WriteX 11877 0 2048 2048 NT_STATUS_OK
Close 11877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11878 NT_STATUS_OK
ReadX 11878 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11878 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11861 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11879 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11860 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Close 11862 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11881 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 61440 4096 4096 NT_STATUS_OK
ReadX 11883 126976 4096 4096 NT_STATUS_OK
WriteX 11883 0 65536 65536 NT_STATUS_OK
WriteX 11883 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 61440 4096 4096 NT_STATUS_OK
ReadX 11884 126976 4096 4096 NT_STATUS_OK
ReadX 11884 192512 4096 4096 NT_STATUS_OK
ReadX 11884 258048 4096 4096 NT_STATUS_OK
WriteX 11884 0 65536 65536 NT_STATUS_OK
WriteX 11884 65536 65536 65536 NT_STATUS_OK
WriteX 11884 131072 65536 65536 NT_STATUS_OK
WriteX 11884 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 61440 4096 4096 NT_STATUS_OK
ReadX 11885 126976 4096 4096 NT_STATUS_OK
ReadX 11885 192512 4096 4096 NT_STATUS_OK
ReadX 11885 258048 4096 4096 NT_STATUS_OK
ReadX 11885 323584 4096 4096 NT_STATUS_OK
ReadX 11885 389120 4096 4096 NT_STATUS_OK
ReadX 11885 454656 4096 4096 NT_STATUS_OK
ReadX 11885 520192 4096 4096 NT_STATUS_OK
WriteX 11885 0 65536 65536 NT_STATUS_OK
WriteX 11885 65536 65536 65536 NT_STATUS_OK
WriteX 11885 131072 65536 65536 NT_STATUS_OK
WriteX 11885 196608 65536 65536 NT_STATUS_OK
WriteX 11885 262144 65536 65536 NT_STATUS_OK
WriteX 11885 327680 65536 65536 NT_STATUS_OK
WriteX 11885 393216 65536 65536 NT_STATUS_OK
WriteX 11885 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11886 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11886 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11886 8192 4096 4096 NT_STATUS_OK
ReadX 11886 12288 4096 4096 NT_STATUS_OK
ReadX 11886 16384 4096 4096 NT_STATUS_OK
ReadX 11886 20480 4096 4096 NT_STATUS_OK
ReadX 11886 24576 4096 4096 NT_STATUS_OK
ReadX 11886 28672 4096 4096 NT_STATUS_OK
ReadX 11886 32768 4096 4096 NT_STATUS_OK
ReadX 11886 36864 4096 4096 NT_STATUS_OK
ReadX 11886 40960 4096 4096 NT_STATUS_OK
ReadX 11886 45056 4096 4096 NT_STATUS_OK
ReadX 11886 49152 4096 4096 NT_STATUS_OK
ReadX 11886 53248 4096 4096 NT_STATUS_OK
ReadX 11886 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11886 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11887 NT_STATUS_OK
Close 11887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11885 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11889 NT_STATUS_OK
WriteX 11889 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11889 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11889 1004 NT_STATUS_OK
WriteX 11889 0 57088 57088 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
Flush 11889 NT_STATUS_OK
Close 11886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11890 NT_STATUS_OK
SET_FILE_INFORMATION 11890 1004 NT_STATUS_OK
Close 11890 NT_STATUS_OK
SET_FILE_INFORMATION 11889 1004 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
Close 11889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11893 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11894 NT_STATUS_OK
WriteX 11894 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11894 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11894 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
WriteX 11894 0 51456 51456 NT_STATUS_OK
WriteX 11894 0 4096 4096 NT_STATUS_OK
Flush 11894 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11894 1004 NT_STATUS_OK
WriteX 11894 0 4096 4096 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Close 11893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11896 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11898 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11903 NT_STATUS_OK
WriteX 11903 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11903 258 NT_STATUS_OK
WriteX 11903 0 53077 53077 NT_STATUS_OK
Close 11903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11904 NT_STATUS_OK
WriteX 11904 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11904 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11904 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
WriteX 11904 0 65536 65536 NT_STATUS_OK
WriteX 11904 65536 1856 1856 NT_STATUS_OK
WriteX 11904 0 4096 4096 NT_STATUS_OK
Flush 11904 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
WriteX 11904 0 4096 4096 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Close 11898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11906 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11913 NT_STATUS_OK
WriteX 11913 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11913 258 NT_STATUS_OK
WriteX 11913 0 7983 7983 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11915 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11918 NT_STATUS_OK
WriteX 11918 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11918 258 NT_STATUS_OK
WriteX 11918 0 65536 65536 NT_STATUS_OK
WriteX 11918 65536 65536 65536 NT_STATUS_OK
WriteX 11918 131072 65536 65536 NT_STATUS_OK
WriteX 11918 196608 65536 65536 NT_STATUS_OK
WriteX 11918 262144 65536 65536 NT_STATUS_OK
WriteX 11918 327680 65536 65536 NT_STATUS_OK
WriteX 11918 393216 65536 65536 NT_STATUS_OK
WriteX 11918 458752 46731 46731 NT_STATUS_OK
Close 11918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11919 NT_STATUS_OK
WriteX 11919 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11919 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11908 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11919 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
WriteX 11919 0 65536 65536 NT_STATUS_OK
WriteX 11919 65536 22848 22848 NT_STATUS_OK
WriteX 11919 0 4096 4096 NT_STATUS_OK
Flush 11919 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11919 1004 NT_STATUS_OK
WriteX 11919 0 4096 4096 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Close 11908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11921 NT_STATUS_OK
Close 11921 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11923 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11924 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11924 1004 NT_STATUS_OK
ReadX 11924 8192 4096 4096 NT_STATUS_OK
ReadX 11924 12288 4096 4096 NT_STATUS_OK
ReadX 11924 16384 4096 4096 NT_STATUS_OK
ReadX 11924 20480 4096 4096 NT_STATUS_OK
ReadX 11924 24576 4096 4096 NT_STATUS_OK
ReadX 11924 28672 4096 4096 NT_STATUS_OK
ReadX 11924 32768 4096 4096 NT_STATUS_OK
ReadX 11924 36864 4096 4096 NT_STATUS_OK
ReadX 11924 40960 4096 4096 NT_STATUS_OK
ReadX 11924 45056 4096 4096 NT_STATUS_OK
ReadX 11924 49152 4096 4096 NT_STATUS_OK
ReadX 11924 53248 4096 4096 NT_STATUS_OK
ReadX 11924 57344 4096 4096 NT_STATUS_OK
ReadX 11924 61440 4096 4096 NT_STATUS_OK
ReadX 11924 65536 4096 4096 NT_STATUS_OK
ReadX 11924 69632 4096 4096 NT_STATUS_OK
ReadX 11924 73728 4096 4096 NT_STATUS_OK
ReadX 11924 77824 4096 4096 NT_STATUS_OK
ReadX 11924 81920 4096 4096 NT_STATUS_OK
ReadX 11924 86016 4096 4096 NT_STATUS_OK
ReadX 11924 90112 4096 4096 NT_STATUS_OK
ReadX 11924 94208 4096 4096 NT_STATUS_OK
ReadX 11924 98304 4096 4096 NT_STATUS_OK
ReadX 11924 102400 4096 4096 NT_STATUS_OK
ReadX 11924 106496 4096 4096 NT_STATUS_OK
ReadX 11924 110592 4096 4096 NT_STATUS_OK
ReadX 11924 114688 4096 4096 NT_STATUS_OK
ReadX 11924 118784 4096 4096 NT_STATUS_OK
ReadX 11924 122880 4096 4096 NT_STATUS_OK
ReadX 11924 126976 4096 4096 NT_STATUS_OK
ReadX 11924 131072 4096 4096 NT_STATUS_OK
ReadX 11924 135168 4096 4096 NT_STATUS_OK
ReadX 11924 139264 4096 4096 NT_STATUS_OK
ReadX 11924 143360 4096 4096 NT_STATUS_OK
ReadX 11924 147456 4096 4096 NT_STATUS_OK
ReadX 11924 151552 4096 4096 NT_STATUS_OK
ReadX 11924 155648 4096 4096 NT_STATUS_OK
ReadX 11924 159744 4096 4096 NT_STATUS_OK
ReadX 11924 163840 4096 4096 NT_STATUS_OK
ReadX 11924 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11924 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11927 NT_STATUS_OK
WriteX 11927 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11927 258 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11928 NT_STATUS_OK
SET_FILE_INFORMATION 11928 1004 NT_STATUS_OK
Close 11928 NT_STATUS_OK
WriteX 11927 0 42388 42388 NT_STATUS_OK
Close 11927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11929 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
ReadX 11931 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11932 NT_STATUS_OK
WriteX 11932 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11932 258 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
WriteX 11932 0 42652 42652 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Close 11931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11936 NT_STATUS_OK
ReadX 11936 0 4096 4096 NT_STATUS_OK
ReadX 11936 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11938 NT_STATUS_OK
Close 11938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11941 NT_STATUS_OK
WriteX 11941 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11941 258 NT_STATUS_OK
WriteX 11941 0 65536 65536 NT_STATUS_OK
WriteX 11941 65536 49 49 NT_STATUS_OK
Close 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 61440 61440 NT_STATUS_OK
ReadX 11942 61440 4096 4096 NT_STATUS_OK
ReadX 11942 65536 61440 61440 NT_STATUS_OK
ReadX 11942 126976 4096 4096 NT_STATUS_OK
ReadX 11942 131072 61440 61440 NT_STATUS_OK
ReadX 11942 192512 4096 4096 NT_STATUS_OK
ReadX 11942 196608 61440 61440 NT_STATUS_OK
ReadX 11942 258048 4096 4096 NT_STATUS_OK
ReadX 11942 262144 61440 61440 NT_STATUS_OK
ReadX 11942 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 61440 61440 NT_STATUS_OK
ReadX 11943 61440 4096 4096 NT_STATUS_OK
ReadX 11943 65536 61440 61440 NT_STATUS_OK
ReadX 11943 126976 4096 4096 NT_STATUS_OK
ReadX 11943 131072 61440 61440 NT_STATUS_OK
ReadX 11943 192512 4096 4096 NT_STATUS_OK
ReadX 11943 196608 61440 61440 NT_STATUS_OK
ReadX 11943 258048 4096 4096 NT_STATUS_OK
ReadX 11943 262144 61440 61440 NT_STATUS_OK
ReadX 11943 323584 4096 4096 NT_STATUS_OK
ReadX 11943 327680 61440 61440 NT_STATUS_OK
ReadX 11943 389120 4096 4096 NT_STATUS_OK
ReadX 11943 393216 61440 61440 NT_STATUS_OK
ReadX 11943 454656 4096 4096 NT_STATUS_OK
ReadX 11943 458752 61440 61440 NT_STATUS_OK
ReadX 11943 520192 4096 4096 NT_STATUS_OK
ReadX 11943 524288 61440 61440 NT_STATUS_OK
ReadX 11943 585728 4096 4096 NT_STATUS_OK
ReadX 11943 589824 61440 61440 NT_STATUS_OK
ReadX 11943 651264 4096 4096 NT_STATUS_OK
ReadX 11943 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 61440 61440 NT_STATUS_OK
ReadX 11944 61440 4096 4096 NT_STATUS_OK
ReadX 11944 65536 61440 61440 NT_STATUS_OK
ReadX 11944 126976 4096 4096 NT_STATUS_OK
ReadX 11944 131072 61440 61440 NT_STATUS_OK
ReadX 11944 192512 4096 4096 NT_STATUS_OK
ReadX 11944 196608 61440 61440 NT_STATUS_OK
ReadX 11944 258048 4096 4096 NT_STATUS_OK
ReadX 11944 262144 61440 61440 NT_STATUS_OK
ReadX 11944 323584 4096 4096 NT_STATUS_OK
ReadX 11944 327680 61440 61440 NT_STATUS_OK
ReadX 11944 389120 4096 4096 NT_STATUS_OK
ReadX 11944 393216 61440 61440 NT_STATUS_OK
ReadX 11944 454656 4096 4096 NT_STATUS_OK
ReadX 11944 458752 61440 61440 NT_STATUS_OK
ReadX 11944 520192 4096 4096 NT_STATUS_OK
ReadX 11944 524288 61440 61440 NT_STATUS_OK
ReadX 11944 585728 4096 4096 NT_STATUS_OK
ReadX 11944 589824 61440 61440 NT_STATUS_OK
ReadX 11944 651264 4096 4096 NT_STATUS_OK
ReadX 11944 655360 61440 61440 NT_STATUS_OK
ReadX 11944 716800 4096 4096 NT_STATUS_OK
ReadX 11944 720896 61440 61440 NT_STATUS_OK
ReadX 11944 782336 4096 4096 NT_STATUS_OK
ReadX 11944 786432 61440 61440 NT_STATUS_OK
ReadX 11944 847872 4096 4096 NT_STATUS_OK
ReadX 11944 851968 61440 61440 NT_STATUS_OK
ReadX 11944 913408 4096 4096 NT_STATUS_OK
ReadX 11944 917504 61440 61440 NT_STATUS_OK
ReadX 11944 978944 4096 4096 NT_STATUS_OK
ReadX 11944 983040 61440 61440 NT_STATUS_OK
ReadX 11944 1044480 4096 4096 NT_STATUS_OK
ReadX 11944 1048576 61440 61440 NT_STATUS_OK
ReadX 11944 1110016 4096 4096 NT_STATUS_OK
ReadX 11944 1114112 61440 61440 NT_STATUS_OK
ReadX 11944 1175552 4096 4096 NT_STATUS_OK
ReadX 11944 1179648 61440 61440 NT_STATUS_OK
ReadX 11944 1241088 4096 4096 NT_STATUS_OK
ReadX 11944 1245184 61440 61440 NT_STATUS_OK
ReadX 11944 1306624 4096 4096 NT_STATUS_OK
ReadX 11944 1310720 61440 61440 NT_STATUS_OK
ReadX 11944 1372160 4096 4096 NT_STATUS_OK
ReadX 11944 1376256 61440 61440 NT_STATUS_OK
ReadX 11944 1437696 4096 4096 NT_STATUS_OK
ReadX 11944 1441792 61440 61440 NT_STATUS_OK
ReadX 11944 1503232 4096 4096 NT_STATUS_OK
ReadX 11944 1507328 61440 61440 NT_STATUS_OK
ReadX 11944 1568768 4096 4096 NT_STATUS_OK
ReadX 11944 1572864 61440 61440 NT_STATUS_OK
ReadX 11944 1634304 4096 4096 NT_STATUS_OK
ReadX 11944 1638400 61440 61440 NT_STATUS_OK
ReadX 11944 1699840 4096 4096 NT_STATUS_OK
ReadX 11944 1703936 61440 61440 NT_STATUS_OK
ReadX 11944 1765376 4096 4096 NT_STATUS_OK
ReadX 11944 1769472 61440 61440 NT_STATUS_OK
ReadX 11944 1830912 4096 4096 NT_STATUS_OK
ReadX 11944 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11946 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11946 1005 NT_STATUS_OK
ReadX 11946 2156 24 24 NT_STATUS_OK
ReadX 11946 2139 276 276 NT_STATUS_OK
ReadX 11946 2136 14 14 NT_STATUS_OK
ReadX 11946 2136 7 7 NT_STATUS_OK
ReadX 11946 2138 12 12 NT_STATUS_OK
ReadX 11946 2137 8 8 NT_STATUS_OK
ReadX 11946 2135 15 15 NT_STATUS_OK
ReadX 11946 0 16 16 NT_STATUS_OK
ReadX 11946 16 2048 2048 NT_STATUS_OK
ReadX 11946 2064 2048 2048 NT_STATUS_OK
ReadX 11946 257 2048 2048 NT_STATUS_OK
ReadX 11946 385 2048 2048 NT_STATUS_OK
ReadX 11946 513 2048 2048 NT_STATUS_OK
ReadX 11946 641 2048 2048 NT_STATUS_OK
ReadX 11946 769 2048 2048 NT_STATUS_OK
ReadX 11946 897 2048 2048 NT_STATUS_OK
ReadX 11946 1025 2048 2048 NT_STATUS_OK
ReadX 11946 1153 2048 2048 NT_STATUS_OK
ReadX 11946 1281 2048 2048 NT_STATUS_OK
ReadX 11946 1409 2048 2048 NT_STATUS_OK
ReadX 11946 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11948 NT_STATUS_OK
Close 11948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11951 NT_STATUS_OK
WriteX 11951 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 258 NT_STATUS_OK
WriteX 11951 0 10575 10575 NT_STATUS_OK
Flush 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11952 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
Close 11946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11956 NT_STATUS_OK
LockX 11956 2147483538 1 NT_STATUS_OK
UnlockX 11956 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1005 NT_STATUS_OK
ReadX 11956 0 512 512 NT_STATUS_OK
ReadX 11956 512 512 512 NT_STATUS_OK
ReadX 11956 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11956 1004 NT_STATUS_OK
Close 11956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11957 NT_STATUS_OK
QUERY_FILE_INFORMATION 11957 1005 NT_STATUS_OK
ReadX 11957 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11958 NT_STATUS_OK
LockX 11958 2147483538 1 NT_STATUS_OK
UnlockX 11958 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11958 1005 NT_STATUS_OK
ReadX 11958 0 512 512 NT_STATUS_OK
ReadX 11958 512 512 512 NT_STATUS_OK
ReadX 11958 1024 512 512 NT_STATUS_OK
ReadX 11958 288 20 20 NT_STATUS_OK
ReadX 11958 308 2084 2084 NT_STATUS_OK
ReadX 11958 388 2084 2084 NT_STATUS_OK
ReadX 11958 388 2084 2084 NT_STATUS_OK
ReadX 11945 2157 1386 1386 NT_STATUS_OK
ReadX 11958 2472 399 399 NT_STATUS_OK
ReadX 11958 3072 1536 1536 NT_STATUS_OK
ReadX 11958 544 149 149 NT_STATUS_OK
ReadX 11958 693 485 485 NT_STATUS_OK
Close 11958 NT_STATUS_OK
ReadX 11945 2157 4096 4096 NT_STATUS_OK
ReadX 11945 6253 4096 4096 NT_STATUS_OK
ReadX 11945 10349 4096 4096 NT_STATUS_OK
ReadX 11945 14445 4096 4096 NT_STATUS_OK
ReadX 11945 18541 4096 4096 NT_STATUS_OK
ReadX 11945 22637 256 256 NT_STATUS_OK
ReadX 11945 22893 4096 4096 NT_STATUS_OK
ReadX 11945 26989 4096 4096 NT_STATUS_OK
ReadX 11945 31085 4096 4096 NT_STATUS_OK
ReadX 11945 35181 4096 4096 NT_STATUS_OK
ReadX 11945 39277 4096 4096 NT_STATUS_OK
ReadX 11945 43373 4096 4096 NT_STATUS_OK
ReadX 11945 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11945 2157 1024 1024 NT_STATUS_OK
ReadX 11945 1667 4688 4688 NT_STATUS_OK
ReadX 11945 6355 3516 3516 NT_STATUS_OK
ReadX 11945 9871 16384 16384 NT_STATUS_OK
ReadX 11945 26255 3771 3771 NT_STATUS_OK
ReadX 11945 30026 2048 2048 NT_STATUS_OK
ReadX 11945 32074 1024 1024 NT_STATUS_OK
ReadX 11945 33098 6652 6652 NT_STATUS_OK
ReadX 11945 39750 16384 16384 NT_STATUS_OK
ReadX 11945 56134 10496 10496 NT_STATUS_OK
ReadX 11945 66630 1784 1784 NT_STATUS_OK
ReadX 11945 68414 90 90 NT_STATUS_OK
ReadX 11945 68504 273 273 NT_STATUS_OK
ReadX 11945 68777 1600 1600 NT_STATUS_OK
ReadX 11945 70377 640 640 NT_STATUS_OK
ReadX 11945 71017 1280 1280 NT_STATUS_OK
ReadX 11945 72297 8464 8464 NT_STATUS_OK
ReadX 11945 80761 158 158 NT_STATUS_OK
ReadX 11945 80919 912 912 NT_STATUS_OK
ReadX 11945 81831 1980 1980 NT_STATUS_OK
ReadX 11945 83811 2256 2256 NT_STATUS_OK
ReadX 11945 86067 400 400 NT_STATUS_OK
ReadX 11945 86467 252 252 NT_STATUS_OK
ReadX 11945 86719 42 42 NT_STATUS_OK
ReadX 11945 86761 725 725 NT_STATUS_OK
ReadX 11945 2009 512 512 NT_STATUS_OK
ReadX 11945 3895 9 9 NT_STATUS_OK
ReadX 11945 3781 46 46 NT_STATUS_OK
ReadX 11945 4059 92 92 NT_STATUS_OK
ReadX 11945 3781 92 92 NT_STATUS_OK
ReadX 11945 3986 184 184 NT_STATUS_OK
ReadX 11945 3987 16384 16384 NT_STATUS_OK
ReadX 11945 3902 16384 16384 NT_STATUS_OK
ReadX 11945 3781 10240 10240 NT_STATUS_OK
ReadX 11945 3821 16384 16384 NT_STATUS_OK
ReadX 11945 3891 935 935 NT_STATUS_OK
ReadX 11945 4060 10240 10240 NT_STATUS_OK
ReadX 11945 4059 184 184 NT_STATUS_OK
ReadX 11945 256 184 184 NT_STATUS_OK
ReadX 11945 256 1026 1026 NT_STATUS_OK
ReadX 11945 3901 326 326 NT_STATUS_OK
ReadX 11945 3899 652 652 NT_STATUS_OK
ReadX 11945 256 2 2 NT_STATUS_OK
ReadX 11945 258 4948 4948 NT_STATUS_OK
Close 11945 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11963 NT_STATUS_OK
WriteX 11963 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11963 258 NT_STATUS_OK
WriteX 11963 0 65536 65536 NT_STATUS_OK
WriteX 11963 65536 65536 65536 NT_STATUS_OK
WriteX 11963 131072 65536 65536 NT_STATUS_OK
WriteX 11963 196608 65536 65536 NT_STATUS_OK
WriteX 11963 262144 65536 65536 NT_STATUS_OK
WriteX 11963 327680 65536 65536 NT_STATUS_OK
WriteX 11963 393216 65536 65536 NT_STATUS_OK
WriteX 11963 458752 65536 65536 NT_STATUS_OK
WriteX 11963 524288 65536 65536 NT_STATUS_OK
WriteX 11963 589824 35257 35257 NT_STATUS_OK
Close 11963 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11965 NT_STATUS_OK
Close 11965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11968 NT_STATUS_OK
WriteX 11968 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11968 258 NT_STATUS_OK
WriteX 11968 0 65536 65536 NT_STATUS_OK
WriteX 11968 65536 65536 65536 NT_STATUS_OK
WriteX 11968 131072 65536 65536 NT_STATUS_OK
WriteX 11968 196608 65536 65536 NT_STATUS_OK
WriteX 11968 262144 65536 65536 NT_STATUS_OK
WriteX 11968 327680 65536 65536 NT_STATUS_OK
WriteX 11968 393216 65536 65536 NT_STATUS_OK
WriteX 11968 458752 65536 65536 NT_STATUS_OK
WriteX 11968 524288 65536 65536 NT_STATUS_OK
WriteX 11968 589824 57598 57598 NT_STATUS_OK
Close 11968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11970 NT_STATUS_OK
WriteX 11970 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11970 258 NT_STATUS_OK
WriteX 11970 0 12543 12543 NT_STATUS_OK
Flush 11970 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11972 NT_STATUS_OK
Close 11972 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11976 NT_STATUS_OK
QUERY_FILE_INFORMATION 11976 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11976 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11976 1005 NT_STATUS_OK
ReadX 11976 1938 24 24 NT_STATUS_OK
ReadX 11976 1920 276 276 NT_STATUS_OK
ReadX 11976 1918 14 14 NT_STATUS_OK
ReadX 11976 1918 7 7 NT_STATUS_OK
ReadX 11976 1919 12 12 NT_STATUS_OK
ReadX 11976 1919 8 8 NT_STATUS_OK
ReadX 11976 1917 15 15 NT_STATUS_OK
ReadX 11976 0 16 16 NT_STATUS_OK
ReadX 11976 16 2048 2048 NT_STATUS_OK
ReadX 11976 2064 2048 2048 NT_STATUS_OK
ReadX 11976 257 2048 2048 NT_STATUS_OK
ReadX 11976 385 2048 2048 NT_STATUS_OK
ReadX 11976 513 2048 2048 NT_STATUS_OK
ReadX 11976 641 2048 2048 NT_STATUS_OK
ReadX 11976 769 2048 2048 NT_STATUS_OK
ReadX 11976 897 2048 2048 NT_STATUS_OK
ReadX 11976 1025 2048 2048 NT_STATUS_OK
ReadX 11976 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11981 NT_STATUS_OK
WriteX 11981 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11981 258 NT_STATUS_OK
WriteX 11981 0 11588 11588 NT_STATUS_OK
Flush 11981 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
Close 11976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11986 NT_STATUS_OK
WriteX 11986 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11986 258 NT_STATUS_OK
WriteX 11986 0 11615 11615 NT_STATUS_OK
Flush 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11988 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11992 NT_STATUS_OK
Close 11992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11995 NT_STATUS_OK
WriteX 11995 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11995 258 NT_STATUS_OK
WriteX 11995 0 65536 65536 NT_STATUS_OK
WriteX 11995 65536 16050 16050 NT_STATUS_OK
Close 11995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11975 1939 64 64 NT_STATUS_OK
ReadX 11975 128 248 248 NT_STATUS_OK
ReadX 11975 128 568 568 NT_STATUS_OK
ReadX 11975 3872 1536 1536 NT_STATUS_OK
ReadX 11975 3456 2560 2560 NT_STATUS_OK
ReadX 11975 3136 512 512 NT_STATUS_OK
ReadX 11975 2880 4096 4096 NT_STATUS_OK
ReadX 11975 3264 3072 3072 NT_STATUS_OK
ReadX 11975 320 4096 4096 NT_STATUS_OK
ReadX 11975 1024 4096 4096 NT_STATUS_OK
ReadX 11975 3616 4096 4096 NT_STATUS_OK
ReadX 11975 1939 64 64 NT_STATUS_OK
ReadX 11975 128 248 248 NT_STATUS_OK
ReadX 11975 128 608 608 NT_STATUS_OK
ReadX 11975 2858 1024 1024 NT_STATUS_OK
ReadX 11975 2810 4096 4096 NT_STATUS_OK
ReadX 11975 2826 4096 4096 NT_STATUS_OK
ReadX 11975 2580 2048 2048 NT_STATUS_OK
ReadX 11975 2800 2560 2560 NT_STATUS_OK
ReadX 11975 2100 4096 4096 NT_STATUS_OK
ReadX 11975 2084 4096 4096 NT_STATUS_OK
ReadX 11975 868 4096 4096 NT_STATUS_OK
ReadX 11975 2324 4096 4096 NT_STATUS_OK
ReadX 11975 884 4096 4096 NT_STATUS_OK
ReadX 11975 2604 1024 1024 NT_STATUS_OK
ReadX 11975 580 4096 4096 NT_STATUS_OK
ReadX 11975 596 4096 4096 NT_STATUS_OK
ReadX 11975 2752 4096 4096 NT_STATUS_OK
ReadX 11975 2842 1024 1024 NT_STATUS_OK
ReadX 11975 660 4096 4096 NT_STATUS_OK
ReadX 11975 2720 4096 4096 NT_STATUS_OK
ReadX 11975 2736 4096 4096 NT_STATUS_OK
ReadX 11975 628 4096 4096 NT_STATUS_OK
ReadX 11975 2704 4096 4096 NT_STATUS_OK
ReadX 11975 1556 4096 4096 NT_STATUS_OK
ReadX 11975 576 4096 4096 NT_STATUS_OK
ReadX 11975 3168 1536 1536 NT_STATUS_OK
ReadX 11975 832 4096 4096 NT_STATUS_OK
ReadX 11975 1088 4096 4096 NT_STATUS_OK
ReadX 11975 1344 4096 4096 NT_STATUS_OK
ReadX 11975 1600 4096 4096 NT_STATUS_OK
ReadX 11975 1856 4096 4096 NT_STATUS_OK
ReadX 11975 2112 4096 4096 NT_STATUS_OK
ReadX 11975 1892 4096 4096 NT_STATUS_OK
ReadX 11975 820 4096 4096 NT_STATUS_OK
ReadX 11975 788 4096 4096 NT_STATUS_OK
ReadX 11975 1604 4096 4096 NT_STATUS_OK
ReadX 11975 3648 4096 4096 NT_STATUS_OK
ReadX 11975 2608 4096 4096 NT_STATUS_OK
ReadX 11975 548 4096 4096 NT_STATUS_OK
ReadX 11975 740 4096 4096 NT_STATUS_OK
ReadX 11975 1344 4096 4096 NT_STATUS_OK
ReadX 11975 3392 4096 4096 NT_STATUS_OK
ReadX 11975 3904 4096 4096 NT_STATUS_OK
ReadX 11975 644 4096 4096 NT_STATUS_OK
ReadX 11975 676 4096 4096 NT_STATUS_OK
ReadX 11975 2688 4096 4096 NT_STATUS_OK
ReadX 11975 320 4096 4096 NT_STATUS_OK
ReadX 11975 900 4096 4096 NT_STATUS_OK
ReadX 11975 1908 4096 4096 NT_STATUS_OK
ReadX 11975 852 4096 4096 NT_STATUS_OK
ReadX 11975 724 4096 4096 NT_STATUS_OK
ReadX 11975 2292 4096 4096 NT_STATUS_OK
ReadX 11975 612 4096 4096 NT_STATUS_OK
ReadX 11975 388 4096 4096 NT_STATUS_OK
ReadX 11975 2368 4096 4096 NT_STATUS_OK
ReadX 11975 2624 4096 4096 NT_STATUS_OK
ReadX 11975 500 4096 4096 NT_STATUS_OK
ReadX 11975 356 4096 4096 NT_STATUS_OK
ReadX 11975 1024 4096 4096 NT_STATUS_OK
ReadX 11975 576 4096 4096 NT_STATUS_OK
ReadX 11975 340 4096 4096 NT_STATUS_OK
ReadX 11975 420 4096 4096 NT_STATUS_OK
ReadX 11975 1600 4096 4096 NT_STATUS_OK
ReadX 11975 404 4096 4096 NT_STATUS_OK
ReadX 11975 1428 4096 4096 NT_STATUS_OK
ReadX 11975 2656 4096 4096 NT_STATUS_OK
ReadX 11975 2624 4096 4096 NT_STATUS_OK
ReadX 11975 452 4096 4096 NT_STATUS_OK
ReadX 11975 692 4096 4096 NT_STATUS_OK
ReadX 11975 564 4096 4096 NT_STATUS_OK
ReadX 11975 372 4096 4096 NT_STATUS_OK
ReadX 11975 468 4096 4096 NT_STATUS_OK
ReadX 11975 484 4096 4096 NT_STATUS_OK
ReadX 11975 1088 4096 4096 NT_STATUS_OK
ReadX 11975 1924 4096 4096 NT_STATUS_OK
ReadX 11975 2768 4096 4096 NT_STATUS_OK
ReadX 11975 832 4096 4096 NT_STATUS_OK
ReadX 11975 836 4096 4096 NT_STATUS_OK
ReadX 11975 1856 4096 4096 NT_STATUS_OK
ReadX 11975 2640 4096 4096 NT_STATUS_OK
ReadX 11975 436 4096 4096 NT_STATUS_OK
ReadX 11975 1828 4096 4096 NT_STATUS_OK
ReadX 11975 804 4096 4096 NT_STATUS_OK
ReadX 11975 1860 4096 4096 NT_STATUS_OK
ReadX 11975 1812 4096 4096 NT_STATUS_OK
ReadX 11975 756 4096 4096 NT_STATUS_OK
ReadX 11975 1636 4096 4096 NT_STATUS_OK
ReadX 11975 772 4096 4096 NT_STATUS_OK
ReadX 11975 2036 4096 4096 NT_STATUS_OK
ReadX 11975 1220 4096 4096 NT_STATUS_OK
ReadX 11975 1652 4096 4096 NT_STATUS_OK
ReadX 11975 2588 4096 4096 NT_STATUS_OK
ReadX 11975 916 4096 4096 NT_STATUS_OK
ReadX 11975 260 4096 4096 NT_STATUS_OK
ReadX 11975 932 4096 4096 NT_STATUS_OK
ReadX 11975 2624 4096 4096 NT_STATUS_OK
ReadX 11975 308 4096 4096 NT_STATUS_OK
ReadX 11975 292 4096 4096 NT_STATUS_OK
ReadX 11975 1140 4096 4096 NT_STATUS_OK
ReadX 11975 276 4096 4096 NT_STATUS_OK
ReadX 11975 2020 4096 4096 NT_STATUS_OK
ReadX 11975 2880 4096 4096 NT_STATUS_OK
ReadX 11975 516 4096 4096 NT_STATUS_OK
ReadX 11975 1844 4096 4096 NT_STATUS_OK
ReadX 11975 1124 4096 4096 NT_STATUS_OK
ReadX 11975 3136 4096 4096 NT_STATUS_OK
ReadX 11975 324 4096 4096 NT_STATUS_OK
ReadX 11975 1156 4096 4096 NT_STATUS_OK
ReadX 11975 1172 4096 4096 NT_STATUS_OK
ReadX 11975 2112 4096 4096 NT_STATUS_OK
ReadX 11975 2368 4096 4096 NT_STATUS_OK
ReadX 11975 964 4096 4096 NT_STATUS_OK
ReadX 11975 980 4096 4096 NT_STATUS_OK
ReadX 11975 1012 4096 4096 NT_STATUS_OK
ReadX 11975 532 4096 4096 NT_STATUS_OK
ReadX 11975 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11975 1620 4096 4096 NT_STATUS_OK
ReadX 11975 1604 4096 4096 NT_STATUS_OK
ReadX 11975 2116 4096 4096 NT_STATUS_OK
ReadX 11975 2132 4096 4096 NT_STATUS_OK
ReadX 11975 2148 4096 4096 NT_STATUS_OK
ReadX 11975 2276 4096 4096 NT_STATUS_OK
ReadX 11975 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11997 NT_STATUS_OK
Close 11997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12000 NT_STATUS_OK
QUERY_FILE_INFORMATION 11955 1004 NT_STATUS_OK
Close 11955 NT_STATUS_OK
WriteX 12000 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12000 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11957 1004 NT_STATUS_OK
Close 11957 NT_STATUS_OK
WriteX 12000 0 65536 65536 NT_STATUS_OK
WriteX 12000 65536 64850 64850 NT_STATUS_OK
Close 12000 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12002 NT_STATUS_OK
WriteX 12002 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12002 258 NT_STATUS_OK
ReadX 11975 2068 4096 4096 NT_STATUS_OK
ReadX 11975 1588 4096 4096 NT_STATUS_OK
ReadX 11975 1572 4096 4096 NT_STATUS_OK
WriteX 12002 0 18630 18630 NT_STATUS_OK
Flush 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11975 612 4096 4096 NT_STATUS_OK
ReadX 11975 564 4096 4096 NT_STATUS_OK
ReadX 11975 1876 4096 4096 NT_STATUS_OK
ReadX 11975 628 4096 4096 NT_STATUS_OK
ReadX 11975 740 4096 4096 NT_STATUS_OK
ReadX 11975 724 4096 4096 NT_STATUS_OK
ReadX 11975 644 4096 4096 NT_STATUS_OK
ReadX 11975 2324 4096 4096 NT_STATUS_OK
ReadX 11975 660 4096 4096 NT_STATUS_OK
ReadX 11975 852 4096 4096 NT_STATUS_OK
ReadX 11975 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11975 2368 4096 4096 NT_STATUS_OK
ReadX 11975 1024 4096 4096 NT_STATUS_OK
ReadX 11975 320 4096 4096 NT_STATUS_OK
ReadX 11975 580 4096 4096 NT_STATUS_OK
ReadX 11975 3136 512 512 NT_STATUS_OK
ReadX 11975 2880 4096 4096 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 61440 4096 4096 NT_STATUS_OK
ReadX 12007 126976 4096 4096 NT_STATUS_OK
WriteX 12007 0 65536 65536 NT_STATUS_OK
WriteX 12007 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 61440 4096 4096 NT_STATUS_OK
ReadX 12008 126976 4096 4096 NT_STATUS_OK
ReadX 12008 192512 4096 4096 NT_STATUS_OK
ReadX 12008 258048 4096 4096 NT_STATUS_OK
WriteX 12008 0 65536 65536 NT_STATUS_OK
WriteX 12008 65536 65536 65536 NT_STATUS_OK
WriteX 12008 131072 65536 65536 NT_STATUS_OK
WriteX 12008 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12009 NT_STATUS_OK
ReadX 12009 61440 4096 4096 NT_STATUS_OK
ReadX 12009 126976 4096 4096 NT_STATUS_OK
ReadX 12009 192512 4096 4096 NT_STATUS_OK
ReadX 12009 258048 4096 4096 NT_STATUS_OK
ReadX 12009 323584 4096 4096 NT_STATUS_OK
ReadX 12009 389120 4096 4096 NT_STATUS_OK
ReadX 12009 454656 4096 4096 NT_STATUS_OK
ReadX 12009 520192 4096 4096 NT_STATUS_OK
WriteX 12009 0 65536 65536 NT_STATUS_OK
WriteX 12009 65536 65536 65536 NT_STATUS_OK
WriteX 12009 131072 65536 65536 NT_STATUS_OK
WriteX 12009 196608 65536 65536 NT_STATUS_OK
WriteX 12009 262144 65536 65536 NT_STATUS_OK
WriteX 12009 327680 65536 65536 NT_STATUS_OK
WriteX 12009 393216 65536 65536 NT_STATUS_OK
WriteX 12009 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12011 NT_STATUS_OK
Close 12011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12012 NT_STATUS_OK
WriteX 12012 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12012 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12010 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12010 0 8192 8192 NT_STATUS_OK
Flush 12010 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12014 NT_STATUS_OK
Close 12014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 12009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12017 NT_STATUS_OK
WriteX 12017 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12017 258 NT_STATUS_OK
WriteX 12017 0 62591 62591 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12019 NT_STATUS_OK
Close 12019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12022 NT_STATUS_OK
WriteX 12022 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12022 258 NT_STATUS_OK
WriteX 12022 0 10845 10845 NT_STATUS_OK
Close 12022 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12027 NT_STATUS_OK
WriteX 12027 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12027 258 NT_STATUS_OK
WriteX 12027 0 30118 30118 NT_STATUS_OK
Close 12027 NT_STATUS_OK
WriteX 12010 0 4096 4096 NT_STATUS_OK
WriteX 12012 0 64 64 NT_STATUS_OK
Close 12012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12029 NT_STATUS_OK
ReadX 12029 0 61440 61440 NT_STATUS_OK
ReadX 12029 61440 4096 4096 NT_STATUS_OK
ReadX 12029 65536 61440 61440 NT_STATUS_OK
ReadX 12029 126976 4096 4096 NT_STATUS_OK
ReadX 12029 131072 61440 61440 NT_STATUS_OK
ReadX 12029 192512 4096 4096 NT_STATUS_OK
ReadX 12029 196608 61440 61440 NT_STATUS_OK
ReadX 12029 258048 4096 4096 NT_STATUS_OK
ReadX 12029 262144 61440 61440 NT_STATUS_OK
ReadX 12029 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 61440 61440 NT_STATUS_OK
ReadX 12030 61440 4096 4096 NT_STATUS_OK
ReadX 12030 65536 61440 61440 NT_STATUS_OK
ReadX 12030 126976 4096 4096 NT_STATUS_OK
ReadX 12030 131072 61440 61440 NT_STATUS_OK
ReadX 12030 192512 4096 4096 NT_STATUS_OK
ReadX 12030 196608 61440 61440 NT_STATUS_OK
ReadX 12030 258048 4096 4096 NT_STATUS_OK
ReadX 12030 262144 61440 61440 NT_STATUS_OK
ReadX 12030 323584 4096 4096 NT_STATUS_OK
ReadX 12030 327680 61440 61440 NT_STATUS_OK
ReadX 12030 389120 4096 4096 NT_STATUS_OK
ReadX 12030 393216 61440 61440 NT_STATUS_OK
ReadX 12030 454656 4096 4096 NT_STATUS_OK
ReadX 12030 458752 61440 61440 NT_STATUS_OK
ReadX 12030 520192 4096 4096 NT_STATUS_OK
ReadX 12030 524288 61440 61440 NT_STATUS_OK
ReadX 12030 585728 4096 4096 NT_STATUS_OK
ReadX 12030 589824 61440 61440 NT_STATUS_OK
ReadX 12030 651264 4096 4096 NT_STATUS_OK
ReadX 12030 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 61440 61440 NT_STATUS_OK
ReadX 12031 61440 4096 4096 NT_STATUS_OK
ReadX 12031 65536 61440 61440 NT_STATUS_OK
ReadX 12031 126976 4096 4096 NT_STATUS_OK
ReadX 12031 131072 61440 61440 NT_STATUS_OK
ReadX 12031 192512 4096 4096 NT_STATUS_OK
ReadX 12031 196608 61440 61440 NT_STATUS_OK
ReadX 12031 258048 4096 4096 NT_STATUS_OK
ReadX 12031 262144 61440 61440 NT_STATUS_OK
ReadX 12031 323584 4096 4096 NT_STATUS_OK
ReadX 12031 327680 61440 61440 NT_STATUS_OK
ReadX 12031 389120 4096 4096 NT_STATUS_OK
ReadX 12031 393216 61440 61440 NT_STATUS_OK
ReadX 12031 454656 4096 4096 NT_STATUS_OK
ReadX 12031 458752 61440 61440 NT_STATUS_OK
ReadX 12031 520192 4096 4096 NT_STATUS_OK
ReadX 12031 524288 61440 61440 NT_STATUS_OK
ReadX 12031 585728 4096 4096 NT_STATUS_OK
ReadX 12031 589824 61440 61440 NT_STATUS_OK
ReadX 12031 651264 4096 4096 NT_STATUS_OK
ReadX 12031 655360 61440 61440 NT_STATUS_OK
ReadX 12031 716800 4096 4096 NT_STATUS_OK
ReadX 12031 720896 61440 61440 NT_STATUS_OK
ReadX 12031 782336 4096 4096 NT_STATUS_OK
ReadX 12031 786432 61440 61440 NT_STATUS_OK
ReadX 12031 847872 4096 4096 NT_STATUS_OK
ReadX 12031 851968 61440 61440 NT_STATUS_OK
ReadX 12031 913408 4096 4096 NT_STATUS_OK
ReadX 12031 917504 61440 61440 NT_STATUS_OK
ReadX 12031 978944 4096 4096 NT_STATUS_OK
ReadX 12031 983040 61440 61440 NT_STATUS_OK
ReadX 12031 1044480 4096 4096 NT_STATUS_OK
ReadX 12031 1048576 61440 61440 NT_STATUS_OK
ReadX 12031 1110016 4096 4096 NT_STATUS_OK
ReadX 12031 1114112 61440 61440 NT_STATUS_OK
ReadX 12031 1175552 4096 4096 NT_STATUS_OK
ReadX 12031 1179648 61440 61440 NT_STATUS_OK
ReadX 12031 1241088 4096 4096 NT_STATUS_OK
ReadX 12031 1245184 61440 61440 NT_STATUS_OK
ReadX 12031 1306624 4096 4096 NT_STATUS_OK
ReadX 12031 1310720 61440 61440 NT_STATUS_OK
ReadX 12031 1372160 4096 4096 NT_STATUS_OK
ReadX 12031 1376256 61440 61440 NT_STATUS_OK
ReadX 12031 1437696 4096 4096 NT_STATUS_OK
ReadX 12031 1441792 61440 61440 NT_STATUS_OK
ReadX 12031 1503232 4096 4096 NT_STATUS_OK
ReadX 12031 1507328 61440 61440 NT_STATUS_OK
ReadX 12031 1568768 4096 4096 NT_STATUS_OK
ReadX 12031 1572864 61440 61440 NT_STATUS_OK
ReadX 12031 1634304 4096 4096 NT_STATUS_OK
ReadX 12031 1638400 61440 61440 NT_STATUS_OK
ReadX 12031 1699840 4096 4096 NT_STATUS_OK
ReadX 12031 1703936 61440 61440 NT_STATUS_OK
ReadX 12031 1765376 4096 4096 NT_STATUS_OK
ReadX 12031 1769472 61440 61440 NT_STATUS_OK
ReadX 12031 1830912 4096 4096 NT_STATUS_OK
ReadX 12031 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12032 NT_STATUS_OK
Close 12032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Close 12030 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12036 NT_STATUS_OK
ReadX 12036 0 4096 4096 NT_STATUS_OK
ReadX 12036 4096 4096 4096 NT_STATUS_OK
ReadX 12036 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12037 NT_STATUS_OK
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12039 NT_STATUS_OK
ReadX 12039 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12040 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12041 NT_STATUS_OK
Close 12041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 8192 8192 NT_STATUS_OK
ReadX 12044 8192 8192 8192 NT_STATUS_OK
ReadX 12044 16384 8192 8192 NT_STATUS_OK
ReadX 12044 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12046 NT_STATUS_OK
Close 12046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12049 NT_STATUS_OK
WriteX 12049 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12049 258 NT_STATUS_OK
WriteX 12049 0 10438 10438 NT_STATUS_OK
Close 12049 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12050 NT_STATUS_OK
Close 12050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12052 NT_STATUS_OK
Close 12052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12053 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12054 NT_STATUS_OK
Close 12054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12055 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12057 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12058 NT_STATUS_OK
ReadX 12058 0 4096 4096 NT_STATUS_OK
ReadX 12058 4096 4096 4096 NT_STATUS_OK
ReadX 12058 8192 4096 4096 NT_STATUS_OK
ReadX 12058 12288 8192 8192 NT_STATUS_OK
ReadX 12058 20480 8192 8192 NT_STATUS_OK
ReadX 12058 28672 8192 8192 NT_STATUS_OK
ReadX 12058 36864 8192 8192 NT_STATUS_OK
ReadX 12058 45056 8192 8192 NT_STATUS_OK
ReadX 12058 53248 8192 8192 NT_STATUS_OK
ReadX 12058 61440 8192 8192 NT_STATUS_OK
ReadX 12058 69632 8192 8192 NT_STATUS_OK
ReadX 12058 77824 8192 8192 NT_STATUS_OK
ReadX 12058 86016 8192 8192 NT_STATUS_OK
ReadX 12058 94208 8192 8192 NT_STATUS_OK
ReadX 12058 102400 8192 8192 NT_STATUS_OK
ReadX 12058 110592 8192 8192 NT_STATUS_OK
ReadX 12058 118784 8192 8192 NT_STATUS_OK
ReadX 12058 126976 8192 8192 NT_STATUS_OK
ReadX 12058 135168 8192 8192 NT_STATUS_OK
ReadX 12058 143360 8192 8192 NT_STATUS_OK
ReadX 12058 151552 8192 8192 NT_STATUS_OK
ReadX 12058 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12058 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Close 12055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12063 NT_STATUS_OK
WriteX 12063 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12063 258 NT_STATUS_OK
WriteX 12063 0 28489 28489 NT_STATUS_OK
Close 12063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12066 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 8192 8192 NT_STATUS_OK
ReadX 12070 8192 8192 8192 NT_STATUS_OK
ReadX 12070 16384 8192 8192 NT_STATUS_OK
ReadX 12070 24576 8192 8192 NT_STATUS_OK
ReadX 12070 32768 16384 16384 NT_STATUS_OK
ReadX 12070 49152 8192 8192 NT_STATUS_OK
ReadX 12070 57344 8192 8192 NT_STATUS_OK
ReadX 12070 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12072 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12075 NT_STATUS_OK
WriteX 12075 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12075 258 NT_STATUS_OK
WriteX 12075 0 29253 29253 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12076 NT_STATUS_OK
Close 12076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12079 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12082 NT_STATUS_OK
WriteX 12082 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12082 258 NT_STATUS_OK
WriteX 12082 0 30183 30183 NT_STATUS_OK
Close 12082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12083 NT_STATUS_OK
Close 12083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12085 NT_STATUS_OK
WriteX 12085 0 510 510 NT_STATUS_OK
WriteX 12085 510 512 512 NT_STATUS_OK
WriteX 12085 1022 510 510 NT_STATUS_OK
WriteX 12085 1532 510 510 NT_STATUS_OK
WriteX 12085 2042 168 168 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 4096 4096 NT_STATUS_OK
WriteX 12088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 61440 4096 4096 NT_STATUS_OK
ReadX 12089 126976 4096 4096 NT_STATUS_OK
WriteX 12089 0 65536 65536 NT_STATUS_OK
WriteX 12089 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 61440 4096 4096 NT_STATUS_OK
ReadX 12090 126976 4096 4096 NT_STATUS_OK
ReadX 12090 192512 4096 4096 NT_STATUS_OK
ReadX 12090 258048 4096 4096 NT_STATUS_OK
WriteX 12090 0 65536 65536 NT_STATUS_OK
WriteX 12090 65536 65536 65536 NT_STATUS_OK
WriteX 12090 131072 65536 65536 NT_STATUS_OK
WriteX 12090 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 61440 4096 4096 NT_STATUS_OK
ReadX 12091 126976 4096 4096 NT_STATUS_OK
ReadX 12091 192512 4096 4096 NT_STATUS_OK
ReadX 12091 258048 4096 4096 NT_STATUS_OK
ReadX 12091 323584 4096 4096 NT_STATUS_OK
ReadX 12091 389120 4096 4096 NT_STATUS_OK
ReadX 12091 454656 4096 4096 NT_STATUS_OK
ReadX 12091 520192 4096 4096 NT_STATUS_OK
WriteX 12091 0 65536 65536 NT_STATUS_OK
WriteX 12091 65536 65536 65536 NT_STATUS_OK
WriteX 12091 131072 65536 65536 NT_STATUS_OK
WriteX 12091 196608 65536 65536 NT_STATUS_OK
WriteX 12091 262144 65536 65536 NT_STATUS_OK
WriteX 12091 327680 65536 65536 NT_STATUS_OK
WriteX 12091 393216 65536 65536 NT_STATUS_OK
WriteX 12091 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12092 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12088 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12094 NT_STATUS_OK
Close 12094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12098 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12103 NT_STATUS_OK
Close 12103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12107 NT_STATUS_OK
Close 12107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12112 NT_STATUS_OK
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12121 NT_STATUS_OK
Close 12121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12126 NT_STATUS_OK
Close 12126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12141 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12154 NT_STATUS_OK
Close 12154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12160 NT_STATUS_OK
WriteX 12160 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12160 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12160 0 65536 65536 NT_STATUS_OK
WriteX 12160 65536 65536 65536 NT_STATUS_OK
WriteX 12160 131072 65536 65536 NT_STATUS_OK
WriteX 12160 196608 65536 65536 NT_STATUS_OK
WriteX 12160 262144 26634 26634 NT_STATUS_OK
Close 12160 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
Close 12167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12168 NT_STATUS_OK
ReadX 12168 0 4096 4096 NT_STATUS_OK
ReadX 12168 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12169 NT_STATUS_OK
Close 12169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12168 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12178 NT_STATUS_OK
Close 12178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12187 NT_STATUS_OK
Close 12187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12191 NT_STATUS_OK
Close 12191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12196 NT_STATUS_OK
Close 12196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12201 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12206 NT_STATUS_OK
Close 12206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12211 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12216 NT_STATUS_OK
Close 12216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12220 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12225 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12233 NT_STATUS_OK
Close 12233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12235 NT_STATUS_OK
Close 12235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
Close 12247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 0 4096 4096 NT_STATUS_OK
Close 12248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12259 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 0 4096 4096 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 0 4096 4096 NT_STATUS_OK
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12292 0 4096 4096 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12294 NT_STATUS_OK
ReadX 12294 0 4096 4096 NT_STATUS_OK
ReadX 12294 4096 4096 4096 NT_STATUS_OK
ReadX 12294 8192 4096 4096 NT_STATUS_OK
ReadX 12294 12288 4096 4096 NT_STATUS_OK
ReadX 12294 16384 4096 4096 NT_STATUS_OK
ReadX 12294 20480 4096 4096 NT_STATUS_OK
ReadX 12294 24576 4096 4096 NT_STATUS_OK
ReadX 12294 28672 4096 4096 NT_STATUS_OK
ReadX 12294 32768 4096 4096 NT_STATUS_OK
ReadX 12294 36864 4096 4096 NT_STATUS_OK
ReadX 12294 40960 4096 4096 NT_STATUS_OK
ReadX 12294 45056 4096 4096 NT_STATUS_OK
ReadX 12294 49152 4096 4096 NT_STATUS_OK
ReadX 12294 53248 4096 4096 NT_STATUS_OK
ReadX 12294 57344 4096 4096 NT_STATUS_OK
ReadX 12294 61440 4096 4096 NT_STATUS_OK
ReadX 12294 65536 4096 4096 NT_STATUS_OK
ReadX 12294 69632 4096 4096 NT_STATUS_OK
ReadX 12294 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
WriteX 12294 0 4096 4096 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12295 NT_STATUS_OK
SET_FILE_INFORMATION 12295 1004 NT_STATUS_OK
Close 12295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12296 NT_STATUS_OK
ReadX 12296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12300 NT_STATUS_OK
WriteX 12300 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 19979 19979 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
QUERY_FILE_INFORMATION 12301 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
SET_FILE_INFORMATION 12301 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12302 NT_STATUS_OK
ReadX 12302 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 4096 4096 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 0 4096 4096 NT_STATUS_OK
Close 12304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12305 NT_STATUS_OK
ReadX 12305 0 4096 4096 NT_STATUS_OK
Close 12305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
WriteX 12306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12309 NT_STATUS_OK
Close 12309 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12312 NT_STATUS_OK
WriteX 12312 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12312 258 NT_STATUS_OK
WriteX 12312 0 65536 65536 NT_STATUS_OK
WriteX 12312 65536 17654 17654 NT_STATUS_OK
Close 12312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
QUERY_FILE_INFORMATION 12313 1004 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
SET_FILE_INFORMATION 12313 1004 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12314 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
Close 12314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
ReadX 12318 4096 4096 4096 NT_STATUS_OK
ReadX 12318 8192 4096 4096 NT_STATUS_OK
ReadX 12318 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12318 16384 4096 4096 NT_STATUS_OK
ReadX 12318 20480 4096 4096 NT_STATUS_OK
ReadX 12318 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 4096 4096 NT_STATUS_OK
Close 12319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
Close 12320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12321 1004 NT_STATUS_OK
WriteX 12321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12322 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12324 NT_STATUS_OK
Close 12324 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12327 NT_STATUS_OK
WriteX 12327 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 65536 65536 NT_STATUS_OK
WriteX 12327 65536 19490 19490 NT_STATUS_OK
Close 12327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
QUERY_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Flush 12328 NT_STATUS_OK
Close 12328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12329 NT_STATUS_OK
SET_FILE_INFORMATION 12329 1004 NT_STATUS_OK
Close 12329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12333 0 4096 4096 NT_STATUS_OK
Close 12333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12334 NT_STATUS_OK
ReadX 12334 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
ReadX 12335 4096 4096 4096 NT_STATUS_OK
ReadX 12335 8192 4096 4096 NT_STATUS_OK
ReadX 12335 12288 4096 4096 NT_STATUS_OK
ReadX 12335 16384 4096 4096 NT_STATUS_OK
ReadX 12335 20480 4096 4096 NT_STATUS_OK
ReadX 12335 24576 4096 4096 NT_STATUS_OK
ReadX 12335 28672 4096 4096 NT_STATUS_OK
ReadX 12335 32768 4096 4096 NT_STATUS_OK
ReadX 12335 36864 4096 4096 NT_STATUS_OK
ReadX 12335 40960 4096 4096 NT_STATUS_OK
ReadX 12335 45056 4096 4096 NT_STATUS_OK
ReadX 12335 49152 4096 4096 NT_STATUS_OK
ReadX 12335 53248 4096 4096 NT_STATUS_OK
ReadX 12335 57344 4096 4096 NT_STATUS_OK
ReadX 12335 61440 4096 4096 NT_STATUS_OK
ReadX 12335 65536 4096 4096 NT_STATUS_OK
ReadX 12335 69632 4096 4096 NT_STATUS_OK
ReadX 12335 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Close 12335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12336 NT_STATUS_OK
SET_FILE_INFORMATION 12336 1004 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12337 NT_STATUS_OK
ReadX 12337 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12338 NT_STATUS_OK
Close 12338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12341 NT_STATUS_OK
WriteX 12341 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12341 258 NT_STATUS_OK
WriteX 12341 0 65536 65536 NT_STATUS_OK
WriteX 12341 65536 8866 8866 NT_STATUS_OK
Close 12341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
WriteX 12342 0 4096 4096 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
WriteX 12342 0 4096 4096 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
Close 12342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12343 NT_STATUS_OK
ReadX 12343 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12344 NT_STATUS_OK
ReadX 12344 0 4096 4096 NT_STATUS_OK
Close 12344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12345 NT_STATUS_OK
ReadX 12345 0 4096 4096 NT_STATUS_OK
Close 12345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12346 1004 NT_STATUS_OK
WriteX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12337 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12352 NT_STATUS_OK
WriteX 12352 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12352 258 NT_STATUS_OK
WriteX 12352 0 65536 65536 NT_STATUS_OK
WriteX 12352 65536 9298 9298 NT_STATUS_OK
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
WriteX 12353 0 4096 4096 NT_STATUS_OK
Flush 12353 NT_STATUS_OK
SET_FILE_INFORMATION 12353 1004 NT_STATUS_OK
WriteX 12353 0 4096 4096 NT_STATUS_OK
Flush 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12354 NT_STATUS_OK
SET_FILE_INFORMATION 12354 1004 NT_STATUS_OK
Close 12354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12359 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12359 0 4096 4096 NT_STATUS_OK
Close 12359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12360 4096 4096 4096 NT_STATUS_OK
ReadX 12360 8192 4096 4096 NT_STATUS_OK
ReadX 12360 12288 4096 4096 NT_STATUS_OK
ReadX 12360 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 4096 4096 NT_STATUS_OK
Close 12361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
Close 12362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12363 1004 NT_STATUS_OK
WriteX 12363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12360 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12366 NT_STATUS_OK
Close 12366 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12369 NT_STATUS_OK
WriteX 12369 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 258 NT_STATUS_OK
WriteX 12369 0 65536 65536 NT_STATUS_OK
WriteX 12369 65536 11540 11540 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
Flush 12370 NT_STATUS_OK
SET_FILE_INFORMATION 12370 1004 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
Flush 12370 NT_STATUS_OK
Close 12370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12371 NT_STATUS_OK
SET_FILE_INFORMATION 12371 1004 NT_STATUS_OK
Close 12371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12372 NT_STATUS_OK
ReadX 12372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12373 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 61440 4096 4096 NT_STATUS_OK
ReadX 12375 126976 4096 4096 NT_STATUS_OK
WriteX 12375 0 65536 65536 NT_STATUS_OK
WriteX 12375 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 61440 4096 4096 NT_STATUS_OK
ReadX 12376 126976 4096 4096 NT_STATUS_OK
ReadX 12376 192512 4096 4096 NT_STATUS_OK
ReadX 12376 258048 4096 4096 NT_STATUS_OK
WriteX 12376 0 65536 65536 NT_STATUS_OK
WriteX 12376 65536 65536 65536 NT_STATUS_OK
WriteX 12376 131072 65536 65536 NT_STATUS_OK
WriteX 12376 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 61440 4096 4096 NT_STATUS_OK
ReadX 12377 126976 4096 4096 NT_STATUS_OK
ReadX 12377 192512 4096 4096 NT_STATUS_OK
ReadX 12377 258048 4096 4096 NT_STATUS_OK
ReadX 12377 323584 4096 4096 NT_STATUS_OK
ReadX 12377 389120 4096 4096 NT_STATUS_OK
ReadX 12377 454656 4096 4096 NT_STATUS_OK
ReadX 12377 520192 4096 4096 NT_STATUS_OK
WriteX 12377 0 65536 65536 NT_STATUS_OK
WriteX 12377 65536 65536 65536 NT_STATUS_OK
WriteX 12377 131072 65536 65536 NT_STATUS_OK
WriteX 12377 196608 65536 65536 NT_STATUS_OK
WriteX 12377 262144 65536 65536 NT_STATUS_OK
WriteX 12377 327680 65536 65536 NT_STATUS_OK
WriteX 12377 393216 65536 65536 NT_STATUS_OK
WriteX 12377 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
ReadX 12378 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12379 NT_STATUS_OK
WriteX 12379 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12379 258 NT_STATUS_OK
WriteX 12379 0 53 53 NT_STATUS_OK
Close 12379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12380 NT_STATUS_OK
Close 12380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Close 12318 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12378 8192 4096 4096 NT_STATUS_OK
ReadX 12378 12288 4096 4096 NT_STATUS_OK
WriteX 12382 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12382 258 NT_STATUS_OK
ReadX 12378 16384 4096 4096 NT_STATUS_OK
ReadX 12378 20480 4096 4096 NT_STATUS_OK
WriteX 12382 0 15360 15360 NT_STATUS_OK
Close 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12383 NT_STATUS_OK
ReadX 12383 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12383 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12383 1004 NT_STATUS_OK
WriteX 12383 0 4096 4096 NT_STATUS_OK
Close 12383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12384 NT_STATUS_OK
Close 12384 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12386 NT_STATUS_OK
ReadX 12386 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12387 NT_STATUS_OK
Close 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12386 4096 4096 4096 NT_STATUS_OK
ReadX 12386 8192 4096 4096 NT_STATUS_OK
ReadX 12386 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12389 NT_STATUS_OK
ReadX 12389 0 4096 4096 NT_STATUS_OK
ReadX 12389 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
ReadX 12390 4096 4096 4096 NT_STATUS_OK
ReadX 12390 8192 4096 4096 NT_STATUS_OK
Close 12389 NT_STATUS_OK
Close 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12391 NT_STATUS_OK
WriteX 12391 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12391 258 NT_STATUS_OK
WriteX 12391 0 15360 15360 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12392 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12392 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12393 NT_STATUS_OK
Close 12393 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12395 NT_STATUS_OK
ReadX 12395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12396 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
Close 12396 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Close 12392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12397 NT_STATUS_OK
Close 12397 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 4096 4096 NT_STATUS_OK
ReadX 12399 4096 4096 4096 NT_STATUS_OK
ReadX 12399 8192 4096 4096 NT_STATUS_OK
ReadX 12399 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12399 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12399 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12401 NT_STATUS_OK
WriteX 12401 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12401 258 NT_STATUS_OK
WriteX 12401 0 53 53 NT_STATUS_OK
Close 12401 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12400 4096 4096 4096 NT_STATUS_OK
ReadX 12400 8192 4096 4096 NT_STATUS_OK
ReadX 12400 12288 4096 4096 NT_STATUS_OK
WriteX 12404 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12404 258 NT_STATUS_OK
WriteX 12404 0 12006 12006 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12405 NT_STATUS_OK
ReadX 12405 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12405 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12405 1004 NT_STATUS_OK
WriteX 12405 0 4096 4096 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12406 NT_STATUS_OK
Close 12406 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12409 NT_STATUS_OK
Close 12409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12408 4096 4096 4096 NT_STATUS_OK
ReadX 12408 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12411 NT_STATUS_OK
WriteX 12411 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 258 NT_STATUS_OK
WriteX 12411 0 11991 11991 NT_STATUS_OK
Close 12411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12412 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12412 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12416 NT_STATUS_OK
SET_FILE_INFORMATION 12416 1004 NT_STATUS_OK
Close 12416 NT_STATUS_OK
WriteX 12412 0 4096 4096 NT_STATUS_OK
Close 12412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12417 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12420 NT_STATUS_OK
Close 12420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12419 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
ReadX 12419 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
WriteX 12419 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12419 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12419 1004 NT_STATUS_OK
Close 12395 NT_STATUS_OK
WriteX 12399 0 19054 19054 NT_STATUS_OK
WriteX 12419 0 12288 12288 NT_STATUS_OK
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12422 NT_STATUS_OK
Close 12422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12399 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 61440 61440 NT_STATUS_OK
ReadX 12426 61440 4096 4096 NT_STATUS_OK
ReadX 12426 65536 61440 61440 NT_STATUS_OK
ReadX 12426 126976 4096 4096 NT_STATUS_OK
ReadX 12426 131072 61440 61440 NT_STATUS_OK
ReadX 12426 192512 4096 4096 NT_STATUS_OK
ReadX 12426 196608 61440 61440 NT_STATUS_OK
ReadX 12426 258048 4096 4096 NT_STATUS_OK
ReadX 12426 262144 61440 61440 NT_STATUS_OK
ReadX 12426 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 61440 61440 NT_STATUS_OK
ReadX 12427 61440 4096 4096 NT_STATUS_OK
ReadX 12427 65536 61440 61440 NT_STATUS_OK
ReadX 12427 126976 4096 4096 NT_STATUS_OK
ReadX 12427 131072 61440 61440 NT_STATUS_OK
ReadX 12427 192512 4096 4096 NT_STATUS_OK
ReadX 12427 196608 61440 61440 NT_STATUS_OK
ReadX 12427 258048 4096 4096 NT_STATUS_OK
ReadX 12427 262144 61440 61440 NT_STATUS_OK
ReadX 12427 323584 4096 4096 NT_STATUS_OK
ReadX 12427 327680 61440 61440 NT_STATUS_OK
ReadX 12427 389120 4096 4096 NT_STATUS_OK
ReadX 12427 393216 61440 61440 NT_STATUS_OK
ReadX 12427 454656 4096 4096 NT_STATUS_OK
ReadX 12427 458752 61440 61440 NT_STATUS_OK
ReadX 12427 520192 4096 4096 NT_STATUS_OK
ReadX 12427 524288 61440 61440 NT_STATUS_OK
ReadX 12427 585728 4096 4096 NT_STATUS_OK
ReadX 12427 589824 61440 61440 NT_STATUS_OK
ReadX 12427 651264 4096 4096 NT_STATUS_OK
ReadX 12427 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12428 NT_STATUS_OK
ReadX 12428 0 61440 61440 NT_STATUS_OK
ReadX 12428 61440 4096 4096 NT_STATUS_OK
ReadX 12428 65536 61440 61440 NT_STATUS_OK
ReadX 12428 126976 4096 4096 NT_STATUS_OK
ReadX 12428 131072 61440 61440 NT_STATUS_OK
ReadX 12428 192512 4096 4096 NT_STATUS_OK
ReadX 12428 196608 61440 61440 NT_STATUS_OK
ReadX 12428 258048 4096 4096 NT_STATUS_OK
ReadX 12428 262144 61440 61440 NT_STATUS_OK
ReadX 12428 323584 4096 4096 NT_STATUS_OK
ReadX 12428 327680 61440 61440 NT_STATUS_OK
ReadX 12428 389120 4096 4096 NT_STATUS_OK
ReadX 12428 393216 61440 61440 NT_STATUS_OK
ReadX 12428 454656 4096 4096 NT_STATUS_OK
ReadX 12428 458752 61440 61440 NT_STATUS_OK
ReadX 12428 520192 4096 4096 NT_STATUS_OK
ReadX 12428 524288 61440 61440 NT_STATUS_OK
ReadX 12428 585728 4096 4096 NT_STATUS_OK
ReadX 12428 589824 61440 61440 NT_STATUS_OK
ReadX 12428 651264 4096 4096 NT_STATUS_OK
ReadX 12428 655360 61440 61440 NT_STATUS_OK
ReadX 12428 716800 4096 4096 NT_STATUS_OK
ReadX 12428 720896 61440 61440 NT_STATUS_OK
ReadX 12428 782336 4096 4096 NT_STATUS_OK
ReadX 12428 786432 61440 61440 NT_STATUS_OK
ReadX 12428 847872 4096 4096 NT_STATUS_OK
ReadX 12428 851968 61440 61440 NT_STATUS_OK
ReadX 12428 913408 4096 4096 NT_STATUS_OK
ReadX 12428 917504 61440 61440 NT_STATUS_OK
ReadX 12428 978944 4096 4096 NT_STATUS_OK
ReadX 12428 983040 61440 61440 NT_STATUS_OK
ReadX 12428 1044480 4096 4096 NT_STATUS_OK
ReadX 12428 1048576 61440 61440 NT_STATUS_OK
ReadX 12428 1110016 4096 4096 NT_STATUS_OK
ReadX 12428 1114112 61440 61440 NT_STATUS_OK
ReadX 12428 1175552 4096 4096 NT_STATUS_OK
ReadX 12428 1179648 61440 61440 NT_STATUS_OK
ReadX 12428 1241088 4096 4096 NT_STATUS_OK
ReadX 12428 1245184 61440 61440 NT_STATUS_OK
ReadX 12428 1306624 4096 4096 NT_STATUS_OK
ReadX 12428 1310720 61440 61440 NT_STATUS_OK
ReadX 12428 1372160 4096 4096 NT_STATUS_OK
ReadX 12428 1376256 61440 61440 NT_STATUS_OK
ReadX 12428 1437696 4096 4096 NT_STATUS_OK
ReadX 12428 1441792 61440 61440 NT_STATUS_OK
ReadX 12428 1503232 4096 4096 NT_STATUS_OK
ReadX 12428 1507328 61440 61440 NT_STATUS_OK
ReadX 12428 1568768 4096 4096 NT_STATUS_OK
ReadX 12428 1572864 61440 61440 NT_STATUS_OK
ReadX 12428 1634304 4096 4096 NT_STATUS_OK
ReadX 12428 1638400 61440 61440 NT_STATUS_OK
ReadX 12428 1699840 4096 4096 NT_STATUS_OK
ReadX 12428 1703936 61440 61440 NT_STATUS_OK
ReadX 12428 1765376 4096 4096 NT_STATUS_OK
ReadX 12428 1769472 61440 61440 NT_STATUS_OK
ReadX 12428 1830912 4096 4096 NT_STATUS_OK
ReadX 12428 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12431 NT_STATUS_OK
ReadX 12431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12435 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 1004 NT_STATUS_OK
WriteX 12435 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12437 NT_STATUS_OK
WriteX 12437 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 491 491 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12435 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12440 NT_STATUS_OK
Close 12440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12441 NT_STATUS_OK
WriteX 12441 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12441 258 NT_STATUS_OK
WriteX 12441 0 543 543 NT_STATUS_OK
Close 12441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12442 NT_STATUS_OK
ReadX 12442 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Close 12442 NT_STATUS_OK
Close 12430 NT_STATUS_OK
Close 12431 NT_STATUS_OK
Close 12432 NT_STATUS_OK
Close 12433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12455 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 1004 NT_STATUS_OK
WriteX 12455 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 258 NT_STATUS_OK
WriteX 12455 0 2048 2048 NT_STATUS_OK
Close 12455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
Flush 12456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12461 NT_STATUS_OK
WriteX 12461 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12461 258 NT_STATUS_OK
WriteX 12461 0 2048 2048 NT_STATUS_OK
Close 12461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12466 NT_STATUS_OK
Close 12466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12467 NT_STATUS_OK
WriteX 12467 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12467 258 NT_STATUS_OK
WriteX 12467 0 2048 2048 NT_STATUS_OK
Close 12467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 2048 2048 NT_STATUS_OK
ReadX 12446 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12462 0 4096 4096 NT_STATUS_OK
WriteX 12446 0 8192 8192 NT_STATUS_OK
WriteX 12447 0 4096 4096 NT_STATUS_OK
WriteX 12448 0 4096 4096 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12471 NT_STATUS_OK
ReadX 12471 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12472 NT_STATUS_OK
QUERY_FILE_INFORMATION 12472 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12471 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12483 NT_STATUS_OK
ReadX 12483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12485 NT_STATUS_OK
ReadX 12485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12491 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12492 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 1004 NT_STATUS_OK
WriteX 12492 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
WriteX 12492 0 2048 2048 NT_STATUS_OK
Close 12492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12493 NT_STATUS_OK
ReadX 12493 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12495 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12495 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12500 NT_STATUS_OK
QUERY_FILE_INFORMATION 12500 1004 NT_STATUS_OK
WriteX 12500 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12500 258 NT_STATUS_OK
WriteX 12500 0 2048 2048 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12493 0 4096 4096 NT_STATUS_OK
Flush 12493 NT_STATUS_OK
WriteX 12501 0 4096 4096 NT_STATUS_OK
Flush 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12493 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12501 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12495 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12503 NT_STATUS_OK
WriteX 12503 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12503 258 NT_STATUS_OK
WriteX 12503 0 4096 4096 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12505 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12506 NT_STATUS_OK
WriteX 12506 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12506 258 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
Close 12506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12507 0 4096 4096 NT_STATUS_OK
Close 12504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Close 12484 NT_STATUS_OK
Close 12485 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Close 12482 NT_STATUS_OK
Close 12475 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Close 12479 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12510 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12514 NT_STATUS_OK
WriteX 12514 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12514 258 NT_STATUS_OK
WriteX 12514 0 2048 2048 NT_STATUS_OK
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12525 NT_STATUS_OK
ReadX 12525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12529 NT_STATUS_OK
QUERY_FILE_INFORMATION 12529 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12531 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12536 NT_STATUS_OK
ReadX 12536 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12537 NT_STATUS_OK
ReadX 12537 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12538 NT_STATUS_OK
ReadX 12538 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12539 NT_STATUS_OK
ReadX 12539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12544 NT_STATUS_OK
Close 12538 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12551 NT_STATUS_OK
QUERY_FILE_INFORMATION 12551 1004 NT_STATUS_OK
WriteX 12551 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12551 258 NT_STATUS_OK
WriteX 12551 0 2048 2048 NT_STATUS_OK
Close 12551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12554 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12563 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 1004 NT_STATUS_OK
WriteX 12563 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 258 NT_STATUS_OK
WriteX 12563 0 2048 2048 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12564 NT_STATUS_OK
ReadX 12564 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12565 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12567 NT_STATUS_OK
ReadX 12567 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12571 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12572 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 1004 NT_STATUS_OK
WriteX 12572 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 258 NT_STATUS_OK
WriteX 12572 0 2048 2048 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12573 NT_STATUS_OK
ReadX 12573 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12552 0 4096 4096 NT_STATUS_OK
Flush 12552 NT_STATUS_OK
WriteX 12564 0 4096 4096 NT_STATUS_OK
Flush 12564 NT_STATUS_OK
WriteX 12573 0 4096 4096 NT_STATUS_OK
Flush 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12552 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12564 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12573 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12554 4096 16384 16384 NT_STATUS_OK
ReadX 12534 4096 16384 16384 NT_STATUS_OK
ReadX 12566 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12574 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 2048 2048 NT_STATUS_OK
WriteX 12575 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12552 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12576 NT_STATUS_OK
QUERY_FILE_INFORMATION 12576 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12575 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12567 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12566 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Close 12536 NT_STATUS_OK
Close 12537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12578 NT_STATUS_OK
QUERY_FILE_INFORMATION 12578 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12580 NT_STATUS_OK
QUERY_FILE_INFORMATION 12580 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12585 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12587 NT_STATUS_OK
ReadX 12587 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12583 4096 16384 16384 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
WriteX 12585 0 4096 4096 NT_STATUS_OK
WriteX 12586 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12596 NT_STATUS_OK
ReadX 12596 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12601 NT_STATUS_OK
ReadX 12601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 8192 8192 NT_STATUS_OK
ReadX 12589 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12603 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12603 0 4096 4096 NT_STATUS_OK
ReadX 12603 4096 4096 4096 NT_STATUS_OK
ReadX 12603 8192 4096 4096 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
ReadX 12604 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
WriteX 12585 0 4096 4096 NT_STATUS_OK
WriteX 12586 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12609 NT_STATUS_OK
QUERY_FILE_INFORMATION 12609 1004 NT_STATUS_OK
WriteX 12609 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12609 258 NT_STATUS_OK
WriteX 12609 0 2048 2048 NT_STATUS_OK
Close 12609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12610 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12612 NT_STATUS_OK
ReadX 12612 0 4096 4096 NT_STATUS_OK
ReadX 12612 4096 4096 4096 NT_STATUS_OK
WriteX 12612 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12613 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12614 NT_STATUS_OK
ReadX 12614 0 4096 4096 NT_STATUS_OK
ReadX 12614 4096 4096 4096 NT_STATUS_OK
WriteX 12614 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12615 NT_STATUS_OK
QUERY_FILE_INFORMATION 12615 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Close 12587 NT_STATUS_OK
Close 12583 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Close 12595 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Close 12596 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12593 NT_STATUS_OK
Close 12594 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Close 12614 NT_STATUS_OK
Close 12603 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12617 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12617 0 4096 4096 NT_STATUS_OK
ReadX 12617 4096 4096 4096 NT_STATUS_OK
ReadX 12617 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12624 NT_STATUS_OK
ReadX 12624 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
ReadX 12618 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12635 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 1004 NT_STATUS_OK
WriteX 12635 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 258 NT_STATUS_OK
WriteX 12635 0 2048 2048 NT_STATUS_OK
Close 12635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12636 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12640 NT_STATUS_OK
Close 12640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12641 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1004 NT_STATUS_OK
WriteX 12641 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 258 NT_STATUS_OK
WriteX 12641 0 2048 2048 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12642 NT_STATUS_OK
ReadX 12642 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12642 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12625 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Close 12623 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Close 12625 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12645 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 61440 4096 4096 NT_STATUS_OK
ReadX 12647 126976 4096 4096 NT_STATUS_OK
WriteX 12647 0 65536 65536 NT_STATUS_OK
WriteX 12647 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 61440 4096 4096 NT_STATUS_OK
ReadX 12648 126976 4096 4096 NT_STATUS_OK
ReadX 12648 192512 4096 4096 NT_STATUS_OK
ReadX 12648 258048 4096 4096 NT_STATUS_OK
WriteX 12648 0 65536 65536 NT_STATUS_OK
WriteX 12648 65536 65536 65536 NT_STATUS_OK
WriteX 12648 131072 65536 65536 NT_STATUS_OK
WriteX 12648 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 61440 4096 4096 NT_STATUS_OK
ReadX 12649 126976 4096 4096 NT_STATUS_OK
ReadX 12649 192512 4096 4096 NT_STATUS_OK
ReadX 12649 258048 4096 4096 NT_STATUS_OK
ReadX 12649 323584 4096 4096 NT_STATUS_OK
ReadX 12649 389120 4096 4096 NT_STATUS_OK
ReadX 12649 454656 4096 4096 NT_STATUS_OK
ReadX 12649 520192 4096 4096 NT_STATUS_OK
WriteX 12649 0 65536 65536 NT_STATUS_OK
WriteX 12649 65536 65536 65536 NT_STATUS_OK
WriteX 12649 131072 65536 65536 NT_STATUS_OK
WriteX 12649 196608 65536 65536 NT_STATUS_OK
WriteX 12649 262144 65536 65536 NT_STATUS_OK
WriteX 12649 327680 65536 65536 NT_STATUS_OK
WriteX 12649 393216 65536 65536 NT_STATUS_OK
WriteX 12649 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12650 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12650 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12650 8192 4096 4096 NT_STATUS_OK
ReadX 12650 12288 4096 4096 NT_STATUS_OK
ReadX 12650 16384 4096 4096 NT_STATUS_OK
ReadX 12650 20480 4096 4096 NT_STATUS_OK
ReadX 12650 24576 4096 4096 NT_STATUS_OK
ReadX 12650 28672 4096 4096 NT_STATUS_OK
ReadX 12650 32768 4096 4096 NT_STATUS_OK
ReadX 12650 36864 4096 4096 NT_STATUS_OK
ReadX 12650 40960 4096 4096 NT_STATUS_OK
ReadX 12650 45056 4096 4096 NT_STATUS_OK
ReadX 12650 49152 4096 4096 NT_STATUS_OK
ReadX 12650 53248 4096 4096 NT_STATUS_OK
ReadX 12650 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12650 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12648 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12653 NT_STATUS_OK
WriteX 12653 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12653 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12653 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12653 1004 NT_STATUS_OK
WriteX 12653 0 57088 57088 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
Flush 12653 NT_STATUS_OK
Close 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12654 NT_STATUS_OK
SET_FILE_INFORMATION 12654 1004 NT_STATUS_OK
Close 12654 NT_STATUS_OK
SET_FILE_INFORMATION 12653 1004 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
Close 12653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12655 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12657 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12658 NT_STATUS_OK
WriteX 12658 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12658 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12658 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
WriteX 12658 0 51456 51456 NT_STATUS_OK
WriteX 12658 0 4096 4096 NT_STATUS_OK
Flush 12658 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12658 1004 NT_STATUS_OK
WriteX 12658 0 4096 4096 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12662 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12664 NT_STATUS_OK
Close 12664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12667 NT_STATUS_OK
WriteX 12667 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12667 258 NT_STATUS_OK
WriteX 12667 0 53077 53077 NT_STATUS_OK
Close 12667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12668 NT_STATUS_OK
WriteX 12668 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12668 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12668 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
WriteX 12668 0 65536 65536 NT_STATUS_OK
WriteX 12668 65536 1856 1856 NT_STATUS_OK
WriteX 12668 0 4096 4096 NT_STATUS_OK
Flush 12668 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
WriteX 12668 0 4096 4096 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Close 12662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12677 NT_STATUS_OK
WriteX 12677 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 258 NT_STATUS_OK
WriteX 12677 0 7983 7983 NT_STATUS_OK
Close 12677 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12679 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12682 NT_STATUS_OK
WriteX 12682 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12682 258 NT_STATUS_OK
WriteX 12682 0 65536 65536 NT_STATUS_OK
WriteX 12682 65536 65536 65536 NT_STATUS_OK
WriteX 12682 131072 65536 65536 NT_STATUS_OK
WriteX 12682 196608 65536 65536 NT_STATUS_OK
WriteX 12682 262144 65536 65536 NT_STATUS_OK
WriteX 12682 327680 65536 65536 NT_STATUS_OK
WriteX 12682 393216 65536 65536 NT_STATUS_OK
WriteX 12682 458752 46731 46731 NT_STATUS_OK
Close 12682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12683 NT_STATUS_OK
WriteX 12683 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12683 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12672 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12683 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
WriteX 12683 0 65536 65536 NT_STATUS_OK
WriteX 12683 65536 22848 22848 NT_STATUS_OK
WriteX 12683 0 4096 4096 NT_STATUS_OK
Flush 12683 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12683 1004 NT_STATUS_OK
WriteX 12683 0 4096 4096 NT_STATUS_OK
Close 12683 NT_STATUS_OK
Close 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12687 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12688 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12688 1004 NT_STATUS_OK
ReadX 12688 8192 4096 4096 NT_STATUS_OK
ReadX 12688 12288 4096 4096 NT_STATUS_OK
ReadX 12688 16384 4096 4096 NT_STATUS_OK
ReadX 12688 20480 4096 4096 NT_STATUS_OK
ReadX 12688 24576 4096 4096 NT_STATUS_OK
ReadX 12688 28672 4096 4096 NT_STATUS_OK
ReadX 12688 32768 4096 4096 NT_STATUS_OK
ReadX 12688 36864 4096 4096 NT_STATUS_OK
ReadX 12688 40960 4096 4096 NT_STATUS_OK
ReadX 12688 45056 4096 4096 NT_STATUS_OK
ReadX 12688 49152 4096 4096 NT_STATUS_OK
ReadX 12688 53248 4096 4096 NT_STATUS_OK
ReadX 12688 57344 4096 4096 NT_STATUS_OK
ReadX 12688 61440 4096 4096 NT_STATUS_OK
ReadX 12688 65536 4096 4096 NT_STATUS_OK
ReadX 12688 69632 4096 4096 NT_STATUS_OK
ReadX 12688 73728 4096 4096 NT_STATUS_OK
ReadX 12688 77824 4096 4096 NT_STATUS_OK
ReadX 12688 81920 4096 4096 NT_STATUS_OK
ReadX 12688 86016 4096 4096 NT_STATUS_OK
ReadX 12688 90112 4096 4096 NT_STATUS_OK
ReadX 12688 94208 4096 4096 NT_STATUS_OK
ReadX 12688 98304 4096 4096 NT_STATUS_OK
ReadX 12688 102400 4096 4096 NT_STATUS_OK
ReadX 12688 106496 4096 4096 NT_STATUS_OK
ReadX 12688 110592 4096 4096 NT_STATUS_OK
ReadX 12688 114688 4096 4096 NT_STATUS_OK
ReadX 12688 118784 4096 4096 NT_STATUS_OK
ReadX 12688 122880 4096 4096 NT_STATUS_OK
ReadX 12688 126976 4096 4096 NT_STATUS_OK
ReadX 12688 131072 4096 4096 NT_STATUS_OK
ReadX 12688 135168 4096 4096 NT_STATUS_OK
ReadX 12688 139264 4096 4096 NT_STATUS_OK
ReadX 12688 143360 4096 4096 NT_STATUS_OK
ReadX 12688 147456 4096 4096 NT_STATUS_OK
ReadX 12688 151552 4096 4096 NT_STATUS_OK
ReadX 12688 155648 4096 4096 NT_STATUS_OK
ReadX 12688 159744 4096 4096 NT_STATUS_OK
ReadX 12688 163840 4096 4096 NT_STATUS_OK
ReadX 12688 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12688 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12689 NT_STATUS_OK
Close 12689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12691 NT_STATUS_OK
WriteX 12691 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12691 258 NT_STATUS_OK
Close 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12692 NT_STATUS_OK
SET_FILE_INFORMATION 12692 1004 NT_STATUS_OK
Close 12692 NT_STATUS_OK
WriteX 12691 0 42388 42388 NT_STATUS_OK
Close 12691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12693 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
ReadX 12695 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12696 NT_STATUS_OK
WriteX 12696 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12696 258 NT_STATUS_OK
SET_FILE_INFORMATION 12696 1004 NT_STATUS_OK
WriteX 12696 0 42652 42652 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Close 12695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 4096 4096 NT_STATUS_OK
ReadX 12700 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12702 NT_STATUS_OK
Close 12702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12705 NT_STATUS_OK
WriteX 12705 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12705 258 NT_STATUS_OK
WriteX 12705 0 65536 65536 NT_STATUS_OK
WriteX 12705 65536 49 49 NT_STATUS_OK
Close 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 61440 61440 NT_STATUS_OK
ReadX 12706 61440 4096 4096 NT_STATUS_OK
ReadX 12706 65536 61440 61440 NT_STATUS_OK
ReadX 12706 126976 4096 4096 NT_STATUS_OK
ReadX 12706 131072 61440 61440 NT_STATUS_OK
ReadX 12706 192512 4096 4096 NT_STATUS_OK
ReadX 12706 196608 61440 61440 NT_STATUS_OK
ReadX 12706 258048 4096 4096 NT_STATUS_OK
ReadX 12706 262144 61440 61440 NT_STATUS_OK
ReadX 12706 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 61440 61440 NT_STATUS_OK
ReadX 12707 61440 4096 4096 NT_STATUS_OK
ReadX 12707 65536 61440 61440 NT_STATUS_OK
ReadX 12707 126976 4096 4096 NT_STATUS_OK
ReadX 12707 131072 61440 61440 NT_STATUS_OK
ReadX 12707 192512 4096 4096 NT_STATUS_OK
ReadX 12707 196608 61440 61440 NT_STATUS_OK
ReadX 12707 258048 4096 4096 NT_STATUS_OK
ReadX 12707 262144 61440 61440 NT_STATUS_OK
ReadX 12707 323584 4096 4096 NT_STATUS_OK
ReadX 12707 327680 61440 61440 NT_STATUS_OK
ReadX 12707 389120 4096 4096 NT_STATUS_OK
ReadX 12707 393216 61440 61440 NT_STATUS_OK
ReadX 12707 454656 4096 4096 NT_STATUS_OK
ReadX 12707 458752 61440 61440 NT_STATUS_OK
ReadX 12707 520192 4096 4096 NT_STATUS_OK
ReadX 12707 524288 61440 61440 NT_STATUS_OK
ReadX 12707 585728 4096 4096 NT_STATUS_OK
ReadX 12707 589824 61440 61440 NT_STATUS_OK
ReadX 12707 651264 4096 4096 NT_STATUS_OK
ReadX 12707 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 61440 61440 NT_STATUS_OK
ReadX 12708 61440 4096 4096 NT_STATUS_OK
ReadX 12708 65536 61440 61440 NT_STATUS_OK
ReadX 12708 126976 4096 4096 NT_STATUS_OK
ReadX 12708 131072 61440 61440 NT_STATUS_OK
ReadX 12708 192512 4096 4096 NT_STATUS_OK
ReadX 12708 196608 61440 61440 NT_STATUS_OK
ReadX 12708 258048 4096 4096 NT_STATUS_OK
ReadX 12708 262144 61440 61440 NT_STATUS_OK
ReadX 12708 323584 4096 4096 NT_STATUS_OK
ReadX 12708 327680 61440 61440 NT_STATUS_OK
ReadX 12708 389120 4096 4096 NT_STATUS_OK
ReadX 12708 393216 61440 61440 NT_STATUS_OK
ReadX 12708 454656 4096 4096 NT_STATUS_OK
ReadX 12708 458752 61440 61440 NT_STATUS_OK
ReadX 12708 520192 4096 4096 NT_STATUS_OK
ReadX 12708 524288 61440 61440 NT_STATUS_OK
ReadX 12708 585728 4096 4096 NT_STATUS_OK
ReadX 12708 589824 61440 61440 NT_STATUS_OK
ReadX 12708 651264 4096 4096 NT_STATUS_OK
ReadX 12708 655360 61440 61440 NT_STATUS_OK
ReadX 12708 716800 4096 4096 NT_STATUS_OK
ReadX 12708 720896 61440 61440 NT_STATUS_OK
ReadX 12708 782336 4096 4096 NT_STATUS_OK
ReadX 12708 786432 61440 61440 NT_STATUS_OK
ReadX 12708 847872 4096 4096 NT_STATUS_OK
ReadX 12708 851968 61440 61440 NT_STATUS_OK
ReadX 12708 913408 4096 4096 NT_STATUS_OK
ReadX 12708 917504 61440 61440 NT_STATUS_OK
ReadX 12708 978944 4096 4096 NT_STATUS_OK
ReadX 12708 983040 61440 61440 NT_STATUS_OK
ReadX 12708 1044480 4096 4096 NT_STATUS_OK
ReadX 12708 1048576 61440 61440 NT_STATUS_OK
ReadX 12708 1110016 4096 4096 NT_STATUS_OK
ReadX 12708 1114112 61440 61440 NT_STATUS_OK
ReadX 12708 1175552 4096 4096 NT_STATUS_OK
ReadX 12708 1179648 61440 61440 NT_STATUS_OK
ReadX 12708 1241088 4096 4096 NT_STATUS_OK
ReadX 12708 1245184 61440 61440 NT_STATUS_OK
ReadX 12708 1306624 4096 4096 NT_STATUS_OK
ReadX 12708 1310720 61440 61440 NT_STATUS_OK
ReadX 12708 1372160 4096 4096 NT_STATUS_OK
ReadX 12708 1376256 61440 61440 NT_STATUS_OK
ReadX 12708 1437696 4096 4096 NT_STATUS_OK
ReadX 12708 1441792 61440 61440 NT_STATUS_OK
ReadX 12708 1503232 4096 4096 NT_STATUS_OK
ReadX 12708 1507328 61440 61440 NT_STATUS_OK
ReadX 12708 1568768 4096 4096 NT_STATUS_OK
ReadX 12708 1572864 61440 61440 NT_STATUS_OK
ReadX 12708 1634304 4096 4096 NT_STATUS_OK
ReadX 12708 1638400 61440 61440 NT_STATUS_OK
ReadX 12708 1699840 4096 4096 NT_STATUS_OK
ReadX 12708 1703936 61440 61440 NT_STATUS_OK
ReadX 12708 1765376 4096 4096 NT_STATUS_OK
ReadX 12708 1769472 61440 61440 NT_STATUS_OK
ReadX 12708 1830912 4096 4096 NT_STATUS_OK
ReadX 12708 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12710 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12710 1005 NT_STATUS_OK
ReadX 12710 2156 24 24 NT_STATUS_OK
ReadX 12710 2139 276 276 NT_STATUS_OK
ReadX 12710 2136 14 14 NT_STATUS_OK
ReadX 12710 2136 7 7 NT_STATUS_OK
ReadX 12710 2138 12 12 NT_STATUS_OK
ReadX 12710 2137 8 8 NT_STATUS_OK
ReadX 12710 2135 15 15 NT_STATUS_OK
ReadX 12710 0 16 16 NT_STATUS_OK
ReadX 12710 16 2048 2048 NT_STATUS_OK
ReadX 12710 2064 2048 2048 NT_STATUS_OK
ReadX 12710 257 2048 2048 NT_STATUS_OK
ReadX 12710 385 2048 2048 NT_STATUS_OK
ReadX 12710 513 2048 2048 NT_STATUS_OK
ReadX 12710 641 2048 2048 NT_STATUS_OK
ReadX 12710 769 2048 2048 NT_STATUS_OK
ReadX 12710 897 2048 2048 NT_STATUS_OK
ReadX 12710 1025 2048 2048 NT_STATUS_OK
ReadX 12710 1153 2048 2048 NT_STATUS_OK
ReadX 12710 1281 2048 2048 NT_STATUS_OK
ReadX 12710 1409 2048 2048 NT_STATUS_OK
ReadX 12710 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12715 NT_STATUS_OK
WriteX 12715 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12715 258 NT_STATUS_OK
WriteX 12715 0 10575 10575 NT_STATUS_OK
Flush 12715 NT_STATUS_OK
Close 12715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12716 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12718 NT_STATUS_OK
ReadX 12718 0 4096 4096 NT_STATUS_OK
Close 12710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12720 NT_STATUS_OK
LockX 12720 2147483538 1 NT_STATUS_OK
UnlockX 12720 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1005 NT_STATUS_OK
ReadX 12720 0 512 512 NT_STATUS_OK
ReadX 12720 512 512 512 NT_STATUS_OK
ReadX 12720 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12720 1004 NT_STATUS_OK
Close 12720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12721 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 1005 NT_STATUS_OK
ReadX 12721 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12722 NT_STATUS_OK
LockX 12722 2147483538 1 NT_STATUS_OK
UnlockX 12722 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 1005 NT_STATUS_OK
ReadX 12722 0 512 512 NT_STATUS_OK
ReadX 12722 512 512 512 NT_STATUS_OK
ReadX 12722 1024 512 512 NT_STATUS_OK
ReadX 12722 288 20 20 NT_STATUS_OK
ReadX 12722 308 2084 2084 NT_STATUS_OK
ReadX 12722 388 2084 2084 NT_STATUS_OK
ReadX 12722 388 2084 2084 NT_STATUS_OK
ReadX 12709 2157 1386 1386 NT_STATUS_OK
ReadX 12722 2472 399 399 NT_STATUS_OK
ReadX 12722 3072 1536 1536 NT_STATUS_OK
ReadX 12722 544 149 149 NT_STATUS_OK
ReadX 12722 693 485 485 NT_STATUS_OK
Close 12722 NT_STATUS_OK
ReadX 12709 2157 4096 4096 NT_STATUS_OK
ReadX 12709 6253 4096 4096 NT_STATUS_OK
ReadX 12709 10349 4096 4096 NT_STATUS_OK
ReadX 12709 14445 4096 4096 NT_STATUS_OK
ReadX 12709 18541 4096 4096 NT_STATUS_OK
ReadX 12709 22637 256 256 NT_STATUS_OK
ReadX 12709 22893 4096 4096 NT_STATUS_OK
ReadX 12709 26989 4096 4096 NT_STATUS_OK
ReadX 12709 31085 4096 4096 NT_STATUS_OK
ReadX 12709 35181 4096 4096 NT_STATUS_OK
ReadX 12709 39277 4096 4096 NT_STATUS_OK
ReadX 12709 43373 4096 4096 NT_STATUS_OK
ReadX 12709 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12709 2157 1024 1024 NT_STATUS_OK
ReadX 12709 1667 4688 4688 NT_STATUS_OK
ReadX 12709 6355 3516 3516 NT_STATUS_OK
ReadX 12709 9871 16384 16384 NT_STATUS_OK
ReadX 12709 26255 3771 3771 NT_STATUS_OK
ReadX 12709 30026 2048 2048 NT_STATUS_OK
ReadX 12709 32074 1024 1024 NT_STATUS_OK
ReadX 12709 33098 6652 6652 NT_STATUS_OK
ReadX 12709 39750 16384 16384 NT_STATUS_OK
ReadX 12709 56134 10496 10496 NT_STATUS_OK
ReadX 12709 66630 1784 1784 NT_STATUS_OK
ReadX 12709 68414 90 90 NT_STATUS_OK
ReadX 12709 68504 273 273 NT_STATUS_OK
ReadX 12709 68777 1600 1600 NT_STATUS_OK
ReadX 12709 70377 640 640 NT_STATUS_OK
ReadX 12709 71017 1280 1280 NT_STATUS_OK
ReadX 12709 72297 8464 8464 NT_STATUS_OK
ReadX 12709 80761 158 158 NT_STATUS_OK
ReadX 12709 80919 912 912 NT_STATUS_OK
ReadX 12709 81831 1980 1980 NT_STATUS_OK
ReadX 12709 83811 2256 2256 NT_STATUS_OK
ReadX 12709 86067 400 400 NT_STATUS_OK
ReadX 12709 86467 252 252 NT_STATUS_OK
ReadX 12709 86719 42 42 NT_STATUS_OK
ReadX 12709 86761 725 725 NT_STATUS_OK
ReadX 12709 2009 512 512 NT_STATUS_OK
ReadX 12709 3895 9 9 NT_STATUS_OK
ReadX 12709 3781 46 46 NT_STATUS_OK
ReadX 12709 4059 92 92 NT_STATUS_OK
ReadX 12709 3781 92 92 NT_STATUS_OK
ReadX 12709 3986 184 184 NT_STATUS_OK
ReadX 12709 3987 16384 16384 NT_STATUS_OK
ReadX 12709 3902 16384 16384 NT_STATUS_OK
ReadX 12709 3781 10240 10240 NT_STATUS_OK
ReadX 12709 3821 16384 16384 NT_STATUS_OK
ReadX 12709 3891 935 935 NT_STATUS_OK
ReadX 12709 4060 10240 10240 NT_STATUS_OK
ReadX 12709 4059 184 184 NT_STATUS_OK
ReadX 12709 256 184 184 NT_STATUS_OK
ReadX 12709 256 1026 1026 NT_STATUS_OK
ReadX 12709 3901 326 326 NT_STATUS_OK
ReadX 12709 3899 652 652 NT_STATUS_OK
ReadX 12709 256 2 2 NT_STATUS_OK
ReadX 12709 258 4948 4948 NT_STATUS_OK
Close 12709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12724 NT_STATUS_OK
Close 12724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12727 NT_STATUS_OK
WriteX 12727 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12727 258 NT_STATUS_OK
WriteX 12727 0 65536 65536 NT_STATUS_OK
WriteX 12727 65536 65536 65536 NT_STATUS_OK
WriteX 12727 131072 65536 65536 NT_STATUS_OK
WriteX 12727 196608 65536 65536 NT_STATUS_OK
WriteX 12727 262144 65536 65536 NT_STATUS_OK
WriteX 12727 327680 65536 65536 NT_STATUS_OK
WriteX 12727 393216 65536 65536 NT_STATUS_OK
WriteX 12727 458752 65536 65536 NT_STATUS_OK
WriteX 12727 524288 65536 65536 NT_STATUS_OK
WriteX 12727 589824 35257 35257 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12729 NT_STATUS_OK
Close 12729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12732 NT_STATUS_OK
WriteX 12732 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12732 258 NT_STATUS_OK
WriteX 12732 0 65536 65536 NT_STATUS_OK
WriteX 12732 65536 65536 65536 NT_STATUS_OK
WriteX 12732 131072 65536 65536 NT_STATUS_OK
WriteX 12732 196608 65536 65536 NT_STATUS_OK
WriteX 12732 262144 65536 65536 NT_STATUS_OK
WriteX 12732 327680 65536 65536 NT_STATUS_OK
WriteX 12732 393216 65536 65536 NT_STATUS_OK
WriteX 12732 458752 65536 65536 NT_STATUS_OK
WriteX 12732 524288 65536 65536 NT_STATUS_OK
WriteX 12732 589824 57598 57598 NT_STATUS_OK
Close 12732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12734 NT_STATUS_OK
WriteX 12734 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12734 258 NT_STATUS_OK
WriteX 12734 0 12543 12543 NT_STATUS_OK
Flush 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12736 NT_STATUS_OK
Close 12736 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12740 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 1005 NT_STATUS_OK
ReadX 12740 1938 24 24 NT_STATUS_OK
ReadX 12740 1920 276 276 NT_STATUS_OK
ReadX 12740 1918 14 14 NT_STATUS_OK
ReadX 12740 1918 7 7 NT_STATUS_OK
ReadX 12740 1919 12 12 NT_STATUS_OK
ReadX 12740 1919 8 8 NT_STATUS_OK
ReadX 12740 1917 15 15 NT_STATUS_OK
ReadX 12740 0 16 16 NT_STATUS_OK
ReadX 12740 16 2048 2048 NT_STATUS_OK
ReadX 12740 2064 2048 2048 NT_STATUS_OK
ReadX 12740 257 2048 2048 NT_STATUS_OK
ReadX 12740 385 2048 2048 NT_STATUS_OK
ReadX 12740 513 2048 2048 NT_STATUS_OK
ReadX 12740 641 2048 2048 NT_STATUS_OK
ReadX 12740 769 2048 2048 NT_STATUS_OK
ReadX 12740 897 2048 2048 NT_STATUS_OK
ReadX 12740 1025 2048 2048 NT_STATUS_OK
ReadX 12740 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12742 NT_STATUS_OK
Close 12742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12745 NT_STATUS_OK
WriteX 12745 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12745 258 NT_STATUS_OK
WriteX 12745 0 11588 11588 NT_STATUS_OK
Flush 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12746 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12748 NT_STATUS_OK
ReadX 12748 0 4096 4096 NT_STATUS_OK
Close 12740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12750 NT_STATUS_OK
WriteX 12750 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12750 258 NT_STATUS_OK
WriteX 12750 0 11615 11615 NT_STATUS_OK
Flush 12750 NT_STATUS_OK
Close 12750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12759 NT_STATUS_OK
WriteX 12759 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12759 258 NT_STATUS_OK
WriteX 12759 0 65536 65536 NT_STATUS_OK
WriteX 12759 65536 16050 16050 NT_STATUS_OK
Close 12759 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 1939 64 64 NT_STATUS_OK
ReadX 12739 128 248 248 NT_STATUS_OK
ReadX 12739 128 568 568 NT_STATUS_OK
ReadX 12739 3872 1536 1536 NT_STATUS_OK
ReadX 12739 3456 2560 2560 NT_STATUS_OK
ReadX 12739 3136 512 512 NT_STATUS_OK
ReadX 12739 2880 4096 4096 NT_STATUS_OK
ReadX 12739 3264 3072 3072 NT_STATUS_OK
ReadX 12739 320 4096 4096 NT_STATUS_OK
ReadX 12739 1024 4096 4096 NT_STATUS_OK
ReadX 12739 3616 4096 4096 NT_STATUS_OK
ReadX 12739 1939 64 64 NT_STATUS_OK
ReadX 12739 128 248 248 NT_STATUS_OK
ReadX 12739 128 608 608 NT_STATUS_OK
ReadX 12739 2858 1024 1024 NT_STATUS_OK
ReadX 12739 2810 4096 4096 NT_STATUS_OK
ReadX 12739 2826 4096 4096 NT_STATUS_OK
ReadX 12739 2580 2048 2048 NT_STATUS_OK
ReadX 12739 2800 2560 2560 NT_STATUS_OK
ReadX 12739 2100 4096 4096 NT_STATUS_OK
ReadX 12739 2084 4096 4096 NT_STATUS_OK
ReadX 12739 868 4096 4096 NT_STATUS_OK
ReadX 12739 2324 4096 4096 NT_STATUS_OK
ReadX 12739 884 4096 4096 NT_STATUS_OK
ReadX 12739 2604 1024 1024 NT_STATUS_OK
ReadX 12739 580 4096 4096 NT_STATUS_OK
ReadX 12739 596 4096 4096 NT_STATUS_OK
ReadX 12739 2752 4096 4096 NT_STATUS_OK
ReadX 12739 2842 1024 1024 NT_STATUS_OK
ReadX 12739 660 4096 4096 NT_STATUS_OK
ReadX 12739 2720 4096 4096 NT_STATUS_OK
ReadX 12739 2736 4096 4096 NT_STATUS_OK
ReadX 12739 628 4096 4096 NT_STATUS_OK
ReadX 12739 2704 4096 4096 NT_STATUS_OK
ReadX 12739 1556 4096 4096 NT_STATUS_OK
ReadX 12739 576 4096 4096 NT_STATUS_OK
ReadX 12739 3168 1536 1536 NT_STATUS_OK
ReadX 12739 832 4096 4096 NT_STATUS_OK
ReadX 12739 1088 4096 4096 NT_STATUS_OK
ReadX 12739 1344 4096 4096 NT_STATUS_OK
ReadX 12739 1600 4096 4096 NT_STATUS_OK
ReadX 12739 1856 4096 4096 NT_STATUS_OK
ReadX 12739 2112 4096 4096 NT_STATUS_OK
ReadX 12739 1892 4096 4096 NT_STATUS_OK
ReadX 12739 820 4096 4096 NT_STATUS_OK
ReadX 12739 788 4096 4096 NT_STATUS_OK
ReadX 12739 1604 4096 4096 NT_STATUS_OK
ReadX 12739 3648 4096 4096 NT_STATUS_OK
ReadX 12739 2608 4096 4096 NT_STATUS_OK
ReadX 12739 548 4096 4096 NT_STATUS_OK
ReadX 12739 740 4096 4096 NT_STATUS_OK
ReadX 12739 1344 4096 4096 NT_STATUS_OK
ReadX 12739 3392 4096 4096 NT_STATUS_OK
ReadX 12739 3904 4096 4096 NT_STATUS_OK
ReadX 12739 644 4096 4096 NT_STATUS_OK
ReadX 12739 676 4096 4096 NT_STATUS_OK
ReadX 12739 2688 4096 4096 NT_STATUS_OK
ReadX 12739 320 4096 4096 NT_STATUS_OK
ReadX 12739 900 4096 4096 NT_STATUS_OK
ReadX 12739 1908 4096 4096 NT_STATUS_OK
ReadX 12739 852 4096 4096 NT_STATUS_OK
ReadX 12739 724 4096 4096 NT_STATUS_OK
ReadX 12739 2292 4096 4096 NT_STATUS_OK
ReadX 12739 612 4096 4096 NT_STATUS_OK
ReadX 12739 388 4096 4096 NT_STATUS_OK
ReadX 12739 2368 4096 4096 NT_STATUS_OK
ReadX 12739 2624 4096 4096 NT_STATUS_OK
ReadX 12739 500 4096 4096 NT_STATUS_OK
ReadX 12739 356 4096 4096 NT_STATUS_OK
ReadX 12739 1024 4096 4096 NT_STATUS_OK
ReadX 12739 576 4096 4096 NT_STATUS_OK
ReadX 12739 340 4096 4096 NT_STATUS_OK
ReadX 12739 420 4096 4096 NT_STATUS_OK
ReadX 12739 1600 4096 4096 NT_STATUS_OK
ReadX 12739 404 4096 4096 NT_STATUS_OK
ReadX 12739 1428 4096 4096 NT_STATUS_OK
ReadX 12739 2656 4096 4096 NT_STATUS_OK
ReadX 12739 2624 4096 4096 NT_STATUS_OK
ReadX 12739 452 4096 4096 NT_STATUS_OK
ReadX 12739 692 4096 4096 NT_STATUS_OK
ReadX 12739 564 4096 4096 NT_STATUS_OK
ReadX 12739 372 4096 4096 NT_STATUS_OK
ReadX 12739 468 4096 4096 NT_STATUS_OK
ReadX 12739 484 4096 4096 NT_STATUS_OK
ReadX 12739 1088 4096 4096 NT_STATUS_OK
ReadX 12739 1924 4096 4096 NT_STATUS_OK
ReadX 12739 2768 4096 4096 NT_STATUS_OK
ReadX 12739 832 4096 4096 NT_STATUS_OK
ReadX 12739 836 4096 4096 NT_STATUS_OK
ReadX 12739 1856 4096 4096 NT_STATUS_OK
ReadX 12739 2640 4096 4096 NT_STATUS_OK
ReadX 12739 436 4096 4096 NT_STATUS_OK
ReadX 12739 1828 4096 4096 NT_STATUS_OK
ReadX 12739 804 4096 4096 NT_STATUS_OK
ReadX 12739 1860 4096 4096 NT_STATUS_OK
ReadX 12739 1812 4096 4096 NT_STATUS_OK
ReadX 12739 756 4096 4096 NT_STATUS_OK
ReadX 12739 1636 4096 4096 NT_STATUS_OK
ReadX 12739 772 4096 4096 NT_STATUS_OK
ReadX 12739 2036 4096 4096 NT_STATUS_OK
ReadX 12739 1220 4096 4096 NT_STATUS_OK
ReadX 12739 1652 4096 4096 NT_STATUS_OK
ReadX 12739 2588 4096 4096 NT_STATUS_OK
ReadX 12739 916 4096 4096 NT_STATUS_OK
ReadX 12739 260 4096 4096 NT_STATUS_OK
ReadX 12739 932 4096 4096 NT_STATUS_OK
ReadX 12739 2624 4096 4096 NT_STATUS_OK
ReadX 12739 308 4096 4096 NT_STATUS_OK
ReadX 12739 292 4096 4096 NT_STATUS_OK
ReadX 12739 1140 4096 4096 NT_STATUS_OK
ReadX 12739 276 4096 4096 NT_STATUS_OK
ReadX 12739 2020 4096 4096 NT_STATUS_OK
ReadX 12739 2880 4096 4096 NT_STATUS_OK
ReadX 12739 516 4096 4096 NT_STATUS_OK
ReadX 12739 1844 4096 4096 NT_STATUS_OK
ReadX 12739 1124 4096 4096 NT_STATUS_OK
ReadX 12739 3136 4096 4096 NT_STATUS_OK
ReadX 12739 324 4096 4096 NT_STATUS_OK
ReadX 12739 1156 4096 4096 NT_STATUS_OK
ReadX 12739 1172 4096 4096 NT_STATUS_OK
ReadX 12739 2112 4096 4096 NT_STATUS_OK
ReadX 12739 2368 4096 4096 NT_STATUS_OK
ReadX 12739 964 4096 4096 NT_STATUS_OK
ReadX 12739 980 4096 4096 NT_STATUS_OK
ReadX 12739 1012 4096 4096 NT_STATUS_OK
ReadX 12739 532 4096 4096 NT_STATUS_OK
ReadX 12739 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12739 1620 4096 4096 NT_STATUS_OK
ReadX 12739 1604 4096 4096 NT_STATUS_OK
ReadX 12739 2116 4096 4096 NT_STATUS_OK
ReadX 12739 2132 4096 4096 NT_STATUS_OK
ReadX 12739 2148 4096 4096 NT_STATUS_OK
ReadX 12739 2276 4096 4096 NT_STATUS_OK
ReadX 12739 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12761 NT_STATUS_OK
Close 12761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12764 NT_STATUS_OK
QUERY_FILE_INFORMATION 12719 1004 NT_STATUS_OK
Close 12719 NT_STATUS_OK
WriteX 12764 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12764 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 1004 NT_STATUS_OK
Close 12721 NT_STATUS_OK
WriteX 12764 0 65536 65536 NT_STATUS_OK
WriteX 12764 65536 64850 64850 NT_STATUS_OK
Close 12764 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12766 NT_STATUS_OK
WriteX 12766 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12766 258 NT_STATUS_OK
ReadX 12739 2068 4096 4096 NT_STATUS_OK
ReadX 12739 1588 4096 4096 NT_STATUS_OK
ReadX 12739 1572 4096 4096 NT_STATUS_OK
WriteX 12766 0 18630 18630 NT_STATUS_OK
Flush 12766 NT_STATUS_OK
Close 12766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12768 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12739 612 4096 4096 NT_STATUS_OK
ReadX 12739 564 4096 4096 NT_STATUS_OK
ReadX 12739 1876 4096 4096 NT_STATUS_OK
ReadX 12739 628 4096 4096 NT_STATUS_OK
ReadX 12739 740 4096 4096 NT_STATUS_OK
ReadX 12739 724 4096 4096 NT_STATUS_OK
ReadX 12739 644 4096 4096 NT_STATUS_OK
ReadX 12739 2324 4096 4096 NT_STATUS_OK
ReadX 12739 660 4096 4096 NT_STATUS_OK
ReadX 12739 852 4096 4096 NT_STATUS_OK
ReadX 12739 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12739 2368 4096 4096 NT_STATUS_OK
ReadX 12739 1024 4096 4096 NT_STATUS_OK
ReadX 12739 320 4096 4096 NT_STATUS_OK
ReadX 12739 580 4096 4096 NT_STATUS_OK
ReadX 12739 3136 512 512 NT_STATUS_OK
ReadX 12739 2880 4096 4096 NT_STATUS_OK
Close 12739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 61440 4096 4096 NT_STATUS_OK
ReadX 12771 126976 4096 4096 NT_STATUS_OK
WriteX 12771 0 65536 65536 NT_STATUS_OK
WriteX 12771 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12772 NT_STATUS_OK
ReadX 12772 61440 4096 4096 NT_STATUS_OK
ReadX 12772 126976 4096 4096 NT_STATUS_OK
ReadX 12772 192512 4096 4096 NT_STATUS_OK
ReadX 12772 258048 4096 4096 NT_STATUS_OK
WriteX 12772 0 65536 65536 NT_STATUS_OK
WriteX 12772 65536 65536 65536 NT_STATUS_OK
WriteX 12772 131072 65536 65536 NT_STATUS_OK
WriteX 12772 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 61440 4096 4096 NT_STATUS_OK
ReadX 12773 126976 4096 4096 NT_STATUS_OK
ReadX 12773 192512 4096 4096 NT_STATUS_OK
ReadX 12773 258048 4096 4096 NT_STATUS_OK
ReadX 12773 323584 4096 4096 NT_STATUS_OK
ReadX 12773 389120 4096 4096 NT_STATUS_OK
ReadX 12773 454656 4096 4096 NT_STATUS_OK
ReadX 12773 520192 4096 4096 NT_STATUS_OK
WriteX 12773 0 65536 65536 NT_STATUS_OK
WriteX 12773 65536 65536 65536 NT_STATUS_OK
WriteX 12773 131072 65536 65536 NT_STATUS_OK
WriteX 12773 196608 65536 65536 NT_STATUS_OK
WriteX 12773 262144 65536 65536 NT_STATUS_OK
WriteX 12773 327680 65536 65536 NT_STATUS_OK
WriteX 12773 393216 65536 65536 NT_STATUS_OK
WriteX 12773 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12775 NT_STATUS_OK
Close 12775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12776 NT_STATUS_OK
WriteX 12776 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12774 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12774 0 8192 8192 NT_STATUS_OK
Flush 12774 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12772 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12781 NT_STATUS_OK
WriteX 12781 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12781 258 NT_STATUS_OK
WriteX 12781 0 62591 62591 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12783 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12786 NT_STATUS_OK
WriteX 12786 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12786 258 NT_STATUS_OK
WriteX 12786 0 10845 10845 NT_STATUS_OK
Close 12786 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12788 NT_STATUS_OK
Close 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12791 NT_STATUS_OK
WriteX 12791 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12791 258 NT_STATUS_OK
WriteX 12791 0 30118 30118 NT_STATUS_OK
Close 12791 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
WriteX 12776 0 64 64 NT_STATUS_OK
Close 12776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 61440 61440 NT_STATUS_OK
ReadX 12793 61440 4096 4096 NT_STATUS_OK
ReadX 12793 65536 61440 61440 NT_STATUS_OK
ReadX 12793 126976 4096 4096 NT_STATUS_OK
ReadX 12793 131072 61440 61440 NT_STATUS_OK
ReadX 12793 192512 4096 4096 NT_STATUS_OK
ReadX 12793 196608 61440 61440 NT_STATUS_OK
ReadX 12793 258048 4096 4096 NT_STATUS_OK
ReadX 12793 262144 61440 61440 NT_STATUS_OK
ReadX 12793 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 61440 61440 NT_STATUS_OK
ReadX 12794 61440 4096 4096 NT_STATUS_OK
ReadX 12794 65536 61440 61440 NT_STATUS_OK
ReadX 12794 126976 4096 4096 NT_STATUS_OK
ReadX 12794 131072 61440 61440 NT_STATUS_OK
ReadX 12794 192512 4096 4096 NT_STATUS_OK
ReadX 12794 196608 61440 61440 NT_STATUS_OK
ReadX 12794 258048 4096 4096 NT_STATUS_OK
ReadX 12794 262144 61440 61440 NT_STATUS_OK
ReadX 12794 323584 4096 4096 NT_STATUS_OK
ReadX 12794 327680 61440 61440 NT_STATUS_OK
ReadX 12794 389120 4096 4096 NT_STATUS_OK
ReadX 12794 393216 61440 61440 NT_STATUS_OK
ReadX 12794 454656 4096 4096 NT_STATUS_OK
ReadX 12794 458752 61440 61440 NT_STATUS_OK
ReadX 12794 520192 4096 4096 NT_STATUS_OK
ReadX 12794 524288 61440 61440 NT_STATUS_OK
ReadX 12794 585728 4096 4096 NT_STATUS_OK
ReadX 12794 589824 61440 61440 NT_STATUS_OK
ReadX 12794 651264 4096 4096 NT_STATUS_OK
ReadX 12794 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 61440 61440 NT_STATUS_OK
ReadX 12795 61440 4096 4096 NT_STATUS_OK
ReadX 12795 65536 61440 61440 NT_STATUS_OK
ReadX 12795 126976 4096 4096 NT_STATUS_OK
ReadX 12795 131072 61440 61440 NT_STATUS_OK
ReadX 12795 192512 4096 4096 NT_STATUS_OK
ReadX 12795 196608 61440 61440 NT_STATUS_OK
ReadX 12795 258048 4096 4096 NT_STATUS_OK
ReadX 12795 262144 61440 61440 NT_STATUS_OK
ReadX 12795 323584 4096 4096 NT_STATUS_OK
ReadX 12795 327680 61440 61440 NT_STATUS_OK
ReadX 12795 389120 4096 4096 NT_STATUS_OK
ReadX 12795 393216 61440 61440 NT_STATUS_OK
ReadX 12795 454656 4096 4096 NT_STATUS_OK
ReadX 12795 458752 61440 61440 NT_STATUS_OK
ReadX 12795 520192 4096 4096 NT_STATUS_OK
ReadX 12795 524288 61440 61440 NT_STATUS_OK
ReadX 12795 585728 4096 4096 NT_STATUS_OK
ReadX 12795 589824 61440 61440 NT_STATUS_OK
ReadX 12795 651264 4096 4096 NT_STATUS_OK
ReadX 12795 655360 61440 61440 NT_STATUS_OK
ReadX 12795 716800 4096 4096 NT_STATUS_OK
ReadX 12795 720896 61440 61440 NT_STATUS_OK
ReadX 12795 782336 4096 4096 NT_STATUS_OK
ReadX 12795 786432 61440 61440 NT_STATUS_OK
ReadX 12795 847872 4096 4096 NT_STATUS_OK
ReadX 12795 851968 61440 61440 NT_STATUS_OK
ReadX 12795 913408 4096 4096 NT_STATUS_OK
ReadX 12795 917504 61440 61440 NT_STATUS_OK
ReadX 12795 978944 4096 4096 NT_STATUS_OK
ReadX 12795 983040 61440 61440 NT_STATUS_OK
ReadX 12795 1044480 4096 4096 NT_STATUS_OK
ReadX 12795 1048576 61440 61440 NT_STATUS_OK
ReadX 12795 1110016 4096 4096 NT_STATUS_OK
ReadX 12795 1114112 61440 61440 NT_STATUS_OK
ReadX 12795 1175552 4096 4096 NT_STATUS_OK
ReadX 12795 1179648 61440 61440 NT_STATUS_OK
ReadX 12795 1241088 4096 4096 NT_STATUS_OK
ReadX 12795 1245184 61440 61440 NT_STATUS_OK
ReadX 12795 1306624 4096 4096 NT_STATUS_OK
ReadX 12795 1310720 61440 61440 NT_STATUS_OK
ReadX 12795 1372160 4096 4096 NT_STATUS_OK
ReadX 12795 1376256 61440 61440 NT_STATUS_OK
ReadX 12795 1437696 4096 4096 NT_STATUS_OK
ReadX 12795 1441792 61440 61440 NT_STATUS_OK
ReadX 12795 1503232 4096 4096 NT_STATUS_OK
ReadX 12795 1507328 61440 61440 NT_STATUS_OK
ReadX 12795 1568768 4096 4096 NT_STATUS_OK
ReadX 12795 1572864 61440 61440 NT_STATUS_OK
ReadX 12795 1634304 4096 4096 NT_STATUS_OK
ReadX 12795 1638400 61440 61440 NT_STATUS_OK
ReadX 12795 1699840 4096 4096 NT_STATUS_OK
ReadX 12795 1703936 61440 61440 NT_STATUS_OK
ReadX 12795 1765376 4096 4096 NT_STATUS_OK
ReadX 12795 1769472 61440 61440 NT_STATUS_OK
ReadX 12795 1830912 4096 4096 NT_STATUS_OK
ReadX 12795 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12796 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 4096 4096 NT_STATUS_OK
ReadX 12800 4096 4096 4096 NT_STATUS_OK
ReadX 12800 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12801 NT_STATUS_OK
Close 12801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12800 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12804 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12804 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 0 8192 8192 NT_STATUS_OK
ReadX 12808 8192 8192 8192 NT_STATUS_OK
ReadX 12808 16384 8192 8192 NT_STATUS_OK
ReadX 12808 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12810 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12813 NT_STATUS_OK
WriteX 12813 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12813 258 NT_STATUS_OK
WriteX 12813 0 10438 10438 NT_STATUS_OK
Close 12813 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12814 NT_STATUS_OK
Close 12814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12817 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12818 NT_STATUS_OK
Close 12818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12819 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
ReadX 12822 4096 4096 4096 NT_STATUS_OK
ReadX 12822 8192 4096 4096 NT_STATUS_OK
ReadX 12822 12288 8192 8192 NT_STATUS_OK
ReadX 12822 20480 8192 8192 NT_STATUS_OK
ReadX 12822 28672 8192 8192 NT_STATUS_OK
ReadX 12822 36864 8192 8192 NT_STATUS_OK
ReadX 12822 45056 8192 8192 NT_STATUS_OK
ReadX 12822 53248 8192 8192 NT_STATUS_OK
ReadX 12822 61440 8192 8192 NT_STATUS_OK
ReadX 12822 69632 8192 8192 NT_STATUS_OK
ReadX 12822 77824 8192 8192 NT_STATUS_OK
ReadX 12822 86016 8192 8192 NT_STATUS_OK
ReadX 12822 94208 8192 8192 NT_STATUS_OK
ReadX 12822 102400 8192 8192 NT_STATUS_OK
ReadX 12822 110592 8192 8192 NT_STATUS_OK
ReadX 12822 118784 8192 8192 NT_STATUS_OK
ReadX 12822 126976 8192 8192 NT_STATUS_OK
ReadX 12822 135168 8192 8192 NT_STATUS_OK
ReadX 12822 143360 8192 8192 NT_STATUS_OK
ReadX 12822 151552 8192 8192 NT_STATUS_OK
ReadX 12822 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12824 NT_STATUS_OK
Close 12824 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12827 NT_STATUS_OK
WriteX 12827 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12827 258 NT_STATUS_OK
WriteX 12827 0 28489 28489 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12828 NT_STATUS_OK
Close 12828 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12830 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12831 NT_STATUS_OK
Close 12831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 0 8192 8192 NT_STATUS_OK
ReadX 12834 8192 8192 8192 NT_STATUS_OK
ReadX 12834 16384 8192 8192 NT_STATUS_OK
ReadX 12834 24576 8192 8192 NT_STATUS_OK
ReadX 12834 32768 16384 16384 NT_STATUS_OK
ReadX 12834 49152 8192 8192 NT_STATUS_OK
ReadX 12834 57344 8192 8192 NT_STATUS_OK
ReadX 12834 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12836 NT_STATUS_OK
Close 12836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12834 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12839 NT_STATUS_OK
WriteX 12839 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12839 258 NT_STATUS_OK
WriteX 12839 0 29253 29253 NT_STATUS_OK
Close 12839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12843 NT_STATUS_OK
Close 12843 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12846 NT_STATUS_OK
WriteX 12846 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
WriteX 12846 0 30183 30183 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12847 NT_STATUS_OK
Close 12847 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12849 NT_STATUS_OK
WriteX 12849 0 510 510 NT_STATUS_OK
WriteX 12849 510 512 512 NT_STATUS_OK
WriteX 12849 1022 510 510 NT_STATUS_OK
WriteX 12849 1532 510 510 NT_STATUS_OK
WriteX 12849 2042 168 168 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12850 NT_STATUS_OK
Close 12850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
WriteX 12852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 61440 4096 4096 NT_STATUS_OK
ReadX 12853 126976 4096 4096 NT_STATUS_OK
WriteX 12853 0 65536 65536 NT_STATUS_OK
WriteX 12853 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 61440 4096 4096 NT_STATUS_OK
ReadX 12854 126976 4096 4096 NT_STATUS_OK
ReadX 12854 192512 4096 4096 NT_STATUS_OK
ReadX 12854 258048 4096 4096 NT_STATUS_OK
WriteX 12854 0 65536 65536 NT_STATUS_OK
WriteX 12854 65536 65536 65536 NT_STATUS_OK
WriteX 12854 131072 65536 65536 NT_STATUS_OK
WriteX 12854 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 61440 4096 4096 NT_STATUS_OK
ReadX 12855 126976 4096 4096 NT_STATUS_OK
ReadX 12855 192512 4096 4096 NT_STATUS_OK
ReadX 12855 258048 4096 4096 NT_STATUS_OK
ReadX 12855 323584 4096 4096 NT_STATUS_OK
ReadX 12855 389120 4096 4096 NT_STATUS_OK
ReadX 12855 454656 4096 4096 NT_STATUS_OK
ReadX 12855 520192 4096 4096 NT_STATUS_OK
WriteX 12855 0 65536 65536 NT_STATUS_OK
WriteX 12855 65536 65536 65536 NT_STATUS_OK
WriteX 12855 131072 65536 65536 NT_STATUS_OK
WriteX 12855 196608 65536 65536 NT_STATUS_OK
WriteX 12855 262144 65536 65536 NT_STATUS_OK
WriteX 12855 327680 65536 65536 NT_STATUS_OK
WriteX 12855 393216 65536 65536 NT_STATUS_OK
WriteX 12855 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12856 NT_STATUS_OK
Close 12856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12858 NT_STATUS_OK
Close 12858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12862 NT_STATUS_OK
Close 12862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12867 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12871 NT_STATUS_OK
Close 12871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12874 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12890 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12900 NT_STATUS_OK
Close 12900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12905 NT_STATUS_OK
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12918 NT_STATUS_OK
Close 12918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12921 NT_STATUS_OK
Close 12921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12924 NT_STATUS_OK
WriteX 12924 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12924 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12924 0 65536 65536 NT_STATUS_OK
WriteX 12924 65536 65536 65536 NT_STATUS_OK
WriteX 12924 131072 65536 65536 NT_STATUS_OK
WriteX 12924 196608 65536 65536 NT_STATUS_OK
WriteX 12924 262144 26634 26634 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12930 NT_STATUS_OK
Close 12930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12931 NT_STATUS_OK
ReadX 12931 0 4096 4096 NT_STATUS_OK
Close 12931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
ReadX 12932 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12933 NT_STATUS_OK
Close 12933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12942 NT_STATUS_OK
Close 12942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12946 NT_STATUS_OK
Close 12946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12949 NT_STATUS_OK
Close 12949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12951 NT_STATUS_OK
Close 12951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12955 NT_STATUS_OK
Close 12955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12960 NT_STATUS_OK
Close 12960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12965 NT_STATUS_OK
Close 12965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12970 NT_STATUS_OK
Close 12970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12975 NT_STATUS_OK
Close 12975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12980 NT_STATUS_OK
Close 12980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12984 NT_STATUS_OK
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12989 NT_STATUS_OK
Close 12989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12994 NT_STATUS_OK
Close 12994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12997 NT_STATUS_OK
Close 12997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12999 NT_STATUS_OK
Close 12999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13011 NT_STATUS_OK
ReadX 13011 0 4096 4096 NT_STATUS_OK
Close 13011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13012 NT_STATUS_OK
ReadX 13012 0 4096 4096 NT_STATUS_OK
Close 13012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 0 4096 4096 NT_STATUS_OK
Close 13025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
Close 13026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13027 NT_STATUS_OK
ReadX 13027 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13056 0 4096 4096 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13057 NT_STATUS_OK
ReadX 13057 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
ReadX 13058 4096 4096 4096 NT_STATUS_OK
ReadX 13058 8192 4096 4096 NT_STATUS_OK
ReadX 13058 12288 4096 4096 NT_STATUS_OK
ReadX 13058 16384 4096 4096 NT_STATUS_OK
ReadX 13058 20480 4096 4096 NT_STATUS_OK
ReadX 13058 24576 4096 4096 NT_STATUS_OK
ReadX 13058 28672 4096 4096 NT_STATUS_OK
ReadX 13058 32768 4096 4096 NT_STATUS_OK
ReadX 13058 36864 4096 4096 NT_STATUS_OK
ReadX 13058 40960 4096 4096 NT_STATUS_OK
ReadX 13058 45056 4096 4096 NT_STATUS_OK
ReadX 13058 49152 4096 4096 NT_STATUS_OK
ReadX 13058 53248 4096 4096 NT_STATUS_OK
ReadX 13058 57344 4096 4096 NT_STATUS_OK
ReadX 13058 61440 4096 4096 NT_STATUS_OK
ReadX 13058 65536 4096 4096 NT_STATUS_OK
ReadX 13058 69632 4096 4096 NT_STATUS_OK
ReadX 13058 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13058 1004 NT_STATUS_OK
WriteX 13058 0 4096 4096 NT_STATUS_OK
Close 13058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13059 NT_STATUS_OK
SET_FILE_INFORMATION 13059 1004 NT_STATUS_OK
Close 13059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13060 NT_STATUS_OK
ReadX 13060 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13061 NT_STATUS_OK
Close 13061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13064 NT_STATUS_OK
WriteX 13064 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13064 258 NT_STATUS_OK
WriteX 13064 0 65536 65536 NT_STATUS_OK
WriteX 13064 65536 19979 19979 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13065 NT_STATUS_OK
ReadX 13065 0 4096 4096 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 1004 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
SET_FILE_INFORMATION 13065 1004 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 0 4096 4096 NT_STATUS_OK
Close 13066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13068 NT_STATUS_OK
ReadX 13068 0 4096 4096 NT_STATUS_OK
Close 13068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
Close 13069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13070 1004 NT_STATUS_OK
WriteX 13070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13071 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13076 NT_STATUS_OK
WriteX 13076 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13076 258 NT_STATUS_OK
WriteX 13076 0 65536 65536 NT_STATUS_OK
WriteX 13076 65536 17654 17654 NT_STATUS_OK
Close 13076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Flush 13077 NT_STATUS_OK
Close 13077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13078 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
Close 13078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13079 NT_STATUS_OK
ReadX 13079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 0 4096 4096 NT_STATUS_OK
ReadX 13082 4096 4096 4096 NT_STATUS_OK
ReadX 13082 8192 4096 4096 NT_STATUS_OK
ReadX 13082 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13082 16384 4096 4096 NT_STATUS_OK
ReadX 13082 20480 4096 4096 NT_STATUS_OK
ReadX 13082 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 4096 4096 NT_STATUS_OK
Close 13083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
Close 13084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13085 1004 NT_STATUS_OK
WriteX 13085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13086 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13091 NT_STATUS_OK
WriteX 13091 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13091 258 NT_STATUS_OK
WriteX 13091 0 65536 65536 NT_STATUS_OK
WriteX 13091 65536 19490 19490 NT_STATUS_OK
Close 13091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 4096 4096 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
QUERY_FILE_INFORMATION 13092 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
SET_FILE_INFORMATION 13092 1004 NT_STATUS_OK
WriteX 13092 0 4096 4096 NT_STATUS_OK
Flush 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13093 NT_STATUS_OK
SET_FILE_INFORMATION 13093 1004 NT_STATUS_OK
Close 13093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13095 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13097 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13097 0 4096 4096 NT_STATUS_OK
Close 13097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13098 NT_STATUS_OK
ReadX 13098 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13099 NT_STATUS_OK
ReadX 13099 0 4096 4096 NT_STATUS_OK
ReadX 13099 4096 4096 4096 NT_STATUS_OK
ReadX 13099 8192 4096 4096 NT_STATUS_OK
ReadX 13099 12288 4096 4096 NT_STATUS_OK
ReadX 13099 16384 4096 4096 NT_STATUS_OK
ReadX 13099 20480 4096 4096 NT_STATUS_OK
ReadX 13099 24576 4096 4096 NT_STATUS_OK
ReadX 13099 28672 4096 4096 NT_STATUS_OK
ReadX 13099 32768 4096 4096 NT_STATUS_OK
ReadX 13099 36864 4096 4096 NT_STATUS_OK
ReadX 13099 40960 4096 4096 NT_STATUS_OK
ReadX 13099 45056 4096 4096 NT_STATUS_OK
ReadX 13099 49152 4096 4096 NT_STATUS_OK
ReadX 13099 53248 4096 4096 NT_STATUS_OK
ReadX 13099 57344 4096 4096 NT_STATUS_OK
ReadX 13099 61440 4096 4096 NT_STATUS_OK
ReadX 13099 65536 4096 4096 NT_STATUS_OK
ReadX 13099 69632 4096 4096 NT_STATUS_OK
ReadX 13099 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13099 1004 NT_STATUS_OK
WriteX 13099 0 4096 4096 NT_STATUS_OK
Close 13099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13100 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
Close 13100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13102 NT_STATUS_OK
Close 13102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13094 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13105 NT_STATUS_OK
WriteX 13105 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 258 NT_STATUS_OK
WriteX 13105 0 65536 65536 NT_STATUS_OK
WriteX 13105 65536 8866 8866 NT_STATUS_OK
Close 13105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13106 NT_STATUS_OK
ReadX 13106 0 4096 4096 NT_STATUS_OK
WriteX 13106 0 4096 4096 NT_STATUS_OK
Flush 13106 NT_STATUS_OK
SET_FILE_INFORMATION 13106 1004 NT_STATUS_OK
WriteX 13106 0 4096 4096 NT_STATUS_OK
Flush 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13107 NT_STATUS_OK
ReadX 13107 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13108 NT_STATUS_OK
ReadX 13108 0 4096 4096 NT_STATUS_OK
Close 13108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
Close 13109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13110 1004 NT_STATUS_OK
WriteX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13111 NT_STATUS_OK
Close 13111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Close 13101 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13116 NT_STATUS_OK
WriteX 13116 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13116 258 NT_STATUS_OK
WriteX 13116 0 65536 65536 NT_STATUS_OK
WriteX 13116 65536 9298 9298 NT_STATUS_OK
Close 13116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
WriteX 13117 0 4096 4096 NT_STATUS_OK
Flush 13117 NT_STATUS_OK
SET_FILE_INFORMATION 13117 1004 NT_STATUS_OK
WriteX 13117 0 4096 4096 NT_STATUS_OK
Flush 13117 NT_STATUS_OK
Close 13117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13118 NT_STATUS_OK
SET_FILE_INFORMATION 13118 1004 NT_STATUS_OK
Close 13118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13120 NT_STATUS_OK
Close 13120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13123 0 4096 4096 NT_STATUS_OK
Close 13123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13124 4096 4096 4096 NT_STATUS_OK
ReadX 13124 8192 4096 4096 NT_STATUS_OK
ReadX 13124 12288 4096 4096 NT_STATUS_OK
ReadX 13124 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13127 1004 NT_STATUS_OK
WriteX 13127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13124 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13133 NT_STATUS_OK
WriteX 13133 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13133 258 NT_STATUS_OK
WriteX 13133 0 65536 65536 NT_STATUS_OK
WriteX 13133 65536 11540 11540 NT_STATUS_OK
Close 13133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 4096 4096 NT_STATUS_OK
WriteX 13134 0 4096 4096 NT_STATUS_OK
Flush 13134 NT_STATUS_OK
SET_FILE_INFORMATION 13134 1004 NT_STATUS_OK
WriteX 13134 0 4096 4096 NT_STATUS_OK
Flush 13134 NT_STATUS_OK
Close 13134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13135 NT_STATUS_OK
SET_FILE_INFORMATION 13135 1004 NT_STATUS_OK
Close 13135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13137 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 61440 4096 4096 NT_STATUS_OK
ReadX 13139 126976 4096 4096 NT_STATUS_OK
WriteX 13139 0 65536 65536 NT_STATUS_OK
WriteX 13139 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 61440 4096 4096 NT_STATUS_OK
ReadX 13140 126976 4096 4096 NT_STATUS_OK
ReadX 13140 192512 4096 4096 NT_STATUS_OK
ReadX 13140 258048 4096 4096 NT_STATUS_OK
WriteX 13140 0 65536 65536 NT_STATUS_OK
WriteX 13140 65536 65536 65536 NT_STATUS_OK
WriteX 13140 131072 65536 65536 NT_STATUS_OK
WriteX 13140 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 61440 4096 4096 NT_STATUS_OK
ReadX 13141 126976 4096 4096 NT_STATUS_OK
ReadX 13141 192512 4096 4096 NT_STATUS_OK
ReadX 13141 258048 4096 4096 NT_STATUS_OK
ReadX 13141 323584 4096 4096 NT_STATUS_OK
ReadX 13141 389120 4096 4096 NT_STATUS_OK
ReadX 13141 454656 4096 4096 NT_STATUS_OK
ReadX 13141 520192 4096 4096 NT_STATUS_OK
WriteX 13141 0 65536 65536 NT_STATUS_OK
WriteX 13141 65536 65536 65536 NT_STATUS_OK
WriteX 13141 131072 65536 65536 NT_STATUS_OK
WriteX 13141 196608 65536 65536 NT_STATUS_OK
WriteX 13141 262144 65536 65536 NT_STATUS_OK
WriteX 13141 327680 65536 65536 NT_STATUS_OK
WriteX 13141 393216 65536 65536 NT_STATUS_OK
WriteX 13141 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
ReadX 13142 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13143 NT_STATUS_OK
WriteX 13143 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13143 258 NT_STATUS_OK
WriteX 13143 0 53 53 NT_STATUS_OK
Close 13143 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13144 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Close 13140 NT_STATUS_OK
Close 13141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13142 8192 4096 4096 NT_STATUS_OK
ReadX 13142 12288 4096 4096 NT_STATUS_OK
WriteX 13146 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13146 258 NT_STATUS_OK
ReadX 13142 16384 4096 4096 NT_STATUS_OK
ReadX 13142 20480 4096 4096 NT_STATUS_OK
WriteX 13146 0 15360 15360 NT_STATUS_OK
Close 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13147 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13147 1004 NT_STATUS_OK
WriteX 13147 0 4096 4096 NT_STATUS_OK
Close 13147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13148 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13150 NT_STATUS_OK
ReadX 13150 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13150 4096 4096 4096 NT_STATUS_OK
ReadX 13150 8192 4096 4096 NT_STATUS_OK
ReadX 13150 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
ReadX 13153 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 4096 4096 NT_STATUS_OK
ReadX 13154 4096 4096 4096 NT_STATUS_OK
ReadX 13154 8192 4096 4096 NT_STATUS_OK
Close 13153 NT_STATUS_OK
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13155 NT_STATUS_OK
WriteX 13155 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13155 258 NT_STATUS_OK
WriteX 13155 0 15360 15360 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13156 NT_STATUS_OK
ReadX 13156 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13156 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13156 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13157 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13159 NT_STATUS_OK
ReadX 13159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13160 NT_STATUS_OK
SET_FILE_INFORMATION 13160 1004 NT_STATUS_OK
Close 13160 NT_STATUS_OK
WriteX 13156 0 4096 4096 NT_STATUS_OK
Close 13156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
ReadX 13163 4096 4096 4096 NT_STATUS_OK
ReadX 13163 8192 4096 4096 NT_STATUS_OK
ReadX 13163 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13163 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13163 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13165 NT_STATUS_OK
WriteX 13165 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13165 258 NT_STATUS_OK
WriteX 13165 0 53 53 NT_STATUS_OK
Close 13165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13166 NT_STATUS_OK
Close 13166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13164 4096 4096 4096 NT_STATUS_OK
ReadX 13164 8192 4096 4096 NT_STATUS_OK
ReadX 13164 12288 4096 4096 NT_STATUS_OK
WriteX 13168 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 258 NT_STATUS_OK
WriteX 13168 0 12006 12006 NT_STATUS_OK
Close 13168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13169 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13169 1004 NT_STATUS_OK
WriteX 13169 0 4096 4096 NT_STATUS_OK
Close 13169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13173 NT_STATUS_OK
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13172 4096 4096 4096 NT_STATUS_OK
ReadX 13172 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13175 NT_STATUS_OK
WriteX 13175 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13175 258 NT_STATUS_OK
WriteX 13175 0 11991 11991 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13176 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13176 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13177 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13180 NT_STATUS_OK
WriteX 13163 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 13180 1004 NT_STATUS_OK
Close 13180 NT_STATUS_OK
WriteX 13176 0 4096 4096 NT_STATUS_OK
Close 13176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13181 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13183 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
ReadX 13183 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
WriteX 13183 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13183 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
Close 13159 NT_STATUS_OK
WriteX 13183 0 12288 12288 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13186 NT_STATUS_OK
Close 13186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13188 NT_STATUS_OK
Close 13188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 61440 61440 NT_STATUS_OK
ReadX 13190 61440 4096 4096 NT_STATUS_OK
ReadX 13190 65536 61440 61440 NT_STATUS_OK
ReadX 13190 126976 4096 4096 NT_STATUS_OK
ReadX 13190 131072 61440 61440 NT_STATUS_OK
ReadX 13190 192512 4096 4096 NT_STATUS_OK
ReadX 13190 196608 61440 61440 NT_STATUS_OK
ReadX 13190 258048 4096 4096 NT_STATUS_OK
ReadX 13190 262144 61440 61440 NT_STATUS_OK
ReadX 13190 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13191 NT_STATUS_OK
ReadX 13191 0 61440 61440 NT_STATUS_OK
ReadX 13191 61440 4096 4096 NT_STATUS_OK
ReadX 13191 65536 61440 61440 NT_STATUS_OK
ReadX 13191 126976 4096 4096 NT_STATUS_OK
ReadX 13191 131072 61440 61440 NT_STATUS_OK
ReadX 13191 192512 4096 4096 NT_STATUS_OK
ReadX 13191 196608 61440 61440 NT_STATUS_OK
ReadX 13191 258048 4096 4096 NT_STATUS_OK
ReadX 13191 262144 61440 61440 NT_STATUS_OK
ReadX 13191 323584 4096 4096 NT_STATUS_OK
ReadX 13191 327680 61440 61440 NT_STATUS_OK
ReadX 13191 389120 4096 4096 NT_STATUS_OK
ReadX 13191 393216 61440 61440 NT_STATUS_OK
ReadX 13191 454656 4096 4096 NT_STATUS_OK
ReadX 13191 458752 61440 61440 NT_STATUS_OK
ReadX 13191 520192 4096 4096 NT_STATUS_OK
ReadX 13191 524288 61440 61440 NT_STATUS_OK
ReadX 13191 585728 4096 4096 NT_STATUS_OK
ReadX 13191 589824 61440 61440 NT_STATUS_OK
ReadX 13191 651264 4096 4096 NT_STATUS_OK
ReadX 13191 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13192 NT_STATUS_OK
ReadX 13192 0 61440 61440 NT_STATUS_OK
ReadX 13192 61440 4096 4096 NT_STATUS_OK
ReadX 13192 65536 61440 61440 NT_STATUS_OK
ReadX 13192 126976 4096 4096 NT_STATUS_OK
ReadX 13192 131072 61440 61440 NT_STATUS_OK
ReadX 13192 192512 4096 4096 NT_STATUS_OK
ReadX 13192 196608 61440 61440 NT_STATUS_OK
ReadX 13192 258048 4096 4096 NT_STATUS_OK
ReadX 13192 262144 61440 61440 NT_STATUS_OK
ReadX 13192 323584 4096 4096 NT_STATUS_OK
ReadX 13192 327680 61440 61440 NT_STATUS_OK
ReadX 13192 389120 4096 4096 NT_STATUS_OK
ReadX 13192 393216 61440 61440 NT_STATUS_OK
ReadX 13192 454656 4096 4096 NT_STATUS_OK
ReadX 13192 458752 61440 61440 NT_STATUS_OK
ReadX 13192 520192 4096 4096 NT_STATUS_OK
ReadX 13192 524288 61440 61440 NT_STATUS_OK
ReadX 13192 585728 4096 4096 NT_STATUS_OK
ReadX 13192 589824 61440 61440 NT_STATUS_OK
ReadX 13192 651264 4096 4096 NT_STATUS_OK
ReadX 13192 655360 61440 61440 NT_STATUS_OK
ReadX 13192 716800 4096 4096 NT_STATUS_OK
ReadX 13192 720896 61440 61440 NT_STATUS_OK
ReadX 13192 782336 4096 4096 NT_STATUS_OK
ReadX 13192 786432 61440 61440 NT_STATUS_OK
ReadX 13192 847872 4096 4096 NT_STATUS_OK
ReadX 13192 851968 61440 61440 NT_STATUS_OK
ReadX 13192 913408 4096 4096 NT_STATUS_OK
ReadX 13192 917504 61440 61440 NT_STATUS_OK
ReadX 13192 978944 4096 4096 NT_STATUS_OK
ReadX 13192 983040 61440 61440 NT_STATUS_OK
ReadX 13192 1044480 4096 4096 NT_STATUS_OK
ReadX 13192 1048576 61440 61440 NT_STATUS_OK
ReadX 13192 1110016 4096 4096 NT_STATUS_OK
ReadX 13192 1114112 61440 61440 NT_STATUS_OK
ReadX 13192 1175552 4096 4096 NT_STATUS_OK
ReadX 13192 1179648 61440 61440 NT_STATUS_OK
ReadX 13192 1241088 4096 4096 NT_STATUS_OK
ReadX 13192 1245184 61440 61440 NT_STATUS_OK
ReadX 13192 1306624 4096 4096 NT_STATUS_OK
ReadX 13192 1310720 61440 61440 NT_STATUS_OK
ReadX 13192 1372160 4096 4096 NT_STATUS_OK
ReadX 13192 1376256 61440 61440 NT_STATUS_OK
ReadX 13192 1437696 4096 4096 NT_STATUS_OK
ReadX 13192 1441792 61440 61440 NT_STATUS_OK
ReadX 13192 1503232 4096 4096 NT_STATUS_OK
ReadX 13192 1507328 61440 61440 NT_STATUS_OK
ReadX 13192 1568768 4096 4096 NT_STATUS_OK
ReadX 13192 1572864 61440 61440 NT_STATUS_OK
ReadX 13192 1634304 4096 4096 NT_STATUS_OK
ReadX 13192 1638400 61440 61440 NT_STATUS_OK
ReadX 13192 1699840 4096 4096 NT_STATUS_OK
ReadX 13192 1703936 61440 61440 NT_STATUS_OK
ReadX 13192 1765376 4096 4096 NT_STATUS_OK
ReadX 13192 1769472 61440 61440 NT_STATUS_OK
ReadX 13192 1830912 4096 4096 NT_STATUS_OK
ReadX 13192 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13195 NT_STATUS_OK
ReadX 13195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13199 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 1004 NT_STATUS_OK
WriteX 13199 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13199 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13200 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13201 NT_STATUS_OK
WriteX 13201 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 258 NT_STATUS_OK
WriteX 13201 0 491 491 NT_STATUS_OK
Close 13201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13199 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13205 NT_STATUS_OK
WriteX 13205 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13205 258 NT_STATUS_OK
WriteX 13205 0 543 543 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Close 13191 NT_STATUS_OK
Close 13192 NT_STATUS_OK
Close 13206 NT_STATUS_OK
Close 13194 NT_STATUS_OK
Close 13195 NT_STATUS_OK
Close 13196 NT_STATUS_OK
Close 13197 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13218 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13219 NT_STATUS_OK
QUERY_FILE_INFORMATION 13219 1004 NT_STATUS_OK
WriteX 13219 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13219 258 NT_STATUS_OK
WriteX 13219 0 2048 2048 NT_STATUS_OK
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
Flush 13220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13220 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13225 NT_STATUS_OK
WriteX 13225 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 258 NT_STATUS_OK
WriteX 13225 0 2048 2048 NT_STATUS_OK
Close 13225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13230 NT_STATUS_OK
Close 13230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13231 NT_STATUS_OK
WriteX 13231 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 258 NT_STATUS_OK
WriteX 13231 0 2048 2048 NT_STATUS_OK
Close 13231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 2048 2048 NT_STATUS_OK
ReadX 13210 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13226 0 4096 4096 NT_STATUS_OK
WriteX 13210 0 8192 8192 NT_STATUS_OK
WriteX 13211 0 4096 4096 NT_STATUS_OK
WriteX 13212 0 4096 4096 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13236 NT_STATUS_OK
QUERY_FILE_INFORMATION 13236 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13235 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13238 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13244 NT_STATUS_OK
ReadX 13244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13246 NT_STATUS_OK
ReadX 13246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13248 NT_STATUS_OK
ReadX 13248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13256 NT_STATUS_OK
QUERY_FILE_INFORMATION 13256 1004 NT_STATUS_OK
WriteX 13256 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13256 258 NT_STATUS_OK
WriteX 13256 0 2048 2048 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13257 NT_STATUS_OK
ReadX 13257 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13259 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13263 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13264 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 1004 NT_STATUS_OK
WriteX 13264 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 258 NT_STATUS_OK
WriteX 13264 0 2048 2048 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13257 0 4096 4096 NT_STATUS_OK
Flush 13257 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13259 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13267 NT_STATUS_OK
WriteX 13267 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13267 258 NT_STATUS_OK
WriteX 13267 0 4096 4096 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13269 NT_STATUS_OK
Close 13269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13270 NT_STATUS_OK
WriteX 13270 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13270 258 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
Close 13270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13271 0 4096 4096 NT_STATUS_OK
Close 13268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13251 NT_STATUS_OK
Close 13245 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Close 13248 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13246 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Close 13241 NT_STATUS_OK
Close 13242 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13274 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13277 NT_STATUS_OK
Close 13277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13278 NT_STATUS_OK
WriteX 13278 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13278 258 NT_STATUS_OK
WriteX 13278 0 2048 2048 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13292 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13293 NT_STATUS_OK
QUERY_FILE_INFORMATION 13293 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13292 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13295 NT_STATUS_OK
QUERY_FILE_INFORMATION 13295 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13298 NT_STATUS_OK
ReadX 13298 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13299 NT_STATUS_OK
ReadX 13299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13300 NT_STATUS_OK
ReadX 13300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13301 NT_STATUS_OK
ReadX 13301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13314 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13315 NT_STATUS_OK
QUERY_FILE_INFORMATION 13315 1004 NT_STATUS_OK
WriteX 13315 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13315 258 NT_STATUS_OK
WriteX 13315 0 2048 2048 NT_STATUS_OK
Close 13315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13317 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13327 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 1004 NT_STATUS_OK
WriteX 13327 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 258 NT_STATUS_OK
WriteX 13327 0 2048 2048 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13328 NT_STATUS_OK
ReadX 13328 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13330 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13330 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13334 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13335 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 1004 NT_STATUS_OK
WriteX 13335 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 258 NT_STATUS_OK
WriteX 13335 0 2048 2048 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13316 0 4096 4096 NT_STATUS_OK
Flush 13316 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
Flush 13328 NT_STATUS_OK
WriteX 13336 0 4096 4096 NT_STATUS_OK
Flush 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13316 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13318 4096 16384 16384 NT_STATUS_OK
ReadX 13298 4096 16384 16384 NT_STATUS_OK
ReadX 13330 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13338 NT_STATUS_OK
ReadX 13338 0 2048 2048 NT_STATUS_OK
WriteX 13338 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13339 NT_STATUS_OK
QUERY_FILE_INFORMATION 13339 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13338 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Close 13302 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13330 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Close 13299 NT_STATUS_OK
Close 13300 NT_STATUS_OK
Close 13301 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13341 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13343 NT_STATUS_OK
QUERY_FILE_INFORMATION 13343 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13347 NT_STATUS_OK
ReadX 13347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13348 NT_STATUS_OK
ReadX 13348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13350 NT_STATUS_OK
ReadX 13350 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13346 4096 16384 16384 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
WriteX 13348 0 4096 4096 NT_STATUS_OK
WriteX 13349 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13360 NT_STATUS_OK
ReadX 13360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13363 NT_STATUS_OK
ReadX 13363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13364 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 8192 8192 NT_STATUS_OK
ReadX 13352 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13366 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13366 0 4096 4096 NT_STATUS_OK
ReadX 13366 4096 4096 4096 NT_STATUS_OK
ReadX 13366 8192 4096 4096 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
ReadX 13367 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
WriteX 13348 0 4096 4096 NT_STATUS_OK
WriteX 13349 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13372 NT_STATUS_OK
QUERY_FILE_INFORMATION 13372 1004 NT_STATUS_OK
WriteX 13372 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13372 258 NT_STATUS_OK
WriteX 13372 0 2048 2048 NT_STATUS_OK
Close 13372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13374 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13375 NT_STATUS_OK
ReadX 13375 0 4096 4096 NT_STATUS_OK
ReadX 13375 4096 4096 4096 NT_STATUS_OK
WriteX 13375 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13377 NT_STATUS_OK
ReadX 13377 0 4096 4096 NT_STATUS_OK
ReadX 13377 4096 4096 4096 NT_STATUS_OK
WriteX 13377 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13378 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Close 13350 NT_STATUS_OK
Close 13346 NT_STATUS_OK
Close 13347 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Close 13359 NT_STATUS_OK
Close 13360 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13356 NT_STATUS_OK
Close 13357 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Close 13377 NT_STATUS_OK
Close 13366 NT_STATUS_OK
Close 13367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13380 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13380 0 4096 4096 NT_STATUS_OK
ReadX 13380 4096 4096 4096 NT_STATUS_OK
ReadX 13380 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
ReadX 13381 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13398 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 1004 NT_STATUS_OK
WriteX 13398 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 258 NT_STATUS_OK
WriteX 13398 0 2048 2048 NT_STATUS_OK
Close 13398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13399 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13403 NT_STATUS_OK
Close 13403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13404 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1004 NT_STATUS_OK
WriteX 13404 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 258 NT_STATUS_OK
WriteX 13404 0 2048 2048 NT_STATUS_OK
Close 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13405 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13388 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Close 13388 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13408 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 61440 4096 4096 NT_STATUS_OK
ReadX 13410 126976 4096 4096 NT_STATUS_OK
WriteX 13410 0 65536 65536 NT_STATUS_OK
WriteX 13410 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 61440 4096 4096 NT_STATUS_OK
ReadX 13411 126976 4096 4096 NT_STATUS_OK
ReadX 13411 192512 4096 4096 NT_STATUS_OK
ReadX 13411 258048 4096 4096 NT_STATUS_OK
WriteX 13411 0 65536 65536 NT_STATUS_OK
WriteX 13411 65536 65536 65536 NT_STATUS_OK
WriteX 13411 131072 65536 65536 NT_STATUS_OK
WriteX 13411 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 61440 4096 4096 NT_STATUS_OK
ReadX 13412 126976 4096 4096 NT_STATUS_OK
ReadX 13412 192512 4096 4096 NT_STATUS_OK
ReadX 13412 258048 4096 4096 NT_STATUS_OK
ReadX 13412 323584 4096 4096 NT_STATUS_OK
ReadX 13412 389120 4096 4096 NT_STATUS_OK
ReadX 13412 454656 4096 4096 NT_STATUS_OK
ReadX 13412 520192 4096 4096 NT_STATUS_OK
WriteX 13412 0 65536 65536 NT_STATUS_OK
WriteX 13412 65536 65536 65536 NT_STATUS_OK
WriteX 13412 131072 65536 65536 NT_STATUS_OK
WriteX 13412 196608 65536 65536 NT_STATUS_OK
WriteX 13412 262144 65536 65536 NT_STATUS_OK
WriteX 13412 327680 65536 65536 NT_STATUS_OK
WriteX 13412 393216 65536 65536 NT_STATUS_OK
WriteX 13412 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13413 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13413 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13413 8192 4096 4096 NT_STATUS_OK
ReadX 13413 12288 4096 4096 NT_STATUS_OK
ReadX 13413 16384 4096 4096 NT_STATUS_OK
ReadX 13413 20480 4096 4096 NT_STATUS_OK
ReadX 13413 24576 4096 4096 NT_STATUS_OK
ReadX 13413 28672 4096 4096 NT_STATUS_OK
ReadX 13413 32768 4096 4096 NT_STATUS_OK
ReadX 13413 36864 4096 4096 NT_STATUS_OK
ReadX 13413 40960 4096 4096 NT_STATUS_OK
ReadX 13413 45056 4096 4096 NT_STATUS_OK
ReadX 13413 49152 4096 4096 NT_STATUS_OK
ReadX 13413 53248 4096 4096 NT_STATUS_OK
ReadX 13413 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13413 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13414 NT_STATUS_OK
Close 13414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Close 13411 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13416 NT_STATUS_OK
WriteX 13416 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13416 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13416 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13416 1004 NT_STATUS_OK
WriteX 13416 0 57088 57088 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
Flush 13416 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13417 NT_STATUS_OK
SET_FILE_INFORMATION 13417 1004 NT_STATUS_OK
Close 13417 NT_STATUS_OK
SET_FILE_INFORMATION 13416 1004 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
Close 13416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13418 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13420 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13421 NT_STATUS_OK
WriteX 13421 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13421 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13421 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
WriteX 13421 0 51456 51456 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
Flush 13421 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13421 1004 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13425 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13427 NT_STATUS_OK
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13430 NT_STATUS_OK
WriteX 13430 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13430 258 NT_STATUS_OK
WriteX 13430 0 53077 53077 NT_STATUS_OK
Close 13430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13431 NT_STATUS_OK
WriteX 13431 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13431 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
WriteX 13431 0 65536 65536 NT_STATUS_OK
WriteX 13431 65536 1856 1856 NT_STATUS_OK
WriteX 13431 0 4096 4096 NT_STATUS_OK
Flush 13431 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
WriteX 13431 0 4096 4096 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Close 13425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13440 NT_STATUS_OK
WriteX 13440 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13440 258 NT_STATUS_OK
WriteX 13440 0 7983 7983 NT_STATUS_OK
Close 13440 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13442 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13445 NT_STATUS_OK
WriteX 13445 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13445 258 NT_STATUS_OK
WriteX 13445 0 65536 65536 NT_STATUS_OK
WriteX 13445 65536 65536 65536 NT_STATUS_OK
WriteX 13445 131072 65536 65536 NT_STATUS_OK
WriteX 13445 196608 65536 65536 NT_STATUS_OK
WriteX 13445 262144 65536 65536 NT_STATUS_OK
WriteX 13445 327680 65536 65536 NT_STATUS_OK
WriteX 13445 393216 65536 65536 NT_STATUS_OK
WriteX 13445 458752 46731 46731 NT_STATUS_OK
Close 13445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13446 NT_STATUS_OK
WriteX 13446 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13446 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13435 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13446 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
WriteX 13446 0 65536 65536 NT_STATUS_OK
WriteX 13446 65536 22848 22848 NT_STATUS_OK
WriteX 13446 0 4096 4096 NT_STATUS_OK
Flush 13446 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13446 1004 NT_STATUS_OK
WriteX 13446 0 4096 4096 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13450 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13451 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13451 1004 NT_STATUS_OK
ReadX 13451 8192 4096 4096 NT_STATUS_OK
ReadX 13451 12288 4096 4096 NT_STATUS_OK
ReadX 13451 16384 4096 4096 NT_STATUS_OK
ReadX 13451 20480 4096 4096 NT_STATUS_OK
ReadX 13451 24576 4096 4096 NT_STATUS_OK
ReadX 13451 28672 4096 4096 NT_STATUS_OK
ReadX 13451 32768 4096 4096 NT_STATUS_OK
ReadX 13451 36864 4096 4096 NT_STATUS_OK
ReadX 13451 40960 4096 4096 NT_STATUS_OK
ReadX 13451 45056 4096 4096 NT_STATUS_OK
ReadX 13451 49152 4096 4096 NT_STATUS_OK
ReadX 13451 53248 4096 4096 NT_STATUS_OK
ReadX 13451 57344 4096 4096 NT_STATUS_OK
ReadX 13451 61440 4096 4096 NT_STATUS_OK
ReadX 13451 65536 4096 4096 NT_STATUS_OK
ReadX 13451 69632 4096 4096 NT_STATUS_OK
ReadX 13451 73728 4096 4096 NT_STATUS_OK
ReadX 13451 77824 4096 4096 NT_STATUS_OK
ReadX 13451 81920 4096 4096 NT_STATUS_OK
ReadX 13451 86016 4096 4096 NT_STATUS_OK
ReadX 13451 90112 4096 4096 NT_STATUS_OK
ReadX 13451 94208 4096 4096 NT_STATUS_OK
ReadX 13451 98304 4096 4096 NT_STATUS_OK
ReadX 13451 102400 4096 4096 NT_STATUS_OK
ReadX 13451 106496 4096 4096 NT_STATUS_OK
ReadX 13451 110592 4096 4096 NT_STATUS_OK
ReadX 13451 114688 4096 4096 NT_STATUS_OK
ReadX 13451 118784 4096 4096 NT_STATUS_OK
ReadX 13451 122880 4096 4096 NT_STATUS_OK
ReadX 13451 126976 4096 4096 NT_STATUS_OK
ReadX 13451 131072 4096 4096 NT_STATUS_OK
ReadX 13451 135168 4096 4096 NT_STATUS_OK
ReadX 13451 139264 4096 4096 NT_STATUS_OK
ReadX 13451 143360 4096 4096 NT_STATUS_OK
ReadX 13451 147456 4096 4096 NT_STATUS_OK
ReadX 13451 151552 4096 4096 NT_STATUS_OK
ReadX 13451 155648 4096 4096 NT_STATUS_OK
ReadX 13451 159744 4096 4096 NT_STATUS_OK
ReadX 13451 163840 4096 4096 NT_STATUS_OK
ReadX 13451 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13451 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13452 NT_STATUS_OK
Close 13452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13454 NT_STATUS_OK
WriteX 13454 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13454 258 NT_STATUS_OK
Close 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13455 NT_STATUS_OK
SET_FILE_INFORMATION 13455 1004 NT_STATUS_OK
Close 13455 NT_STATUS_OK
WriteX 13454 0 42388 42388 NT_STATUS_OK
Close 13454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13456 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
ReadX 13458 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13459 NT_STATUS_OK
WriteX 13459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 258 NT_STATUS_OK
SET_FILE_INFORMATION 13459 1004 NT_STATUS_OK
WriteX 13459 0 42652 42652 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Close 13458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
ReadX 13463 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13465 NT_STATUS_OK
Close 13465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13468 NT_STATUS_OK
WriteX 13468 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13468 258 NT_STATUS_OK
WriteX 13468 0 65536 65536 NT_STATUS_OK
WriteX 13468 65536 49 49 NT_STATUS_OK
Close 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13469 NT_STATUS_OK
ReadX 13469 0 61440 61440 NT_STATUS_OK
ReadX 13469 61440 4096 4096 NT_STATUS_OK
ReadX 13469 65536 61440 61440 NT_STATUS_OK
ReadX 13469 126976 4096 4096 NT_STATUS_OK
ReadX 13469 131072 61440 61440 NT_STATUS_OK
ReadX 13469 192512 4096 4096 NT_STATUS_OK
ReadX 13469 196608 61440 61440 NT_STATUS_OK
ReadX 13469 258048 4096 4096 NT_STATUS_OK
ReadX 13469 262144 61440 61440 NT_STATUS_OK
ReadX 13469 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 0 61440 61440 NT_STATUS_OK
ReadX 13470 61440 4096 4096 NT_STATUS_OK
ReadX 13470 65536 61440 61440 NT_STATUS_OK
ReadX 13470 126976 4096 4096 NT_STATUS_OK
ReadX 13470 131072 61440 61440 NT_STATUS_OK
ReadX 13470 192512 4096 4096 NT_STATUS_OK
ReadX 13470 196608 61440 61440 NT_STATUS_OK
ReadX 13470 258048 4096 4096 NT_STATUS_OK
ReadX 13470 262144 61440 61440 NT_STATUS_OK
ReadX 13470 323584 4096 4096 NT_STATUS_OK
ReadX 13470 327680 61440 61440 NT_STATUS_OK
ReadX 13470 389120 4096 4096 NT_STATUS_OK
ReadX 13470 393216 61440 61440 NT_STATUS_OK
ReadX 13470 454656 4096 4096 NT_STATUS_OK
ReadX 13470 458752 61440 61440 NT_STATUS_OK
ReadX 13470 520192 4096 4096 NT_STATUS_OK
ReadX 13470 524288 61440 61440 NT_STATUS_OK
ReadX 13470 585728 4096 4096 NT_STATUS_OK
ReadX 13470 589824 61440 61440 NT_STATUS_OK
ReadX 13470 651264 4096 4096 NT_STATUS_OK
ReadX 13470 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 61440 61440 NT_STATUS_OK
ReadX 13471 61440 4096 4096 NT_STATUS_OK
ReadX 13471 65536 61440 61440 NT_STATUS_OK
ReadX 13471 126976 4096 4096 NT_STATUS_OK
ReadX 13471 131072 61440 61440 NT_STATUS_OK
ReadX 13471 192512 4096 4096 NT_STATUS_OK
ReadX 13471 196608 61440 61440 NT_STATUS_OK
ReadX 13471 258048 4096 4096 NT_STATUS_OK
ReadX 13471 262144 61440 61440 NT_STATUS_OK
ReadX 13471 323584 4096 4096 NT_STATUS_OK
ReadX 13471 327680 61440 61440 NT_STATUS_OK
ReadX 13471 389120 4096 4096 NT_STATUS_OK
ReadX 13471 393216 61440 61440 NT_STATUS_OK
ReadX 13471 454656 4096 4096 NT_STATUS_OK
ReadX 13471 458752 61440 61440 NT_STATUS_OK
ReadX 13471 520192 4096 4096 NT_STATUS_OK
ReadX 13471 524288 61440 61440 NT_STATUS_OK
ReadX 13471 585728 4096 4096 NT_STATUS_OK
ReadX 13471 589824 61440 61440 NT_STATUS_OK
ReadX 13471 651264 4096 4096 NT_STATUS_OK
ReadX 13471 655360 61440 61440 NT_STATUS_OK
ReadX 13471 716800 4096 4096 NT_STATUS_OK
ReadX 13471 720896 61440 61440 NT_STATUS_OK
ReadX 13471 782336 4096 4096 NT_STATUS_OK
ReadX 13471 786432 61440 61440 NT_STATUS_OK
ReadX 13471 847872 4096 4096 NT_STATUS_OK
ReadX 13471 851968 61440 61440 NT_STATUS_OK
ReadX 13471 913408 4096 4096 NT_STATUS_OK
ReadX 13471 917504 61440 61440 NT_STATUS_OK
ReadX 13471 978944 4096 4096 NT_STATUS_OK
ReadX 13471 983040 61440 61440 NT_STATUS_OK
ReadX 13471 1044480 4096 4096 NT_STATUS_OK
ReadX 13471 1048576 61440 61440 NT_STATUS_OK
ReadX 13471 1110016 4096 4096 NT_STATUS_OK
ReadX 13471 1114112 61440 61440 NT_STATUS_OK
ReadX 13471 1175552 4096 4096 NT_STATUS_OK
ReadX 13471 1179648 61440 61440 NT_STATUS_OK
ReadX 13471 1241088 4096 4096 NT_STATUS_OK
ReadX 13471 1245184 61440 61440 NT_STATUS_OK
ReadX 13471 1306624 4096 4096 NT_STATUS_OK
ReadX 13471 1310720 61440 61440 NT_STATUS_OK
ReadX 13471 1372160 4096 4096 NT_STATUS_OK
ReadX 13471 1376256 61440 61440 NT_STATUS_OK
ReadX 13471 1437696 4096 4096 NT_STATUS_OK
ReadX 13471 1441792 61440 61440 NT_STATUS_OK
ReadX 13471 1503232 4096 4096 NT_STATUS_OK
ReadX 13471 1507328 61440 61440 NT_STATUS_OK
ReadX 13471 1568768 4096 4096 NT_STATUS_OK
ReadX 13471 1572864 61440 61440 NT_STATUS_OK
ReadX 13471 1634304 4096 4096 NT_STATUS_OK
ReadX 13471 1638400 61440 61440 NT_STATUS_OK
ReadX 13471 1699840 4096 4096 NT_STATUS_OK
ReadX 13471 1703936 61440 61440 NT_STATUS_OK
ReadX 13471 1765376 4096 4096 NT_STATUS_OK
ReadX 13471 1769472 61440 61440 NT_STATUS_OK
ReadX 13471 1830912 4096 4096 NT_STATUS_OK
ReadX 13471 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13473 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 1005 NT_STATUS_OK
ReadX 13473 2156 24 24 NT_STATUS_OK
ReadX 13473 2139 276 276 NT_STATUS_OK
ReadX 13473 2136 14 14 NT_STATUS_OK
ReadX 13473 2136 7 7 NT_STATUS_OK
ReadX 13473 2138 12 12 NT_STATUS_OK
ReadX 13473 2137 8 8 NT_STATUS_OK
ReadX 13473 2135 15 15 NT_STATUS_OK
ReadX 13473 0 16 16 NT_STATUS_OK
ReadX 13473 16 2048 2048 NT_STATUS_OK
ReadX 13473 2064 2048 2048 NT_STATUS_OK
ReadX 13473 257 2048 2048 NT_STATUS_OK
ReadX 13473 385 2048 2048 NT_STATUS_OK
ReadX 13473 513 2048 2048 NT_STATUS_OK
ReadX 13473 641 2048 2048 NT_STATUS_OK
ReadX 13473 769 2048 2048 NT_STATUS_OK
ReadX 13473 897 2048 2048 NT_STATUS_OK
ReadX 13473 1025 2048 2048 NT_STATUS_OK
ReadX 13473 1153 2048 2048 NT_STATUS_OK
ReadX 13473 1281 2048 2048 NT_STATUS_OK
ReadX 13473 1409 2048 2048 NT_STATUS_OK
ReadX 13473 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13463 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13478 NT_STATUS_OK
WriteX 13478 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13478 258 NT_STATUS_OK
WriteX 13478 0 10575 10575 NT_STATUS_OK
Flush 13478 NT_STATUS_OK
Close 13478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13479 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
Close 13473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13483 NT_STATUS_OK
LockX 13483 2147483538 1 NT_STATUS_OK
UnlockX 13483 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1005 NT_STATUS_OK
ReadX 13483 0 512 512 NT_STATUS_OK
ReadX 13483 512 512 512 NT_STATUS_OK
ReadX 13483 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13483 1004 NT_STATUS_OK
Close 13483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13484 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 1005 NT_STATUS_OK
ReadX 13484 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13485 NT_STATUS_OK
LockX 13485 2147483538 1 NT_STATUS_OK
UnlockX 13485 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 1005 NT_STATUS_OK
ReadX 13485 0 512 512 NT_STATUS_OK
ReadX 13485 512 512 512 NT_STATUS_OK
ReadX 13485 1024 512 512 NT_STATUS_OK
ReadX 13485 288 20 20 NT_STATUS_OK
ReadX 13485 308 2084 2084 NT_STATUS_OK
ReadX 13485 388 2084 2084 NT_STATUS_OK
ReadX 13485 388 2084 2084 NT_STATUS_OK
ReadX 13472 2157 1386 1386 NT_STATUS_OK
ReadX 13485 2472 399 399 NT_STATUS_OK
ReadX 13485 3072 1536 1536 NT_STATUS_OK
ReadX 13485 544 149 149 NT_STATUS_OK
ReadX 13485 693 485 485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
ReadX 13472 2157 4096 4096 NT_STATUS_OK
ReadX 13472 6253 4096 4096 NT_STATUS_OK
ReadX 13472 10349 4096 4096 NT_STATUS_OK
ReadX 13472 14445 4096 4096 NT_STATUS_OK
ReadX 13472 18541 4096 4096 NT_STATUS_OK
ReadX 13472 22637 256 256 NT_STATUS_OK
ReadX 13472 22893 4096 4096 NT_STATUS_OK
ReadX 13472 26989 4096 4096 NT_STATUS_OK
ReadX 13472 31085 4096 4096 NT_STATUS_OK
ReadX 13472 35181 4096 4096 NT_STATUS_OK
ReadX 13472 39277 4096 4096 NT_STATUS_OK
ReadX 13472 43373 4096 4096 NT_STATUS_OK
ReadX 13472 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13472 2157 1024 1024 NT_STATUS_OK
ReadX 13472 1667 4688 4688 NT_STATUS_OK
ReadX 13472 6355 3516 3516 NT_STATUS_OK
ReadX 13472 9871 16384 16384 NT_STATUS_OK
ReadX 13472 26255 3771 3771 NT_STATUS_OK
ReadX 13472 30026 2048 2048 NT_STATUS_OK
ReadX 13472 32074 1024 1024 NT_STATUS_OK
ReadX 13472 33098 6652 6652 NT_STATUS_OK
ReadX 13472 39750 16384 16384 NT_STATUS_OK
ReadX 13472 56134 10496 10496 NT_STATUS_OK
ReadX 13472 66630 1784 1784 NT_STATUS_OK
ReadX 13472 68414 90 90 NT_STATUS_OK
ReadX 13472 68504 273 273 NT_STATUS_OK
ReadX 13472 68777 1600 1600 NT_STATUS_OK
ReadX 13472 70377 640 640 NT_STATUS_OK
ReadX 13472 71017 1280 1280 NT_STATUS_OK
ReadX 13472 72297 8464 8464 NT_STATUS_OK
ReadX 13472 80761 158 158 NT_STATUS_OK
ReadX 13472 80919 912 912 NT_STATUS_OK
ReadX 13472 81831 1980 1980 NT_STATUS_OK
ReadX 13472 83811 2256 2256 NT_STATUS_OK
ReadX 13472 86067 400 400 NT_STATUS_OK
ReadX 13472 86467 252 252 NT_STATUS_OK
ReadX 13472 86719 42 42 NT_STATUS_OK
ReadX 13472 86761 725 725 NT_STATUS_OK
ReadX 13472 2009 512 512 NT_STATUS_OK
ReadX 13472 3895 9 9 NT_STATUS_OK
ReadX 13472 3781 46 46 NT_STATUS_OK
ReadX 13472 4059 92 92 NT_STATUS_OK
ReadX 13472 3781 92 92 NT_STATUS_OK
ReadX 13472 3986 184 184 NT_STATUS_OK
ReadX 13472 3987 16384 16384 NT_STATUS_OK
ReadX 13472 3902 16384 16384 NT_STATUS_OK
ReadX 13472 3781 10240 10240 NT_STATUS_OK
ReadX 13472 3821 16384 16384 NT_STATUS_OK
ReadX 13472 3891 935 935 NT_STATUS_OK
ReadX 13472 4060 10240 10240 NT_STATUS_OK
ReadX 13472 4059 184 184 NT_STATUS_OK
ReadX 13472 256 184 184 NT_STATUS_OK
ReadX 13472 256 1026 1026 NT_STATUS_OK
ReadX 13472 3901 326 326 NT_STATUS_OK
ReadX 13472 3899 652 652 NT_STATUS_OK
ReadX 13472 256 2 2 NT_STATUS_OK
ReadX 13472 258 4948 4948 NT_STATUS_OK
Close 13472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13487 NT_STATUS_OK
Close 13487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13490 NT_STATUS_OK
WriteX 13490 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13490 258 NT_STATUS_OK
WriteX 13490 0 65536 65536 NT_STATUS_OK
WriteX 13490 65536 65536 65536 NT_STATUS_OK
WriteX 13490 131072 65536 65536 NT_STATUS_OK
WriteX 13490 196608 65536 65536 NT_STATUS_OK
WriteX 13490 262144 65536 65536 NT_STATUS_OK
WriteX 13490 327680 65536 65536 NT_STATUS_OK
WriteX 13490 393216 65536 65536 NT_STATUS_OK
WriteX 13490 458752 65536 65536 NT_STATUS_OK
WriteX 13490 524288 65536 65536 NT_STATUS_OK
WriteX 13490 589824 35257 35257 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13492 NT_STATUS_OK
Close 13492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13495 NT_STATUS_OK
WriteX 13495 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13495 258 NT_STATUS_OK
WriteX 13495 0 65536 65536 NT_STATUS_OK
WriteX 13495 65536 65536 65536 NT_STATUS_OK
WriteX 13495 131072 65536 65536 NT_STATUS_OK
WriteX 13495 196608 65536 65536 NT_STATUS_OK
WriteX 13495 262144 65536 65536 NT_STATUS_OK
WriteX 13495 327680 65536 65536 NT_STATUS_OK
WriteX 13495 393216 65536 65536 NT_STATUS_OK
WriteX 13495 458752 65536 65536 NT_STATUS_OK
WriteX 13495 524288 65536 65536 NT_STATUS_OK
WriteX 13495 589824 57598 57598 NT_STATUS_OK
Close 13495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13497 NT_STATUS_OK
WriteX 13497 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13497 258 NT_STATUS_OK
WriteX 13497 0 12543 12543 NT_STATUS_OK
Flush 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13499 NT_STATUS_OK
Close 13499 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13503 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 1005 NT_STATUS_OK
ReadX 13503 1938 24 24 NT_STATUS_OK
ReadX 13503 1920 276 276 NT_STATUS_OK
ReadX 13503 1918 14 14 NT_STATUS_OK
ReadX 13503 1918 7 7 NT_STATUS_OK
ReadX 13503 1919 12 12 NT_STATUS_OK
ReadX 13503 1919 8 8 NT_STATUS_OK
ReadX 13503 1917 15 15 NT_STATUS_OK
ReadX 13503 0 16 16 NT_STATUS_OK
ReadX 13503 16 2048 2048 NT_STATUS_OK
ReadX 13503 2064 2048 2048 NT_STATUS_OK
ReadX 13503 257 2048 2048 NT_STATUS_OK
ReadX 13503 385 2048 2048 NT_STATUS_OK
ReadX 13503 513 2048 2048 NT_STATUS_OK
ReadX 13503 641 2048 2048 NT_STATUS_OK
ReadX 13503 769 2048 2048 NT_STATUS_OK
ReadX 13503 897 2048 2048 NT_STATUS_OK
ReadX 13503 1025 2048 2048 NT_STATUS_OK
ReadX 13503 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13505 NT_STATUS_OK
Close 13505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13508 NT_STATUS_OK
WriteX 13508 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13508 258 NT_STATUS_OK
WriteX 13508 0 11588 11588 NT_STATUS_OK
Flush 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13509 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13511 NT_STATUS_OK
ReadX 13511 0 4096 4096 NT_STATUS_OK
Close 13503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13513 NT_STATUS_OK
WriteX 13513 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13513 258 NT_STATUS_OK
WriteX 13513 0 11615 11615 NT_STATUS_OK
Flush 13513 NT_STATUS_OK
Close 13513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13522 NT_STATUS_OK
WriteX 13522 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 258 NT_STATUS_OK
WriteX 13522 0 65536 65536 NT_STATUS_OK
WriteX 13522 65536 16050 16050 NT_STATUS_OK
Close 13522 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13502 1939 64 64 NT_STATUS_OK
ReadX 13502 128 248 248 NT_STATUS_OK
ReadX 13502 128 568 568 NT_STATUS_OK
ReadX 13502 3872 1536 1536 NT_STATUS_OK
ReadX 13502 3456 2560 2560 NT_STATUS_OK
ReadX 13502 3136 512 512 NT_STATUS_OK
ReadX 13502 2880 4096 4096 NT_STATUS_OK
ReadX 13502 3264 3072 3072 NT_STATUS_OK
ReadX 13502 320 4096 4096 NT_STATUS_OK
ReadX 13502 1024 4096 4096 NT_STATUS_OK
ReadX 13502 3616 4096 4096 NT_STATUS_OK
ReadX 13502 1939 64 64 NT_STATUS_OK
ReadX 13502 128 248 248 NT_STATUS_OK
ReadX 13502 128 608 608 NT_STATUS_OK
ReadX 13502 2858 1024 1024 NT_STATUS_OK
ReadX 13502 2810 4096 4096 NT_STATUS_OK
ReadX 13502 2826 4096 4096 NT_STATUS_OK
ReadX 13502 2580 2048 2048 NT_STATUS_OK
ReadX 13502 2800 2560 2560 NT_STATUS_OK
ReadX 13502 2100 4096 4096 NT_STATUS_OK
ReadX 13502 2084 4096 4096 NT_STATUS_OK
ReadX 13502 868 4096 4096 NT_STATUS_OK
ReadX 13502 2324 4096 4096 NT_STATUS_OK
ReadX 13502 884 4096 4096 NT_STATUS_OK
ReadX 13502 2604 1024 1024 NT_STATUS_OK
ReadX 13502 580 4096 4096 NT_STATUS_OK
ReadX 13502 596 4096 4096 NT_STATUS_OK
ReadX 13502 2752 4096 4096 NT_STATUS_OK
ReadX 13502 2842 1024 1024 NT_STATUS_OK
ReadX 13502 660 4096 4096 NT_STATUS_OK
ReadX 13502 2720 4096 4096 NT_STATUS_OK
ReadX 13502 2736 4096 4096 NT_STATUS_OK
ReadX 13502 628 4096 4096 NT_STATUS_OK
ReadX 13502 2704 4096 4096 NT_STATUS_OK
ReadX 13502 1556 4096 4096 NT_STATUS_OK
ReadX 13502 576 4096 4096 NT_STATUS_OK
ReadX 13502 3168 1536 1536 NT_STATUS_OK
ReadX 13502 832 4096 4096 NT_STATUS_OK
ReadX 13502 1088 4096 4096 NT_STATUS_OK
ReadX 13502 1344 4096 4096 NT_STATUS_OK
ReadX 13502 1600 4096 4096 NT_STATUS_OK
ReadX 13502 1856 4096 4096 NT_STATUS_OK
ReadX 13502 2112 4096 4096 NT_STATUS_OK
ReadX 13502 1892 4096 4096 NT_STATUS_OK
ReadX 13502 820 4096 4096 NT_STATUS_OK
ReadX 13502 788 4096 4096 NT_STATUS_OK
ReadX 13502 1604 4096 4096 NT_STATUS_OK
ReadX 13502 3648 4096 4096 NT_STATUS_OK
ReadX 13502 2608 4096 4096 NT_STATUS_OK
ReadX 13502 548 4096 4096 NT_STATUS_OK
ReadX 13502 740 4096 4096 NT_STATUS_OK
ReadX 13502 1344 4096 4096 NT_STATUS_OK
ReadX 13502 3392 4096 4096 NT_STATUS_OK
ReadX 13502 3904 4096 4096 NT_STATUS_OK
ReadX 13502 644 4096 4096 NT_STATUS_OK
ReadX 13502 676 4096 4096 NT_STATUS_OK
ReadX 13502 2688 4096 4096 NT_STATUS_OK
ReadX 13502 320 4096 4096 NT_STATUS_OK
ReadX 13502 900 4096 4096 NT_STATUS_OK
ReadX 13502 1908 4096 4096 NT_STATUS_OK
ReadX 13502 852 4096 4096 NT_STATUS_OK
ReadX 13502 724 4096 4096 NT_STATUS_OK
ReadX 13502 2292 4096 4096 NT_STATUS_OK
ReadX 13502 612 4096 4096 NT_STATUS_OK
ReadX 13502 388 4096 4096 NT_STATUS_OK
ReadX 13502 2368 4096 4096 NT_STATUS_OK
ReadX 13502 2624 4096 4096 NT_STATUS_OK
ReadX 13502 500 4096 4096 NT_STATUS_OK
ReadX 13502 356 4096 4096 NT_STATUS_OK
ReadX 13502 1024 4096 4096 NT_STATUS_OK
ReadX 13502 576 4096 4096 NT_STATUS_OK
ReadX 13502 340 4096 4096 NT_STATUS_OK
ReadX 13502 420 4096 4096 NT_STATUS_OK
ReadX 13502 1600 4096 4096 NT_STATUS_OK
ReadX 13502 404 4096 4096 NT_STATUS_OK
ReadX 13502 1428 4096 4096 NT_STATUS_OK
ReadX 13502 2656 4096 4096 NT_STATUS_OK
ReadX 13502 2624 4096 4096 NT_STATUS_OK
ReadX 13502 452 4096 4096 NT_STATUS_OK
ReadX 13502 692 4096 4096 NT_STATUS_OK
ReadX 13502 564 4096 4096 NT_STATUS_OK
ReadX 13502 372 4096 4096 NT_STATUS_OK
ReadX 13502 468 4096 4096 NT_STATUS_OK
ReadX 13502 484 4096 4096 NT_STATUS_OK
ReadX 13502 1088 4096 4096 NT_STATUS_OK
ReadX 13502 1924 4096 4096 NT_STATUS_OK
ReadX 13502 2768 4096 4096 NT_STATUS_OK
ReadX 13502 832 4096 4096 NT_STATUS_OK
ReadX 13502 836 4096 4096 NT_STATUS_OK
ReadX 13502 1856 4096 4096 NT_STATUS_OK
ReadX 13502 2640 4096 4096 NT_STATUS_OK
ReadX 13502 436 4096 4096 NT_STATUS_OK
ReadX 13502 1828 4096 4096 NT_STATUS_OK
ReadX 13502 804 4096 4096 NT_STATUS_OK
ReadX 13502 1860 4096 4096 NT_STATUS_OK
ReadX 13502 1812 4096 4096 NT_STATUS_OK
ReadX 13502 756 4096 4096 NT_STATUS_OK
ReadX 13502 1636 4096 4096 NT_STATUS_OK
ReadX 13502 772 4096 4096 NT_STATUS_OK
ReadX 13502 2036 4096 4096 NT_STATUS_OK
ReadX 13502 1220 4096 4096 NT_STATUS_OK
ReadX 13502 1652 4096 4096 NT_STATUS_OK
ReadX 13502 2588 4096 4096 NT_STATUS_OK
ReadX 13502 916 4096 4096 NT_STATUS_OK
ReadX 13502 260 4096 4096 NT_STATUS_OK
ReadX 13502 932 4096 4096 NT_STATUS_OK
ReadX 13502 2624 4096 4096 NT_STATUS_OK
ReadX 13502 308 4096 4096 NT_STATUS_OK
ReadX 13502 292 4096 4096 NT_STATUS_OK
ReadX 13502 1140 4096 4096 NT_STATUS_OK
ReadX 13502 276 4096 4096 NT_STATUS_OK
ReadX 13502 2020 4096 4096 NT_STATUS_OK
ReadX 13502 2880 4096 4096 NT_STATUS_OK
ReadX 13502 516 4096 4096 NT_STATUS_OK
ReadX 13502 1844 4096 4096 NT_STATUS_OK
ReadX 13502 1124 4096 4096 NT_STATUS_OK
ReadX 13502 3136 4096 4096 NT_STATUS_OK
ReadX 13502 324 4096 4096 NT_STATUS_OK
ReadX 13502 1156 4096 4096 NT_STATUS_OK
ReadX 13502 1172 4096 4096 NT_STATUS_OK
ReadX 13502 2112 4096 4096 NT_STATUS_OK
ReadX 13502 2368 4096 4096 NT_STATUS_OK
ReadX 13502 964 4096 4096 NT_STATUS_OK
ReadX 13502 980 4096 4096 NT_STATUS_OK
ReadX 13502 1012 4096 4096 NT_STATUS_OK
ReadX 13502 532 4096 4096 NT_STATUS_OK
ReadX 13502 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13502 1620 4096 4096 NT_STATUS_OK
ReadX 13502 1604 4096 4096 NT_STATUS_OK
ReadX 13502 2116 4096 4096 NT_STATUS_OK
ReadX 13502 2132 4096 4096 NT_STATUS_OK
ReadX 13502 2148 4096 4096 NT_STATUS_OK
ReadX 13502 2276 4096 4096 NT_STATUS_OK
ReadX 13502 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13524 NT_STATUS_OK
Close 13524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13527 NT_STATUS_OK
QUERY_FILE_INFORMATION 13482 1004 NT_STATUS_OK
Close 13482 NT_STATUS_OK
WriteX 13527 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13527 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 1004 NT_STATUS_OK
Close 13484 NT_STATUS_OK
WriteX 13527 0 65536 65536 NT_STATUS_OK
WriteX 13527 65536 64850 64850 NT_STATUS_OK
Close 13527 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13529 NT_STATUS_OK
WriteX 13529 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13529 258 NT_STATUS_OK
ReadX 13502 2068 4096 4096 NT_STATUS_OK
ReadX 13502 1588 4096 4096 NT_STATUS_OK
ReadX 13502 1572 4096 4096 NT_STATUS_OK
WriteX 13529 0 18630 18630 NT_STATUS_OK
Flush 13529 NT_STATUS_OK
Close 13529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13531 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13502 612 4096 4096 NT_STATUS_OK
ReadX 13502 564 4096 4096 NT_STATUS_OK
ReadX 13502 1876 4096 4096 NT_STATUS_OK
ReadX 13502 628 4096 4096 NT_STATUS_OK
ReadX 13502 740 4096 4096 NT_STATUS_OK
ReadX 13502 724 4096 4096 NT_STATUS_OK
ReadX 13502 644 4096 4096 NT_STATUS_OK
ReadX 13502 2324 4096 4096 NT_STATUS_OK
ReadX 13502 660 4096 4096 NT_STATUS_OK
ReadX 13502 852 4096 4096 NT_STATUS_OK
ReadX 13502 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13502 2368 4096 4096 NT_STATUS_OK
ReadX 13502 1024 4096 4096 NT_STATUS_OK
ReadX 13502 320 4096 4096 NT_STATUS_OK
ReadX 13502 580 4096 4096 NT_STATUS_OK
ReadX 13502 3136 512 512 NT_STATUS_OK
ReadX 13502 2880 4096 4096 NT_STATUS_OK
Close 13502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 61440 4096 4096 NT_STATUS_OK
ReadX 13534 126976 4096 4096 NT_STATUS_OK
WriteX 13534 0 65536 65536 NT_STATUS_OK
WriteX 13534 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13535 NT_STATUS_OK
ReadX 13535 61440 4096 4096 NT_STATUS_OK
ReadX 13535 126976 4096 4096 NT_STATUS_OK
ReadX 13535 192512 4096 4096 NT_STATUS_OK
ReadX 13535 258048 4096 4096 NT_STATUS_OK
WriteX 13535 0 65536 65536 NT_STATUS_OK
WriteX 13535 65536 65536 65536 NT_STATUS_OK
WriteX 13535 131072 65536 65536 NT_STATUS_OK
WriteX 13535 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13536 NT_STATUS_OK
ReadX 13536 61440 4096 4096 NT_STATUS_OK
ReadX 13536 126976 4096 4096 NT_STATUS_OK
ReadX 13536 192512 4096 4096 NT_STATUS_OK
ReadX 13536 258048 4096 4096 NT_STATUS_OK
ReadX 13536 323584 4096 4096 NT_STATUS_OK
ReadX 13536 389120 4096 4096 NT_STATUS_OK
ReadX 13536 454656 4096 4096 NT_STATUS_OK
ReadX 13536 520192 4096 4096 NT_STATUS_OK
WriteX 13536 0 65536 65536 NT_STATUS_OK
WriteX 13536 65536 65536 65536 NT_STATUS_OK
WriteX 13536 131072 65536 65536 NT_STATUS_OK
WriteX 13536 196608 65536 65536 NT_STATUS_OK
WriteX 13536 262144 65536 65536 NT_STATUS_OK
WriteX 13536 327680 65536 65536 NT_STATUS_OK
WriteX 13536 393216 65536 65536 NT_STATUS_OK
WriteX 13536 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13538 NT_STATUS_OK
Close 13538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13539 NT_STATUS_OK
WriteX 13539 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13537 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13537 0 8192 8192 NT_STATUS_OK
Flush 13537 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13535 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13544 NT_STATUS_OK
WriteX 13544 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13544 258 NT_STATUS_OK
WriteX 13544 0 62591 62591 NT_STATUS_OK
Close 13544 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13546 NT_STATUS_OK
Close 13546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13549 NT_STATUS_OK
WriteX 13549 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13549 258 NT_STATUS_OK
WriteX 13549 0 10845 10845 NT_STATUS_OK
Close 13549 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13551 NT_STATUS_OK
Close 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13554 NT_STATUS_OK
WriteX 13554 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13554 258 NT_STATUS_OK
WriteX 13554 0 30118 30118 NT_STATUS_OK
Close 13554 NT_STATUS_OK
WriteX 13537 0 4096 4096 NT_STATUS_OK
WriteX 13539 0 64 64 NT_STATUS_OK
Close 13539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 61440 61440 NT_STATUS_OK
ReadX 13556 61440 4096 4096 NT_STATUS_OK
ReadX 13556 65536 61440 61440 NT_STATUS_OK
ReadX 13556 126976 4096 4096 NT_STATUS_OK
ReadX 13556 131072 61440 61440 NT_STATUS_OK
ReadX 13556 192512 4096 4096 NT_STATUS_OK
ReadX 13556 196608 61440 61440 NT_STATUS_OK
ReadX 13556 258048 4096 4096 NT_STATUS_OK
ReadX 13556 262144 61440 61440 NT_STATUS_OK
ReadX 13556 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 61440 61440 NT_STATUS_OK
ReadX 13557 61440 4096 4096 NT_STATUS_OK
ReadX 13557 65536 61440 61440 NT_STATUS_OK
ReadX 13557 126976 4096 4096 NT_STATUS_OK
ReadX 13557 131072 61440 61440 NT_STATUS_OK
ReadX 13557 192512 4096 4096 NT_STATUS_OK
ReadX 13557 196608 61440 61440 NT_STATUS_OK
ReadX 13557 258048 4096 4096 NT_STATUS_OK
ReadX 13557 262144 61440 61440 NT_STATUS_OK
ReadX 13557 323584 4096 4096 NT_STATUS_OK
ReadX 13557 327680 61440 61440 NT_STATUS_OK
ReadX 13557 389120 4096 4096 NT_STATUS_OK
ReadX 13557 393216 61440 61440 NT_STATUS_OK
ReadX 13557 454656 4096 4096 NT_STATUS_OK
ReadX 13557 458752 61440 61440 NT_STATUS_OK
ReadX 13557 520192 4096 4096 NT_STATUS_OK
ReadX 13557 524288 61440 61440 NT_STATUS_OK
ReadX 13557 585728 4096 4096 NT_STATUS_OK
ReadX 13557 589824 61440 61440 NT_STATUS_OK
ReadX 13557 651264 4096 4096 NT_STATUS_OK
ReadX 13557 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 61440 61440 NT_STATUS_OK
ReadX 13558 61440 4096 4096 NT_STATUS_OK
ReadX 13558 65536 61440 61440 NT_STATUS_OK
ReadX 13558 126976 4096 4096 NT_STATUS_OK
ReadX 13558 131072 61440 61440 NT_STATUS_OK
ReadX 13558 192512 4096 4096 NT_STATUS_OK
ReadX 13558 196608 61440 61440 NT_STATUS_OK
ReadX 13558 258048 4096 4096 NT_STATUS_OK
ReadX 13558 262144 61440 61440 NT_STATUS_OK
ReadX 13558 323584 4096 4096 NT_STATUS_OK
ReadX 13558 327680 61440 61440 NT_STATUS_OK
ReadX 13558 389120 4096 4096 NT_STATUS_OK
ReadX 13558 393216 61440 61440 NT_STATUS_OK
ReadX 13558 454656 4096 4096 NT_STATUS_OK
ReadX 13558 458752 61440 61440 NT_STATUS_OK
ReadX 13558 520192 4096 4096 NT_STATUS_OK
ReadX 13558 524288 61440 61440 NT_STATUS_OK
ReadX 13558 585728 4096 4096 NT_STATUS_OK
ReadX 13558 589824 61440 61440 NT_STATUS_OK
ReadX 13558 651264 4096 4096 NT_STATUS_OK
ReadX 13558 655360 61440 61440 NT_STATUS_OK
ReadX 13558 716800 4096 4096 NT_STATUS_OK
ReadX 13558 720896 61440 61440 NT_STATUS_OK
ReadX 13558 782336 4096 4096 NT_STATUS_OK
ReadX 13558 786432 61440 61440 NT_STATUS_OK
ReadX 13558 847872 4096 4096 NT_STATUS_OK
ReadX 13558 851968 61440 61440 NT_STATUS_OK
ReadX 13558 913408 4096 4096 NT_STATUS_OK
ReadX 13558 917504 61440 61440 NT_STATUS_OK
ReadX 13558 978944 4096 4096 NT_STATUS_OK
ReadX 13558 983040 61440 61440 NT_STATUS_OK
ReadX 13558 1044480 4096 4096 NT_STATUS_OK
ReadX 13558 1048576 61440 61440 NT_STATUS_OK
ReadX 13558 1110016 4096 4096 NT_STATUS_OK
ReadX 13558 1114112 61440 61440 NT_STATUS_OK
ReadX 13558 1175552 4096 4096 NT_STATUS_OK
ReadX 13558 1179648 61440 61440 NT_STATUS_OK
ReadX 13558 1241088 4096 4096 NT_STATUS_OK
ReadX 13558 1245184 61440 61440 NT_STATUS_OK
ReadX 13558 1306624 4096 4096 NT_STATUS_OK
ReadX 13558 1310720 61440 61440 NT_STATUS_OK
ReadX 13558 1372160 4096 4096 NT_STATUS_OK
ReadX 13558 1376256 61440 61440 NT_STATUS_OK
ReadX 13558 1437696 4096 4096 NT_STATUS_OK
ReadX 13558 1441792 61440 61440 NT_STATUS_OK
ReadX 13558 1503232 4096 4096 NT_STATUS_OK
ReadX 13558 1507328 61440 61440 NT_STATUS_OK
ReadX 13558 1568768 4096 4096 NT_STATUS_OK
ReadX 13558 1572864 61440 61440 NT_STATUS_OK
ReadX 13558 1634304 4096 4096 NT_STATUS_OK
ReadX 13558 1638400 61440 61440 NT_STATUS_OK
ReadX 13558 1699840 4096 4096 NT_STATUS_OK
ReadX 13558 1703936 61440 61440 NT_STATUS_OK
ReadX 13558 1765376 4096 4096 NT_STATUS_OK
ReadX 13558 1769472 61440 61440 NT_STATUS_OK
ReadX 13558 1830912 4096 4096 NT_STATUS_OK
ReadX 13558 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13559 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13562 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 4096 4096 NT_STATUS_OK
ReadX 13563 4096 4096 4096 NT_STATUS_OK
ReadX 13563 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13564 NT_STATUS_OK
Close 13564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Close 13563 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13567 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13567 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 0 8192 8192 NT_STATUS_OK
ReadX 13571 8192 8192 8192 NT_STATUS_OK
ReadX 13571 16384 8192 8192 NT_STATUS_OK
ReadX 13571 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13573 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13576 NT_STATUS_OK
WriteX 13576 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13576 258 NT_STATUS_OK
WriteX 13576 0 10438 10438 NT_STATUS_OK
Close 13576 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13577 NT_STATUS_OK
Close 13577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13580 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13581 NT_STATUS_OK
Close 13581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13582 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
ReadX 13585 4096 4096 4096 NT_STATUS_OK
ReadX 13585 8192 4096 4096 NT_STATUS_OK
ReadX 13585 12288 8192 8192 NT_STATUS_OK
ReadX 13585 20480 8192 8192 NT_STATUS_OK
ReadX 13585 28672 8192 8192 NT_STATUS_OK
ReadX 13585 36864 8192 8192 NT_STATUS_OK
ReadX 13585 45056 8192 8192 NT_STATUS_OK
ReadX 13585 53248 8192 8192 NT_STATUS_OK
ReadX 13585 61440 8192 8192 NT_STATUS_OK
ReadX 13585 69632 8192 8192 NT_STATUS_OK
ReadX 13585 77824 8192 8192 NT_STATUS_OK
ReadX 13585 86016 8192 8192 NT_STATUS_OK
ReadX 13585 94208 8192 8192 NT_STATUS_OK
ReadX 13585 102400 8192 8192 NT_STATUS_OK
ReadX 13585 110592 8192 8192 NT_STATUS_OK
ReadX 13585 118784 8192 8192 NT_STATUS_OK
ReadX 13585 126976 8192 8192 NT_STATUS_OK
ReadX 13585 135168 8192 8192 NT_STATUS_OK
ReadX 13585 143360 8192 8192 NT_STATUS_OK
ReadX 13585 151552 8192 8192 NT_STATUS_OK
ReadX 13585 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13587 NT_STATUS_OK
Close 13587 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13590 NT_STATUS_OK
WriteX 13590 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13590 258 NT_STATUS_OK
WriteX 13590 0 28489 28489 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13591 NT_STATUS_OK
Close 13591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13593 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13594 NT_STATUS_OK
Close 13594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 0 8192 8192 NT_STATUS_OK
ReadX 13597 8192 8192 8192 NT_STATUS_OK
ReadX 13597 16384 8192 8192 NT_STATUS_OK
ReadX 13597 24576 8192 8192 NT_STATUS_OK
ReadX 13597 32768 16384 16384 NT_STATUS_OK
ReadX 13597 49152 8192 8192 NT_STATUS_OK
ReadX 13597 57344 8192 8192 NT_STATUS_OK
ReadX 13597 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13599 NT_STATUS_OK
Close 13599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13597 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13602 NT_STATUS_OK
WriteX 13602 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13602 258 NT_STATUS_OK
WriteX 13602 0 29253 29253 NT_STATUS_OK
Close 13602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13606 NT_STATUS_OK
Close 13606 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13609 NT_STATUS_OK
WriteX 13609 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
WriteX 13609 0 30183 30183 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13610 NT_STATUS_OK
Close 13610 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13612 NT_STATUS_OK
WriteX 13612 0 510 510 NT_STATUS_OK
WriteX 13612 510 512 512 NT_STATUS_OK
WriteX 13612 1022 510 510 NT_STATUS_OK
WriteX 13612 1532 510 510 NT_STATUS_OK
WriteX 13612 2042 168 168 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13613 NT_STATUS_OK
Close 13613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
WriteX 13615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 61440 4096 4096 NT_STATUS_OK
ReadX 13616 126976 4096 4096 NT_STATUS_OK
WriteX 13616 0 65536 65536 NT_STATUS_OK
WriteX 13616 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 61440 4096 4096 NT_STATUS_OK
ReadX 13617 126976 4096 4096 NT_STATUS_OK
ReadX 13617 192512 4096 4096 NT_STATUS_OK
ReadX 13617 258048 4096 4096 NT_STATUS_OK
WriteX 13617 0 65536 65536 NT_STATUS_OK
WriteX 13617 65536 65536 65536 NT_STATUS_OK
WriteX 13617 131072 65536 65536 NT_STATUS_OK
WriteX 13617 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 61440 4096 4096 NT_STATUS_OK
ReadX 13618 126976 4096 4096 NT_STATUS_OK
ReadX 13618 192512 4096 4096 NT_STATUS_OK
ReadX 13618 258048 4096 4096 NT_STATUS_OK
ReadX 13618 323584 4096 4096 NT_STATUS_OK
ReadX 13618 389120 4096 4096 NT_STATUS_OK
ReadX 13618 454656 4096 4096 NT_STATUS_OK
ReadX 13618 520192 4096 4096 NT_STATUS_OK
WriteX 13618 0 65536 65536 NT_STATUS_OK
WriteX 13618 65536 65536 65536 NT_STATUS_OK
WriteX 13618 131072 65536 65536 NT_STATUS_OK
WriteX 13618 196608 65536 65536 NT_STATUS_OK
WriteX 13618 262144 65536 65536 NT_STATUS_OK
WriteX 13618 327680 65536 65536 NT_STATUS_OK
WriteX 13618 393216 65536 65536 NT_STATUS_OK
WriteX 13618 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13619 NT_STATUS_OK
Close 13619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13621 NT_STATUS_OK
Close 13621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13625 NT_STATUS_OK
Close 13625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13630 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13634 NT_STATUS_OK
Close 13634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13637 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13653 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13663 NT_STATUS_OK
Close 13663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13668 NT_STATUS_OK
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13681 NT_STATUS_OK
Close 13681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13684 NT_STATUS_OK
Close 13684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13687 NT_STATUS_OK
WriteX 13687 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13687 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13687 0 65536 65536 NT_STATUS_OK
WriteX 13687 65536 65536 65536 NT_STATUS_OK
WriteX 13687 131072 65536 65536 NT_STATUS_OK
WriteX 13687 196608 65536 65536 NT_STATUS_OK
WriteX 13687 262144 26634 26634 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13693 NT_STATUS_OK
Close 13693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13694 NT_STATUS_OK
ReadX 13694 0 4096 4096 NT_STATUS_OK
Close 13694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
ReadX 13695 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13696 NT_STATUS_OK
Close 13696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13705 NT_STATUS_OK
Close 13705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13709 NT_STATUS_OK
Close 13709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13712 NT_STATUS_OK
Close 13712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13714 NT_STATUS_OK
Close 13714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13718 NT_STATUS_OK
Close 13718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13723 NT_STATUS_OK
Close 13723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13728 NT_STATUS_OK
Close 13728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13733 NT_STATUS_OK
Close 13733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13738 NT_STATUS_OK
Close 13738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13743 NT_STATUS_OK
Close 13743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13747 NT_STATUS_OK
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13752 NT_STATUS_OK
Close 13752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13757 NT_STATUS_OK
Close 13757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13760 NT_STATUS_OK
Close 13760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13762 NT_STATUS_OK
Close 13762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13774 NT_STATUS_OK
ReadX 13774 0 4096 4096 NT_STATUS_OK
Close 13774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13775 NT_STATUS_OK
ReadX 13775 0 4096 4096 NT_STATUS_OK
Close 13775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 0 4096 4096 NT_STATUS_OK
Close 13788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
Close 13789 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13790 NT_STATUS_OK
ReadX 13790 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13819 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13819 0 4096 4096 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13820 NT_STATUS_OK
ReadX 13820 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
ReadX 13821 4096 4096 4096 NT_STATUS_OK
ReadX 13821 8192 4096 4096 NT_STATUS_OK
ReadX 13821 12288 4096 4096 NT_STATUS_OK
ReadX 13821 16384 4096 4096 NT_STATUS_OK
ReadX 13821 20480 4096 4096 NT_STATUS_OK
ReadX 13821 24576 4096 4096 NT_STATUS_OK
ReadX 13821 28672 4096 4096 NT_STATUS_OK
ReadX 13821 32768 4096 4096 NT_STATUS_OK
ReadX 13821 36864 4096 4096 NT_STATUS_OK
ReadX 13821 40960 4096 4096 NT_STATUS_OK
ReadX 13821 45056 4096 4096 NT_STATUS_OK
ReadX 13821 49152 4096 4096 NT_STATUS_OK
ReadX 13821 53248 4096 4096 NT_STATUS_OK
ReadX 13821 57344 4096 4096 NT_STATUS_OK
ReadX 13821 61440 4096 4096 NT_STATUS_OK
ReadX 13821 65536 4096 4096 NT_STATUS_OK
ReadX 13821 69632 4096 4096 NT_STATUS_OK
ReadX 13821 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13821 1004 NT_STATUS_OK
WriteX 13821 0 4096 4096 NT_STATUS_OK
Close 13821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13822 NT_STATUS_OK
SET_FILE_INFORMATION 13822 1004 NT_STATUS_OK
Close 13822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13823 NT_STATUS_OK
ReadX 13823 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13824 NT_STATUS_OK
Close 13824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13827 NT_STATUS_OK
WriteX 13827 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13827 258 NT_STATUS_OK
WriteX 13827 0 65536 65536 NT_STATUS_OK
WriteX 13827 65536 19979 19979 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13828 NT_STATUS_OK
ReadX 13828 0 4096 4096 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 1004 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
SET_FILE_INFORMATION 13828 1004 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 0 4096 4096 NT_STATUS_OK
Close 13829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13831 NT_STATUS_OK
ReadX 13831 0 4096 4096 NT_STATUS_OK
Close 13831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
Close 13832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13833 1004 NT_STATUS_OK
WriteX 13833 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13834 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Close 13823 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13839 NT_STATUS_OK
WriteX 13839 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13839 258 NT_STATUS_OK
WriteX 13839 0 65536 65536 NT_STATUS_OK
WriteX 13839 65536 17654 17654 NT_STATUS_OK
Close 13839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13840 NT_STATUS_OK
ReadX 13840 0 4096 4096 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
SET_FILE_INFORMATION 13840 1004 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
Flush 13840 NT_STATUS_OK
Close 13840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13841 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
Close 13841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13842 NT_STATUS_OK
ReadX 13842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 0 4096 4096 NT_STATUS_OK
ReadX 13845 4096 4096 4096 NT_STATUS_OK
ReadX 13845 8192 4096 4096 NT_STATUS_OK
ReadX 13845 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13845 16384 4096 4096 NT_STATUS_OK
ReadX 13845 20480 4096 4096 NT_STATUS_OK
ReadX 13845 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 0 4096 4096 NT_STATUS_OK
Close 13846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
Close 13847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13848 1004 NT_STATUS_OK
WriteX 13848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13849 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13854 NT_STATUS_OK
WriteX 13854 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13854 258 NT_STATUS_OK
WriteX 13854 0 65536 65536 NT_STATUS_OK
WriteX 13854 65536 19490 19490 NT_STATUS_OK
Close 13854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 4096 4096 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
QUERY_FILE_INFORMATION 13855 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
SET_FILE_INFORMATION 13855 1004 NT_STATUS_OK
WriteX 13855 0 4096 4096 NT_STATUS_OK
Flush 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13856 NT_STATUS_OK
SET_FILE_INFORMATION 13856 1004 NT_STATUS_OK
Close 13856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13858 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13860 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13860 0 4096 4096 NT_STATUS_OK
Close 13860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13861 NT_STATUS_OK
ReadX 13861 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13862 NT_STATUS_OK
ReadX 13862 0 4096 4096 NT_STATUS_OK
ReadX 13862 4096 4096 4096 NT_STATUS_OK
ReadX 13862 8192 4096 4096 NT_STATUS_OK
ReadX 13862 12288 4096 4096 NT_STATUS_OK
ReadX 13862 16384 4096 4096 NT_STATUS_OK
ReadX 13862 20480 4096 4096 NT_STATUS_OK
ReadX 13862 24576 4096 4096 NT_STATUS_OK
ReadX 13862 28672 4096 4096 NT_STATUS_OK
ReadX 13862 32768 4096 4096 NT_STATUS_OK
ReadX 13862 36864 4096 4096 NT_STATUS_OK
ReadX 13862 40960 4096 4096 NT_STATUS_OK
ReadX 13862 45056 4096 4096 NT_STATUS_OK
ReadX 13862 49152 4096 4096 NT_STATUS_OK
ReadX 13862 53248 4096 4096 NT_STATUS_OK
ReadX 13862 57344 4096 4096 NT_STATUS_OK
ReadX 13862 61440 4096 4096 NT_STATUS_OK
ReadX 13862 65536 4096 4096 NT_STATUS_OK
ReadX 13862 69632 4096 4096 NT_STATUS_OK
ReadX 13862 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13862 1004 NT_STATUS_OK
WriteX 13862 0 4096 4096 NT_STATUS_OK
Close 13862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13863 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
Close 13863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13865 NT_STATUS_OK
Close 13865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13857 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13868 NT_STATUS_OK
WriteX 13868 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 258 NT_STATUS_OK
WriteX 13868 0 65536 65536 NT_STATUS_OK
WriteX 13868 65536 8866 8866 NT_STATUS_OK
Close 13868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13869 NT_STATUS_OK
ReadX 13869 0 4096 4096 NT_STATUS_OK
WriteX 13869 0 4096 4096 NT_STATUS_OK
Flush 13869 NT_STATUS_OK
SET_FILE_INFORMATION 13869 1004 NT_STATUS_OK
WriteX 13869 0 4096 4096 NT_STATUS_OK
Flush 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13870 NT_STATUS_OK
ReadX 13870 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13871 NT_STATUS_OK
ReadX 13871 0 4096 4096 NT_STATUS_OK
Close 13871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13872 NT_STATUS_OK
ReadX 13872 0 4096 4096 NT_STATUS_OK
Close 13872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13873 1004 NT_STATUS_OK
WriteX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13874 NT_STATUS_OK
Close 13874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Close 13864 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13879 NT_STATUS_OK
WriteX 13879 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13879 258 NT_STATUS_OK
WriteX 13879 0 65536 65536 NT_STATUS_OK
WriteX 13879 65536 9298 9298 NT_STATUS_OK
Close 13879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
WriteX 13880 0 4096 4096 NT_STATUS_OK
Flush 13880 NT_STATUS_OK
SET_FILE_INFORMATION 13880 1004 NT_STATUS_OK
WriteX 13880 0 4096 4096 NT_STATUS_OK
Flush 13880 NT_STATUS_OK
Close 13880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13881 NT_STATUS_OK
SET_FILE_INFORMATION 13881 1004 NT_STATUS_OK
Close 13881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13883 NT_STATUS_OK
Close 13883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13886 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13886 0 4096 4096 NT_STATUS_OK
Close 13886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13887 4096 4096 4096 NT_STATUS_OK
ReadX 13887 8192 4096 4096 NT_STATUS_OK
ReadX 13887 12288 4096 4096 NT_STATUS_OK
ReadX 13887 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13890 1004 NT_STATUS_OK
WriteX 13890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13887 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13893 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13896 NT_STATUS_OK
WriteX 13896 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13896 258 NT_STATUS_OK
WriteX 13896 0 65536 65536 NT_STATUS_OK
WriteX 13896 65536 11540 11540 NT_STATUS_OK
Close 13896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 4096 4096 NT_STATUS_OK
WriteX 13897 0 4096 4096 NT_STATUS_OK
Flush 13897 NT_STATUS_OK
SET_FILE_INFORMATION 13897 1004 NT_STATUS_OK
WriteX 13897 0 4096 4096 NT_STATUS_OK
Flush 13897 NT_STATUS_OK
Close 13897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13898 NT_STATUS_OK
SET_FILE_INFORMATION 13898 1004 NT_STATUS_OK
Close 13898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13900 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 61440 4096 4096 NT_STATUS_OK
ReadX 13902 126976 4096 4096 NT_STATUS_OK
WriteX 13902 0 65536 65536 NT_STATUS_OK
WriteX 13902 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 61440 4096 4096 NT_STATUS_OK
ReadX 13903 126976 4096 4096 NT_STATUS_OK
ReadX 13903 192512 4096 4096 NT_STATUS_OK
ReadX 13903 258048 4096 4096 NT_STATUS_OK
WriteX 13903 0 65536 65536 NT_STATUS_OK
WriteX 13903 65536 65536 65536 NT_STATUS_OK
WriteX 13903 131072 65536 65536 NT_STATUS_OK
WriteX 13903 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 61440 4096 4096 NT_STATUS_OK
ReadX 13904 126976 4096 4096 NT_STATUS_OK
ReadX 13904 192512 4096 4096 NT_STATUS_OK
ReadX 13904 258048 4096 4096 NT_STATUS_OK
ReadX 13904 323584 4096 4096 NT_STATUS_OK
ReadX 13904 389120 4096 4096 NT_STATUS_OK
ReadX 13904 454656 4096 4096 NT_STATUS_OK
ReadX 13904 520192 4096 4096 NT_STATUS_OK
WriteX 13904 0 65536 65536 NT_STATUS_OK
WriteX 13904 65536 65536 65536 NT_STATUS_OK
WriteX 13904 131072 65536 65536 NT_STATUS_OK
WriteX 13904 196608 65536 65536 NT_STATUS_OK
WriteX 13904 262144 65536 65536 NT_STATUS_OK
WriteX 13904 327680 65536 65536 NT_STATUS_OK
WriteX 13904 393216 65536 65536 NT_STATUS_OK
WriteX 13904 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
ReadX 13905 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13906 NT_STATUS_OK
WriteX 13906 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13906 258 NT_STATUS_OK
WriteX 13906 0 53 53 NT_STATUS_OK
Close 13906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13907 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Close 13903 NT_STATUS_OK
Close 13904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13905 8192 4096 4096 NT_STATUS_OK
ReadX 13905 12288 4096 4096 NT_STATUS_OK
WriteX 13909 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13909 258 NT_STATUS_OK
ReadX 13905 16384 4096 4096 NT_STATUS_OK
ReadX 13905 20480 4096 4096 NT_STATUS_OK
WriteX 13909 0 15360 15360 NT_STATUS_OK
Close 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13910 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13910 1004 NT_STATUS_OK
WriteX 13910 0 4096 4096 NT_STATUS_OK
Close 13910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13911 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13913 NT_STATUS_OK
ReadX 13913 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13913 4096 4096 4096 NT_STATUS_OK
ReadX 13913 8192 4096 4096 NT_STATUS_OK
ReadX 13913 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
ReadX 13916 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 4096 4096 NT_STATUS_OK
ReadX 13917 4096 4096 4096 NT_STATUS_OK
ReadX 13917 8192 4096 4096 NT_STATUS_OK
Close 13916 NT_STATUS_OK
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13918 NT_STATUS_OK
WriteX 13918 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13918 258 NT_STATUS_OK
WriteX 13918 0 15360 15360 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13919 NT_STATUS_OK
ReadX 13919 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13919 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13919 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13920 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13922 NT_STATUS_OK
ReadX 13922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13923 NT_STATUS_OK
SET_FILE_INFORMATION 13923 1004 NT_STATUS_OK
Close 13923 NT_STATUS_OK
WriteX 13919 0 4096 4096 NT_STATUS_OK
Close 13919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
ReadX 13926 4096 4096 4096 NT_STATUS_OK
ReadX 13926 8192 4096 4096 NT_STATUS_OK
ReadX 13926 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13926 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13926 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13928 NT_STATUS_OK
WriteX 13928 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13928 258 NT_STATUS_OK
WriteX 13928 0 53 53 NT_STATUS_OK
Close 13928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13929 NT_STATUS_OK
Close 13929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13927 4096 4096 4096 NT_STATUS_OK
ReadX 13927 8192 4096 4096 NT_STATUS_OK
ReadX 13927 12288 4096 4096 NT_STATUS_OK
WriteX 13931 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 258 NT_STATUS_OK
WriteX 13931 0 12006 12006 NT_STATUS_OK
Close 13931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13932 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13932 1004 NT_STATUS_OK
WriteX 13932 0 4096 4096 NT_STATUS_OK
Close 13932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13936 NT_STATUS_OK
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13935 4096 4096 4096 NT_STATUS_OK
ReadX 13935 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13938 NT_STATUS_OK
WriteX 13938 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13938 258 NT_STATUS_OK
WriteX 13938 0 11991 11991 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13939 NT_STATUS_OK
ReadX 13939 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13939 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13939 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13940 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13943 NT_STATUS_OK
SET_FILE_INFORMATION 13943 1004 NT_STATUS_OK
Close 13943 NT_STATUS_OK
WriteX 13939 0 4096 4096 NT_STATUS_OK
Close 13939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13944 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13946 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
ReadX 13946 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
WriteX 13946 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13946 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
Close 13922 NT_STATUS_OK
WriteX 13926 0 19054 19054 NT_STATUS_OK
WriteX 13946 0 12288 12288 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13949 NT_STATUS_OK
Close 13949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13951 NT_STATUS_OK
Close 13951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 61440 61440 NT_STATUS_OK
ReadX 13953 61440 4096 4096 NT_STATUS_OK
ReadX 13953 65536 61440 61440 NT_STATUS_OK
ReadX 13953 126976 4096 4096 NT_STATUS_OK
ReadX 13953 131072 61440 61440 NT_STATUS_OK
ReadX 13953 192512 4096 4096 NT_STATUS_OK
ReadX 13953 196608 61440 61440 NT_STATUS_OK
ReadX 13953 258048 4096 4096 NT_STATUS_OK
ReadX 13953 262144 61440 61440 NT_STATUS_OK
ReadX 13953 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13954 NT_STATUS_OK
ReadX 13954 0 61440 61440 NT_STATUS_OK
ReadX 13954 61440 4096 4096 NT_STATUS_OK
ReadX 13954 65536 61440 61440 NT_STATUS_OK
ReadX 13954 126976 4096 4096 NT_STATUS_OK
ReadX 13954 131072 61440 61440 NT_STATUS_OK
ReadX 13954 192512 4096 4096 NT_STATUS_OK
ReadX 13954 196608 61440 61440 NT_STATUS_OK
ReadX 13954 258048 4096 4096 NT_STATUS_OK
ReadX 13954 262144 61440 61440 NT_STATUS_OK
ReadX 13954 323584 4096 4096 NT_STATUS_OK
ReadX 13954 327680 61440 61440 NT_STATUS_OK
ReadX 13954 389120 4096 4096 NT_STATUS_OK
ReadX 13954 393216 61440 61440 NT_STATUS_OK
ReadX 13954 454656 4096 4096 NT_STATUS_OK
ReadX 13954 458752 61440 61440 NT_STATUS_OK
ReadX 13954 520192 4096 4096 NT_STATUS_OK
ReadX 13954 524288 61440 61440 NT_STATUS_OK
ReadX 13954 585728 4096 4096 NT_STATUS_OK
ReadX 13954 589824 61440 61440 NT_STATUS_OK
ReadX 13954 651264 4096 4096 NT_STATUS_OK
ReadX 13954 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13955 NT_STATUS_OK
ReadX 13955 0 61440 61440 NT_STATUS_OK
ReadX 13955 61440 4096 4096 NT_STATUS_OK
ReadX 13955 65536 61440 61440 NT_STATUS_OK
ReadX 13955 126976 4096 4096 NT_STATUS_OK
ReadX 13955 131072 61440 61440 NT_STATUS_OK
ReadX 13955 192512 4096 4096 NT_STATUS_OK
ReadX 13955 196608 61440 61440 NT_STATUS_OK
ReadX 13955 258048 4096 4096 NT_STATUS_OK
ReadX 13955 262144 61440 61440 NT_STATUS_OK
ReadX 13955 323584 4096 4096 NT_STATUS_OK
ReadX 13955 327680 61440 61440 NT_STATUS_OK
ReadX 13955 389120 4096 4096 NT_STATUS_OK
ReadX 13955 393216 61440 61440 NT_STATUS_OK
ReadX 13955 454656 4096 4096 NT_STATUS_OK
ReadX 13955 458752 61440 61440 NT_STATUS_OK
ReadX 13955 520192 4096 4096 NT_STATUS_OK
ReadX 13955 524288 61440 61440 NT_STATUS_OK
ReadX 13955 585728 4096 4096 NT_STATUS_OK
ReadX 13955 589824 61440 61440 NT_STATUS_OK
ReadX 13955 651264 4096 4096 NT_STATUS_OK
ReadX 13955 655360 61440 61440 NT_STATUS_OK
ReadX 13955 716800 4096 4096 NT_STATUS_OK
ReadX 13955 720896 61440 61440 NT_STATUS_OK
ReadX 13955 782336 4096 4096 NT_STATUS_OK
ReadX 13955 786432 61440 61440 NT_STATUS_OK
ReadX 13955 847872 4096 4096 NT_STATUS_OK
ReadX 13955 851968 61440 61440 NT_STATUS_OK
ReadX 13955 913408 4096 4096 NT_STATUS_OK
ReadX 13955 917504 61440 61440 NT_STATUS_OK
ReadX 13955 978944 4096 4096 NT_STATUS_OK
ReadX 13955 983040 61440 61440 NT_STATUS_OK
ReadX 13955 1044480 4096 4096 NT_STATUS_OK
ReadX 13955 1048576 61440 61440 NT_STATUS_OK
ReadX 13955 1110016 4096 4096 NT_STATUS_OK
ReadX 13955 1114112 61440 61440 NT_STATUS_OK
ReadX 13955 1175552 4096 4096 NT_STATUS_OK
ReadX 13955 1179648 61440 61440 NT_STATUS_OK
ReadX 13955 1241088 4096 4096 NT_STATUS_OK
ReadX 13955 1245184 61440 61440 NT_STATUS_OK
ReadX 13955 1306624 4096 4096 NT_STATUS_OK
ReadX 13955 1310720 61440 61440 NT_STATUS_OK
ReadX 13955 1372160 4096 4096 NT_STATUS_OK
ReadX 13955 1376256 61440 61440 NT_STATUS_OK
ReadX 13955 1437696 4096 4096 NT_STATUS_OK
ReadX 13955 1441792 61440 61440 NT_STATUS_OK
ReadX 13955 1503232 4096 4096 NT_STATUS_OK
ReadX 13955 1507328 61440 61440 NT_STATUS_OK
ReadX 13955 1568768 4096 4096 NT_STATUS_OK
ReadX 13955 1572864 61440 61440 NT_STATUS_OK
ReadX 13955 1634304 4096 4096 NT_STATUS_OK
ReadX 13955 1638400 61440 61440 NT_STATUS_OK
ReadX 13955 1699840 4096 4096 NT_STATUS_OK
ReadX 13955 1703936 61440 61440 NT_STATUS_OK
ReadX 13955 1765376 4096 4096 NT_STATUS_OK
ReadX 13955 1769472 61440 61440 NT_STATUS_OK
ReadX 13955 1830912 4096 4096 NT_STATUS_OK
ReadX 13955 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13958 NT_STATUS_OK
ReadX 13958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13962 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 1004 NT_STATUS_OK
WriteX 13962 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13962 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13963 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13964 NT_STATUS_OK
WriteX 13964 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 258 NT_STATUS_OK
WriteX 13964 0 491 491 NT_STATUS_OK
Close 13964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13962 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13967 NT_STATUS_OK
Close 13967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13968 NT_STATUS_OK
WriteX 13968 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13968 258 NT_STATUS_OK
WriteX 13968 0 543 543 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Close 13954 NT_STATUS_OK
Close 13955 NT_STATUS_OK
Close 13969 NT_STATUS_OK
Close 13957 NT_STATUS_OK
Close 13958 NT_STATUS_OK
Close 13959 NT_STATUS_OK
Close 13960 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13981 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13982 NT_STATUS_OK
QUERY_FILE_INFORMATION 13982 1004 NT_STATUS_OK
WriteX 13982 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13982 258 NT_STATUS_OK
WriteX 13982 0 2048 2048 NT_STATUS_OK
Close 13982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13983 0 4096 4096 NT_STATUS_OK
Flush 13983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13983 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13988 NT_STATUS_OK
WriteX 13988 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 258 NT_STATUS_OK
WriteX 13988 0 2048 2048 NT_STATUS_OK
Close 13988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13993 NT_STATUS_OK
Close 13993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13994 NT_STATUS_OK
WriteX 13994 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 258 NT_STATUS_OK
WriteX 13994 0 2048 2048 NT_STATUS_OK
Close 13994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 2048 2048 NT_STATUS_OK
ReadX 13973 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13989 0 4096 4096 NT_STATUS_OK
WriteX 13973 0 8192 8192 NT_STATUS_OK
WriteX 13974 0 4096 4096 NT_STATUS_OK
WriteX 13975 0 4096 4096 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13999 NT_STATUS_OK
QUERY_FILE_INFORMATION 13999 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13998 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14001 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14004 NT_STATUS_OK
ReadX 14004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14007 NT_STATUS_OK
ReadX 14007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14009 NT_STATUS_OK
ReadX 14009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14011 NT_STATUS_OK
ReadX 14011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14012 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14014 NT_STATUS_OK
ReadX 14014 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 14018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14019 NT_STATUS_OK
QUERY_FILE_INFORMATION 14019 1004 NT_STATUS_OK
WriteX 14019 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14019 258 NT_STATUS_OK
WriteX 14019 0 2048 2048 NT_STATUS_OK
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14020 NT_STATUS_OK
ReadX 14020 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14022 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 14026 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14027 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 1004 NT_STATUS_OK
WriteX 14027 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 258 NT_STATUS_OK
WriteX 14027 0 2048 2048 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14020 0 4096 4096 NT_STATUS_OK
Flush 14020 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 14020 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14022 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 14029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14030 NT_STATUS_OK
WriteX 14030 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14030 258 NT_STATUS_OK
WriteX 14030 0 4096 4096 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 14032 NT_STATUS_OK
Close 14032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14033 NT_STATUS_OK
WriteX 14033 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14033 258 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
Close 14033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 14034 0 4096 4096 NT_STATUS_OK
Close 14031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 14014 NT_STATUS_OK
Close 14008 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Close 14011 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Close 14009 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Close 14004 NT_STATUS_OK
Close 14005 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 14037 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 14040 NT_STATUS_OK
Close 14040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14041 NT_STATUS_OK
WriteX 14041 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14041 258 NT_STATUS_OK
WriteX 14041 0 2048 2048 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14051 NT_STATUS_OK
ReadX 14051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14055 NT_STATUS_OK
ReadX 14055 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14056 NT_STATUS_OK
QUERY_FILE_INFORMATION 14056 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14054 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Close 14055 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14058 NT_STATUS_OK
QUERY_FILE_INFORMATION 14058 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14061 NT_STATUS_OK
ReadX 14061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14062 NT_STATUS_OK
ReadX 14062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14063 NT_STATUS_OK
ReadX 14063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14064 NT_STATUS_OK
ReadX 14064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 14077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14078 NT_STATUS_OK
QUERY_FILE_INFORMATION 14078 1004 NT_STATUS_OK
WriteX 14078 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14078 258 NT_STATUS_OK
WriteX 14078 0 2048 2048 NT_STATUS_OK
Close 14078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14079 NT_STATUS_OK
ReadX 14079 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14080 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14090 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 1004 NT_STATUS_OK
WriteX 14090 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 258 NT_STATUS_OK
WriteX 14090 0 2048 2048 NT_STATUS_OK
Close 14090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14091 NT_STATUS_OK
ReadX 14091 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14093 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 9837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9838 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 1004 NT_STATUS_OK
WriteX 9838 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 258 NT_STATUS_OK
WriteX 9838 0 2048 2048 NT_STATUS_OK
Close 9838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14079 0 4096 4096 NT_STATUS_OK
Flush 14079 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
Flush 14091 NT_STATUS_OK
WriteX 9839 0 4096 4096 NT_STATUS_OK
Flush 9839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14079 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9839 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14081 4096 16384 16384 NT_STATUS_OK
ReadX 14061 4096 16384 16384 NT_STATUS_OK
ReadX 14093 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9840 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9841 NT_STATUS_OK
ReadX 9841 0 2048 2048 NT_STATUS_OK
WriteX 9841 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9842 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 9841 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14073 NT_STATUS_OK
Close 14065 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14083 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14093 NT_STATUS_OK
Close 14067 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Close 14062 NT_STATUS_OK
Close 14063 NT_STATUS_OK
Close 14064 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 9844 NT_STATUS_OK
QUERY_FILE_INFORMATION 9844 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 9846 NT_STATUS_OK
QUERY_FILE_INFORMATION 9846 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 9846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9849 NT_STATUS_OK
ReadX 9849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9850 NT_STATUS_OK
ReadX 9850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9851 NT_STATUS_OK
ReadX 9851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9852 NT_STATUS_OK
ReadX 9852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9853 NT_STATUS_OK
ReadX 9853 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9849 4096 16384 16384 NT_STATUS_OK
WriteX 9849 0 4096 4096 NT_STATUS_OK
WriteX 9850 0 4096 4096 NT_STATUS_OK
WriteX 9851 0 4096 4096 NT_STATUS_OK
WriteX 9852 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9854 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9856 NT_STATUS_OK
ReadX 9856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9857 NT_STATUS_OK
ReadX 9857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9858 NT_STATUS_OK
ReadX 9858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9859 NT_STATUS_OK
ReadX 9859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9860 NT_STATUS_OK
ReadX 9860 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9861 NT_STATUS_OK
ReadX 9861 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9862 NT_STATUS_OK
ReadX 9862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9863 NT_STATUS_OK
ReadX 9863 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9864 NT_STATUS_OK
ReadX 9864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9865 NT_STATUS_OK
ReadX 9865 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9866 NT_STATUS_OK
ReadX 9866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9867 NT_STATUS_OK
ReadX 9867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 9868 NT_STATUS_OK
ReadX 9868 0 8192 8192 NT_STATUS_OK
ReadX 9855 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9869 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9869 0 4096 4096 NT_STATUS_OK
ReadX 9869 4096 4096 4096 NT_STATUS_OK
ReadX 9869 8192 4096 4096 NT_STATUS_OK
WriteX 9855 0 4096 4096 NT_STATUS_OK
WriteX 9856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 9870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9870 0 4096 4096 NT_STATUS_OK
ReadX 9870 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 9849 0 4096 4096 NT_STATUS_OK
WriteX 9850 0 4096 4096 NT_STATUS_OK
WriteX 9851 0 4096 4096 NT_STATUS_OK
WriteX 9852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 9874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9875 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 1004 NT_STATUS_OK
WriteX 9875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 258 NT_STATUS_OK
WriteX 9875 0 2048 2048 NT_STATUS_OK
Close 9875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9876 NT_STATUS_OK
ReadX 9876 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9876 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9876 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 4096 4096 NT_STATUS_OK
ReadX 9878 4096 4096 4096 NT_STATUS_OK
WriteX 9878 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 9876 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9880 NT_STATUS_OK
ReadX 9880 0 4096 4096 NT_STATUS_OK
ReadX 9880 4096 4096 4096 NT_STATUS_OK
WriteX 9880 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 9881 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 9881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Close 9849 NT_STATUS_OK
Close 9850 NT_STATUS_OK
Close 9851 NT_STATUS_OK
Close 9852 NT_STATUS_OK
Close 9861 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9862 NT_STATUS_OK
Close 9863 NT_STATUS_OK
Close 9864 NT_STATUS_OK
Close 9865 NT_STATUS_OK
Close 9867 NT_STATUS_OK
Close 9855 NT_STATUS_OK
Close 9856 NT_STATUS_OK
Close 9859 NT_STATUS_OK
Close 9860 NT_STATUS_OK
Close 9857 NT_STATUS_OK
Close 9858 NT_STATUS_OK
Close 9880 NT_STATUS_OK
Close 9869 NT_STATUS_OK
Close 9870 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 9883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9883 0 4096 4096 NT_STATUS_OK
ReadX 9883 4096 4096 4096 NT_STATUS_OK
ReadX 9883 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9884 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9885 NT_STATUS_OK
ReadX 9885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9891 NT_STATUS_OK
ReadX 9891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9892 NT_STATUS_OK
ReadX 9892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9893 NT_STATUS_OK
ReadX 9893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9894 NT_STATUS_OK
ReadX 9894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9895 NT_STATUS_OK
ReadX 9895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 4096 4096 NT_STATUS_OK
ReadX 9884 4096 16384 16384 NT_STATUS_OK
Close 9883 NT_STATUS_OK
Close 9890 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9895 NT_STATUS_OK
Close 9892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9891 NT_STATUS_OK
Close 9893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9894 NT_STATUS_OK
Close 9896 NT_STATUS_OK
Close 9885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9897 NT_STATUS_OK
Close 9888 NT_STATUS_OK
ReadX 9897 0 4096 4096 NT_STATUS_OK
Close 9889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9898 NT_STATUS_OK
Close 9886 NT_STATUS_OK
ReadX 9898 0 4096 4096 NT_STATUS_OK
Close 9887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9899 NT_STATUS_OK
ReadX 9899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9900 NT_STATUS_OK
ReadX 9900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9901 NT_STATUS_OK
ReadX 9901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9903 NT_STATUS_OK
ReadX 9903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9904 NT_STATUS_OK
ReadX 9904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9907 NT_STATUS_OK
ReadX 9907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9908 NT_STATUS_OK
ReadX 9908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9909 NT_STATUS_OK
ReadX 9909 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 9913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9914 NT_STATUS_OK
QUERY_FILE_INFORMATION 9914 1004 NT_STATUS_OK
WriteX 9914 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9914 258 NT_STATUS_OK
WriteX 9914 0 2048 2048 NT_STATUS_OK
Close 9914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9915 NT_STATUS_OK
ReadX 9915 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 9915 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9919 NT_STATUS_OK
Close 9919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9920 NT_STATUS_OK
QUERY_FILE_INFORMATION 9920 1004 NT_STATUS_OK
WriteX 9920 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9920 258 NT_STATUS_OK
WriteX 9920 0 2048 2048 NT_STATUS_OK
Close 9920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9921 NT_STATUS_OK
ReadX 9921 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9921 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9897 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9922 NT_STATUS_OK
QUERY_FILE_INFORMATION 9922 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 9901 NT_STATUS_OK
Close 9909 NT_STATUS_OK
Close 9908 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9903 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Close 9907 NT_STATUS_OK
Close 9904 NT_STATUS_OK
Close 9905 NT_STATUS_OK
Close 9897 NT_STATUS_OK
Close 9898 NT_STATUS_OK
Close 9899 NT_STATUS_OK
Close 9900 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9924 NT_STATUS_OK
QUERY_FILE_INFORMATION 9924 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 61440 4096 4096 NT_STATUS_OK
ReadX 9926 126976 4096 4096 NT_STATUS_OK
WriteX 9926 0 65536 65536 NT_STATUS_OK
WriteX 9926 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 61440 4096 4096 NT_STATUS_OK
ReadX 9927 126976 4096 4096 NT_STATUS_OK
ReadX 9927 192512 4096 4096 NT_STATUS_OK
ReadX 9927 258048 4096 4096 NT_STATUS_OK
WriteX 9927 0 65536 65536 NT_STATUS_OK
WriteX 9927 65536 65536 65536 NT_STATUS_OK
WriteX 9927 131072 65536 65536 NT_STATUS_OK
WriteX 9927 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9928 NT_STATUS_OK
ReadX 9928 61440 4096 4096 NT_STATUS_OK
ReadX 9928 126976 4096 4096 NT_STATUS_OK
ReadX 9928 192512 4096 4096 NT_STATUS_OK
ReadX 9928 258048 4096 4096 NT_STATUS_OK
ReadX 9928 323584 4096 4096 NT_STATUS_OK
ReadX 9928 389120 4096 4096 NT_STATUS_OK
ReadX 9928 454656 4096 4096 NT_STATUS_OK
ReadX 9928 520192 4096 4096 NT_STATUS_OK
WriteX 9928 0 65536 65536 NT_STATUS_OK
WriteX 9928 65536 65536 65536 NT_STATUS_OK
WriteX 9928 131072 65536 65536 NT_STATUS_OK
WriteX 9928 196608 65536 65536 NT_STATUS_OK
WriteX 9928 262144 65536 65536 NT_STATUS_OK
WriteX 9928 327680 65536 65536 NT_STATUS_OK
WriteX 9928 393216 65536 65536 NT_STATUS_OK
WriteX 9928 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9929 NT_STATUS_OK
ReadX 9929 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9929 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9929 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9929 8192 4096 4096 NT_STATUS_OK
ReadX 9929 12288 4096 4096 NT_STATUS_OK
ReadX 9929 16384 4096 4096 NT_STATUS_OK
ReadX 9929 20480 4096 4096 NT_STATUS_OK
ReadX 9929 24576 4096 4096 NT_STATUS_OK
ReadX 9929 28672 4096 4096 NT_STATUS_OK
ReadX 9929 32768 4096 4096 NT_STATUS_OK
ReadX 9929 36864 4096 4096 NT_STATUS_OK
ReadX 9929 40960 4096 4096 NT_STATUS_OK
ReadX 9929 45056 4096 4096 NT_STATUS_OK
ReadX 9929 49152 4096 4096 NT_STATUS_OK
ReadX 9929 53248 4096 4096 NT_STATUS_OK
ReadX 9929 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9929 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9930 NT_STATUS_OK
Close 9930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Close 9928 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9932 NT_STATUS_OK
WriteX 9932 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9932 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9932 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9932 1004 NT_STATUS_OK
WriteX 9932 0 57088 57088 NT_STATUS_OK
WriteX 9932 0 4096 4096 NT_STATUS_OK
Flush 9932 NT_STATUS_OK
Close 9929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9933 NT_STATUS_OK
SET_FILE_INFORMATION 9933 1004 NT_STATUS_OK
Close 9933 NT_STATUS_OK
SET_FILE_INFORMATION 9932 1004 NT_STATUS_OK
WriteX 9932 0 4096 4096 NT_STATUS_OK
Close 9932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9934 NT_STATUS_OK
Close 9934 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9936 NT_STATUS_OK
ReadX 9936 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9936 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9937 NT_STATUS_OK
WriteX 9937 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9937 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
WriteX 9937 0 51456 51456 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Flush 9937 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Close 9937 NT_STATUS_OK
Close 9936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9939 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9941 NT_STATUS_OK
ReadX 9941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9941 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 53077 53077 NT_STATUS_OK
Close 9946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9947 NT_STATUS_OK
WriteX 9947 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9947 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9947 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 65536 65536 NT_STATUS_OK
WriteX 9947 65536 1856 1856 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Close 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9949 NT_STATUS_OK
Close 9949 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9951 NT_STATUS_OK
ReadX 9951 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9956 NT_STATUS_OK
WriteX 9956 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9956 258 NT_STATUS_OK
WriteX 9956 0 7983 7983 NT_STATUS_OK
Close 9956 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9958 NT_STATUS_OK
Close 9958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9961 NT_STATUS_OK
WriteX 9961 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9961 258 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 65536 65536 NT_STATUS_OK
WriteX 9961 131072 65536 65536 NT_STATUS_OK
WriteX 9961 196608 65536 65536 NT_STATUS_OK
WriteX 9961 262144 65536 65536 NT_STATUS_OK
WriteX 9961 327680 65536 65536 NT_STATUS_OK
WriteX 9961 393216 65536 65536 NT_STATUS_OK
WriteX 9961 458752 46731 46731 NT_STATUS_OK
Close 9961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9962 NT_STATUS_OK
WriteX 9962 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9951 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 65536 65536 NT_STATUS_OK
WriteX 9962 65536 22848 22848 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Close 9962 NT_STATUS_OK
Close 9951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9964 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9966 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9967 NT_STATUS_OK
ReadX 9967 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9967 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9967 1004 NT_STATUS_OK
ReadX 9967 8192 4096 4096 NT_STATUS_OK
ReadX 9967 12288 4096 4096 NT_STATUS_OK
ReadX 9967 16384 4096 4096 NT_STATUS_OK
ReadX 9967 20480 4096 4096 NT_STATUS_OK
ReadX 9967 24576 4096 4096 NT_STATUS_OK
ReadX 9967 28672 4096 4096 NT_STATUS_OK
ReadX 9967 32768 4096 4096 NT_STATUS_OK
ReadX 9967 36864 4096 4096 NT_STATUS_OK
ReadX 9967 40960 4096 4096 NT_STATUS_OK
ReadX 9967 45056 4096 4096 NT_STATUS_OK
ReadX 9967 49152 4096 4096 NT_STATUS_OK
ReadX 9967 53248 4096 4096 NT_STATUS_OK
ReadX 9967 57344 4096 4096 NT_STATUS_OK
ReadX 9967 61440 4096 4096 NT_STATUS_OK
ReadX 9967 65536 4096 4096 NT_STATUS_OK
ReadX 9967 69632 4096 4096 NT_STATUS_OK
ReadX 9967 73728 4096 4096 NT_STATUS_OK
ReadX 9967 77824 4096 4096 NT_STATUS_OK
ReadX 9967 81920 4096 4096 NT_STATUS_OK
ReadX 9967 86016 4096 4096 NT_STATUS_OK
ReadX 9967 90112 4096 4096 NT_STATUS_OK
ReadX 9967 94208 4096 4096 NT_STATUS_OK
ReadX 9967 98304 4096 4096 NT_STATUS_OK
ReadX 9967 102400 4096 4096 NT_STATUS_OK
ReadX 9967 106496 4096 4096 NT_STATUS_OK
ReadX 9967 110592 4096 4096 NT_STATUS_OK
ReadX 9967 114688 4096 4096 NT_STATUS_OK
ReadX 9967 118784 4096 4096 NT_STATUS_OK
ReadX 9967 122880 4096 4096 NT_STATUS_OK
ReadX 9967 126976 4096 4096 NT_STATUS_OK
ReadX 9967 131072 4096 4096 NT_STATUS_OK
ReadX 9967 135168 4096 4096 NT_STATUS_OK
ReadX 9967 139264 4096 4096 NT_STATUS_OK
ReadX 9967 143360 4096 4096 NT_STATUS_OK
ReadX 9967 147456 4096 4096 NT_STATUS_OK
ReadX 9967 151552 4096 4096 NT_STATUS_OK
ReadX 9967 155648 4096 4096 NT_STATUS_OK
ReadX 9967 159744 4096 4096 NT_STATUS_OK
ReadX 9967 163840 4096 4096 NT_STATUS_OK
ReadX 9967 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9967 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9970 NT_STATUS_OK
WriteX 9970 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9970 258 NT_STATUS_OK
Close 9967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9971 NT_STATUS_OK
SET_FILE_INFORMATION 9971 1004 NT_STATUS_OK
Close 9971 NT_STATUS_OK
WriteX 9970 0 42388 42388 NT_STATUS_OK
Close 9970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9974 NT_STATUS_OK
ReadX 9974 0 4096 4096 NT_STATUS_OK
ReadX 9974 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
SET_FILE_INFORMATION 9975 1004 NT_STATUS_OK
WriteX 9975 0 42652 42652 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9977 NT_STATUS_OK
Close 9977 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
ReadX 9979 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9984 NT_STATUS_OK
WriteX 9984 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9984 258 NT_STATUS_OK
WriteX 9984 0 65536 65536 NT_STATUS_OK
WriteX 9984 65536 49 49 NT_STATUS_OK
Close 9984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 0 61440 61440 NT_STATUS_OK
ReadX 9985 61440 4096 4096 NT_STATUS_OK
ReadX 9985 65536 61440 61440 NT_STATUS_OK
ReadX 9985 126976 4096 4096 NT_STATUS_OK
ReadX 9985 131072 61440 61440 NT_STATUS_OK
ReadX 9985 192512 4096 4096 NT_STATUS_OK
ReadX 9985 196608 61440 61440 NT_STATUS_OK
ReadX 9985 258048 4096 4096 NT_STATUS_OK
ReadX 9985 262144 61440 61440 NT_STATUS_OK
ReadX 9985 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 0 61440 61440 NT_STATUS_OK
ReadX 9986 61440 4096 4096 NT_STATUS_OK
ReadX 9986 65536 61440 61440 NT_STATUS_OK
ReadX 9986 126976 4096 4096 NT_STATUS_OK
ReadX 9986 131072 61440 61440 NT_STATUS_OK
ReadX 9986 192512 4096 4096 NT_STATUS_OK
ReadX 9986 196608 61440 61440 NT_STATUS_OK
ReadX 9986 258048 4096 4096 NT_STATUS_OK
ReadX 9986 262144 61440 61440 NT_STATUS_OK
ReadX 9986 323584 4096 4096 NT_STATUS_OK
ReadX 9986 327680 61440 61440 NT_STATUS_OK
ReadX 9986 389120 4096 4096 NT_STATUS_OK
ReadX 9986 393216 61440 61440 NT_STATUS_OK
ReadX 9986 454656 4096 4096 NT_STATUS_OK
ReadX 9986 458752 61440 61440 NT_STATUS_OK
ReadX 9986 520192 4096 4096 NT_STATUS_OK
ReadX 9986 524288 61440 61440 NT_STATUS_OK
ReadX 9986 585728 4096 4096 NT_STATUS_OK
ReadX 9986 589824 61440 61440 NT_STATUS_OK
ReadX 9986 651264 4096 4096 NT_STATUS_OK
ReadX 9986 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 0 61440 61440 NT_STATUS_OK
ReadX 9987 61440 4096 4096 NT_STATUS_OK
ReadX 9987 65536 61440 61440 NT_STATUS_OK
ReadX 9987 126976 4096 4096 NT_STATUS_OK
ReadX 9987 131072 61440 61440 NT_STATUS_OK
ReadX 9987 192512 4096 4096 NT_STATUS_OK
ReadX 9987 196608 61440 61440 NT_STATUS_OK
ReadX 9987 258048 4096 4096 NT_STATUS_OK
ReadX 9987 262144 61440 61440 NT_STATUS_OK
ReadX 9987 323584 4096 4096 NT_STATUS_OK
ReadX 9987 327680 61440 61440 NT_STATUS_OK
ReadX 9987 389120 4096 4096 NT_STATUS_OK
ReadX 9987 393216 61440 61440 NT_STATUS_OK
ReadX 9987 454656 4096 4096 NT_STATUS_OK
ReadX 9987 458752 61440 61440 NT_STATUS_OK
ReadX 9987 520192 4096 4096 NT_STATUS_OK
ReadX 9987 524288 61440 61440 NT_STATUS_OK
ReadX 9987 585728 4096 4096 NT_STATUS_OK
ReadX 9987 589824 61440 61440 NT_STATUS_OK
ReadX 9987 651264 4096 4096 NT_STATUS_OK
ReadX 9987 655360 61440 61440 NT_STATUS_OK
ReadX 9987 716800 4096 4096 NT_STATUS_OK
ReadX 9987 720896 61440 61440 NT_STATUS_OK
ReadX 9987 782336 4096 4096 NT_STATUS_OK
ReadX 9987 786432 61440 61440 NT_STATUS_OK
ReadX 9987 847872 4096 4096 NT_STATUS_OK
ReadX 9987 851968 61440 61440 NT_STATUS_OK
ReadX 9987 913408 4096 4096 NT_STATUS_OK
ReadX 9987 917504 61440 61440 NT_STATUS_OK
ReadX 9987 978944 4096 4096 NT_STATUS_OK
ReadX 9987 983040 61440 61440 NT_STATUS_OK
ReadX 9987 1044480 4096 4096 NT_STATUS_OK
ReadX 9987 1048576 61440 61440 NT_STATUS_OK
ReadX 9987 1110016 4096 4096 NT_STATUS_OK
ReadX 9987 1114112 61440 61440 NT_STATUS_OK
ReadX 9987 1175552 4096 4096 NT_STATUS_OK
ReadX 9987 1179648 61440 61440 NT_STATUS_OK
ReadX 9987 1241088 4096 4096 NT_STATUS_OK
ReadX 9987 1245184 61440 61440 NT_STATUS_OK
ReadX 9987 1306624 4096 4096 NT_STATUS_OK
ReadX 9987 1310720 61440 61440 NT_STATUS_OK
ReadX 9987 1372160 4096 4096 NT_STATUS_OK
ReadX 9987 1376256 61440 61440 NT_STATUS_OK
ReadX 9987 1437696 4096 4096 NT_STATUS_OK
ReadX 9987 1441792 61440 61440 NT_STATUS_OK
ReadX 9987 1503232 4096 4096 NT_STATUS_OK
ReadX 9987 1507328 61440 61440 NT_STATUS_OK
ReadX 9987 1568768 4096 4096 NT_STATUS_OK
ReadX 9987 1572864 61440 61440 NT_STATUS_OK
ReadX 9987 1634304 4096 4096 NT_STATUS_OK
ReadX 9987 1638400 61440 61440 NT_STATUS_OK
ReadX 9987 1699840 4096 4096 NT_STATUS_OK
ReadX 9987 1703936 61440 61440 NT_STATUS_OK
ReadX 9987 1765376 4096 4096 NT_STATUS_OK
ReadX 9987 1769472 61440 61440 NT_STATUS_OK
ReadX 9987 1830912 4096 4096 NT_STATUS_OK
ReadX 9987 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9989 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9989 1005 NT_STATUS_OK
ReadX 9989 2156 24 24 NT_STATUS_OK
ReadX 9989 2139 276 276 NT_STATUS_OK
ReadX 9989 2136 14 14 NT_STATUS_OK
ReadX 9989 2136 7 7 NT_STATUS_OK
ReadX 9989 2138 12 12 NT_STATUS_OK
ReadX 9989 2137 8 8 NT_STATUS_OK
ReadX 9989 2135 15 15 NT_STATUS_OK
ReadX 9989 0 16 16 NT_STATUS_OK
ReadX 9989 16 2048 2048 NT_STATUS_OK
ReadX 9989 2064 2048 2048 NT_STATUS_OK
ReadX 9989 257 2048 2048 NT_STATUS_OK
ReadX 9989 385 2048 2048 NT_STATUS_OK
ReadX 9989 513 2048 2048 NT_STATUS_OK
ReadX 9989 641 2048 2048 NT_STATUS_OK
ReadX 9989 769 2048 2048 NT_STATUS_OK
ReadX 9989 897 2048 2048 NT_STATUS_OK
ReadX 9989 1025 2048 2048 NT_STATUS_OK
ReadX 9989 1153 2048 2048 NT_STATUS_OK
ReadX 9989 1281 2048 2048 NT_STATUS_OK
ReadX 9989 1409 2048 2048 NT_STATUS_OK
ReadX 9989 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9991 NT_STATUS_OK
Close 9991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Close 9987 NT_STATUS_OK
Close 9979 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9994 NT_STATUS_OK
WriteX 9994 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9994 258 NT_STATUS_OK
WriteX 9994 0 10575 10575 NT_STATUS_OK
Flush 9994 NT_STATUS_OK
Close 9994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9995 NT_STATUS_OK
Close 9995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
Close 9989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9999 NT_STATUS_OK
LockX 9999 2147483538 1 NT_STATUS_OK
UnlockX 9999 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1005 NT_STATUS_OK
ReadX 9999 0 512 512 NT_STATUS_OK
ReadX 9999 512 512 512 NT_STATUS_OK
ReadX 9999 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9999 1004 NT_STATUS_OK
Close 9999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10000 NT_STATUS_OK
QUERY_FILE_INFORMATION 10000 1005 NT_STATUS_OK
ReadX 10000 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10001 NT_STATUS_OK
LockX 10001 2147483538 1 NT_STATUS_OK
UnlockX 10001 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10001 1005 NT_STATUS_OK
ReadX 10001 0 512 512 NT_STATUS_OK
ReadX 10001 512 512 512 NT_STATUS_OK
ReadX 10001 1024 512 512 NT_STATUS_OK
ReadX 10001 288 20 20 NT_STATUS_OK
ReadX 10001 308 2084 2084 NT_STATUS_OK
ReadX 10001 388 2084 2084 NT_STATUS_OK
ReadX 10001 388 2084 2084 NT_STATUS_OK
ReadX 9988 2157 1386 1386 NT_STATUS_OK
ReadX 10001 2472 399 399 NT_STATUS_OK
ReadX 10001 3072 1536 1536 NT_STATUS_OK
ReadX 10001 544 149 149 NT_STATUS_OK
ReadX 10001 693 485 485 NT_STATUS_OK
Close 10001 NT_STATUS_OK
ReadX 9988 2157 4096 4096 NT_STATUS_OK
ReadX 9988 6253 4096 4096 NT_STATUS_OK
ReadX 9988 10349 4096 4096 NT_STATUS_OK
ReadX 9988 14445 4096 4096 NT_STATUS_OK
ReadX 9988 18541 4096 4096 NT_STATUS_OK
ReadX 9988 22637 256 256 NT_STATUS_OK
ReadX 9988 22893 4096 4096 NT_STATUS_OK
ReadX 9988 26989 4096 4096 NT_STATUS_OK
ReadX 9988 31085 4096 4096 NT_STATUS_OK
ReadX 9988 35181 4096 4096 NT_STATUS_OK
ReadX 9988 39277 4096 4096 NT_STATUS_OK
ReadX 9988 43373 4096 4096 NT_STATUS_OK
ReadX 9988 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9988 2157 1024 1024 NT_STATUS_OK
ReadX 9988 1667 4688 4688 NT_STATUS_OK
ReadX 9988 6355 3516 3516 NT_STATUS_OK
ReadX 9988 9871 16384 16384 NT_STATUS_OK
ReadX 9988 26255 3771 3771 NT_STATUS_OK
ReadX 9988 30026 2048 2048 NT_STATUS_OK
ReadX 9988 32074 1024 1024 NT_STATUS_OK
ReadX 9988 33098 6652 6652 NT_STATUS_OK
ReadX 9988 39750 16384 16384 NT_STATUS_OK
ReadX 9988 56134 10496 10496 NT_STATUS_OK
ReadX 9988 66630 1784 1784 NT_STATUS_OK
ReadX 9988 68414 90 90 NT_STATUS_OK
ReadX 9988 68504 273 273 NT_STATUS_OK
ReadX 9988 68777 1600 1600 NT_STATUS_OK
ReadX 9988 70377 640 640 NT_STATUS_OK
ReadX 9988 71017 1280 1280 NT_STATUS_OK
ReadX 9988 72297 8464 8464 NT_STATUS_OK
ReadX 9988 80761 158 158 NT_STATUS_OK
ReadX 9988 80919 912 912 NT_STATUS_OK
ReadX 9988 81831 1980 1980 NT_STATUS_OK
ReadX 9988 83811 2256 2256 NT_STATUS_OK
ReadX 9988 86067 400 400 NT_STATUS_OK
ReadX 9988 86467 252 252 NT_STATUS_OK
ReadX 9988 86719 42 42 NT_STATUS_OK
ReadX 9988 86761 725 725 NT_STATUS_OK
ReadX 9988 2009 512 512 NT_STATUS_OK
ReadX 9988 3895 9 9 NT_STATUS_OK
ReadX 9988 3781 46 46 NT_STATUS_OK
ReadX 9988 4059 92 92 NT_STATUS_OK
ReadX 9988 3781 92 92 NT_STATUS_OK
ReadX 9988 3986 184 184 NT_STATUS_OK
ReadX 9988 3987 16384 16384 NT_STATUS_OK
ReadX 9988 3902 16384 16384 NT_STATUS_OK
ReadX 9988 3781 10240 10240 NT_STATUS_OK
ReadX 9988 3821 16384 16384 NT_STATUS_OK
ReadX 9988 3891 935 935 NT_STATUS_OK
ReadX 9988 4060 10240 10240 NT_STATUS_OK
ReadX 9988 4059 184 184 NT_STATUS_OK
ReadX 9988 256 184 184 NT_STATUS_OK
ReadX 9988 256 1026 1026 NT_STATUS_OK
ReadX 9988 3901 326 326 NT_STATUS_OK
ReadX 9988 3899 652 652 NT_STATUS_OK
ReadX 9988 256 2 2 NT_STATUS_OK
ReadX 9988 258 4948 4948 NT_STATUS_OK
Close 9988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10003 NT_STATUS_OK
Close 10003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10006 NT_STATUS_OK
WriteX 10006 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10006 258 NT_STATUS_OK
WriteX 10006 0 65536 65536 NT_STATUS_OK
WriteX 10006 65536 65536 65536 NT_STATUS_OK
WriteX 10006 131072 65536 65536 NT_STATUS_OK
WriteX 10006 196608 65536 65536 NT_STATUS_OK
WriteX 10006 262144 65536 65536 NT_STATUS_OK
WriteX 10006 327680 65536 65536 NT_STATUS_OK
WriteX 10006 393216 65536 65536 NT_STATUS_OK
WriteX 10006 458752 65536 65536 NT_STATUS_OK
WriteX 10006 524288 65536 65536 NT_STATUS_OK
WriteX 10006 589824 35257 35257 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10011 NT_STATUS_OK
WriteX 10011 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 258 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 65536 65536 NT_STATUS_OK
WriteX 10011 131072 65536 65536 NT_STATUS_OK
WriteX 10011 196608 65536 65536 NT_STATUS_OK
WriteX 10011 262144 65536 65536 NT_STATUS_OK
WriteX 10011 327680 65536 65536 NT_STATUS_OK
WriteX 10011 393216 65536 65536 NT_STATUS_OK
WriteX 10011 458752 65536 65536 NT_STATUS_OK
WriteX 10011 524288 65536 65536 NT_STATUS_OK
WriteX 10011 589824 57598 57598 NT_STATUS_OK
Close 10011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10013 NT_STATUS_OK
WriteX 10013 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10013 258 NT_STATUS_OK
WriteX 10013 0 12543 12543 NT_STATUS_OK
Flush 10013 NT_STATUS_OK
Close 10013 NT_STATUS_OK
Close 9997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10015 NT_STATUS_OK
Close 10015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10019 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1005 NT_STATUS_OK
ReadX 10019 1938 24 24 NT_STATUS_OK
ReadX 10019 1920 276 276 NT_STATUS_OK
ReadX 10019 1918 14 14 NT_STATUS_OK
ReadX 10019 1918 7 7 NT_STATUS_OK
ReadX 10019 1919 12 12 NT_STATUS_OK
ReadX 10019 1919 8 8 NT_STATUS_OK
ReadX 10019 1917 15 15 NT_STATUS_OK
ReadX 10019 0 16 16 NT_STATUS_OK
ReadX 10019 16 2048 2048 NT_STATUS_OK
ReadX 10019 2064 2048 2048 NT_STATUS_OK
ReadX 10019 257 2048 2048 NT_STATUS_OK
ReadX 10019 385 2048 2048 NT_STATUS_OK
ReadX 10019 513 2048 2048 NT_STATUS_OK
ReadX 10019 641 2048 2048 NT_STATUS_OK
ReadX 10019 769 2048 2048 NT_STATUS_OK
ReadX 10019 897 2048 2048 NT_STATUS_OK
ReadX 10019 1025 2048 2048 NT_STATUS_OK
ReadX 10019 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10021 NT_STATUS_OK
Close 10021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10024 NT_STATUS_OK
WriteX 10024 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10024 258 NT_STATUS_OK
WriteX 10024 0 11588 11588 NT_STATUS_OK
Flush 10024 NT_STATUS_OK
Close 10024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10025 NT_STATUS_OK
Close 10025 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10027 NT_STATUS_OK
ReadX 10027 0 4096 4096 NT_STATUS_OK
Close 10019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10029 NT_STATUS_OK
WriteX 10029 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10029 258 NT_STATUS_OK
WriteX 10029 0 11615 11615 NT_STATUS_OK
Flush 10029 NT_STATUS_OK
Close 10029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10031 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10035 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10038 NT_STATUS_OK
WriteX 10038 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10038 258 NT_STATUS_OK
WriteX 10038 0 65536 65536 NT_STATUS_OK
WriteX 10038 65536 16050 16050 NT_STATUS_OK
Close 10038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10018 1939 64 64 NT_STATUS_OK
ReadX 10018 128 248 248 NT_STATUS_OK
ReadX 10018 128 568 568 NT_STATUS_OK
ReadX 10018 3872 1536 1536 NT_STATUS_OK
ReadX 10018 3456 2560 2560 NT_STATUS_OK
ReadX 10018 3136 512 512 NT_STATUS_OK
ReadX 10018 2880 4096 4096 NT_STATUS_OK
ReadX 10018 3264 3072 3072 NT_STATUS_OK
ReadX 10018 320 4096 4096 NT_STATUS_OK
ReadX 10018 1024 4096 4096 NT_STATUS_OK
ReadX 10018 3616 4096 4096 NT_STATUS_OK
ReadX 10018 1939 64 64 NT_STATUS_OK
ReadX 10018 128 248 248 NT_STATUS_OK
ReadX 10018 128 608 608 NT_STATUS_OK
ReadX 10018 2858 1024 1024 NT_STATUS_OK
ReadX 10018 2810 4096 4096 NT_STATUS_OK
ReadX 10018 2826 4096 4096 NT_STATUS_OK
ReadX 10018 2580 2048 2048 NT_STATUS_OK
ReadX 10018 2800 2560 2560 NT_STATUS_OK
ReadX 10018 2100 4096 4096 NT_STATUS_OK
ReadX 10018 2084 4096 4096 NT_STATUS_OK
ReadX 10018 868 4096 4096 NT_STATUS_OK
ReadX 10018 2324 4096 4096 NT_STATUS_OK
ReadX 10018 884 4096 4096 NT_STATUS_OK
ReadX 10018 2604 1024 1024 NT_STATUS_OK
ReadX 10018 580 4096 4096 NT_STATUS_OK
ReadX 10018 596 4096 4096 NT_STATUS_OK
ReadX 10018 2752 4096 4096 NT_STATUS_OK
ReadX 10018 2842 1024 1024 NT_STATUS_OK
ReadX 10018 660 4096 4096 NT_STATUS_OK
ReadX 10018 2720 4096 4096 NT_STATUS_OK
ReadX 10018 2736 4096 4096 NT_STATUS_OK
ReadX 10018 628 4096 4096 NT_STATUS_OK
ReadX 10018 2704 4096 4096 NT_STATUS_OK
ReadX 10018 1556 4096 4096 NT_STATUS_OK
ReadX 10018 576 4096 4096 NT_STATUS_OK
ReadX 10018 3168 1536 1536 NT_STATUS_OK
ReadX 10018 832 4096 4096 NT_STATUS_OK
ReadX 10018 1088 4096 4096 NT_STATUS_OK
ReadX 10018 1344 4096 4096 NT_STATUS_OK
ReadX 10018 1600 4096 4096 NT_STATUS_OK
ReadX 10018 1856 4096 4096 NT_STATUS_OK
ReadX 10018 2112 4096 4096 NT_STATUS_OK
ReadX 10018 1892 4096 4096 NT_STATUS_OK
ReadX 10018 820 4096 4096 NT_STATUS_OK
ReadX 10018 788 4096 4096 NT_STATUS_OK
ReadX 10018 1604 4096 4096 NT_STATUS_OK
ReadX 10018 3648 4096 4096 NT_STATUS_OK
ReadX 10018 2608 4096 4096 NT_STATUS_OK
ReadX 10018 548 4096 4096 NT_STATUS_OK
ReadX 10018 740 4096 4096 NT_STATUS_OK
ReadX 10018 1344 4096 4096 NT_STATUS_OK
ReadX 10018 3392 4096 4096 NT_STATUS_OK
ReadX 10018 3904 4096 4096 NT_STATUS_OK
ReadX 10018 644 4096 4096 NT_STATUS_OK
ReadX 10018 676 4096 4096 NT_STATUS_OK
ReadX 10018 2688 4096 4096 NT_STATUS_OK
ReadX 10018 320 4096 4096 NT_STATUS_OK
ReadX 10018 900 4096 4096 NT_STATUS_OK
ReadX 10018 1908 4096 4096 NT_STATUS_OK
ReadX 10018 852 4096 4096 NT_STATUS_OK
ReadX 10018 724 4096 4096 NT_STATUS_OK
ReadX 10018 2292 4096 4096 NT_STATUS_OK
ReadX 10018 612 4096 4096 NT_STATUS_OK
ReadX 10018 388 4096 4096 NT_STATUS_OK
ReadX 10018 2368 4096 4096 NT_STATUS_OK
ReadX 10018 2624 4096 4096 NT_STATUS_OK
ReadX 10018 500 4096 4096 NT_STATUS_OK
ReadX 10018 356 4096 4096 NT_STATUS_OK
ReadX 10018 1024 4096 4096 NT_STATUS_OK
ReadX 10018 576 4096 4096 NT_STATUS_OK
ReadX 10018 340 4096 4096 NT_STATUS_OK
ReadX 10018 420 4096 4096 NT_STATUS_OK
ReadX 10018 1600 4096 4096 NT_STATUS_OK
ReadX 10018 404 4096 4096 NT_STATUS_OK
ReadX 10018 1428 4096 4096 NT_STATUS_OK
ReadX 10018 2656 4096 4096 NT_STATUS_OK
ReadX 10018 2624 4096 4096 NT_STATUS_OK
ReadX 10018 452 4096 4096 NT_STATUS_OK
ReadX 10018 692 4096 4096 NT_STATUS_OK
ReadX 10018 564 4096 4096 NT_STATUS_OK
ReadX 10018 372 4096 4096 NT_STATUS_OK
ReadX 10018 468 4096 4096 NT_STATUS_OK
ReadX 10018 484 4096 4096 NT_STATUS_OK
ReadX 10018 1088 4096 4096 NT_STATUS_OK
ReadX 10018 1924 4096 4096 NT_STATUS_OK
ReadX 10018 2768 4096 4096 NT_STATUS_OK
ReadX 10018 832 4096 4096 NT_STATUS_OK
ReadX 10018 836 4096 4096 NT_STATUS_OK
ReadX 10018 1856 4096 4096 NT_STATUS_OK
ReadX 10018 2640 4096 4096 NT_STATUS_OK
ReadX 10018 436 4096 4096 NT_STATUS_OK
ReadX 10018 1828 4096 4096 NT_STATUS_OK
ReadX 10018 804 4096 4096 NT_STATUS_OK
ReadX 10018 1860 4096 4096 NT_STATUS_OK
ReadX 10018 1812 4096 4096 NT_STATUS_OK
ReadX 10018 756 4096 4096 NT_STATUS_OK
ReadX 10018 1636 4096 4096 NT_STATUS_OK
ReadX 10018 772 4096 4096 NT_STATUS_OK
ReadX 10018 2036 4096 4096 NT_STATUS_OK
ReadX 10018 1220 4096 4096 NT_STATUS_OK
ReadX 10018 1652 4096 4096 NT_STATUS_OK
ReadX 10018 2588 4096 4096 NT_STATUS_OK
ReadX 10018 916 4096 4096 NT_STATUS_OK
ReadX 10018 260 4096 4096 NT_STATUS_OK
ReadX 10018 932 4096 4096 NT_STATUS_OK
ReadX 10018 2624 4096 4096 NT_STATUS_OK
ReadX 10018 308 4096 4096 NT_STATUS_OK
ReadX 10018 292 4096 4096 NT_STATUS_OK
ReadX 10018 1140 4096 4096 NT_STATUS_OK
ReadX 10018 276 4096 4096 NT_STATUS_OK
ReadX 10018 2020 4096 4096 NT_STATUS_OK
ReadX 10018 2880 4096 4096 NT_STATUS_OK
ReadX 10018 516 4096 4096 NT_STATUS_OK
ReadX 10018 1844 4096 4096 NT_STATUS_OK
ReadX 10018 1124 4096 4096 NT_STATUS_OK
ReadX 10018 3136 4096 4096 NT_STATUS_OK
ReadX 10018 324 4096 4096 NT_STATUS_OK
ReadX 10018 1156 4096 4096 NT_STATUS_OK
ReadX 10018 1172 4096 4096 NT_STATUS_OK
ReadX 10018 2112 4096 4096 NT_STATUS_OK
ReadX 10018 2368 4096 4096 NT_STATUS_OK
ReadX 10018 964 4096 4096 NT_STATUS_OK
ReadX 10018 980 4096 4096 NT_STATUS_OK
ReadX 10018 1012 4096 4096 NT_STATUS_OK
ReadX 10018 532 4096 4096 NT_STATUS_OK
ReadX 10018 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10018 1620 4096 4096 NT_STATUS_OK
ReadX 10018 1604 4096 4096 NT_STATUS_OK
ReadX 10018 2116 4096 4096 NT_STATUS_OK
ReadX 10018 2132 4096 4096 NT_STATUS_OK
ReadX 10018 2148 4096 4096 NT_STATUS_OK
ReadX 10018 2276 4096 4096 NT_STATUS_OK
ReadX 10018 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10043 NT_STATUS_OK
QUERY_FILE_INFORMATION 9998 1004 NT_STATUS_OK
Close 9998 NT_STATUS_OK
WriteX 10043 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10043 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10000 1004 NT_STATUS_OK
Close 10000 NT_STATUS_OK
WriteX 10043 0 65536 65536 NT_STATUS_OK
WriteX 10043 65536 64850 64850 NT_STATUS_OK
Close 10043 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10045 NT_STATUS_OK
WriteX 10045 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10045 258 NT_STATUS_OK
ReadX 10018 2068 4096 4096 NT_STATUS_OK
ReadX 10018 1588 4096 4096 NT_STATUS_OK
ReadX 10018 1572 4096 4096 NT_STATUS_OK
WriteX 10045 0 18630 18630 NT_STATUS_OK
Flush 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10018 612 4096 4096 NT_STATUS_OK
ReadX 10018 564 4096 4096 NT_STATUS_OK
ReadX 10018 1876 4096 4096 NT_STATUS_OK
ReadX 10018 628 4096 4096 NT_STATUS_OK
ReadX 10018 740 4096 4096 NT_STATUS_OK
ReadX 10018 724 4096 4096 NT_STATUS_OK
ReadX 10018 644 4096 4096 NT_STATUS_OK
ReadX 10018 2324 4096 4096 NT_STATUS_OK
ReadX 10018 660 4096 4096 NT_STATUS_OK
ReadX 10018 852 4096 4096 NT_STATUS_OK
ReadX 10018 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10018 2368 4096 4096 NT_STATUS_OK
ReadX 10018 1024 4096 4096 NT_STATUS_OK
ReadX 10018 320 4096 4096 NT_STATUS_OK
ReadX 10018 580 4096 4096 NT_STATUS_OK
ReadX 10018 3136 512 512 NT_STATUS_OK
ReadX 10018 2880 4096 4096 NT_STATUS_OK
Close 10018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10050 NT_STATUS_OK
ReadX 10050 61440 4096 4096 NT_STATUS_OK
ReadX 10050 126976 4096 4096 NT_STATUS_OK
WriteX 10050 0 65536 65536 NT_STATUS_OK
WriteX 10050 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 61440 4096 4096 NT_STATUS_OK
ReadX 10051 126976 4096 4096 NT_STATUS_OK
ReadX 10051 192512 4096 4096 NT_STATUS_OK
ReadX 10051 258048 4096 4096 NT_STATUS_OK
WriteX 10051 0 65536 65536 NT_STATUS_OK
WriteX 10051 65536 65536 65536 NT_STATUS_OK
WriteX 10051 131072 65536 65536 NT_STATUS_OK
WriteX 10051 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10052 NT_STATUS_OK
ReadX 10052 61440 4096 4096 NT_STATUS_OK
ReadX 10052 126976 4096 4096 NT_STATUS_OK
ReadX 10052 192512 4096 4096 NT_STATUS_OK
ReadX 10052 258048 4096 4096 NT_STATUS_OK
ReadX 10052 323584 4096 4096 NT_STATUS_OK
ReadX 10052 389120 4096 4096 NT_STATUS_OK
ReadX 10052 454656 4096 4096 NT_STATUS_OK
ReadX 10052 520192 4096 4096 NT_STATUS_OK
WriteX 10052 0 65536 65536 NT_STATUS_OK
WriteX 10052 65536 65536 65536 NT_STATUS_OK
WriteX 10052 131072 65536 65536 NT_STATUS_OK
WriteX 10052 196608 65536 65536 NT_STATUS_OK
WriteX 10052 262144 65536 65536 NT_STATUS_OK
WriteX 10052 327680 65536 65536 NT_STATUS_OK
WriteX 10052 393216 65536 65536 NT_STATUS_OK
WriteX 10052 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10055 NT_STATUS_OK
WriteX 10055 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10055 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10053 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10053 0 8192 8192 NT_STATUS_OK
Flush 10053 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10057 NT_STATUS_OK
Close 10057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10049 NT_STATUS_OK
Close 10017 NT_STATUS_OK
Close 10050 NT_STATUS_OK
Close 10051 NT_STATUS_OK
Close 10052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10060 NT_STATUS_OK
WriteX 10060 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10060 258 NT_STATUS_OK
WriteX 10060 0 62591 62591 NT_STATUS_OK
Close 10060 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10062 NT_STATUS_OK
Close 10062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10065 NT_STATUS_OK
WriteX 10065 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10065 258 NT_STATUS_OK
WriteX 10065 0 10845 10845 NT_STATUS_OK
Close 10065 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10070 NT_STATUS_OK
WriteX 10070 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10070 258 NT_STATUS_OK
WriteX 10070 0 30118 30118 NT_STATUS_OK
Close 10070 NT_STATUS_OK
WriteX 10053 0 4096 4096 NT_STATUS_OK
WriteX 10055 0 64 64 NT_STATUS_OK
Close 10055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 61440 61440 NT_STATUS_OK
ReadX 10072 61440 4096 4096 NT_STATUS_OK
ReadX 10072 65536 61440 61440 NT_STATUS_OK
ReadX 10072 126976 4096 4096 NT_STATUS_OK
ReadX 10072 131072 61440 61440 NT_STATUS_OK
ReadX 10072 192512 4096 4096 NT_STATUS_OK
ReadX 10072 196608 61440 61440 NT_STATUS_OK
ReadX 10072 258048 4096 4096 NT_STATUS_OK
ReadX 10072 262144 61440 61440 NT_STATUS_OK
ReadX 10072 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10073 NT_STATUS_OK
ReadX 10073 0 61440 61440 NT_STATUS_OK
ReadX 10073 61440 4096 4096 NT_STATUS_OK
ReadX 10073 65536 61440 61440 NT_STATUS_OK
ReadX 10073 126976 4096 4096 NT_STATUS_OK
ReadX 10073 131072 61440 61440 NT_STATUS_OK
ReadX 10073 192512 4096 4096 NT_STATUS_OK
ReadX 10073 196608 61440 61440 NT_STATUS_OK
ReadX 10073 258048 4096 4096 NT_STATUS_OK
ReadX 10073 262144 61440 61440 NT_STATUS_OK
ReadX 10073 323584 4096 4096 NT_STATUS_OK
ReadX 10073 327680 61440 61440 NT_STATUS_OK
ReadX 10073 389120 4096 4096 NT_STATUS_OK
ReadX 10073 393216 61440 61440 NT_STATUS_OK
ReadX 10073 454656 4096 4096 NT_STATUS_OK
ReadX 10073 458752 61440 61440 NT_STATUS_OK
ReadX 10073 520192 4096 4096 NT_STATUS_OK
ReadX 10073 524288 61440 61440 NT_STATUS_OK
ReadX 10073 585728 4096 4096 NT_STATUS_OK
ReadX 10073 589824 61440 61440 NT_STATUS_OK
ReadX 10073 651264 4096 4096 NT_STATUS_OK
ReadX 10073 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 61440 61440 NT_STATUS_OK
ReadX 10074 61440 4096 4096 NT_STATUS_OK
ReadX 10074 65536 61440 61440 NT_STATUS_OK
ReadX 10074 126976 4096 4096 NT_STATUS_OK
ReadX 10074 131072 61440 61440 NT_STATUS_OK
ReadX 10074 192512 4096 4096 NT_STATUS_OK
ReadX 10074 196608 61440 61440 NT_STATUS_OK
ReadX 10074 258048 4096 4096 NT_STATUS_OK
ReadX 10074 262144 61440 61440 NT_STATUS_OK
ReadX 10074 323584 4096 4096 NT_STATUS_OK
ReadX 10074 327680 61440 61440 NT_STATUS_OK
ReadX 10074 389120 4096 4096 NT_STATUS_OK
ReadX 10074 393216 61440 61440 NT_STATUS_OK
ReadX 10074 454656 4096 4096 NT_STATUS_OK
ReadX 10074 458752 61440 61440 NT_STATUS_OK
ReadX 10074 520192 4096 4096 NT_STATUS_OK
ReadX 10074 524288 61440 61440 NT_STATUS_OK
ReadX 10074 585728 4096 4096 NT_STATUS_OK
ReadX 10074 589824 61440 61440 NT_STATUS_OK
ReadX 10074 651264 4096 4096 NT_STATUS_OK
ReadX 10074 655360 61440 61440 NT_STATUS_OK
ReadX 10074 716800 4096 4096 NT_STATUS_OK
ReadX 10074 720896 61440 61440 NT_STATUS_OK
ReadX 10074 782336 4096 4096 NT_STATUS_OK
ReadX 10074 786432 61440 61440 NT_STATUS_OK
ReadX 10074 847872 4096 4096 NT_STATUS_OK
ReadX 10074 851968 61440 61440 NT_STATUS_OK
ReadX 10074 913408 4096 4096 NT_STATUS_OK
ReadX 10074 917504 61440 61440 NT_STATUS_OK
ReadX 10074 978944 4096 4096 NT_STATUS_OK
ReadX 10074 983040 61440 61440 NT_STATUS_OK
ReadX 10074 1044480 4096 4096 NT_STATUS_OK
ReadX 10074 1048576 61440 61440 NT_STATUS_OK
ReadX 10074 1110016 4096 4096 NT_STATUS_OK
ReadX 10074 1114112 61440 61440 NT_STATUS_OK
ReadX 10074 1175552 4096 4096 NT_STATUS_OK
ReadX 10074 1179648 61440 61440 NT_STATUS_OK
ReadX 10074 1241088 4096 4096 NT_STATUS_OK
ReadX 10074 1245184 61440 61440 NT_STATUS_OK
ReadX 10074 1306624 4096 4096 NT_STATUS_OK
ReadX 10074 1310720 61440 61440 NT_STATUS_OK
ReadX 10074 1372160 4096 4096 NT_STATUS_OK
ReadX 10074 1376256 61440 61440 NT_STATUS_OK
ReadX 10074 1437696 4096 4096 NT_STATUS_OK
ReadX 10074 1441792 61440 61440 NT_STATUS_OK
ReadX 10074 1503232 4096 4096 NT_STATUS_OK
ReadX 10074 1507328 61440 61440 NT_STATUS_OK
ReadX 10074 1568768 4096 4096 NT_STATUS_OK
ReadX 10074 1572864 61440 61440 NT_STATUS_OK
ReadX 10074 1634304 4096 4096 NT_STATUS_OK
ReadX 10074 1638400 61440 61440 NT_STATUS_OK
ReadX 10074 1699840 4096 4096 NT_STATUS_OK
ReadX 10074 1703936 61440 61440 NT_STATUS_OK
ReadX 10074 1765376 4096 4096 NT_STATUS_OK
ReadX 10074 1769472 61440 61440 NT_STATUS_OK
ReadX 10074 1830912 4096 4096 NT_STATUS_OK
ReadX 10074 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10075 NT_STATUS_OK
Close 10075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10072 NT_STATUS_OK
Close 10073 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10077 NT_STATUS_OK
ReadX 10077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10078 NT_STATUS_OK
ReadX 10078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10079 NT_STATUS_OK
ReadX 10079 0 4096 4096 NT_STATUS_OK
ReadX 10079 4096 4096 4096 NT_STATUS_OK
ReadX 10079 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10080 NT_STATUS_OK
Close 10080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10077 NT_STATUS_OK
Close 10078 NT_STATUS_OK
Close 10079 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10082 NT_STATUS_OK
ReadX 10082 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10083 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10083 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10084 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10082 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10086 NT_STATUS_OK
ReadX 10086 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 0 8192 8192 NT_STATUS_OK
ReadX 10087 8192 8192 8192 NT_STATUS_OK
ReadX 10087 16384 8192 8192 NT_STATUS_OK
ReadX 10087 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10089 NT_STATUS_OK
Close 10089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10092 NT_STATUS_OK
WriteX 10092 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10092 258 NT_STATUS_OK
WriteX 10092 0 10438 10438 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10093 NT_STATUS_OK
Close 10093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10095 NT_STATUS_OK
Close 10095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10098 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10099 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10100 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
ReadX 10101 4096 4096 4096 NT_STATUS_OK
ReadX 10101 8192 4096 4096 NT_STATUS_OK
ReadX 10101 12288 8192 8192 NT_STATUS_OK
ReadX 10101 20480 8192 8192 NT_STATUS_OK
ReadX 10101 28672 8192 8192 NT_STATUS_OK
ReadX 10101 36864 8192 8192 NT_STATUS_OK
ReadX 10101 45056 8192 8192 NT_STATUS_OK
ReadX 10101 53248 8192 8192 NT_STATUS_OK
ReadX 10101 61440 8192 8192 NT_STATUS_OK
ReadX 10101 69632 8192 8192 NT_STATUS_OK
ReadX 10101 77824 8192 8192 NT_STATUS_OK
ReadX 10101 86016 8192 8192 NT_STATUS_OK
ReadX 10101 94208 8192 8192 NT_STATUS_OK
ReadX 10101 102400 8192 8192 NT_STATUS_OK
ReadX 10101 110592 8192 8192 NT_STATUS_OK
ReadX 10101 118784 8192 8192 NT_STATUS_OK
ReadX 10101 126976 8192 8192 NT_STATUS_OK
ReadX 10101 135168 8192 8192 NT_STATUS_OK
ReadX 10101 143360 8192 8192 NT_STATUS_OK
ReadX 10101 151552 8192 8192 NT_STATUS_OK
ReadX 10101 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10101 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Close 10098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10103 NT_STATUS_OK
Close 10103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10106 NT_STATUS_OK
WriteX 10106 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10106 258 NT_STATUS_OK
WriteX 10106 0 28489 28489 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10107 NT_STATUS_OK
Close 10107 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10109 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10110 NT_STATUS_OK
Close 10110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10113 NT_STATUS_OK
ReadX 10113 0 8192 8192 NT_STATUS_OK
ReadX 10113 8192 8192 8192 NT_STATUS_OK
ReadX 10113 16384 8192 8192 NT_STATUS_OK
ReadX 10113 24576 8192 8192 NT_STATUS_OK
ReadX 10113 32768 16384 16384 NT_STATUS_OK
ReadX 10113 49152 8192 8192 NT_STATUS_OK
ReadX 10113 57344 8192 8192 NT_STATUS_OK
ReadX 10113 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10115 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10113 NT_STATUS_OK
Close 10112 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10118 NT_STATUS_OK
WriteX 10118 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10118 258 NT_STATUS_OK
WriteX 10118 0 29253 29253 NT_STATUS_OK
Close 10118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10119 NT_STATUS_OK
Close 10119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10122 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10125 NT_STATUS_OK
WriteX 10125 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10125 258 NT_STATUS_OK
WriteX 10125 0 30183 30183 NT_STATUS_OK
Close 10125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10128 NT_STATUS_OK
WriteX 10128 0 510 510 NT_STATUS_OK
WriteX 10128 510 512 512 NT_STATUS_OK
WriteX 10128 1022 510 510 NT_STATUS_OK
WriteX 10128 1532 510 510 NT_STATUS_OK
WriteX 10128 2042 168 168 NT_STATUS_OK
Close 10128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10129 NT_STATUS_OK
Close 10129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10131 NT_STATUS_OK
ReadX 10131 0 4096 4096 NT_STATUS_OK
WriteX 10131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10132 NT_STATUS_OK
ReadX 10132 61440 4096 4096 NT_STATUS_OK
ReadX 10132 126976 4096 4096 NT_STATUS_OK
WriteX 10132 0 65536 65536 NT_STATUS_OK
WriteX 10132 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10133 NT_STATUS_OK
ReadX 10133 61440 4096 4096 NT_STATUS_OK
ReadX 10133 126976 4096 4096 NT_STATUS_OK
ReadX 10133 192512 4096 4096 NT_STATUS_OK
ReadX 10133 258048 4096 4096 NT_STATUS_OK
WriteX 10133 0 65536 65536 NT_STATUS_OK
WriteX 10133 65536 65536 65536 NT_STATUS_OK
WriteX 10133 131072 65536 65536 NT_STATUS_OK
WriteX 10133 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10134 NT_STATUS_OK
ReadX 10134 61440 4096 4096 NT_STATUS_OK
ReadX 10134 126976 4096 4096 NT_STATUS_OK
ReadX 10134 192512 4096 4096 NT_STATUS_OK
ReadX 10134 258048 4096 4096 NT_STATUS_OK
ReadX 10134 323584 4096 4096 NT_STATUS_OK
ReadX 10134 389120 4096 4096 NT_STATUS_OK
ReadX 10134 454656 4096 4096 NT_STATUS_OK
ReadX 10134 520192 4096 4096 NT_STATUS_OK
WriteX 10134 0 65536 65536 NT_STATUS_OK
WriteX 10134 65536 65536 65536 NT_STATUS_OK
WriteX 10134 131072 65536 65536 NT_STATUS_OK
WriteX 10134 196608 65536 65536 NT_STATUS_OK
WriteX 10134 262144 65536 65536 NT_STATUS_OK
WriteX 10134 327680 65536 65536 NT_STATUS_OK
WriteX 10134 393216 65536 65536 NT_STATUS_OK
WriteX 10134 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10135 NT_STATUS_OK
Close 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10131 NT_STATUS_OK
Close 10132 NT_STATUS_OK
Close 10133 NT_STATUS_OK
Close 10134 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10137 NT_STATUS_OK
Close 10137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10141 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10144 NT_STATUS_OK
Close 10144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10146 NT_STATUS_OK
Close 10146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10150 NT_STATUS_OK
Close 10150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10153 NT_STATUS_OK
Close 10153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10159 NT_STATUS_OK
Close 10159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10164 NT_STATUS_OK
Close 10164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10169 NT_STATUS_OK
Close 10169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10174 NT_STATUS_OK
Close 10174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10179 NT_STATUS_OK
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10194 NT_STATUS_OK
Close 10194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10203 NT_STATUS_OK
WriteX 10203 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10203 0 65536 65536 NT_STATUS_OK
WriteX 10203 65536 65536 65536 NT_STATUS_OK
WriteX 10203 131072 65536 65536 NT_STATUS_OK
WriteX 10203 196608 65536 65536 NT_STATUS_OK
WriteX 10203 262144 26634 26634 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10208 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10209 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 0 4096 4096 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
ReadX 10211 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10216 NT_STATUS_OK
Close 10216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10219 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10221 NT_STATUS_OK
Close 10221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10225 NT_STATUS_OK
Close 10225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10228 NT_STATUS_OK
Close 10228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10230 NT_STATUS_OK
Close 10230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10239 NT_STATUS_OK
Close 10239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10244 NT_STATUS_OK
Close 10244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10254 NT_STATUS_OK
Close 10254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10259 NT_STATUS_OK
Close 10259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10263 NT_STATUS_OK
Close 10263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10268 NT_STATUS_OK
Close 10268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10273 NT_STATUS_OK
Close 10273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10276 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10278 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 4096 4096 NT_STATUS_OK
Close 10290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
Close 10291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10302 NT_STATUS_OK
Close 10302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
Close 10304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
Close 10305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10306 NT_STATUS_OK
ReadX 10306 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10292 NT_STATUS_OK
Close 10306 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10335 0 4096 4096 NT_STATUS_OK
Close 10335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
ReadX 10337 4096 4096 4096 NT_STATUS_OK
ReadX 10337 8192 4096 4096 NT_STATUS_OK
ReadX 10337 12288 4096 4096 NT_STATUS_OK
ReadX 10337 16384 4096 4096 NT_STATUS_OK
ReadX 10337 20480 4096 4096 NT_STATUS_OK
ReadX 10337 24576 4096 4096 NT_STATUS_OK
ReadX 10337 28672 4096 4096 NT_STATUS_OK
ReadX 10337 32768 4096 4096 NT_STATUS_OK
ReadX 10337 36864 4096 4096 NT_STATUS_OK
ReadX 10337 40960 4096 4096 NT_STATUS_OK
ReadX 10337 45056 4096 4096 NT_STATUS_OK
ReadX 10337 49152 4096 4096 NT_STATUS_OK
ReadX 10337 53248 4096 4096 NT_STATUS_OK
ReadX 10337 57344 4096 4096 NT_STATUS_OK
ReadX 10337 61440 4096 4096 NT_STATUS_OK
ReadX 10337 65536 4096 4096 NT_STATUS_OK
ReadX 10337 69632 4096 4096 NT_STATUS_OK
ReadX 10337 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10337 1004 NT_STATUS_OK
WriteX 10337 0 4096 4096 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10338 NT_STATUS_OK
SET_FILE_INFORMATION 10338 1004 NT_STATUS_OK
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10340 NT_STATUS_OK
Close 10340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10343 NT_STATUS_OK
WriteX 10343 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 258 NT_STATUS_OK
WriteX 10343 0 65536 65536 NT_STATUS_OK
WriteX 10343 65536 19979 19979 NT_STATUS_OK
Close 10343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 0 4096 4096 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
QUERY_FILE_INFORMATION 10344 1004 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
SET_FILE_INFORMATION 10344 1004 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
Flush 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 4096 4096 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 4096 4096 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 4096 4096 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10349 1004 NT_STATUS_OK
WriteX 10349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10350 NT_STATUS_OK
Close 10350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10352 NT_STATUS_OK
Close 10352 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10355 NT_STATUS_OK
WriteX 10355 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 258 NT_STATUS_OK
WriteX 10355 0 65536 65536 NT_STATUS_OK
WriteX 10355 65536 17654 17654 NT_STATUS_OK
Close 10355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 0 4096 4096 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
QUERY_FILE_INFORMATION 10356 1004 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
SET_FILE_INFORMATION 10356 1004 NT_STATUS_OK
WriteX 10356 0 4096 4096 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10357 NT_STATUS_OK
SET_FILE_INFORMATION 10357 1004 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10359 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10361 NT_STATUS_OK
ReadX 10361 0 4096 4096 NT_STATUS_OK
ReadX 10361 4096 4096 4096 NT_STATUS_OK
ReadX 10361 8192 4096 4096 NT_STATUS_OK
ReadX 10361 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10361 16384 4096 4096 NT_STATUS_OK
ReadX 10361 20480 4096 4096 NT_STATUS_OK
ReadX 10361 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10362 NT_STATUS_OK
ReadX 10362 0 4096 4096 NT_STATUS_OK
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10363 NT_STATUS_OK
ReadX 10363 0 4096 4096 NT_STATUS_OK
Close 10363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10364 1004 NT_STATUS_OK
WriteX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10364 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10367 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10370 NT_STATUS_OK
WriteX 10370 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10370 258 NT_STATUS_OK
WriteX 10370 0 65536 65536 NT_STATUS_OK
WriteX 10370 65536 19490 19490 NT_STATUS_OK
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
QUERY_FILE_INFORMATION 10371 1004 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
SET_FILE_INFORMATION 10371 1004 NT_STATUS_OK
WriteX 10371 0 4096 4096 NT_STATUS_OK
Flush 10371 NT_STATUS_OK
Close 10371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10372 NT_STATUS_OK
SET_FILE_INFORMATION 10372 1004 NT_STATUS_OK
Close 10372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10374 NT_STATUS_OK
Close 10374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10376 0 4096 4096 NT_STATUS_OK
Close 10376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
ReadX 10378 4096 4096 4096 NT_STATUS_OK
ReadX 10378 8192 4096 4096 NT_STATUS_OK
ReadX 10378 12288 4096 4096 NT_STATUS_OK
ReadX 10378 16384 4096 4096 NT_STATUS_OK
ReadX 10378 20480 4096 4096 NT_STATUS_OK
ReadX 10378 24576 4096 4096 NT_STATUS_OK
ReadX 10378 28672 4096 4096 NT_STATUS_OK
ReadX 10378 32768 4096 4096 NT_STATUS_OK
ReadX 10378 36864 4096 4096 NT_STATUS_OK
ReadX 10378 40960 4096 4096 NT_STATUS_OK
ReadX 10378 45056 4096 4096 NT_STATUS_OK
ReadX 10378 49152 4096 4096 NT_STATUS_OK
ReadX 10378 53248 4096 4096 NT_STATUS_OK
ReadX 10378 57344 4096 4096 NT_STATUS_OK
ReadX 10378 61440 4096 4096 NT_STATUS_OK
ReadX 10378 65536 4096 4096 NT_STATUS_OK
ReadX 10378 69632 4096 4096 NT_STATUS_OK
ReadX 10378 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10378 1004 NT_STATUS_OK
WriteX 10378 0 4096 4096 NT_STATUS_OK
Close 10378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10379 NT_STATUS_OK
SET_FILE_INFORMATION 10379 1004 NT_STATUS_OK
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10381 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10384 NT_STATUS_OK
WriteX 10384 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10384 258 NT_STATUS_OK
WriteX 10384 0 65536 65536 NT_STATUS_OK
WriteX 10384 65536 8866 8866 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10385 NT_STATUS_OK
ReadX 10385 0 4096 4096 NT_STATUS_OK
WriteX 10385 0 4096 4096 NT_STATUS_OK
Flush 10385 NT_STATUS_OK
SET_FILE_INFORMATION 10385 1004 NT_STATUS_OK
WriteX 10385 0 4096 4096 NT_STATUS_OK
Flush 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10387 NT_STATUS_OK
ReadX 10387 0 4096 4096 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10388 NT_STATUS_OK
ReadX 10388 0 4096 4096 NT_STATUS_OK
Close 10388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10389 1004 NT_STATUS_OK
WriteX 10389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10390 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10389 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10392 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10395 NT_STATUS_OK
WriteX 10395 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10395 258 NT_STATUS_OK
WriteX 10395 0 65536 65536 NT_STATUS_OK
WriteX 10395 65536 9298 9298 NT_STATUS_OK
Close 10395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
WriteX 10396 0 4096 4096 NT_STATUS_OK
Flush 10396 NT_STATUS_OK
SET_FILE_INFORMATION 10396 1004 NT_STATUS_OK
WriteX 10396 0 4096 4096 NT_STATUS_OK
Flush 10396 NT_STATUS_OK
Close 10396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10397 NT_STATUS_OK
SET_FILE_INFORMATION 10397 1004 NT_STATUS_OK
Close 10397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10402 0 4096 4096 NT_STATUS_OK
Close 10402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10403 4096 4096 4096 NT_STATUS_OK
ReadX 10403 8192 4096 4096 NT_STATUS_OK
ReadX 10403 12288 4096 4096 NT_STATUS_OK
ReadX 10403 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
Close 10404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
Close 10405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10406 1004 NT_STATUS_OK
WriteX 10406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10412 NT_STATUS_OK
WriteX 10412 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10412 258 NT_STATUS_OK
WriteX 10412 0 65536 65536 NT_STATUS_OK
WriteX 10412 65536 11540 11540 NT_STATUS_OK
Close 10412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 0 4096 4096 NT_STATUS_OK
WriteX 10413 0 4096 4096 NT_STATUS_OK
Flush 10413 NT_STATUS_OK
SET_FILE_INFORMATION 10413 1004 NT_STATUS_OK
WriteX 10413 0 4096 4096 NT_STATUS_OK
Flush 10413 NT_STATUS_OK
Close 10413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10414 NT_STATUS_OK
SET_FILE_INFORMATION 10414 1004 NT_STATUS_OK
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 61440 4096 4096 NT_STATUS_OK
ReadX 10418 126976 4096 4096 NT_STATUS_OK
WriteX 10418 0 65536 65536 NT_STATUS_OK
WriteX 10418 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 61440 4096 4096 NT_STATUS_OK
ReadX 10419 126976 4096 4096 NT_STATUS_OK
ReadX 10419 192512 4096 4096 NT_STATUS_OK
ReadX 10419 258048 4096 4096 NT_STATUS_OK
WriteX 10419 0 65536 65536 NT_STATUS_OK
WriteX 10419 65536 65536 65536 NT_STATUS_OK
WriteX 10419 131072 65536 65536 NT_STATUS_OK
WriteX 10419 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10420 NT_STATUS_OK
ReadX 10420 61440 4096 4096 NT_STATUS_OK
ReadX 10420 126976 4096 4096 NT_STATUS_OK
ReadX 10420 192512 4096 4096 NT_STATUS_OK
ReadX 10420 258048 4096 4096 NT_STATUS_OK
ReadX 10420 323584 4096 4096 NT_STATUS_OK
ReadX 10420 389120 4096 4096 NT_STATUS_OK
ReadX 10420 454656 4096 4096 NT_STATUS_OK
ReadX 10420 520192 4096 4096 NT_STATUS_OK
WriteX 10420 0 65536 65536 NT_STATUS_OK
WriteX 10420 65536 65536 65536 NT_STATUS_OK
WriteX 10420 131072 65536 65536 NT_STATUS_OK
WriteX 10420 196608 65536 65536 NT_STATUS_OK
WriteX 10420 262144 65536 65536 NT_STATUS_OK
WriteX 10420 327680 65536 65536 NT_STATUS_OK
WriteX 10420 393216 65536 65536 NT_STATUS_OK
WriteX 10420 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
ReadX 10421 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10422 NT_STATUS_OK
WriteX 10422 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10422 258 NT_STATUS_OK
WriteX 10422 0 53 53 NT_STATUS_OK
Close 10422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Close 10361 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Close 10420 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10421 8192 4096 4096 NT_STATUS_OK
ReadX 10421 12288 4096 4096 NT_STATUS_OK
WriteX 10425 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10425 258 NT_STATUS_OK
ReadX 10421 16384 4096 4096 NT_STATUS_OK
ReadX 10421 20480 4096 4096 NT_STATUS_OK
WriteX 10425 0 15360 15360 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10426 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10426 1004 NT_STATUS_OK
WriteX 10426 0 4096 4096 NT_STATUS_OK
Close 10426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10427 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10429 NT_STATUS_OK
ReadX 10429 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10429 4096 4096 4096 NT_STATUS_OK
ReadX 10429 8192 4096 4096 NT_STATUS_OK
ReadX 10429 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
ReadX 10432 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 4096 4096 NT_STATUS_OK
ReadX 10433 4096 4096 4096 NT_STATUS_OK
ReadX 10433 8192 4096 4096 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10434 NT_STATUS_OK
WriteX 10434 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10434 258 NT_STATUS_OK
WriteX 10434 0 15360 15360 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10435 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10435 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10436 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10439 NT_STATUS_OK
SET_FILE_INFORMATION 10439 1004 NT_STATUS_OK
Close 10439 NT_STATUS_OK
WriteX 10435 0 4096 4096 NT_STATUS_OK
Close 10435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10440 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
ReadX 10442 4096 4096 4096 NT_STATUS_OK
ReadX 10442 8192 4096 4096 NT_STATUS_OK
ReadX 10442 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10443 NT_STATUS_OK
ReadX 10443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10444 NT_STATUS_OK
WriteX 10444 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 258 NT_STATUS_OK
WriteX 10444 0 53 53 NT_STATUS_OK
Close 10444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10445 NT_STATUS_OK
Close 10445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10443 4096 4096 4096 NT_STATUS_OK
ReadX 10443 8192 4096 4096 NT_STATUS_OK
ReadX 10443 12288 4096 4096 NT_STATUS_OK
WriteX 10447 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 258 NT_STATUS_OK
WriteX 10447 0 12006 12006 NT_STATUS_OK
Close 10447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10448 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10448 1004 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
Close 10448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10449 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10451 4096 4096 4096 NT_STATUS_OK
ReadX 10451 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10454 NT_STATUS_OK
WriteX 10454 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 258 NT_STATUS_OK
WriteX 10454 0 11991 11991 NT_STATUS_OK
Close 10454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10455 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10455 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10458 NT_STATUS_OK
ReadX 10458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10459 NT_STATUS_OK
SET_FILE_INFORMATION 10459 1004 NT_STATUS_OK
Close 10459 NT_STATUS_OK
WriteX 10455 0 4096 4096 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10462 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10462 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
ReadX 10462 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
WriteX 10462 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10462 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
Close 10438 NT_STATUS_OK
WriteX 10442 0 19054 19054 NT_STATUS_OK
WriteX 10462 0 12288 12288 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10465 NT_STATUS_OK
Close 10465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10467 NT_STATUS_OK
Close 10467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 61440 61440 NT_STATUS_OK
ReadX 10469 61440 4096 4096 NT_STATUS_OK
ReadX 10469 65536 61440 61440 NT_STATUS_OK
ReadX 10469 126976 4096 4096 NT_STATUS_OK
ReadX 10469 131072 61440 61440 NT_STATUS_OK
ReadX 10469 192512 4096 4096 NT_STATUS_OK
ReadX 10469 196608 61440 61440 NT_STATUS_OK
ReadX 10469 258048 4096 4096 NT_STATUS_OK
ReadX 10469 262144 61440 61440 NT_STATUS_OK
ReadX 10469 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 61440 61440 NT_STATUS_OK
ReadX 10470 61440 4096 4096 NT_STATUS_OK
ReadX 10470 65536 61440 61440 NT_STATUS_OK
ReadX 10470 126976 4096 4096 NT_STATUS_OK
ReadX 10470 131072 61440 61440 NT_STATUS_OK
ReadX 10470 192512 4096 4096 NT_STATUS_OK
ReadX 10470 196608 61440 61440 NT_STATUS_OK
ReadX 10470 258048 4096 4096 NT_STATUS_OK
ReadX 10470 262144 61440 61440 NT_STATUS_OK
ReadX 10470 323584 4096 4096 NT_STATUS_OK
ReadX 10470 327680 61440 61440 NT_STATUS_OK
ReadX 10470 389120 4096 4096 NT_STATUS_OK
ReadX 10470 393216 61440 61440 NT_STATUS_OK
ReadX 10470 454656 4096 4096 NT_STATUS_OK
ReadX 10470 458752 61440 61440 NT_STATUS_OK
ReadX 10470 520192 4096 4096 NT_STATUS_OK
ReadX 10470 524288 61440 61440 NT_STATUS_OK
ReadX 10470 585728 4096 4096 NT_STATUS_OK
ReadX 10470 589824 61440 61440 NT_STATUS_OK
ReadX 10470 651264 4096 4096 NT_STATUS_OK
ReadX 10470 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10471 NT_STATUS_OK
ReadX 10471 0 61440 61440 NT_STATUS_OK
ReadX 10471 61440 4096 4096 NT_STATUS_OK
ReadX 10471 65536 61440 61440 NT_STATUS_OK
ReadX 10471 126976 4096 4096 NT_STATUS_OK
ReadX 10471 131072 61440 61440 NT_STATUS_OK
ReadX 10471 192512 4096 4096 NT_STATUS_OK
ReadX 10471 196608 61440 61440 NT_STATUS_OK
ReadX 10471 258048 4096 4096 NT_STATUS_OK
ReadX 10471 262144 61440 61440 NT_STATUS_OK
ReadX 10471 323584 4096 4096 NT_STATUS_OK
ReadX 10471 327680 61440 61440 NT_STATUS_OK
ReadX 10471 389120 4096 4096 NT_STATUS_OK
ReadX 10471 393216 61440 61440 NT_STATUS_OK
ReadX 10471 454656 4096 4096 NT_STATUS_OK
ReadX 10471 458752 61440 61440 NT_STATUS_OK
ReadX 10471 520192 4096 4096 NT_STATUS_OK
ReadX 10471 524288 61440 61440 NT_STATUS_OK
ReadX 10471 585728 4096 4096 NT_STATUS_OK
ReadX 10471 589824 61440 61440 NT_STATUS_OK
ReadX 10471 651264 4096 4096 NT_STATUS_OK
ReadX 10471 655360 61440 61440 NT_STATUS_OK
ReadX 10471 716800 4096 4096 NT_STATUS_OK
ReadX 10471 720896 61440 61440 NT_STATUS_OK
ReadX 10471 782336 4096 4096 NT_STATUS_OK
ReadX 10471 786432 61440 61440 NT_STATUS_OK
ReadX 10471 847872 4096 4096 NT_STATUS_OK
ReadX 10471 851968 61440 61440 NT_STATUS_OK
ReadX 10471 913408 4096 4096 NT_STATUS_OK
ReadX 10471 917504 61440 61440 NT_STATUS_OK
ReadX 10471 978944 4096 4096 NT_STATUS_OK
ReadX 10471 983040 61440 61440 NT_STATUS_OK
ReadX 10471 1044480 4096 4096 NT_STATUS_OK
ReadX 10471 1048576 61440 61440 NT_STATUS_OK
ReadX 10471 1110016 4096 4096 NT_STATUS_OK
ReadX 10471 1114112 61440 61440 NT_STATUS_OK
ReadX 10471 1175552 4096 4096 NT_STATUS_OK
ReadX 10471 1179648 61440 61440 NT_STATUS_OK
ReadX 10471 1241088 4096 4096 NT_STATUS_OK
ReadX 10471 1245184 61440 61440 NT_STATUS_OK
ReadX 10471 1306624 4096 4096 NT_STATUS_OK
ReadX 10471 1310720 61440 61440 NT_STATUS_OK
ReadX 10471 1372160 4096 4096 NT_STATUS_OK
ReadX 10471 1376256 61440 61440 NT_STATUS_OK
ReadX 10471 1437696 4096 4096 NT_STATUS_OK
ReadX 10471 1441792 61440 61440 NT_STATUS_OK
ReadX 10471 1503232 4096 4096 NT_STATUS_OK
ReadX 10471 1507328 61440 61440 NT_STATUS_OK
ReadX 10471 1568768 4096 4096 NT_STATUS_OK
ReadX 10471 1572864 61440 61440 NT_STATUS_OK
ReadX 10471 1634304 4096 4096 NT_STATUS_OK
ReadX 10471 1638400 61440 61440 NT_STATUS_OK
ReadX 10471 1699840 4096 4096 NT_STATUS_OK
ReadX 10471 1703936 61440 61440 NT_STATUS_OK
ReadX 10471 1765376 4096 4096 NT_STATUS_OK
ReadX 10471 1769472 61440 61440 NT_STATUS_OK
ReadX 10471 1830912 4096 4096 NT_STATUS_OK
ReadX 10471 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10478 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 1004 NT_STATUS_OK
WriteX 10478 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10478 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10479 NT_STATUS_OK
Close 10479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10480 NT_STATUS_OK
WriteX 10480 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10480 258 NT_STATUS_OK
WriteX 10480 0 491 491 NT_STATUS_OK
Close 10480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10478 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10483 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10484 NT_STATUS_OK
WriteX 10484 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 258 NT_STATUS_OK
WriteX 10484 0 543 543 NT_STATUS_OK
Close 10484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10469 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10473 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10489 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10498 NT_STATUS_OK
QUERY_FILE_INFORMATION 10498 1004 NT_STATUS_OK
WriteX 10498 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10498 258 NT_STATUS_OK
WriteX 10498 0 2048 2048 NT_STATUS_OK
Close 10498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10499 0 4096 4096 NT_STATUS_OK
Flush 10499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10499 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10504 NT_STATUS_OK
WriteX 10504 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 258 NT_STATUS_OK
WriteX 10504 0 2048 2048 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10510 NT_STATUS_OK
WriteX 10510 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10510 258 NT_STATUS_OK
WriteX 10510 0 2048 2048 NT_STATUS_OK
Close 10510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10511 NT_STATUS_OK
ReadX 10511 0 2048 2048 NT_STATUS_OK
ReadX 10489 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
WriteX 10489 0 8192 8192 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
WriteX 10491 0 4096 4096 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10515 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Close 10491 NT_STATUS_OK
Close 10492 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10517 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10519 NT_STATUS_OK
ReadX 10519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10520 NT_STATUS_OK
ReadX 10520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10525 NT_STATUS_OK
ReadX 10525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10526 NT_STATUS_OK
ReadX 10526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10527 NT_STATUS_OK
ReadX 10527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10529 NT_STATUS_OK
ReadX 10529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10530 NT_STATUS_OK
ReadX 10530 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10535 NT_STATUS_OK
QUERY_FILE_INFORMATION 10535 1004 NT_STATUS_OK
WriteX 10535 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10535 258 NT_STATUS_OK
WriteX 10535 0 2048 2048 NT_STATUS_OK
Close 10535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10536 NT_STATUS_OK
ReadX 10536 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10538 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10542 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10543 NT_STATUS_OK
QUERY_FILE_INFORMATION 10543 1004 NT_STATUS_OK
WriteX 10543 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10543 258 NT_STATUS_OK
WriteX 10543 0 2048 2048 NT_STATUS_OK
Close 10543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10536 0 4096 4096 NT_STATUS_OK
Flush 10536 NT_STATUS_OK
WriteX 10544 0 4096 4096 NT_STATUS_OK
Flush 10544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10536 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10544 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10538 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10545 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10546 NT_STATUS_OK
WriteX 10546 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10546 258 NT_STATUS_OK
WriteX 10546 0 4096 4096 NT_STATUS_OK
Close 10546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10548 NT_STATUS_OK
Close 10548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10549 NT_STATUS_OK
WriteX 10549 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10549 258 NT_STATUS_OK
WriteX 10549 0 4096 4096 NT_STATUS_OK
Close 10549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10550 NT_STATUS_OK
ReadX 10550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10550 0 4096 4096 NT_STATUS_OK
Close 10547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10530 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10528 NT_STATUS_OK
Close 10529 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10519 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10553 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10555 NT_STATUS_OK
ReadX 10555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10557 NT_STATUS_OK
WriteX 10557 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10557 258 NT_STATUS_OK
WriteX 10557 0 2048 2048 NT_STATUS_OK
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10558 NT_STATUS_OK
ReadX 10558 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10560 NT_STATUS_OK
ReadX 10560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10561 NT_STATUS_OK
ReadX 10561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10562 NT_STATUS_OK
ReadX 10562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10570 NT_STATUS_OK
ReadX 10570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10571 NT_STATUS_OK
ReadX 10571 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10572 NT_STATUS_OK
QUERY_FILE_INFORMATION 10572 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10555 NT_STATUS_OK
Close 10558 NT_STATUS_OK
Close 10570 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Close 10566 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Close 10568 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Close 10571 NT_STATUS_OK
Close 10559 NT_STATUS_OK
Close 10560 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10564 NT_STATUS_OK
Close 10561 NT_STATUS_OK
Close 10562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10574 NT_STATUS_OK
QUERY_FILE_INFORMATION 10574 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10577 NT_STATUS_OK
ReadX 10577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10579 NT_STATUS_OK
ReadX 10579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10583 NT_STATUS_OK
ReadX 10583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10584 NT_STATUS_OK
ReadX 10584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10585 NT_STATUS_OK
ReadX 10585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10588 NT_STATUS_OK
ReadX 10588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10589 NT_STATUS_OK
ReadX 10589 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10594 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 1004 NT_STATUS_OK
WriteX 10594 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 258 NT_STATUS_OK
WriteX 10594 0 2048 2048 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10596 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10597 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10599 NT_STATUS_OK
ReadX 10599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10600 NT_STATUS_OK
ReadX 10600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10606 NT_STATUS_OK
QUERY_FILE_INFORMATION 10606 1004 NT_STATUS_OK
WriteX 10606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10606 258 NT_STATUS_OK
WriteX 10606 0 2048 2048 NT_STATUS_OK
Close 10606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10608 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10609 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10613 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10614 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 1004 NT_STATUS_OK
WriteX 10614 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
WriteX 10614 0 2048 2048 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
Flush 10595 NT_STATUS_OK
WriteX 10607 0 4096 4096 NT_STATUS_OK
Flush 10607 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Flush 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10607 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10597 4096 16384 16384 NT_STATUS_OK
ReadX 10577 4096 16384 16384 NT_STATUS_OK
ReadX 10609 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10617 NT_STATUS_OK
ReadX 10617 0 2048 2048 NT_STATUS_OK
WriteX 10617 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10618 NT_STATUS_OK
QUERY_FILE_INFORMATION 10618 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10617 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10589 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Close 10597 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Close 10599 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Close 10609 NT_STATUS_OK
Close 10583 NT_STATUS_OK
Close 10586 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Close 10584 NT_STATUS_OK
Close 10585 NT_STATUS_OK
Close 10577 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10579 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10620 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10622 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10624 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10625 NT_STATUS_OK
ReadX 10625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10626 NT_STATUS_OK
ReadX 10626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10627 NT_STATUS_OK
ReadX 10627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10625 4096 16384 16384 NT_STATUS_OK
WriteX 10625 0 4096 4096 NT_STATUS_OK
WriteX 10626 0 4096 4096 NT_STATUS_OK
WriteX 10627 0 4096 4096 NT_STATUS_OK
WriteX 10628 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10632 NT_STATUS_OK
ReadX 10632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10635 NT_STATUS_OK
ReadX 10635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10637 NT_STATUS_OK
ReadX 10637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10638 NT_STATUS_OK
ReadX 10638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10639 NT_STATUS_OK
ReadX 10639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10640 NT_STATUS_OK
ReadX 10640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10642 NT_STATUS_OK
ReadX 10642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 8192 8192 NT_STATUS_OK
ReadX 10631 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10645 0 4096 4096 NT_STATUS_OK
ReadX 10645 4096 4096 4096 NT_STATUS_OK
ReadX 10645 8192 4096 4096 NT_STATUS_OK
WriteX 10631 0 4096 4096 NT_STATUS_OK
WriteX 10632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
ReadX 10646 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10625 0 4096 4096 NT_STATUS_OK
WriteX 10626 0 4096 4096 NT_STATUS_OK
WriteX 10627 0 4096 4096 NT_STATUS_OK
WriteX 10628 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10650 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10651 NT_STATUS_OK
QUERY_FILE_INFORMATION 10651 1004 NT_STATUS_OK
WriteX 10651 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10651 258 NT_STATUS_OK
WriteX 10651 0 2048 2048 NT_STATUS_OK
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10652 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10653 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 4096 4096 NT_STATUS_OK
ReadX 10654 4096 4096 4096 NT_STATUS_OK
WriteX 10654 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10656 NT_STATUS_OK
ReadX 10656 0 4096 4096 NT_STATUS_OK
ReadX 10656 4096 4096 4096 NT_STATUS_OK
WriteX 10656 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10657 NT_STATUS_OK
QUERY_FILE_INFORMATION 10657 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10644 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10625 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Close 10627 NT_STATUS_OK
Close 10628 NT_STATUS_OK
Close 10637 NT_STATUS_OK
Close 10642 NT_STATUS_OK
Close 10638 NT_STATUS_OK
Close 10639 NT_STATUS_OK
Close 10640 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Close 10643 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10632 NT_STATUS_OK
Close 10635 NT_STATUS_OK
Close 10636 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10634 NT_STATUS_OK
Close 10656 NT_STATUS_OK
Close 10645 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10659 0 4096 4096 NT_STATUS_OK
ReadX 10659 4096 4096 4096 NT_STATUS_OK
ReadX 10659 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10661 NT_STATUS_OK
ReadX 10661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10662 NT_STATUS_OK
ReadX 10662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10663 NT_STATUS_OK
ReadX 10663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10664 NT_STATUS_OK
ReadX 10664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10670 NT_STATUS_OK
ReadX 10670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10672 NT_STATUS_OK
ReadX 10672 0 4096 4096 NT_STATUS_OK
ReadX 10660 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10677 NT_STATUS_OK
QUERY_FILE_INFORMATION 10677 1004 NT_STATUS_OK
WriteX 10677 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10677 258 NT_STATUS_OK
WriteX 10677 0 2048 2048 NT_STATUS_OK
Close 10677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10678 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10682 NT_STATUS_OK
Close 10682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10683 NT_STATUS_OK
QUERY_FILE_INFORMATION 10683 1004 NT_STATUS_OK
WriteX 10683 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10683 258 NT_STATUS_OK
WriteX 10683 0 2048 2048 NT_STATUS_OK
Close 10683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10684 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10667 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10685 NT_STATUS_OK
QUERY_FILE_INFORMATION 10685 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10671 NT_STATUS_OK
Close 10666 NT_STATUS_OK
Close 10672 NT_STATUS_OK
Close 10660 NT_STATUS_OK
Close 10661 NT_STATUS_OK
Close 10664 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10662 NT_STATUS_OK
Close 10663 NT_STATUS_OK
Close 10667 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Close 10670 NT_STATUS_OK
Close 10659 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10687 NT_STATUS_OK
QUERY_FILE_INFORMATION 10687 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 61440 4096 4096 NT_STATUS_OK
ReadX 10689 126976 4096 4096 NT_STATUS_OK
WriteX 10689 0 65536 65536 NT_STATUS_OK
WriteX 10689 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 61440 4096 4096 NT_STATUS_OK
ReadX 10690 126976 4096 4096 NT_STATUS_OK
ReadX 10690 192512 4096 4096 NT_STATUS_OK
ReadX 10690 258048 4096 4096 NT_STATUS_OK
WriteX 10690 0 65536 65536 NT_STATUS_OK
WriteX 10690 65536 65536 65536 NT_STATUS_OK
WriteX 10690 131072 65536 65536 NT_STATUS_OK
WriteX 10690 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 61440 4096 4096 NT_STATUS_OK
ReadX 10691 126976 4096 4096 NT_STATUS_OK
ReadX 10691 192512 4096 4096 NT_STATUS_OK
ReadX 10691 258048 4096 4096 NT_STATUS_OK
ReadX 10691 323584 4096 4096 NT_STATUS_OK
ReadX 10691 389120 4096 4096 NT_STATUS_OK
ReadX 10691 454656 4096 4096 NT_STATUS_OK
ReadX 10691 520192 4096 4096 NT_STATUS_OK
WriteX 10691 0 65536 65536 NT_STATUS_OK
WriteX 10691 65536 65536 65536 NT_STATUS_OK
WriteX 10691 131072 65536 65536 NT_STATUS_OK
WriteX 10691 196608 65536 65536 NT_STATUS_OK
WriteX 10691 262144 65536 65536 NT_STATUS_OK
WriteX 10691 327680 65536 65536 NT_STATUS_OK
WriteX 10691 393216 65536 65536 NT_STATUS_OK
WriteX 10691 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10692 NT_STATUS_OK
ReadX 10692 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10692 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10692 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10692 8192 4096 4096 NT_STATUS_OK
ReadX 10692 12288 4096 4096 NT_STATUS_OK
ReadX 10692 16384 4096 4096 NT_STATUS_OK
ReadX 10692 20480 4096 4096 NT_STATUS_OK
ReadX 10692 24576 4096 4096 NT_STATUS_OK
ReadX 10692 28672 4096 4096 NT_STATUS_OK
ReadX 10692 32768 4096 4096 NT_STATUS_OK
ReadX 10692 36864 4096 4096 NT_STATUS_OK
ReadX 10692 40960 4096 4096 NT_STATUS_OK
ReadX 10692 45056 4096 4096 NT_STATUS_OK
ReadX 10692 49152 4096 4096 NT_STATUS_OK
ReadX 10692 53248 4096 4096 NT_STATUS_OK
ReadX 10692 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10692 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10693 NT_STATUS_OK
Close 10693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Close 10691 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10695 NT_STATUS_OK
WriteX 10695 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10695 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10695 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10695 1004 NT_STATUS_OK
WriteX 10695 0 57088 57088 NT_STATUS_OK
WriteX 10695 0 4096 4096 NT_STATUS_OK
Flush 10695 NT_STATUS_OK
Close 10692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10696 NT_STATUS_OK
SET_FILE_INFORMATION 10696 1004 NT_STATUS_OK
Close 10696 NT_STATUS_OK
SET_FILE_INFORMATION 10695 1004 NT_STATUS_OK
WriteX 10695 0 4096 4096 NT_STATUS_OK
Close 10695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10697 NT_STATUS_OK
Close 10697 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10699 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10700 NT_STATUS_OK
WriteX 10700 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10700 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10700 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
WriteX 10700 0 51456 51456 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Flush 10700 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Close 10700 NT_STATUS_OK
Close 10699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10702 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10704 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10709 NT_STATUS_OK
WriteX 10709 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 53077 53077 NT_STATUS_OK
Close 10709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10710 NT_STATUS_OK
WriteX 10710 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10710 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10710 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 65536 65536 NT_STATUS_OK
WriteX 10710 65536 1856 1856 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10712 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10714 NT_STATUS_OK
ReadX 10714 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10719 NT_STATUS_OK
WriteX 10719 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10719 258 NT_STATUS_OK
WriteX 10719 0 7983 7983 NT_STATUS_OK
Close 10719 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10721 NT_STATUS_OK
Close 10721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10724 NT_STATUS_OK
WriteX 10724 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10724 258 NT_STATUS_OK
WriteX 10724 0 65536 65536 NT_STATUS_OK
WriteX 10724 65536 65536 65536 NT_STATUS_OK
WriteX 10724 131072 65536 65536 NT_STATUS_OK
WriteX 10724 196608 65536 65536 NT_STATUS_OK
WriteX 10724 262144 65536 65536 NT_STATUS_OK
WriteX 10724 327680 65536 65536 NT_STATUS_OK
WriteX 10724 393216 65536 65536 NT_STATUS_OK
WriteX 10724 458752 46731 46731 NT_STATUS_OK
Close 10724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10725 NT_STATUS_OK
WriteX 10725 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10714 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 65536 65536 NT_STATUS_OK
WriteX 10725 65536 22848 22848 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Close 10725 NT_STATUS_OK
Close 10714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10729 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10730 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10730 1004 NT_STATUS_OK
ReadX 10730 8192 4096 4096 NT_STATUS_OK
ReadX 10730 12288 4096 4096 NT_STATUS_OK
ReadX 10730 16384 4096 4096 NT_STATUS_OK
ReadX 10730 20480 4096 4096 NT_STATUS_OK
ReadX 10730 24576 4096 4096 NT_STATUS_OK
ReadX 10730 28672 4096 4096 NT_STATUS_OK
ReadX 10730 32768 4096 4096 NT_STATUS_OK
ReadX 10730 36864 4096 4096 NT_STATUS_OK
ReadX 10730 40960 4096 4096 NT_STATUS_OK
ReadX 10730 45056 4096 4096 NT_STATUS_OK
ReadX 10730 49152 4096 4096 NT_STATUS_OK
ReadX 10730 53248 4096 4096 NT_STATUS_OK
ReadX 10730 57344 4096 4096 NT_STATUS_OK
ReadX 10730 61440 4096 4096 NT_STATUS_OK
ReadX 10730 65536 4096 4096 NT_STATUS_OK
ReadX 10730 69632 4096 4096 NT_STATUS_OK
ReadX 10730 73728 4096 4096 NT_STATUS_OK
ReadX 10730 77824 4096 4096 NT_STATUS_OK
ReadX 10730 81920 4096 4096 NT_STATUS_OK
ReadX 10730 86016 4096 4096 NT_STATUS_OK
ReadX 10730 90112 4096 4096 NT_STATUS_OK
ReadX 10730 94208 4096 4096 NT_STATUS_OK
ReadX 10730 98304 4096 4096 NT_STATUS_OK
ReadX 10730 102400 4096 4096 NT_STATUS_OK
ReadX 10730 106496 4096 4096 NT_STATUS_OK
ReadX 10730 110592 4096 4096 NT_STATUS_OK
ReadX 10730 114688 4096 4096 NT_STATUS_OK
ReadX 10730 118784 4096 4096 NT_STATUS_OK
ReadX 10730 122880 4096 4096 NT_STATUS_OK
ReadX 10730 126976 4096 4096 NT_STATUS_OK
ReadX 10730 131072 4096 4096 NT_STATUS_OK
ReadX 10730 135168 4096 4096 NT_STATUS_OK
ReadX 10730 139264 4096 4096 NT_STATUS_OK
ReadX 10730 143360 4096 4096 NT_STATUS_OK
ReadX 10730 147456 4096 4096 NT_STATUS_OK
ReadX 10730 151552 4096 4096 NT_STATUS_OK
ReadX 10730 155648 4096 4096 NT_STATUS_OK
ReadX 10730 159744 4096 4096 NT_STATUS_OK
ReadX 10730 163840 4096 4096 NT_STATUS_OK
ReadX 10730 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10730 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10731 NT_STATUS_OK
Close 10731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10733 NT_STATUS_OK
WriteX 10733 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10733 258 NT_STATUS_OK
Close 10730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10734 NT_STATUS_OK
SET_FILE_INFORMATION 10734 1004 NT_STATUS_OK
Close 10734 NT_STATUS_OK
WriteX 10733 0 42388 42388 NT_STATUS_OK
Close 10733 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10735 NT_STATUS_OK
Close 10735 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
ReadX 10737 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10738 NT_STATUS_OK
WriteX 10738 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10738 258 NT_STATUS_OK
WriteX 10738 0 42652 42652 NT_STATUS_OK
SET_FILE_INFORMATION 10738 1004 NT_STATUS_OK
WriteX 10738 0 8192 8192 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10740 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
ReadX 10742 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10747 NT_STATUS_OK
WriteX 10747 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10747 258 NT_STATUS_OK
WriteX 10747 0 65536 65536 NT_STATUS_OK
WriteX 10747 65536 49 49 NT_STATUS_OK
Close 10747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 61440 61440 NT_STATUS_OK
ReadX 10748 61440 4096 4096 NT_STATUS_OK
ReadX 10748 65536 61440 61440 NT_STATUS_OK
ReadX 10748 126976 4096 4096 NT_STATUS_OK
ReadX 10748 131072 61440 61440 NT_STATUS_OK
ReadX 10748 192512 4096 4096 NT_STATUS_OK
ReadX 10748 196608 61440 61440 NT_STATUS_OK
ReadX 10748 258048 4096 4096 NT_STATUS_OK
ReadX 10748 262144 61440 61440 NT_STATUS_OK
ReadX 10748 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 61440 61440 NT_STATUS_OK
ReadX 10749 61440 4096 4096 NT_STATUS_OK
ReadX 10749 65536 61440 61440 NT_STATUS_OK
ReadX 10749 126976 4096 4096 NT_STATUS_OK
ReadX 10749 131072 61440 61440 NT_STATUS_OK
ReadX 10749 192512 4096 4096 NT_STATUS_OK
ReadX 10749 196608 61440 61440 NT_STATUS_OK
ReadX 10749 258048 4096 4096 NT_STATUS_OK
ReadX 10749 262144 61440 61440 NT_STATUS_OK
ReadX 10749 323584 4096 4096 NT_STATUS_OK
ReadX 10749 327680 61440 61440 NT_STATUS_OK
ReadX 10749 389120 4096 4096 NT_STATUS_OK
ReadX 10749 393216 61440 61440 NT_STATUS_OK
ReadX 10749 454656 4096 4096 NT_STATUS_OK
ReadX 10749 458752 61440 61440 NT_STATUS_OK
ReadX 10749 520192 4096 4096 NT_STATUS_OK
ReadX 10749 524288 61440 61440 NT_STATUS_OK
ReadX 10749 585728 4096 4096 NT_STATUS_OK
ReadX 10749 589824 61440 61440 NT_STATUS_OK
ReadX 10749 651264 4096 4096 NT_STATUS_OK
ReadX 10749 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 61440 61440 NT_STATUS_OK
ReadX 10750 61440 4096 4096 NT_STATUS_OK
ReadX 10750 65536 61440 61440 NT_STATUS_OK
ReadX 10750 126976 4096 4096 NT_STATUS_OK
ReadX 10750 131072 61440 61440 NT_STATUS_OK
ReadX 10750 192512 4096 4096 NT_STATUS_OK
ReadX 10750 196608 61440 61440 NT_STATUS_OK
ReadX 10750 258048 4096 4096 NT_STATUS_OK
ReadX 10750 262144 61440 61440 NT_STATUS_OK
ReadX 10750 323584 4096 4096 NT_STATUS_OK
ReadX 10750 327680 61440 61440 NT_STATUS_OK
ReadX 10750 389120 4096 4096 NT_STATUS_OK
ReadX 10750 393216 61440 61440 NT_STATUS_OK
ReadX 10750 454656 4096 4096 NT_STATUS_OK
ReadX 10750 458752 61440 61440 NT_STATUS_OK
ReadX 10750 520192 4096 4096 NT_STATUS_OK
ReadX 10750 524288 61440 61440 NT_STATUS_OK
ReadX 10750 585728 4096 4096 NT_STATUS_OK
ReadX 10750 589824 61440 61440 NT_STATUS_OK
ReadX 10750 651264 4096 4096 NT_STATUS_OK
ReadX 10750 655360 61440 61440 NT_STATUS_OK
ReadX 10750 716800 4096 4096 NT_STATUS_OK
ReadX 10750 720896 61440 61440 NT_STATUS_OK
ReadX 10750 782336 4096 4096 NT_STATUS_OK
ReadX 10750 786432 61440 61440 NT_STATUS_OK
ReadX 10750 847872 4096 4096 NT_STATUS_OK
ReadX 10750 851968 61440 61440 NT_STATUS_OK
ReadX 10750 913408 4096 4096 NT_STATUS_OK
ReadX 10750 917504 61440 61440 NT_STATUS_OK
ReadX 10750 978944 4096 4096 NT_STATUS_OK
ReadX 10750 983040 61440 61440 NT_STATUS_OK
ReadX 10750 1044480 4096 4096 NT_STATUS_OK
ReadX 10750 1048576 61440 61440 NT_STATUS_OK
ReadX 10750 1110016 4096 4096 NT_STATUS_OK
ReadX 10750 1114112 61440 61440 NT_STATUS_OK
ReadX 10750 1175552 4096 4096 NT_STATUS_OK
ReadX 10750 1179648 61440 61440 NT_STATUS_OK
ReadX 10750 1241088 4096 4096 NT_STATUS_OK
ReadX 10750 1245184 61440 61440 NT_STATUS_OK
ReadX 10750 1306624 4096 4096 NT_STATUS_OK
ReadX 10750 1310720 61440 61440 NT_STATUS_OK
ReadX 10750 1372160 4096 4096 NT_STATUS_OK
ReadX 10750 1376256 61440 61440 NT_STATUS_OK
ReadX 10750 1437696 4096 4096 NT_STATUS_OK
ReadX 10750 1441792 61440 61440 NT_STATUS_OK
ReadX 10750 1503232 4096 4096 NT_STATUS_OK
ReadX 10750 1507328 61440 61440 NT_STATUS_OK
ReadX 10750 1568768 4096 4096 NT_STATUS_OK
ReadX 10750 1572864 61440 61440 NT_STATUS_OK
ReadX 10750 1634304 4096 4096 NT_STATUS_OK
ReadX 10750 1638400 61440 61440 NT_STATUS_OK
ReadX 10750 1699840 4096 4096 NT_STATUS_OK
ReadX 10750 1703936 61440 61440 NT_STATUS_OK
ReadX 10750 1765376 4096 4096 NT_STATUS_OK
ReadX 10750 1769472 61440 61440 NT_STATUS_OK
ReadX 10750 1830912 4096 4096 NT_STATUS_OK
ReadX 10750 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10752 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10752 1005 NT_STATUS_OK
ReadX 10752 2156 24 24 NT_STATUS_OK
ReadX 10752 2139 276 276 NT_STATUS_OK
ReadX 10752 2136 14 14 NT_STATUS_OK
ReadX 10752 2136 7 7 NT_STATUS_OK
ReadX 10752 2138 12 12 NT_STATUS_OK
ReadX 10752 2137 8 8 NT_STATUS_OK
ReadX 10752 2135 15 15 NT_STATUS_OK
ReadX 10752 0 16 16 NT_STATUS_OK
ReadX 10752 16 2048 2048 NT_STATUS_OK
ReadX 10752 2064 2048 2048 NT_STATUS_OK
ReadX 10752 257 2048 2048 NT_STATUS_OK
ReadX 10752 385 2048 2048 NT_STATUS_OK
ReadX 10752 513 2048 2048 NT_STATUS_OK
ReadX 10752 641 2048 2048 NT_STATUS_OK
ReadX 10752 769 2048 2048 NT_STATUS_OK
ReadX 10752 897 2048 2048 NT_STATUS_OK
ReadX 10752 1025 2048 2048 NT_STATUS_OK
ReadX 10752 1153 2048 2048 NT_STATUS_OK
ReadX 10752 1281 2048 2048 NT_STATUS_OK
ReadX 10752 1409 2048 2048 NT_STATUS_OK
ReadX 10752 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10750 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10757 NT_STATUS_OK
WriteX 10757 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10757 258 NT_STATUS_OK
WriteX 10757 0 10575 10575 NT_STATUS_OK
Flush 10757 NT_STATUS_OK
Close 10757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10758 NT_STATUS_OK
Close 10758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
Close 10752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10762 NT_STATUS_OK
LockX 10762 2147483538 1 NT_STATUS_OK
UnlockX 10762 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1005 NT_STATUS_OK
ReadX 10762 0 512 512 NT_STATUS_OK
ReadX 10762 512 512 512 NT_STATUS_OK
ReadX 10762 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10762 1004 NT_STATUS_OK
Close 10762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10763 NT_STATUS_OK
QUERY_FILE_INFORMATION 10763 1005 NT_STATUS_OK
ReadX 10763 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10764 NT_STATUS_OK
LockX 10764 2147483538 1 NT_STATUS_OK
UnlockX 10764 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10764 1005 NT_STATUS_OK
ReadX 10764 0 512 512 NT_STATUS_OK
ReadX 10764 512 512 512 NT_STATUS_OK
ReadX 10764 1024 512 512 NT_STATUS_OK
ReadX 10764 288 20 20 NT_STATUS_OK
ReadX 10764 308 2084 2084 NT_STATUS_OK
ReadX 10764 388 2084 2084 NT_STATUS_OK
ReadX 10764 388 2084 2084 NT_STATUS_OK
ReadX 10751 2157 1386 1386 NT_STATUS_OK
ReadX 10764 2472 399 399 NT_STATUS_OK
ReadX 10764 3072 1536 1536 NT_STATUS_OK
ReadX 10764 544 149 149 NT_STATUS_OK
ReadX 10764 693 485 485 NT_STATUS_OK
Close 10764 NT_STATUS_OK
ReadX 10751 2157 4096 4096 NT_STATUS_OK
ReadX 10751 6253 4096 4096 NT_STATUS_OK
ReadX 10751 10349 4096 4096 NT_STATUS_OK
ReadX 10751 14445 4096 4096 NT_STATUS_OK
ReadX 10751 18541 4096 4096 NT_STATUS_OK
ReadX 10751 22637 256 256 NT_STATUS_OK
ReadX 10751 22893 4096 4096 NT_STATUS_OK
ReadX 10751 26989 4096 4096 NT_STATUS_OK
ReadX 10751 31085 4096 4096 NT_STATUS_OK
ReadX 10751 35181 4096 4096 NT_STATUS_OK
ReadX 10751 39277 4096 4096 NT_STATUS_OK
ReadX 10751 43373 4096 4096 NT_STATUS_OK
ReadX 10751 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10751 2157 1024 1024 NT_STATUS_OK
ReadX 10751 1667 4688 4688 NT_STATUS_OK
ReadX 10751 6355 3516 3516 NT_STATUS_OK
ReadX 10751 9871 16384 16384 NT_STATUS_OK
ReadX 10751 26255 3771 3771 NT_STATUS_OK
ReadX 10751 30026 2048 2048 NT_STATUS_OK
ReadX 10751 32074 1024 1024 NT_STATUS_OK
ReadX 10751 33098 6652 6652 NT_STATUS_OK
ReadX 10751 39750 16384 16384 NT_STATUS_OK
ReadX 10751 56134 10496 10496 NT_STATUS_OK
ReadX 10751 66630 1784 1784 NT_STATUS_OK
ReadX 10751 68414 90 90 NT_STATUS_OK
ReadX 10751 68504 273 273 NT_STATUS_OK
ReadX 10751 68777 1600 1600 NT_STATUS_OK
ReadX 10751 70377 640 640 NT_STATUS_OK
ReadX 10751 71017 1280 1280 NT_STATUS_OK
ReadX 10751 72297 8464 8464 NT_STATUS_OK
ReadX 10751 80761 158 158 NT_STATUS_OK
ReadX 10751 80919 912 912 NT_STATUS_OK
ReadX 10751 81831 1980 1980 NT_STATUS_OK
ReadX 10751 83811 2256 2256 NT_STATUS_OK
ReadX 10751 86067 400 400 NT_STATUS_OK
ReadX 10751 86467 252 252 NT_STATUS_OK
ReadX 10751 86719 42 42 NT_STATUS_OK
ReadX 10751 86761 725 725 NT_STATUS_OK
ReadX 10751 2009 512 512 NT_STATUS_OK
ReadX 10751 3895 9 9 NT_STATUS_OK
ReadX 10751 3781 46 46 NT_STATUS_OK
ReadX 10751 4059 92 92 NT_STATUS_OK
ReadX 10751 3781 92 92 NT_STATUS_OK
ReadX 10751 3986 184 184 NT_STATUS_OK
ReadX 10751 3987 16384 16384 NT_STATUS_OK
ReadX 10751 3902 16384 16384 NT_STATUS_OK
ReadX 10751 3781 10240 10240 NT_STATUS_OK
ReadX 10751 3821 16384 16384 NT_STATUS_OK
ReadX 10751 3891 935 935 NT_STATUS_OK
ReadX 10751 4060 10240 10240 NT_STATUS_OK
ReadX 10751 4059 184 184 NT_STATUS_OK
ReadX 10751 256 184 184 NT_STATUS_OK
ReadX 10751 256 1026 1026 NT_STATUS_OK
ReadX 10751 3901 326 326 NT_STATUS_OK
ReadX 10751 3899 652 652 NT_STATUS_OK
ReadX 10751 256 2 2 NT_STATUS_OK
ReadX 10751 258 4948 4948 NT_STATUS_OK
Close 10751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10766 NT_STATUS_OK
Close 10766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10769 NT_STATUS_OK
WriteX 10769 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10769 258 NT_STATUS_OK
WriteX 10769 0 65536 65536 NT_STATUS_OK
WriteX 10769 65536 65536 65536 NT_STATUS_OK
WriteX 10769 131072 65536 65536 NT_STATUS_OK
WriteX 10769 196608 65536 65536 NT_STATUS_OK
WriteX 10769 262144 65536 65536 NT_STATUS_OK
WriteX 10769 327680 65536 65536 NT_STATUS_OK
WriteX 10769 393216 65536 65536 NT_STATUS_OK
WriteX 10769 458752 65536 65536 NT_STATUS_OK
WriteX 10769 524288 65536 65536 NT_STATUS_OK
WriteX 10769 589824 35257 35257 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10774 NT_STATUS_OK
WriteX 10774 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 65536 65536 NT_STATUS_OK
WriteX 10774 131072 65536 65536 NT_STATUS_OK
WriteX 10774 196608 65536 65536 NT_STATUS_OK
WriteX 10774 262144 65536 65536 NT_STATUS_OK
WriteX 10774 327680 65536 65536 NT_STATUS_OK
WriteX 10774 393216 65536 65536 NT_STATUS_OK
WriteX 10774 458752 65536 65536 NT_STATUS_OK
WriteX 10774 524288 65536 65536 NT_STATUS_OK
WriteX 10774 589824 57598 57598 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10776 NT_STATUS_OK
WriteX 10776 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10776 258 NT_STATUS_OK
WriteX 10776 0 12543 12543 NT_STATUS_OK
Flush 10776 NT_STATUS_OK
Close 10776 NT_STATUS_OK
Close 10760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10778 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10782 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1005 NT_STATUS_OK
ReadX 10782 1938 24 24 NT_STATUS_OK
ReadX 10782 1920 276 276 NT_STATUS_OK
ReadX 10782 1918 14 14 NT_STATUS_OK
ReadX 10782 1918 7 7 NT_STATUS_OK
ReadX 10782 1919 12 12 NT_STATUS_OK
ReadX 10782 1919 8 8 NT_STATUS_OK
ReadX 10782 1917 15 15 NT_STATUS_OK
ReadX 10782 0 16 16 NT_STATUS_OK
ReadX 10782 16 2048 2048 NT_STATUS_OK
ReadX 10782 2064 2048 2048 NT_STATUS_OK
ReadX 10782 257 2048 2048 NT_STATUS_OK
ReadX 10782 385 2048 2048 NT_STATUS_OK
ReadX 10782 513 2048 2048 NT_STATUS_OK
ReadX 10782 641 2048 2048 NT_STATUS_OK
ReadX 10782 769 2048 2048 NT_STATUS_OK
ReadX 10782 897 2048 2048 NT_STATUS_OK
ReadX 10782 1025 2048 2048 NT_STATUS_OK
ReadX 10782 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10784 NT_STATUS_OK
Close 10784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10787 NT_STATUS_OK
WriteX 10787 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10787 258 NT_STATUS_OK
WriteX 10787 0 11588 11588 NT_STATUS_OK
Flush 10787 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10788 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10790 NT_STATUS_OK
ReadX 10790 0 4096 4096 NT_STATUS_OK
Close 10782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10792 NT_STATUS_OK
WriteX 10792 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10792 258 NT_STATUS_OK
WriteX 10792 0 11615 11615 NT_STATUS_OK
Flush 10792 NT_STATUS_OK
Close 10792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10794 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10801 NT_STATUS_OK
WriteX 10801 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 65536 65536 NT_STATUS_OK
WriteX 10801 65536 16050 16050 NT_STATUS_OK
Close 10801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10781 1939 64 64 NT_STATUS_OK
ReadX 10781 128 248 248 NT_STATUS_OK
ReadX 10781 128 568 568 NT_STATUS_OK
ReadX 10781 3872 1536 1536 NT_STATUS_OK
ReadX 10781 3456 2560 2560 NT_STATUS_OK
ReadX 10781 3136 512 512 NT_STATUS_OK
ReadX 10781 2880 4096 4096 NT_STATUS_OK
ReadX 10781 3264 3072 3072 NT_STATUS_OK
ReadX 10781 320 4096 4096 NT_STATUS_OK
ReadX 10781 1024 4096 4096 NT_STATUS_OK
ReadX 10781 3616 4096 4096 NT_STATUS_OK
ReadX 10781 1939 64 64 NT_STATUS_OK
ReadX 10781 128 248 248 NT_STATUS_OK
ReadX 10781 128 608 608 NT_STATUS_OK
ReadX 10781 2858 1024 1024 NT_STATUS_OK
ReadX 10781 2810 4096 4096 NT_STATUS_OK
ReadX 10781 2826 4096 4096 NT_STATUS_OK
ReadX 10781 2580 2048 2048 NT_STATUS_OK
ReadX 10781 2800 2560 2560 NT_STATUS_OK
ReadX 10781 2100 4096 4096 NT_STATUS_OK
ReadX 10781 2084 4096 4096 NT_STATUS_OK
ReadX 10781 868 4096 4096 NT_STATUS_OK
ReadX 10781 2324 4096 4096 NT_STATUS_OK
ReadX 10781 884 4096 4096 NT_STATUS_OK
ReadX 10781 2604 1024 1024 NT_STATUS_OK
ReadX 10781 580 4096 4096 NT_STATUS_OK
ReadX 10781 596 4096 4096 NT_STATUS_OK
ReadX 10781 2752 4096 4096 NT_STATUS_OK
ReadX 10781 2842 1024 1024 NT_STATUS_OK
ReadX 10781 660 4096 4096 NT_STATUS_OK
ReadX 10781 2720 4096 4096 NT_STATUS_OK
ReadX 10781 2736 4096 4096 NT_STATUS_OK
ReadX 10781 628 4096 4096 NT_STATUS_OK
ReadX 10781 2704 4096 4096 NT_STATUS_OK
ReadX 10781 1556 4096 4096 NT_STATUS_OK
ReadX 10781 576 4096 4096 NT_STATUS_OK
ReadX 10781 3168 1536 1536 NT_STATUS_OK
ReadX 10781 832 4096 4096 NT_STATUS_OK
ReadX 10781 1088 4096 4096 NT_STATUS_OK
ReadX 10781 1344 4096 4096 NT_STATUS_OK
ReadX 10781 1600 4096 4096 NT_STATUS_OK
ReadX 10781 1856 4096 4096 NT_STATUS_OK
ReadX 10781 2112 4096 4096 NT_STATUS_OK
ReadX 10781 1892 4096 4096 NT_STATUS_OK
ReadX 10781 820 4096 4096 NT_STATUS_OK
ReadX 10781 788 4096 4096 NT_STATUS_OK
ReadX 10781 1604 4096 4096 NT_STATUS_OK
ReadX 10781 3648 4096 4096 NT_STATUS_OK
ReadX 10781 2608 4096 4096 NT_STATUS_OK
ReadX 10781 548 4096 4096 NT_STATUS_OK
ReadX 10781 740 4096 4096 NT_STATUS_OK
ReadX 10781 1344 4096 4096 NT_STATUS_OK
ReadX 10781 3392 4096 4096 NT_STATUS_OK
ReadX 10781 3904 4096 4096 NT_STATUS_OK
ReadX 10781 644 4096 4096 NT_STATUS_OK
ReadX 10781 676 4096 4096 NT_STATUS_OK
ReadX 10781 2688 4096 4096 NT_STATUS_OK
ReadX 10781 320 4096 4096 NT_STATUS_OK
ReadX 10781 900 4096 4096 NT_STATUS_OK
ReadX 10781 1908 4096 4096 NT_STATUS_OK
ReadX 10781 852 4096 4096 NT_STATUS_OK
ReadX 10781 724 4096 4096 NT_STATUS_OK
ReadX 10781 2292 4096 4096 NT_STATUS_OK
ReadX 10781 612 4096 4096 NT_STATUS_OK
ReadX 10781 388 4096 4096 NT_STATUS_OK
ReadX 10781 2368 4096 4096 NT_STATUS_OK
ReadX 10781 2624 4096 4096 NT_STATUS_OK
ReadX 10781 500 4096 4096 NT_STATUS_OK
ReadX 10781 356 4096 4096 NT_STATUS_OK
ReadX 10781 1024 4096 4096 NT_STATUS_OK
ReadX 10781 576 4096 4096 NT_STATUS_OK
ReadX 10781 340 4096 4096 NT_STATUS_OK
ReadX 10781 420 4096 4096 NT_STATUS_OK
ReadX 10781 1600 4096 4096 NT_STATUS_OK
ReadX 10781 404 4096 4096 NT_STATUS_OK
ReadX 10781 1428 4096 4096 NT_STATUS_OK
ReadX 10781 2656 4096 4096 NT_STATUS_OK
ReadX 10781 2624 4096 4096 NT_STATUS_OK
ReadX 10781 452 4096 4096 NT_STATUS_OK
ReadX 10781 692 4096 4096 NT_STATUS_OK
ReadX 10781 564 4096 4096 NT_STATUS_OK
ReadX 10781 372 4096 4096 NT_STATUS_OK
ReadX 10781 468 4096 4096 NT_STATUS_OK
ReadX 10781 484 4096 4096 NT_STATUS_OK
ReadX 10781 1088 4096 4096 NT_STATUS_OK
ReadX 10781 1924 4096 4096 NT_STATUS_OK
ReadX 10781 2768 4096 4096 NT_STATUS_OK
ReadX 10781 832 4096 4096 NT_STATUS_OK
ReadX 10781 836 4096 4096 NT_STATUS_OK
ReadX 10781 1856 4096 4096 NT_STATUS_OK
ReadX 10781 2640 4096 4096 NT_STATUS_OK
ReadX 10781 436 4096 4096 NT_STATUS_OK
ReadX 10781 1828 4096 4096 NT_STATUS_OK
ReadX 10781 804 4096 4096 NT_STATUS_OK
ReadX 10781 1860 4096 4096 NT_STATUS_OK
ReadX 10781 1812 4096 4096 NT_STATUS_OK
ReadX 10781 756 4096 4096 NT_STATUS_OK
ReadX 10781 1636 4096 4096 NT_STATUS_OK
ReadX 10781 772 4096 4096 NT_STATUS_OK
ReadX 10781 2036 4096 4096 NT_STATUS_OK
ReadX 10781 1220 4096 4096 NT_STATUS_OK
ReadX 10781 1652 4096 4096 NT_STATUS_OK
ReadX 10781 2588 4096 4096 NT_STATUS_OK
ReadX 10781 916 4096 4096 NT_STATUS_OK
ReadX 10781 260 4096 4096 NT_STATUS_OK
ReadX 10781 932 4096 4096 NT_STATUS_OK
ReadX 10781 2624 4096 4096 NT_STATUS_OK
ReadX 10781 308 4096 4096 NT_STATUS_OK
ReadX 10781 292 4096 4096 NT_STATUS_OK
ReadX 10781 1140 4096 4096 NT_STATUS_OK
ReadX 10781 276 4096 4096 NT_STATUS_OK
ReadX 10781 2020 4096 4096 NT_STATUS_OK
ReadX 10781 2880 4096 4096 NT_STATUS_OK
ReadX 10781 516 4096 4096 NT_STATUS_OK
ReadX 10781 1844 4096 4096 NT_STATUS_OK
ReadX 10781 1124 4096 4096 NT_STATUS_OK
ReadX 10781 3136 4096 4096 NT_STATUS_OK
ReadX 10781 324 4096 4096 NT_STATUS_OK
ReadX 10781 1156 4096 4096 NT_STATUS_OK
ReadX 10781 1172 4096 4096 NT_STATUS_OK
ReadX 10781 2112 4096 4096 NT_STATUS_OK
ReadX 10781 2368 4096 4096 NT_STATUS_OK
ReadX 10781 964 4096 4096 NT_STATUS_OK
ReadX 10781 980 4096 4096 NT_STATUS_OK
ReadX 10781 1012 4096 4096 NT_STATUS_OK
ReadX 10781 532 4096 4096 NT_STATUS_OK
ReadX 10781 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10781 1620 4096 4096 NT_STATUS_OK
ReadX 10781 1604 4096 4096 NT_STATUS_OK
ReadX 10781 2116 4096 4096 NT_STATUS_OK
ReadX 10781 2132 4096 4096 NT_STATUS_OK
ReadX 10781 2148 4096 4096 NT_STATUS_OK
ReadX 10781 2276 4096 4096 NT_STATUS_OK
ReadX 10781 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10806 NT_STATUS_OK
QUERY_FILE_INFORMATION 10761 1004 NT_STATUS_OK
Close 10761 NT_STATUS_OK
WriteX 10806 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10806 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10763 1004 NT_STATUS_OK
Close 10763 NT_STATUS_OK
WriteX 10806 0 65536 65536 NT_STATUS_OK
WriteX 10806 65536 64850 64850 NT_STATUS_OK
Close 10806 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10808 NT_STATUS_OK
WriteX 10808 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
ReadX 10781 2068 4096 4096 NT_STATUS_OK
ReadX 10781 1588 4096 4096 NT_STATUS_OK
ReadX 10781 1572 4096 4096 NT_STATUS_OK
WriteX 10808 0 18630 18630 NT_STATUS_OK
Flush 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10781 612 4096 4096 NT_STATUS_OK
ReadX 10781 564 4096 4096 NT_STATUS_OK
ReadX 10781 1876 4096 4096 NT_STATUS_OK
ReadX 10781 628 4096 4096 NT_STATUS_OK
ReadX 10781 740 4096 4096 NT_STATUS_OK
ReadX 10781 724 4096 4096 NT_STATUS_OK
ReadX 10781 644 4096 4096 NT_STATUS_OK
ReadX 10781 2324 4096 4096 NT_STATUS_OK
ReadX 10781 660 4096 4096 NT_STATUS_OK
ReadX 10781 852 4096 4096 NT_STATUS_OK
ReadX 10781 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10781 2368 4096 4096 NT_STATUS_OK
ReadX 10781 1024 4096 4096 NT_STATUS_OK
ReadX 10781 320 4096 4096 NT_STATUS_OK
ReadX 10781 580 4096 4096 NT_STATUS_OK
ReadX 10781 3136 512 512 NT_STATUS_OK
ReadX 10781 2880 4096 4096 NT_STATUS_OK
Close 10781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10813 NT_STATUS_OK
ReadX 10813 61440 4096 4096 NT_STATUS_OK
ReadX 10813 126976 4096 4096 NT_STATUS_OK
WriteX 10813 0 65536 65536 NT_STATUS_OK
WriteX 10813 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 61440 4096 4096 NT_STATUS_OK
ReadX 10814 126976 4096 4096 NT_STATUS_OK
ReadX 10814 192512 4096 4096 NT_STATUS_OK
ReadX 10814 258048 4096 4096 NT_STATUS_OK
WriteX 10814 0 65536 65536 NT_STATUS_OK
WriteX 10814 65536 65536 65536 NT_STATUS_OK
WriteX 10814 131072 65536 65536 NT_STATUS_OK
WriteX 10814 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10815 NT_STATUS_OK
ReadX 10815 61440 4096 4096 NT_STATUS_OK
ReadX 10815 126976 4096 4096 NT_STATUS_OK
ReadX 10815 192512 4096 4096 NT_STATUS_OK
ReadX 10815 258048 4096 4096 NT_STATUS_OK
ReadX 10815 323584 4096 4096 NT_STATUS_OK
ReadX 10815 389120 4096 4096 NT_STATUS_OK
ReadX 10815 454656 4096 4096 NT_STATUS_OK
ReadX 10815 520192 4096 4096 NT_STATUS_OK
WriteX 10815 0 65536 65536 NT_STATUS_OK
WriteX 10815 65536 65536 65536 NT_STATUS_OK
WriteX 10815 131072 65536 65536 NT_STATUS_OK
WriteX 10815 196608 65536 65536 NT_STATUS_OK
WriteX 10815 262144 65536 65536 NT_STATUS_OK
WriteX 10815 327680 65536 65536 NT_STATUS_OK
WriteX 10815 393216 65536 65536 NT_STATUS_OK
WriteX 10815 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10818 NT_STATUS_OK
WriteX 10818 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10818 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10816 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10816 0 8192 8192 NT_STATUS_OK
Flush 10816 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10820 NT_STATUS_OK
Close 10820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10812 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10813 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Close 10815 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10823 NT_STATUS_OK
WriteX 10823 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10823 258 NT_STATUS_OK
WriteX 10823 0 62591 62591 NT_STATUS_OK
Close 10823 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10825 NT_STATUS_OK
Close 10825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10828 NT_STATUS_OK
WriteX 10828 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10828 258 NT_STATUS_OK
WriteX 10828 0 10845 10845 NT_STATUS_OK
Close 10828 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10833 NT_STATUS_OK
WriteX 10833 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10833 258 NT_STATUS_OK
WriteX 10833 0 30118 30118 NT_STATUS_OK
Close 10833 NT_STATUS_OK
WriteX 10816 0 4096 4096 NT_STATUS_OK
WriteX 10818 0 64 64 NT_STATUS_OK
Close 10818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 61440 61440 NT_STATUS_OK
ReadX 10835 61440 4096 4096 NT_STATUS_OK
ReadX 10835 65536 61440 61440 NT_STATUS_OK
ReadX 10835 126976 4096 4096 NT_STATUS_OK
ReadX 10835 131072 61440 61440 NT_STATUS_OK
ReadX 10835 192512 4096 4096 NT_STATUS_OK
ReadX 10835 196608 61440 61440 NT_STATUS_OK
ReadX 10835 258048 4096 4096 NT_STATUS_OK
ReadX 10835 262144 61440 61440 NT_STATUS_OK
ReadX 10835 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 61440 61440 NT_STATUS_OK
ReadX 10836 61440 4096 4096 NT_STATUS_OK
ReadX 10836 65536 61440 61440 NT_STATUS_OK
ReadX 10836 126976 4096 4096 NT_STATUS_OK
ReadX 10836 131072 61440 61440 NT_STATUS_OK
ReadX 10836 192512 4096 4096 NT_STATUS_OK
ReadX 10836 196608 61440 61440 NT_STATUS_OK
ReadX 10836 258048 4096 4096 NT_STATUS_OK
ReadX 10836 262144 61440 61440 NT_STATUS_OK
ReadX 10836 323584 4096 4096 NT_STATUS_OK
ReadX 10836 327680 61440 61440 NT_STATUS_OK
ReadX 10836 389120 4096 4096 NT_STATUS_OK
ReadX 10836 393216 61440 61440 NT_STATUS_OK
ReadX 10836 454656 4096 4096 NT_STATUS_OK
ReadX 10836 458752 61440 61440 NT_STATUS_OK
ReadX 10836 520192 4096 4096 NT_STATUS_OK
ReadX 10836 524288 61440 61440 NT_STATUS_OK
ReadX 10836 585728 4096 4096 NT_STATUS_OK
ReadX 10836 589824 61440 61440 NT_STATUS_OK
ReadX 10836 651264 4096 4096 NT_STATUS_OK
ReadX 10836 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 61440 61440 NT_STATUS_OK
ReadX 10837 61440 4096 4096 NT_STATUS_OK
ReadX 10837 65536 61440 61440 NT_STATUS_OK
ReadX 10837 126976 4096 4096 NT_STATUS_OK
ReadX 10837 131072 61440 61440 NT_STATUS_OK
ReadX 10837 192512 4096 4096 NT_STATUS_OK
ReadX 10837 196608 61440 61440 NT_STATUS_OK
ReadX 10837 258048 4096 4096 NT_STATUS_OK
ReadX 10837 262144 61440 61440 NT_STATUS_OK
ReadX 10837 323584 4096 4096 NT_STATUS_OK
ReadX 10837 327680 61440 61440 NT_STATUS_OK
ReadX 10837 389120 4096 4096 NT_STATUS_OK
ReadX 10837 393216 61440 61440 NT_STATUS_OK
ReadX 10837 454656 4096 4096 NT_STATUS_OK
ReadX 10837 458752 61440 61440 NT_STATUS_OK
ReadX 10837 520192 4096 4096 NT_STATUS_OK
ReadX 10837 524288 61440 61440 NT_STATUS_OK
ReadX 10837 585728 4096 4096 NT_STATUS_OK
ReadX 10837 589824 61440 61440 NT_STATUS_OK
ReadX 10837 651264 4096 4096 NT_STATUS_OK
ReadX 10837 655360 61440 61440 NT_STATUS_OK
ReadX 10837 716800 4096 4096 NT_STATUS_OK
ReadX 10837 720896 61440 61440 NT_STATUS_OK
ReadX 10837 782336 4096 4096 NT_STATUS_OK
ReadX 10837 786432 61440 61440 NT_STATUS_OK
ReadX 10837 847872 4096 4096 NT_STATUS_OK
ReadX 10837 851968 61440 61440 NT_STATUS_OK
ReadX 10837 913408 4096 4096 NT_STATUS_OK
ReadX 10837 917504 61440 61440 NT_STATUS_OK
ReadX 10837 978944 4096 4096 NT_STATUS_OK
ReadX 10837 983040 61440 61440 NT_STATUS_OK
ReadX 10837 1044480 4096 4096 NT_STATUS_OK
ReadX 10837 1048576 61440 61440 NT_STATUS_OK
ReadX 10837 1110016 4096 4096 NT_STATUS_OK
ReadX 10837 1114112 61440 61440 NT_STATUS_OK
ReadX 10837 1175552 4096 4096 NT_STATUS_OK
ReadX 10837 1179648 61440 61440 NT_STATUS_OK
ReadX 10837 1241088 4096 4096 NT_STATUS_OK
ReadX 10837 1245184 61440 61440 NT_STATUS_OK
ReadX 10837 1306624 4096 4096 NT_STATUS_OK
ReadX 10837 1310720 61440 61440 NT_STATUS_OK
ReadX 10837 1372160 4096 4096 NT_STATUS_OK
ReadX 10837 1376256 61440 61440 NT_STATUS_OK
ReadX 10837 1437696 4096 4096 NT_STATUS_OK
ReadX 10837 1441792 61440 61440 NT_STATUS_OK
ReadX 10837 1503232 4096 4096 NT_STATUS_OK
ReadX 10837 1507328 61440 61440 NT_STATUS_OK
ReadX 10837 1568768 4096 4096 NT_STATUS_OK
ReadX 10837 1572864 61440 61440 NT_STATUS_OK
ReadX 10837 1634304 4096 4096 NT_STATUS_OK
ReadX 10837 1638400 61440 61440 NT_STATUS_OK
ReadX 10837 1699840 4096 4096 NT_STATUS_OK
ReadX 10837 1703936 61440 61440 NT_STATUS_OK
ReadX 10837 1765376 4096 4096 NT_STATUS_OK
ReadX 10837 1769472 61440 61440 NT_STATUS_OK
ReadX 10837 1830912 4096 4096 NT_STATUS_OK
ReadX 10837 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10838 NT_STATUS_OK
Close 10838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10835 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10840 NT_STATUS_OK
ReadX 10840 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10841 NT_STATUS_OK
ReadX 10841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10842 NT_STATUS_OK
ReadX 10842 0 4096 4096 NT_STATUS_OK
ReadX 10842 4096 4096 4096 NT_STATUS_OK
ReadX 10842 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10843 NT_STATUS_OK
Close 10843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10840 NT_STATUS_OK
Close 10841 NT_STATUS_OK
Close 10842 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10846 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10846 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10847 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10845 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 0 8192 8192 NT_STATUS_OK
ReadX 10850 8192 8192 8192 NT_STATUS_OK
ReadX 10850 16384 8192 8192 NT_STATUS_OK
ReadX 10850 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10852 NT_STATUS_OK
Close 10852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10855 NT_STATUS_OK
WriteX 10855 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10855 258 NT_STATUS_OK
WriteX 10855 0 10438 10438 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10856 NT_STATUS_OK
Close 10856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10858 NT_STATUS_OK
Close 10858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10859 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10861 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10863 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
ReadX 10864 4096 4096 4096 NT_STATUS_OK
ReadX 10864 8192 4096 4096 NT_STATUS_OK
ReadX 10864 12288 8192 8192 NT_STATUS_OK
ReadX 10864 20480 8192 8192 NT_STATUS_OK
ReadX 10864 28672 8192 8192 NT_STATUS_OK
ReadX 10864 36864 8192 8192 NT_STATUS_OK
ReadX 10864 45056 8192 8192 NT_STATUS_OK
ReadX 10864 53248 8192 8192 NT_STATUS_OK
ReadX 10864 61440 8192 8192 NT_STATUS_OK
ReadX 10864 69632 8192 8192 NT_STATUS_OK
ReadX 10864 77824 8192 8192 NT_STATUS_OK
ReadX 10864 86016 8192 8192 NT_STATUS_OK
ReadX 10864 94208 8192 8192 NT_STATUS_OK
ReadX 10864 102400 8192 8192 NT_STATUS_OK
ReadX 10864 110592 8192 8192 NT_STATUS_OK
ReadX 10864 118784 8192 8192 NT_STATUS_OK
ReadX 10864 126976 8192 8192 NT_STATUS_OK
ReadX 10864 135168 8192 8192 NT_STATUS_OK
ReadX 10864 143360 8192 8192 NT_STATUS_OK
ReadX 10864 151552 8192 8192 NT_STATUS_OK
ReadX 10864 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10864 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10869 NT_STATUS_OK
WriteX 10869 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10869 258 NT_STATUS_OK
WriteX 10869 0 28489 28489 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10870 NT_STATUS_OK
Close 10870 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10872 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10873 NT_STATUS_OK
Close 10873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 0 8192 8192 NT_STATUS_OK
ReadX 10876 8192 8192 8192 NT_STATUS_OK
ReadX 10876 16384 8192 8192 NT_STATUS_OK
ReadX 10876 24576 8192 8192 NT_STATUS_OK
ReadX 10876 32768 16384 16384 NT_STATUS_OK
ReadX 10876 49152 8192 8192 NT_STATUS_OK
ReadX 10876 57344 8192 8192 NT_STATUS_OK
ReadX 10876 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10878 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10881 NT_STATUS_OK
WriteX 10881 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10881 258 NT_STATUS_OK
WriteX 10881 0 29253 29253 NT_STATUS_OK
Close 10881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10882 NT_STATUS_OK
Close 10882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10885 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10888 NT_STATUS_OK
WriteX 10888 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10888 258 NT_STATUS_OK
WriteX 10888 0 30183 30183 NT_STATUS_OK
Close 10888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10891 NT_STATUS_OK
WriteX 10891 0 510 510 NT_STATUS_OK
WriteX 10891 510 512 512 NT_STATUS_OK
WriteX 10891 1022 510 510 NT_STATUS_OK
WriteX 10891 1532 510 510 NT_STATUS_OK
WriteX 10891 2042 168 168 NT_STATUS_OK
Close 10891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10892 NT_STATUS_OK
Close 10892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10894 NT_STATUS_OK
ReadX 10894 0 4096 4096 NT_STATUS_OK
WriteX 10894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10895 NT_STATUS_OK
ReadX 10895 61440 4096 4096 NT_STATUS_OK
ReadX 10895 126976 4096 4096 NT_STATUS_OK
WriteX 10895 0 65536 65536 NT_STATUS_OK
WriteX 10895 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10896 NT_STATUS_OK
ReadX 10896 61440 4096 4096 NT_STATUS_OK
ReadX 10896 126976 4096 4096 NT_STATUS_OK
ReadX 10896 192512 4096 4096 NT_STATUS_OK
ReadX 10896 258048 4096 4096 NT_STATUS_OK
WriteX 10896 0 65536 65536 NT_STATUS_OK
WriteX 10896 65536 65536 65536 NT_STATUS_OK
WriteX 10896 131072 65536 65536 NT_STATUS_OK
WriteX 10896 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 61440 4096 4096 NT_STATUS_OK
ReadX 10897 126976 4096 4096 NT_STATUS_OK
ReadX 10897 192512 4096 4096 NT_STATUS_OK
ReadX 10897 258048 4096 4096 NT_STATUS_OK
ReadX 10897 323584 4096 4096 NT_STATUS_OK
ReadX 10897 389120 4096 4096 NT_STATUS_OK
ReadX 10897 454656 4096 4096 NT_STATUS_OK
ReadX 10897 520192 4096 4096 NT_STATUS_OK
WriteX 10897 0 65536 65536 NT_STATUS_OK
WriteX 10897 65536 65536 65536 NT_STATUS_OK
WriteX 10897 131072 65536 65536 NT_STATUS_OK
WriteX 10897 196608 65536 65536 NT_STATUS_OK
WriteX 10897 262144 65536 65536 NT_STATUS_OK
WriteX 10897 327680 65536 65536 NT_STATUS_OK
WriteX 10897 393216 65536 65536 NT_STATUS_OK
WriteX 10897 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10898 NT_STATUS_OK
Close 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10894 NT_STATUS_OK
Close 10895 NT_STATUS_OK
Close 10896 NT_STATUS_OK
Close 10897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10900 NT_STATUS_OK
Close 10900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10907 NT_STATUS_OK
Close 10907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10909 NT_STATUS_OK
Close 10909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10913 NT_STATUS_OK
Close 10913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10916 NT_STATUS_OK
Close 10916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10922 NT_STATUS_OK
Close 10922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10927 NT_STATUS_OK
Close 10927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10932 NT_STATUS_OK
Close 10932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10937 NT_STATUS_OK
Close 10937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10942 NT_STATUS_OK
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10957 NT_STATUS_OK
Close 10957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10966 NT_STATUS_OK
WriteX 10966 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10966 0 65536 65536 NT_STATUS_OK
WriteX 10966 65536 65536 65536 NT_STATUS_OK
WriteX 10966 131072 65536 65536 NT_STATUS_OK
WriteX 10966 196608 65536 65536 NT_STATUS_OK
WriteX 10966 262144 26634 26634 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10971 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10972 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 0 4096 4096 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
ReadX 10974 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10979 NT_STATUS_OK
Close 10979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10982 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10984 NT_STATUS_OK
Close 10984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10988 NT_STATUS_OK
Close 10988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10991 NT_STATUS_OK
Close 10991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10993 NT_STATUS_OK
Close 10993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11002 NT_STATUS_OK
Close 11002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11007 NT_STATUS_OK
Close 11007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11017 NT_STATUS_OK
Close 11017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11022 NT_STATUS_OK
Close 11022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11026 NT_STATUS_OK
Close 11026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11031 NT_STATUS_OK
Close 11031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11036 NT_STATUS_OK
Close 11036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11039 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11041 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 4096 4096 NT_STATUS_OK
Close 11053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
Close 11054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11065 NT_STATUS_OK
Close 11065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
Close 11067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
Close 11068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11069 NT_STATUS_OK
ReadX 11069 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11055 NT_STATUS_OK
Close 11069 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11098 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11098 0 4096 4096 NT_STATUS_OK
Close 11098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
ReadX 11100 4096 4096 4096 NT_STATUS_OK
ReadX 11100 8192 4096 4096 NT_STATUS_OK
ReadX 11100 12288 4096 4096 NT_STATUS_OK
ReadX 11100 16384 4096 4096 NT_STATUS_OK
ReadX 11100 20480 4096 4096 NT_STATUS_OK
ReadX 11100 24576 4096 4096 NT_STATUS_OK
ReadX 11100 28672 4096 4096 NT_STATUS_OK
ReadX 11100 32768 4096 4096 NT_STATUS_OK
ReadX 11100 36864 4096 4096 NT_STATUS_OK
ReadX 11100 40960 4096 4096 NT_STATUS_OK
ReadX 11100 45056 4096 4096 NT_STATUS_OK
ReadX 11100 49152 4096 4096 NT_STATUS_OK
ReadX 11100 53248 4096 4096 NT_STATUS_OK
ReadX 11100 57344 4096 4096 NT_STATUS_OK
ReadX 11100 61440 4096 4096 NT_STATUS_OK
ReadX 11100 65536 4096 4096 NT_STATUS_OK
ReadX 11100 69632 4096 4096 NT_STATUS_OK
ReadX 11100 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11100 1004 NT_STATUS_OK
WriteX 11100 0 4096 4096 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11101 NT_STATUS_OK
SET_FILE_INFORMATION 11101 1004 NT_STATUS_OK
Close 11101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11103 NT_STATUS_OK
Close 11103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11106 NT_STATUS_OK
WriteX 11106 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 258 NT_STATUS_OK
WriteX 11106 0 65536 65536 NT_STATUS_OK
WriteX 11106 65536 19979 19979 NT_STATUS_OK
Close 11106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
QUERY_FILE_INFORMATION 11107 1004 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
SET_FILE_INFORMATION 11107 1004 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
Flush 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11108 NT_STATUS_OK
ReadX 11108 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 4096 4096 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 4096 4096 NT_STATUS_OK
Close 11110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 4096 4096 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11112 1004 NT_STATUS_OK
WriteX 11112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11113 NT_STATUS_OK
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11109 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11115 NT_STATUS_OK
Close 11115 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11118 NT_STATUS_OK
WriteX 11118 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 258 NT_STATUS_OK
WriteX 11118 0 65536 65536 NT_STATUS_OK
WriteX 11118 65536 17654 17654 NT_STATUS_OK
Close 11118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11119 NT_STATUS_OK
ReadX 11119 0 4096 4096 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
QUERY_FILE_INFORMATION 11119 1004 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
SET_FILE_INFORMATION 11119 1004 NT_STATUS_OK
WriteX 11119 0 4096 4096 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11120 NT_STATUS_OK
SET_FILE_INFORMATION 11120 1004 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11122 NT_STATUS_OK
Close 11122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11124 NT_STATUS_OK
ReadX 11124 0 4096 4096 NT_STATUS_OK
ReadX 11124 4096 4096 4096 NT_STATUS_OK
ReadX 11124 8192 4096 4096 NT_STATUS_OK
ReadX 11124 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11124 16384 4096 4096 NT_STATUS_OK
ReadX 11124 20480 4096 4096 NT_STATUS_OK
ReadX 11124 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11125 NT_STATUS_OK
ReadX 11125 0 4096 4096 NT_STATUS_OK
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 0 4096 4096 NT_STATUS_OK
Close 11126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11127 1004 NT_STATUS_OK
WriteX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11130 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11133 NT_STATUS_OK
WriteX 11133 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11133 258 NT_STATUS_OK
WriteX 11133 0 65536 65536 NT_STATUS_OK
WriteX 11133 65536 19490 19490 NT_STATUS_OK
Close 11133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
QUERY_FILE_INFORMATION 11134 1004 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
SET_FILE_INFORMATION 11134 1004 NT_STATUS_OK
WriteX 11134 0 4096 4096 NT_STATUS_OK
Flush 11134 NT_STATUS_OK
Close 11134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11135 NT_STATUS_OK
SET_FILE_INFORMATION 11135 1004 NT_STATUS_OK
Close 11135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11137 NT_STATUS_OK
Close 11137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11139 0 4096 4096 NT_STATUS_OK
Close 11139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
ReadX 11141 4096 4096 4096 NT_STATUS_OK
ReadX 11141 8192 4096 4096 NT_STATUS_OK
ReadX 11141 12288 4096 4096 NT_STATUS_OK
ReadX 11141 16384 4096 4096 NT_STATUS_OK
ReadX 11141 20480 4096 4096 NT_STATUS_OK
ReadX 11141 24576 4096 4096 NT_STATUS_OK
ReadX 11141 28672 4096 4096 NT_STATUS_OK
ReadX 11141 32768 4096 4096 NT_STATUS_OK
ReadX 11141 36864 4096 4096 NT_STATUS_OK
ReadX 11141 40960 4096 4096 NT_STATUS_OK
ReadX 11141 45056 4096 4096 NT_STATUS_OK
ReadX 11141 49152 4096 4096 NT_STATUS_OK
ReadX 11141 53248 4096 4096 NT_STATUS_OK
ReadX 11141 57344 4096 4096 NT_STATUS_OK
ReadX 11141 61440 4096 4096 NT_STATUS_OK
ReadX 11141 65536 4096 4096 NT_STATUS_OK
ReadX 11141 69632 4096 4096 NT_STATUS_OK
ReadX 11141 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11141 1004 NT_STATUS_OK
WriteX 11141 0 4096 4096 NT_STATUS_OK
Close 11141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11142 NT_STATUS_OK
SET_FILE_INFORMATION 11142 1004 NT_STATUS_OK
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11144 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11147 NT_STATUS_OK
WriteX 11147 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11147 258 NT_STATUS_OK
WriteX 11147 0 65536 65536 NT_STATUS_OK
WriteX 11147 65536 8866 8866 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11148 NT_STATUS_OK
ReadX 11148 0 4096 4096 NT_STATUS_OK
WriteX 11148 0 4096 4096 NT_STATUS_OK
Flush 11148 NT_STATUS_OK
SET_FILE_INFORMATION 11148 1004 NT_STATUS_OK
WriteX 11148 0 4096 4096 NT_STATUS_OK
Flush 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11150 NT_STATUS_OK
ReadX 11150 0 4096 4096 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11151 NT_STATUS_OK
ReadX 11151 0 4096 4096 NT_STATUS_OK
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11152 1004 NT_STATUS_OK
WriteX 11152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11153 NT_STATUS_OK
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11152 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11155 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11158 NT_STATUS_OK
WriteX 11158 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11158 258 NT_STATUS_OK
WriteX 11158 0 65536 65536 NT_STATUS_OK
WriteX 11158 65536 9298 9298 NT_STATUS_OK
Close 11158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
WriteX 11159 0 4096 4096 NT_STATUS_OK
Flush 11159 NT_STATUS_OK
SET_FILE_INFORMATION 11159 1004 NT_STATUS_OK
WriteX 11159 0 4096 4096 NT_STATUS_OK
Flush 11159 NT_STATUS_OK
Close 11159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11160 NT_STATUS_OK
SET_FILE_INFORMATION 11160 1004 NT_STATUS_OK
Close 11160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11165 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11165 0 4096 4096 NT_STATUS_OK
Close 11165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11166 4096 4096 4096 NT_STATUS_OK
ReadX 11166 8192 4096 4096 NT_STATUS_OK
ReadX 11166 12288 4096 4096 NT_STATUS_OK
ReadX 11166 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
Close 11167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
Close 11168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11169 1004 NT_STATUS_OK
WriteX 11169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11175 NT_STATUS_OK
WriteX 11175 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11175 258 NT_STATUS_OK
WriteX 11175 0 65536 65536 NT_STATUS_OK
WriteX 11175 65536 11540 11540 NT_STATUS_OK
Close 11175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 4096 4096 NT_STATUS_OK
WriteX 11176 0 4096 4096 NT_STATUS_OK
Flush 11176 NT_STATUS_OK
SET_FILE_INFORMATION 11176 1004 NT_STATUS_OK
WriteX 11176 0 4096 4096 NT_STATUS_OK
Flush 11176 NT_STATUS_OK
Close 11176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11177 NT_STATUS_OK
SET_FILE_INFORMATION 11177 1004 NT_STATUS_OK
Close 11177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 61440 4096 4096 NT_STATUS_OK
ReadX 11181 126976 4096 4096 NT_STATUS_OK
WriteX 11181 0 65536 65536 NT_STATUS_OK
WriteX 11181 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 61440 4096 4096 NT_STATUS_OK
ReadX 11182 126976 4096 4096 NT_STATUS_OK
ReadX 11182 192512 4096 4096 NT_STATUS_OK
ReadX 11182 258048 4096 4096 NT_STATUS_OK
WriteX 11182 0 65536 65536 NT_STATUS_OK
WriteX 11182 65536 65536 65536 NT_STATUS_OK
WriteX 11182 131072 65536 65536 NT_STATUS_OK
WriteX 11182 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 61440 4096 4096 NT_STATUS_OK
ReadX 11183 126976 4096 4096 NT_STATUS_OK
ReadX 11183 192512 4096 4096 NT_STATUS_OK
ReadX 11183 258048 4096 4096 NT_STATUS_OK
ReadX 11183 323584 4096 4096 NT_STATUS_OK
ReadX 11183 389120 4096 4096 NT_STATUS_OK
ReadX 11183 454656 4096 4096 NT_STATUS_OK
ReadX 11183 520192 4096 4096 NT_STATUS_OK
WriteX 11183 0 65536 65536 NT_STATUS_OK
WriteX 11183 65536 65536 65536 NT_STATUS_OK
WriteX 11183 131072 65536 65536 NT_STATUS_OK
WriteX 11183 196608 65536 65536 NT_STATUS_OK
WriteX 11183 262144 65536 65536 NT_STATUS_OK
WriteX 11183 327680 65536 65536 NT_STATUS_OK
WriteX 11183 393216 65536 65536 NT_STATUS_OK
WriteX 11183 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
ReadX 11184 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11185 NT_STATUS_OK
WriteX 11185 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11185 258 NT_STATUS_OK
WriteX 11185 0 53 53 NT_STATUS_OK
Close 11185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11184 8192 4096 4096 NT_STATUS_OK
ReadX 11184 12288 4096 4096 NT_STATUS_OK
WriteX 11188 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11188 258 NT_STATUS_OK
ReadX 11184 16384 4096 4096 NT_STATUS_OK
ReadX 11184 20480 4096 4096 NT_STATUS_OK
WriteX 11188 0 15360 15360 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11189 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11189 1004 NT_STATUS_OK
WriteX 11189 0 4096 4096 NT_STATUS_OK
Close 11189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11190 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11192 NT_STATUS_OK
ReadX 11192 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11192 4096 4096 4096 NT_STATUS_OK
ReadX 11192 8192 4096 4096 NT_STATUS_OK
ReadX 11192 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
ReadX 11195 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
ReadX 11196 4096 4096 4096 NT_STATUS_OK
ReadX 11196 8192 4096 4096 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11197 NT_STATUS_OK
WriteX 11197 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11197 258 NT_STATUS_OK
WriteX 11197 0 15360 15360 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11198 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11198 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11199 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11202 NT_STATUS_OK
SET_FILE_INFORMATION 11202 1004 NT_STATUS_OK
Close 11202 NT_STATUS_OK
WriteX 11198 0 4096 4096 NT_STATUS_OK
Close 11198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11203 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
ReadX 11205 4096 4096 4096 NT_STATUS_OK
ReadX 11205 8192 4096 4096 NT_STATUS_OK
ReadX 11205 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11206 NT_STATUS_OK
ReadX 11206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11207 NT_STATUS_OK
WriteX 11207 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11207 258 NT_STATUS_OK
WriteX 11207 0 53 53 NT_STATUS_OK
Close 11207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11208 NT_STATUS_OK
Close 11208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11206 4096 4096 4096 NT_STATUS_OK
ReadX 11206 8192 4096 4096 NT_STATUS_OK
ReadX 11206 12288 4096 4096 NT_STATUS_OK
WriteX 11210 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11210 258 NT_STATUS_OK
WriteX 11210 0 12006 12006 NT_STATUS_OK
Close 11210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11211 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11211 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
Close 11211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11212 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11214 4096 4096 4096 NT_STATUS_OK
ReadX 11214 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11217 NT_STATUS_OK
WriteX 11217 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 258 NT_STATUS_OK
WriteX 11217 0 11991 11991 NT_STATUS_OK
Close 11217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11218 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11218 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11221 NT_STATUS_OK
ReadX 11221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11222 NT_STATUS_OK
SET_FILE_INFORMATION 11222 1004 NT_STATUS_OK
Close 11222 NT_STATUS_OK
WriteX 11218 0 4096 4096 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11225 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11225 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
ReadX 11225 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
WriteX 11225 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11225 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
Close 11201 NT_STATUS_OK
WriteX 11205 0 19054 19054 NT_STATUS_OK
WriteX 11225 0 12288 12288 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11228 NT_STATUS_OK
Close 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11230 NT_STATUS_OK
Close 11230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 61440 61440 NT_STATUS_OK
ReadX 11232 61440 4096 4096 NT_STATUS_OK
ReadX 11232 65536 61440 61440 NT_STATUS_OK
ReadX 11232 126976 4096 4096 NT_STATUS_OK
ReadX 11232 131072 61440 61440 NT_STATUS_OK
ReadX 11232 192512 4096 4096 NT_STATUS_OK
ReadX 11232 196608 61440 61440 NT_STATUS_OK
ReadX 11232 258048 4096 4096 NT_STATUS_OK
ReadX 11232 262144 61440 61440 NT_STATUS_OK
ReadX 11232 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 61440 61440 NT_STATUS_OK
ReadX 11233 61440 4096 4096 NT_STATUS_OK
ReadX 11233 65536 61440 61440 NT_STATUS_OK
ReadX 11233 126976 4096 4096 NT_STATUS_OK
ReadX 11233 131072 61440 61440 NT_STATUS_OK
ReadX 11233 192512 4096 4096 NT_STATUS_OK
ReadX 11233 196608 61440 61440 NT_STATUS_OK
ReadX 11233 258048 4096 4096 NT_STATUS_OK
ReadX 11233 262144 61440 61440 NT_STATUS_OK
ReadX 11233 323584 4096 4096 NT_STATUS_OK
ReadX 11233 327680 61440 61440 NT_STATUS_OK
ReadX 11233 389120 4096 4096 NT_STATUS_OK
ReadX 11233 393216 61440 61440 NT_STATUS_OK
ReadX 11233 454656 4096 4096 NT_STATUS_OK
ReadX 11233 458752 61440 61440 NT_STATUS_OK
ReadX 11233 520192 4096 4096 NT_STATUS_OK
ReadX 11233 524288 61440 61440 NT_STATUS_OK
ReadX 11233 585728 4096 4096 NT_STATUS_OK
ReadX 11233 589824 61440 61440 NT_STATUS_OK
ReadX 11233 651264 4096 4096 NT_STATUS_OK
ReadX 11233 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11234 NT_STATUS_OK
ReadX 11234 0 61440 61440 NT_STATUS_OK
ReadX 11234 61440 4096 4096 NT_STATUS_OK
ReadX 11234 65536 61440 61440 NT_STATUS_OK
ReadX 11234 126976 4096 4096 NT_STATUS_OK
ReadX 11234 131072 61440 61440 NT_STATUS_OK
ReadX 11234 192512 4096 4096 NT_STATUS_OK
ReadX 11234 196608 61440 61440 NT_STATUS_OK
ReadX 11234 258048 4096 4096 NT_STATUS_OK
ReadX 11234 262144 61440 61440 NT_STATUS_OK
ReadX 11234 323584 4096 4096 NT_STATUS_OK
ReadX 11234 327680 61440 61440 NT_STATUS_OK
ReadX 11234 389120 4096 4096 NT_STATUS_OK
ReadX 11234 393216 61440 61440 NT_STATUS_OK
ReadX 11234 454656 4096 4096 NT_STATUS_OK
ReadX 11234 458752 61440 61440 NT_STATUS_OK
ReadX 11234 520192 4096 4096 NT_STATUS_OK
ReadX 11234 524288 61440 61440 NT_STATUS_OK
ReadX 11234 585728 4096 4096 NT_STATUS_OK
ReadX 11234 589824 61440 61440 NT_STATUS_OK
ReadX 11234 651264 4096 4096 NT_STATUS_OK
ReadX 11234 655360 61440 61440 NT_STATUS_OK
ReadX 11234 716800 4096 4096 NT_STATUS_OK
ReadX 11234 720896 61440 61440 NT_STATUS_OK
ReadX 11234 782336 4096 4096 NT_STATUS_OK
ReadX 11234 786432 61440 61440 NT_STATUS_OK
ReadX 11234 847872 4096 4096 NT_STATUS_OK
ReadX 11234 851968 61440 61440 NT_STATUS_OK
ReadX 11234 913408 4096 4096 NT_STATUS_OK
ReadX 11234 917504 61440 61440 NT_STATUS_OK
ReadX 11234 978944 4096 4096 NT_STATUS_OK
ReadX 11234 983040 61440 61440 NT_STATUS_OK
ReadX 11234 1044480 4096 4096 NT_STATUS_OK
ReadX 11234 1048576 61440 61440 NT_STATUS_OK
ReadX 11234 1110016 4096 4096 NT_STATUS_OK
ReadX 11234 1114112 61440 61440 NT_STATUS_OK
ReadX 11234 1175552 4096 4096 NT_STATUS_OK
ReadX 11234 1179648 61440 61440 NT_STATUS_OK
ReadX 11234 1241088 4096 4096 NT_STATUS_OK
ReadX 11234 1245184 61440 61440 NT_STATUS_OK
ReadX 11234 1306624 4096 4096 NT_STATUS_OK
ReadX 11234 1310720 61440 61440 NT_STATUS_OK
ReadX 11234 1372160 4096 4096 NT_STATUS_OK
ReadX 11234 1376256 61440 61440 NT_STATUS_OK
ReadX 11234 1437696 4096 4096 NT_STATUS_OK
ReadX 11234 1441792 61440 61440 NT_STATUS_OK
ReadX 11234 1503232 4096 4096 NT_STATUS_OK
ReadX 11234 1507328 61440 61440 NT_STATUS_OK
ReadX 11234 1568768 4096 4096 NT_STATUS_OK
ReadX 11234 1572864 61440 61440 NT_STATUS_OK
ReadX 11234 1634304 4096 4096 NT_STATUS_OK
ReadX 11234 1638400 61440 61440 NT_STATUS_OK
ReadX 11234 1699840 4096 4096 NT_STATUS_OK
ReadX 11234 1703936 61440 61440 NT_STATUS_OK
ReadX 11234 1765376 4096 4096 NT_STATUS_OK
ReadX 11234 1769472 61440 61440 NT_STATUS_OK
ReadX 11234 1830912 4096 4096 NT_STATUS_OK
ReadX 11234 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11241 NT_STATUS_OK
QUERY_FILE_INFORMATION 11241 1004 NT_STATUS_OK
WriteX 11241 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11241 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11242 NT_STATUS_OK
Close 11242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11243 NT_STATUS_OK
WriteX 11243 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11243 258 NT_STATUS_OK
WriteX 11243 0 491 491 NT_STATUS_OK
Close 11243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11241 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11247 NT_STATUS_OK
WriteX 11247 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 258 NT_STATUS_OK
WriteX 11247 0 543 543 NT_STATUS_OK
Close 11247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11232 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11236 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11252 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11253 NT_STATUS_OK
ReadX 11253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11255 NT_STATUS_OK
ReadX 11255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11261 NT_STATUS_OK
QUERY_FILE_INFORMATION 11261 1004 NT_STATUS_OK
WriteX 11261 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11261 258 NT_STATUS_OK
WriteX 11261 0 2048 2048 NT_STATUS_OK
Close 11261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11262 0 4096 4096 NT_STATUS_OK
Flush 11262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11262 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11267 NT_STATUS_OK
WriteX 11267 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 258 NT_STATUS_OK
WriteX 11267 0 2048 2048 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11273 NT_STATUS_OK
WriteX 11273 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11273 258 NT_STATUS_OK
WriteX 11273 0 2048 2048 NT_STATUS_OK
Close 11273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 2048 2048 NT_STATUS_OK
ReadX 11252 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
WriteX 11252 0 8192 8192 NT_STATUS_OK
WriteX 11253 0 4096 4096 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11278 NT_STATUS_OK
QUERY_FILE_INFORMATION 11278 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Close 11254 NT_STATUS_OK
Close 11255 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Close 11252 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11282 NT_STATUS_OK
ReadX 11282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11283 NT_STATUS_OK
ReadX 11283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11288 NT_STATUS_OK
ReadX 11288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11289 NT_STATUS_OK
ReadX 11289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11290 NT_STATUS_OK
ReadX 11290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11292 NT_STATUS_OK
ReadX 11292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11298 NT_STATUS_OK
QUERY_FILE_INFORMATION 11298 1004 NT_STATUS_OK
WriteX 11298 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11298 258 NT_STATUS_OK
WriteX 11298 0 2048 2048 NT_STATUS_OK
Close 11298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11299 NT_STATUS_OK
ReadX 11299 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11300 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11301 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11301 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11305 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11306 NT_STATUS_OK
QUERY_FILE_INFORMATION 11306 1004 NT_STATUS_OK
WriteX 11306 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11306 258 NT_STATUS_OK
WriteX 11306 0 2048 2048 NT_STATUS_OK
Close 11306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11299 0 4096 4096 NT_STATUS_OK
Flush 11299 NT_STATUS_OK
WriteX 11307 0 4096 4096 NT_STATUS_OK
Flush 11307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11299 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11307 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11301 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11308 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11309 NT_STATUS_OK
WriteX 11309 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11309 258 NT_STATUS_OK
WriteX 11309 0 4096 4096 NT_STATUS_OK
Close 11309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11311 NT_STATUS_OK
Close 11311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11312 NT_STATUS_OK
WriteX 11312 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11312 258 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11313 NT_STATUS_OK
ReadX 11313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11313 0 4096 4096 NT_STATUS_OK
Close 11310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11293 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Close 11301 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Close 11291 NT_STATUS_OK
Close 11292 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11282 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11286 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11316 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11318 NT_STATUS_OK
ReadX 11318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11320 NT_STATUS_OK
WriteX 11320 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11320 258 NT_STATUS_OK
WriteX 11320 0 2048 2048 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11321 NT_STATUS_OK
ReadX 11321 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11323 NT_STATUS_OK
ReadX 11323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11324 NT_STATUS_OK
ReadX 11324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11325 NT_STATUS_OK
ReadX 11325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11333 NT_STATUS_OK
ReadX 11333 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11334 NT_STATUS_OK
ReadX 11334 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11335 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11318 NT_STATUS_OK
Close 11321 NT_STATUS_OK
Close 11333 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Close 11330 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Close 11334 NT_STATUS_OK
Close 11322 NT_STATUS_OK
Close 11323 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Close 11324 NT_STATUS_OK
Close 11325 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11337 NT_STATUS_OK
QUERY_FILE_INFORMATION 11337 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11339 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11340 NT_STATUS_OK
ReadX 11340 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11342 NT_STATUS_OK
ReadX 11342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11346 NT_STATUS_OK
ReadX 11346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11347 NT_STATUS_OK
ReadX 11347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11348 NT_STATUS_OK
ReadX 11348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11349 NT_STATUS_OK
ReadX 11349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11351 NT_STATUS_OK
ReadX 11351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11357 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 1004 NT_STATUS_OK
WriteX 11357 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 258 NT_STATUS_OK
WriteX 11357 0 2048 2048 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11359 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11362 NT_STATUS_OK
ReadX 11362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11363 NT_STATUS_OK
ReadX 11363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11369 NT_STATUS_OK
QUERY_FILE_INFORMATION 11369 1004 NT_STATUS_OK
WriteX 11369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11369 258 NT_STATUS_OK
WriteX 11369 0 2048 2048 NT_STATUS_OK
Close 11369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11371 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11372 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11377 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 1004 NT_STATUS_OK
WriteX 11377 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 258 NT_STATUS_OK
WriteX 11377 0 2048 2048 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
Flush 11358 NT_STATUS_OK
WriteX 11370 0 4096 4096 NT_STATUS_OK
Flush 11370 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11370 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11360 4096 16384 16384 NT_STATUS_OK
ReadX 11340 4096 16384 16384 NT_STATUS_OK
ReadX 11372 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11380 NT_STATUS_OK
ReadX 11380 0 2048 2048 NT_STATUS_OK
WriteX 11380 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11381 NT_STATUS_OK
QUERY_FILE_INFORMATION 11381 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11380 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Close 11360 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Close 11362 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Close 11372 NT_STATUS_OK
Close 11346 NT_STATUS_OK
Close 11349 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Close 11347 NT_STATUS_OK
Close 11348 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11383 NT_STATUS_OK
QUERY_FILE_INFORMATION 11383 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11385 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11388 NT_STATUS_OK
ReadX 11388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11389 NT_STATUS_OK
ReadX 11389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11390 NT_STATUS_OK
ReadX 11390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11388 4096 16384 16384 NT_STATUS_OK
WriteX 11388 0 4096 4096 NT_STATUS_OK
WriteX 11389 0 4096 4096 NT_STATUS_OK
WriteX 11390 0 4096 4096 NT_STATUS_OK
WriteX 11391 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11395 NT_STATUS_OK
ReadX 11395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11397 NT_STATUS_OK
ReadX 11397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11400 NT_STATUS_OK
ReadX 11400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11401 NT_STATUS_OK
ReadX 11401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11402 NT_STATUS_OK
ReadX 11402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11403 NT_STATUS_OK
ReadX 11403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11405 NT_STATUS_OK
ReadX 11405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 8192 8192 NT_STATUS_OK
ReadX 11394 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11408 0 4096 4096 NT_STATUS_OK
ReadX 11408 4096 4096 4096 NT_STATUS_OK
ReadX 11408 8192 4096 4096 NT_STATUS_OK
WriteX 11394 0 4096 4096 NT_STATUS_OK
WriteX 11395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
ReadX 11409 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11388 0 4096 4096 NT_STATUS_OK
WriteX 11389 0 4096 4096 NT_STATUS_OK
WriteX 11390 0 4096 4096 NT_STATUS_OK
WriteX 11391 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11414 NT_STATUS_OK
QUERY_FILE_INFORMATION 11414 1004 NT_STATUS_OK
WriteX 11414 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11414 258 NT_STATUS_OK
WriteX 11414 0 2048 2048 NT_STATUS_OK
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11415 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 0 4096 4096 NT_STATUS_OK
ReadX 11417 4096 4096 4096 NT_STATUS_OK
WriteX 11417 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11419 NT_STATUS_OK
ReadX 11419 0 4096 4096 NT_STATUS_OK
ReadX 11419 4096 4096 4096 NT_STATUS_OK
WriteX 11419 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11420 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11407 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11388 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Close 11391 NT_STATUS_OK
Close 11400 NT_STATUS_OK
Close 11405 NT_STATUS_OK
Close 11401 NT_STATUS_OK
Close 11402 NT_STATUS_OK
Close 11403 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Close 11406 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11395 NT_STATUS_OK
Close 11398 NT_STATUS_OK
Close 11399 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11397 NT_STATUS_OK
Close 11419 NT_STATUS_OK
Close 11408 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11422 0 4096 4096 NT_STATUS_OK
ReadX 11422 4096 4096 4096 NT_STATUS_OK
ReadX 11422 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11424 NT_STATUS_OK
ReadX 11424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11425 NT_STATUS_OK
ReadX 11425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11426 NT_STATUS_OK
ReadX 11426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11427 NT_STATUS_OK
ReadX 11427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11433 NT_STATUS_OK
ReadX 11433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11435 NT_STATUS_OK
ReadX 11435 0 4096 4096 NT_STATUS_OK
ReadX 11423 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11440 NT_STATUS_OK
QUERY_FILE_INFORMATION 11440 1004 NT_STATUS_OK
WriteX 11440 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11440 258 NT_STATUS_OK
WriteX 11440 0 2048 2048 NT_STATUS_OK
Close 11440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11441 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11446 NT_STATUS_OK
QUERY_FILE_INFORMATION 11446 1004 NT_STATUS_OK
WriteX 11446 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11446 258 NT_STATUS_OK
WriteX 11446 0 2048 2048 NT_STATUS_OK
Close 11446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11447 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11430 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11441 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11448 NT_STATUS_OK
QUERY_FILE_INFORMATION 11448 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11434 NT_STATUS_OK
Close 11429 NT_STATUS_OK
Close 11435 NT_STATUS_OK
Close 11423 NT_STATUS_OK
Close 11424 NT_STATUS_OK
Close 11427 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11425 NT_STATUS_OK
Close 11426 NT_STATUS_OK
Close 11430 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Close 11433 NT_STATUS_OK
Close 11422 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11450 NT_STATUS_OK
QUERY_FILE_INFORMATION 11450 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 61440 4096 4096 NT_STATUS_OK
ReadX 11452 126976 4096 4096 NT_STATUS_OK
WriteX 11452 0 65536 65536 NT_STATUS_OK
WriteX 11452 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 61440 4096 4096 NT_STATUS_OK
ReadX 11453 126976 4096 4096 NT_STATUS_OK
ReadX 11453 192512 4096 4096 NT_STATUS_OK
ReadX 11453 258048 4096 4096 NT_STATUS_OK
WriteX 11453 0 65536 65536 NT_STATUS_OK
WriteX 11453 65536 65536 65536 NT_STATUS_OK
WriteX 11453 131072 65536 65536 NT_STATUS_OK
WriteX 11453 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 61440 4096 4096 NT_STATUS_OK
ReadX 11454 126976 4096 4096 NT_STATUS_OK
ReadX 11454 192512 4096 4096 NT_STATUS_OK
ReadX 11454 258048 4096 4096 NT_STATUS_OK
ReadX 11454 323584 4096 4096 NT_STATUS_OK
ReadX 11454 389120 4096 4096 NT_STATUS_OK
ReadX 11454 454656 4096 4096 NT_STATUS_OK
ReadX 11454 520192 4096 4096 NT_STATUS_OK
WriteX 11454 0 65536 65536 NT_STATUS_OK
WriteX 11454 65536 65536 65536 NT_STATUS_OK
WriteX 11454 131072 65536 65536 NT_STATUS_OK
WriteX 11454 196608 65536 65536 NT_STATUS_OK
WriteX 11454 262144 65536 65536 NT_STATUS_OK
WriteX 11454 327680 65536 65536 NT_STATUS_OK
WriteX 11454 393216 65536 65536 NT_STATUS_OK
WriteX 11454 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11455 NT_STATUS_OK
ReadX 11455 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11455 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11455 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11455 8192 4096 4096 NT_STATUS_OK
ReadX 11455 12288 4096 4096 NT_STATUS_OK
ReadX 11455 16384 4096 4096 NT_STATUS_OK
ReadX 11455 20480 4096 4096 NT_STATUS_OK
ReadX 11455 24576 4096 4096 NT_STATUS_OK
ReadX 11455 28672 4096 4096 NT_STATUS_OK
ReadX 11455 32768 4096 4096 NT_STATUS_OK
ReadX 11455 36864 4096 4096 NT_STATUS_OK
ReadX 11455 40960 4096 4096 NT_STATUS_OK
ReadX 11455 45056 4096 4096 NT_STATUS_OK
ReadX 11455 49152 4096 4096 NT_STATUS_OK
ReadX 11455 53248 4096 4096 NT_STATUS_OK
ReadX 11455 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11455 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11456 NT_STATUS_OK
Close 11456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Close 11454 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11458 NT_STATUS_OK
WriteX 11458 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11458 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11458 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11458 1004 NT_STATUS_OK
WriteX 11458 0 57088 57088 NT_STATUS_OK
WriteX 11458 0 4096 4096 NT_STATUS_OK
Flush 11458 NT_STATUS_OK
Close 11455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11459 NT_STATUS_OK
SET_FILE_INFORMATION 11459 1004 NT_STATUS_OK
Close 11459 NT_STATUS_OK
SET_FILE_INFORMATION 11458 1004 NT_STATUS_OK
WriteX 11458 0 4096 4096 NT_STATUS_OK
Close 11458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11460 NT_STATUS_OK
Close 11460 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11462 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11463 NT_STATUS_OK
WriteX 11463 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11463 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11463 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
WriteX 11463 0 51456 51456 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Flush 11463 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Close 11463 NT_STATUS_OK
Close 11462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11465 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11467 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11472 NT_STATUS_OK
WriteX 11472 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 53077 53077 NT_STATUS_OK
Close 11472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11473 NT_STATUS_OK
WriteX 11473 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11473 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11473 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 65536 65536 NT_STATUS_OK
WriteX 11473 65536 1856 1856 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11475 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11477 NT_STATUS_OK
ReadX 11477 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11482 NT_STATUS_OK
WriteX 11482 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11482 258 NT_STATUS_OK
WriteX 11482 0 7983 7983 NT_STATUS_OK
Close 11482 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11487 NT_STATUS_OK
WriteX 11487 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11487 258 NT_STATUS_OK
WriteX 11487 0 65536 65536 NT_STATUS_OK
WriteX 11487 65536 65536 65536 NT_STATUS_OK
WriteX 11487 131072 65536 65536 NT_STATUS_OK
WriteX 11487 196608 65536 65536 NT_STATUS_OK
WriteX 11487 262144 65536 65536 NT_STATUS_OK
WriteX 11487 327680 65536 65536 NT_STATUS_OK
WriteX 11487 393216 65536 65536 NT_STATUS_OK
WriteX 11487 458752 46731 46731 NT_STATUS_OK
Close 11487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11488 NT_STATUS_OK
WriteX 11488 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11477 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 65536 65536 NT_STATUS_OK
WriteX 11488 65536 22848 22848 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Close 11488 NT_STATUS_OK
Close 11477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11490 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11492 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11493 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11493 1004 NT_STATUS_OK
ReadX 11493 8192 4096 4096 NT_STATUS_OK
ReadX 11493 12288 4096 4096 NT_STATUS_OK
ReadX 11493 16384 4096 4096 NT_STATUS_OK
ReadX 11493 20480 4096 4096 NT_STATUS_OK
ReadX 11493 24576 4096 4096 NT_STATUS_OK
ReadX 11493 28672 4096 4096 NT_STATUS_OK
ReadX 11493 32768 4096 4096 NT_STATUS_OK
ReadX 11493 36864 4096 4096 NT_STATUS_OK
ReadX 11493 40960 4096 4096 NT_STATUS_OK
ReadX 11493 45056 4096 4096 NT_STATUS_OK
ReadX 11493 49152 4096 4096 NT_STATUS_OK
ReadX 11493 53248 4096 4096 NT_STATUS_OK
ReadX 11493 57344 4096 4096 NT_STATUS_OK
ReadX 11493 61440 4096 4096 NT_STATUS_OK
ReadX 11493 65536 4096 4096 NT_STATUS_OK
ReadX 11493 69632 4096 4096 NT_STATUS_OK
ReadX 11493 73728 4096 4096 NT_STATUS_OK
ReadX 11493 77824 4096 4096 NT_STATUS_OK
ReadX 11493 81920 4096 4096 NT_STATUS_OK
ReadX 11493 86016 4096 4096 NT_STATUS_OK
ReadX 11493 90112 4096 4096 NT_STATUS_OK
ReadX 11493 94208 4096 4096 NT_STATUS_OK
ReadX 11493 98304 4096 4096 NT_STATUS_OK
ReadX 11493 102400 4096 4096 NT_STATUS_OK
ReadX 11493 106496 4096 4096 NT_STATUS_OK
ReadX 11493 110592 4096 4096 NT_STATUS_OK
ReadX 11493 114688 4096 4096 NT_STATUS_OK
ReadX 11493 118784 4096 4096 NT_STATUS_OK
ReadX 11493 122880 4096 4096 NT_STATUS_OK
ReadX 11493 126976 4096 4096 NT_STATUS_OK
ReadX 11493 131072 4096 4096 NT_STATUS_OK
ReadX 11493 135168 4096 4096 NT_STATUS_OK
ReadX 11493 139264 4096 4096 NT_STATUS_OK
ReadX 11493 143360 4096 4096 NT_STATUS_OK
ReadX 11493 147456 4096 4096 NT_STATUS_OK
ReadX 11493 151552 4096 4096 NT_STATUS_OK
ReadX 11493 155648 4096 4096 NT_STATUS_OK
ReadX 11493 159744 4096 4096 NT_STATUS_OK
ReadX 11493 163840 4096 4096 NT_STATUS_OK
ReadX 11493 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11493 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11496 NT_STATUS_OK
WriteX 11496 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11496 258 NT_STATUS_OK
Close 11493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11497 NT_STATUS_OK
SET_FILE_INFORMATION 11497 1004 NT_STATUS_OK
Close 11497 NT_STATUS_OK
WriteX 11496 0 42388 42388 NT_STATUS_OK
Close 11496 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
ReadX 11500 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11501 NT_STATUS_OK
WriteX 11501 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11501 258 NT_STATUS_OK
SET_FILE_INFORMATION 11501 1004 NT_STATUS_OK
WriteX 11501 0 42652 42652 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11503 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
ReadX 11505 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11510 NT_STATUS_OK
WriteX 11510 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11510 258 NT_STATUS_OK
WriteX 11510 0 65536 65536 NT_STATUS_OK
WriteX 11510 65536 49 49 NT_STATUS_OK
Close 11510 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 61440 61440 NT_STATUS_OK
ReadX 11511 61440 4096 4096 NT_STATUS_OK
ReadX 11511 65536 61440 61440 NT_STATUS_OK
ReadX 11511 126976 4096 4096 NT_STATUS_OK
ReadX 11511 131072 61440 61440 NT_STATUS_OK
ReadX 11511 192512 4096 4096 NT_STATUS_OK
ReadX 11511 196608 61440 61440 NT_STATUS_OK
ReadX 11511 258048 4096 4096 NT_STATUS_OK
ReadX 11511 262144 61440 61440 NT_STATUS_OK
ReadX 11511 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 61440 61440 NT_STATUS_OK
ReadX 11512 61440 4096 4096 NT_STATUS_OK
ReadX 11512 65536 61440 61440 NT_STATUS_OK
ReadX 11512 126976 4096 4096 NT_STATUS_OK
ReadX 11512 131072 61440 61440 NT_STATUS_OK
ReadX 11512 192512 4096 4096 NT_STATUS_OK
ReadX 11512 196608 61440 61440 NT_STATUS_OK
ReadX 11512 258048 4096 4096 NT_STATUS_OK
ReadX 11512 262144 61440 61440 NT_STATUS_OK
ReadX 11512 323584 4096 4096 NT_STATUS_OK
ReadX 11512 327680 61440 61440 NT_STATUS_OK
ReadX 11512 389120 4096 4096 NT_STATUS_OK
ReadX 11512 393216 61440 61440 NT_STATUS_OK
ReadX 11512 454656 4096 4096 NT_STATUS_OK
ReadX 11512 458752 61440 61440 NT_STATUS_OK
ReadX 11512 520192 4096 4096 NT_STATUS_OK
ReadX 11512 524288 61440 61440 NT_STATUS_OK
ReadX 11512 585728 4096 4096 NT_STATUS_OK
ReadX 11512 589824 61440 61440 NT_STATUS_OK
ReadX 11512 651264 4096 4096 NT_STATUS_OK
ReadX 11512 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 61440 61440 NT_STATUS_OK
ReadX 11513 61440 4096 4096 NT_STATUS_OK
ReadX 11513 65536 61440 61440 NT_STATUS_OK
ReadX 11513 126976 4096 4096 NT_STATUS_OK
ReadX 11513 131072 61440 61440 NT_STATUS_OK
ReadX 11513 192512 4096 4096 NT_STATUS_OK
ReadX 11513 196608 61440 61440 NT_STATUS_OK
ReadX 11513 258048 4096 4096 NT_STATUS_OK
ReadX 11513 262144 61440 61440 NT_STATUS_OK
ReadX 11513 323584 4096 4096 NT_STATUS_OK
ReadX 11513 327680 61440 61440 NT_STATUS_OK
ReadX 11513 389120 4096 4096 NT_STATUS_OK
ReadX 11513 393216 61440 61440 NT_STATUS_OK
ReadX 11513 454656 4096 4096 NT_STATUS_OK
ReadX 11513 458752 61440 61440 NT_STATUS_OK
ReadX 11513 520192 4096 4096 NT_STATUS_OK
ReadX 11513 524288 61440 61440 NT_STATUS_OK
ReadX 11513 585728 4096 4096 NT_STATUS_OK
ReadX 11513 589824 61440 61440 NT_STATUS_OK
ReadX 11513 651264 4096 4096 NT_STATUS_OK
ReadX 11513 655360 61440 61440 NT_STATUS_OK
ReadX 11513 716800 4096 4096 NT_STATUS_OK
ReadX 11513 720896 61440 61440 NT_STATUS_OK
ReadX 11513 782336 4096 4096 NT_STATUS_OK
ReadX 11513 786432 61440 61440 NT_STATUS_OK
ReadX 11513 847872 4096 4096 NT_STATUS_OK
ReadX 11513 851968 61440 61440 NT_STATUS_OK
ReadX 11513 913408 4096 4096 NT_STATUS_OK
ReadX 11513 917504 61440 61440 NT_STATUS_OK
ReadX 11513 978944 4096 4096 NT_STATUS_OK
ReadX 11513 983040 61440 61440 NT_STATUS_OK
ReadX 11513 1044480 4096 4096 NT_STATUS_OK
ReadX 11513 1048576 61440 61440 NT_STATUS_OK
ReadX 11513 1110016 4096 4096 NT_STATUS_OK
ReadX 11513 1114112 61440 61440 NT_STATUS_OK
ReadX 11513 1175552 4096 4096 NT_STATUS_OK
ReadX 11513 1179648 61440 61440 NT_STATUS_OK
ReadX 11513 1241088 4096 4096 NT_STATUS_OK
ReadX 11513 1245184 61440 61440 NT_STATUS_OK
ReadX 11513 1306624 4096 4096 NT_STATUS_OK
ReadX 11513 1310720 61440 61440 NT_STATUS_OK
ReadX 11513 1372160 4096 4096 NT_STATUS_OK
ReadX 11513 1376256 61440 61440 NT_STATUS_OK
ReadX 11513 1437696 4096 4096 NT_STATUS_OK
ReadX 11513 1441792 61440 61440 NT_STATUS_OK
ReadX 11513 1503232 4096 4096 NT_STATUS_OK
ReadX 11513 1507328 61440 61440 NT_STATUS_OK
ReadX 11513 1568768 4096 4096 NT_STATUS_OK
ReadX 11513 1572864 61440 61440 NT_STATUS_OK
ReadX 11513 1634304 4096 4096 NT_STATUS_OK
ReadX 11513 1638400 61440 61440 NT_STATUS_OK
ReadX 11513 1699840 4096 4096 NT_STATUS_OK
ReadX 11513 1703936 61440 61440 NT_STATUS_OK
ReadX 11513 1765376 4096 4096 NT_STATUS_OK
ReadX 11513 1769472 61440 61440 NT_STATUS_OK
ReadX 11513 1830912 4096 4096 NT_STATUS_OK
ReadX 11513 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11515 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11515 1005 NT_STATUS_OK
ReadX 11515 2156 24 24 NT_STATUS_OK
ReadX 11515 2139 276 276 NT_STATUS_OK
ReadX 11515 2136 14 14 NT_STATUS_OK
ReadX 11515 2136 7 7 NT_STATUS_OK
ReadX 11515 2138 12 12 NT_STATUS_OK
ReadX 11515 2137 8 8 NT_STATUS_OK
ReadX 11515 2135 15 15 NT_STATUS_OK
ReadX 11515 0 16 16 NT_STATUS_OK
ReadX 11515 16 2048 2048 NT_STATUS_OK
ReadX 11515 2064 2048 2048 NT_STATUS_OK
ReadX 11515 257 2048 2048 NT_STATUS_OK
ReadX 11515 385 2048 2048 NT_STATUS_OK
ReadX 11515 513 2048 2048 NT_STATUS_OK
ReadX 11515 641 2048 2048 NT_STATUS_OK
ReadX 11515 769 2048 2048 NT_STATUS_OK
ReadX 11515 897 2048 2048 NT_STATUS_OK
ReadX 11515 1025 2048 2048 NT_STATUS_OK
ReadX 11515 1153 2048 2048 NT_STATUS_OK
ReadX 11515 1281 2048 2048 NT_STATUS_OK
ReadX 11515 1409 2048 2048 NT_STATUS_OK
ReadX 11515 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11511 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11512 NT_STATUS_OK
Close 11513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11520 NT_STATUS_OK
WriteX 11520 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11520 258 NT_STATUS_OK
WriteX 11520 0 10575 10575 NT_STATUS_OK
Flush 11520 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11521 NT_STATUS_OK
Close 11521 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11525 NT_STATUS_OK
LockX 11525 2147483538 1 NT_STATUS_OK
UnlockX 11525 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1005 NT_STATUS_OK
ReadX 11525 0 512 512 NT_STATUS_OK
ReadX 11525 512 512 512 NT_STATUS_OK
ReadX 11525 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11525 1004 NT_STATUS_OK
Close 11525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11526 NT_STATUS_OK
QUERY_FILE_INFORMATION 11526 1005 NT_STATUS_OK
ReadX 11526 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11527 NT_STATUS_OK
LockX 11527 2147483538 1 NT_STATUS_OK
UnlockX 11527 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11527 1005 NT_STATUS_OK
ReadX 11527 0 512 512 NT_STATUS_OK
ReadX 11527 512 512 512 NT_STATUS_OK
ReadX 11527 1024 512 512 NT_STATUS_OK
ReadX 11527 288 20 20 NT_STATUS_OK
ReadX 11527 308 2084 2084 NT_STATUS_OK
ReadX 11527 388 2084 2084 NT_STATUS_OK
ReadX 11527 388 2084 2084 NT_STATUS_OK
ReadX 11514 2157 1386 1386 NT_STATUS_OK
ReadX 11527 2472 399 399 NT_STATUS_OK
ReadX 11527 3072 1536 1536 NT_STATUS_OK
ReadX 11527 544 149 149 NT_STATUS_OK
ReadX 11527 693 485 485 NT_STATUS_OK
Close 11527 NT_STATUS_OK
ReadX 11514 2157 4096 4096 NT_STATUS_OK
ReadX 11514 6253 4096 4096 NT_STATUS_OK
ReadX 11514 10349 4096 4096 NT_STATUS_OK
ReadX 11514 14445 4096 4096 NT_STATUS_OK
ReadX 11514 18541 4096 4096 NT_STATUS_OK
ReadX 11514 22637 256 256 NT_STATUS_OK
ReadX 11514 22893 4096 4096 NT_STATUS_OK
ReadX 11514 26989 4096 4096 NT_STATUS_OK
ReadX 11514 31085 4096 4096 NT_STATUS_OK
ReadX 11514 35181 4096 4096 NT_STATUS_OK
ReadX 11514 39277 4096 4096 NT_STATUS_OK
ReadX 11514 43373 4096 4096 NT_STATUS_OK
ReadX 11514 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11514 2157 1024 1024 NT_STATUS_OK
ReadX 11514 1667 4688 4688 NT_STATUS_OK
ReadX 11514 6355 3516 3516 NT_STATUS_OK
ReadX 11514 9871 16384 16384 NT_STATUS_OK
ReadX 11514 26255 3771 3771 NT_STATUS_OK
ReadX 11514 30026 2048 2048 NT_STATUS_OK
ReadX 11514 32074 1024 1024 NT_STATUS_OK
ReadX 11514 33098 6652 6652 NT_STATUS_OK
ReadX 11514 39750 16384 16384 NT_STATUS_OK
ReadX 11514 56134 10496 10496 NT_STATUS_OK
ReadX 11514 66630 1784 1784 NT_STATUS_OK
ReadX 11514 68414 90 90 NT_STATUS_OK
ReadX 11514 68504 273 273 NT_STATUS_OK
ReadX 11514 68777 1600 1600 NT_STATUS_OK
ReadX 11514 70377 640 640 NT_STATUS_OK
ReadX 11514 71017 1280 1280 NT_STATUS_OK
ReadX 11514 72297 8464 8464 NT_STATUS_OK
ReadX 11514 80761 158 158 NT_STATUS_OK
ReadX 11514 80919 912 912 NT_STATUS_OK
ReadX 11514 81831 1980 1980 NT_STATUS_OK
ReadX 11514 83811 2256 2256 NT_STATUS_OK
ReadX 11514 86067 400 400 NT_STATUS_OK
ReadX 11514 86467 252 252 NT_STATUS_OK
ReadX 11514 86719 42 42 NT_STATUS_OK
ReadX 11514 86761 725 725 NT_STATUS_OK
ReadX 11514 2009 512 512 NT_STATUS_OK
ReadX 11514 3895 9 9 NT_STATUS_OK
ReadX 11514 3781 46 46 NT_STATUS_OK
ReadX 11514 4059 92 92 NT_STATUS_OK
ReadX 11514 3781 92 92 NT_STATUS_OK
ReadX 11514 3986 184 184 NT_STATUS_OK
ReadX 11514 3987 16384 16384 NT_STATUS_OK
ReadX 11514 3902 16384 16384 NT_STATUS_OK
ReadX 11514 3781 10240 10240 NT_STATUS_OK
ReadX 11514 3821 16384 16384 NT_STATUS_OK
ReadX 11514 3891 935 935 NT_STATUS_OK
ReadX 11514 4060 10240 10240 NT_STATUS_OK
ReadX 11514 4059 184 184 NT_STATUS_OK
ReadX 11514 256 184 184 NT_STATUS_OK
ReadX 11514 256 1026 1026 NT_STATUS_OK
ReadX 11514 3901 326 326 NT_STATUS_OK
ReadX 11514 3899 652 652 NT_STATUS_OK
ReadX 11514 256 2 2 NT_STATUS_OK
ReadX 11514 258 4948 4948 NT_STATUS_OK
Close 11514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11532 NT_STATUS_OK
WriteX 11532 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11532 258 NT_STATUS_OK
WriteX 11532 0 65536 65536 NT_STATUS_OK
WriteX 11532 65536 65536 65536 NT_STATUS_OK
WriteX 11532 131072 65536 65536 NT_STATUS_OK
WriteX 11532 196608 65536 65536 NT_STATUS_OK
WriteX 11532 262144 65536 65536 NT_STATUS_OK
WriteX 11532 327680 65536 65536 NT_STATUS_OK
WriteX 11532 393216 65536 65536 NT_STATUS_OK
WriteX 11532 458752 65536 65536 NT_STATUS_OK
WriteX 11532 524288 65536 65536 NT_STATUS_OK
WriteX 11532 589824 35257 35257 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11537 NT_STATUS_OK
WriteX 11537 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 65536 65536 NT_STATUS_OK
WriteX 11537 131072 65536 65536 NT_STATUS_OK
WriteX 11537 196608 65536 65536 NT_STATUS_OK
WriteX 11537 262144 65536 65536 NT_STATUS_OK
WriteX 11537 327680 65536 65536 NT_STATUS_OK
WriteX 11537 393216 65536 65536 NT_STATUS_OK
WriteX 11537 458752 65536 65536 NT_STATUS_OK
WriteX 11537 524288 65536 65536 NT_STATUS_OK
WriteX 11537 589824 57598 57598 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11539 NT_STATUS_OK
WriteX 11539 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11539 258 NT_STATUS_OK
WriteX 11539 0 12543 12543 NT_STATUS_OK
Flush 11539 NT_STATUS_OK
Close 11539 NT_STATUS_OK
Close 11523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11541 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11545 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1005 NT_STATUS_OK
ReadX 11545 1938 24 24 NT_STATUS_OK
ReadX 11545 1920 276 276 NT_STATUS_OK
ReadX 11545 1918 14 14 NT_STATUS_OK
ReadX 11545 1918 7 7 NT_STATUS_OK
ReadX 11545 1919 12 12 NT_STATUS_OK
ReadX 11545 1919 8 8 NT_STATUS_OK
ReadX 11545 1917 15 15 NT_STATUS_OK
ReadX 11545 0 16 16 NT_STATUS_OK
ReadX 11545 16 2048 2048 NT_STATUS_OK
ReadX 11545 2064 2048 2048 NT_STATUS_OK
ReadX 11545 257 2048 2048 NT_STATUS_OK
ReadX 11545 385 2048 2048 NT_STATUS_OK
ReadX 11545 513 2048 2048 NT_STATUS_OK
ReadX 11545 641 2048 2048 NT_STATUS_OK
ReadX 11545 769 2048 2048 NT_STATUS_OK
ReadX 11545 897 2048 2048 NT_STATUS_OK
ReadX 11545 1025 2048 2048 NT_STATUS_OK
ReadX 11545 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11547 NT_STATUS_OK
Close 11547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11550 NT_STATUS_OK
WriteX 11550 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11550 258 NT_STATUS_OK
WriteX 11550 0 11588 11588 NT_STATUS_OK
Flush 11550 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11551 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11553 NT_STATUS_OK
ReadX 11553 0 4096 4096 NT_STATUS_OK
Close 11545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11555 NT_STATUS_OK
WriteX 11555 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11555 258 NT_STATUS_OK
WriteX 11555 0 11615 11615 NT_STATUS_OK
Flush 11555 NT_STATUS_OK
Close 11555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11557 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11561 NT_STATUS_OK
Close 11561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11564 NT_STATUS_OK
WriteX 11564 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 65536 65536 NT_STATUS_OK
WriteX 11564 65536 16050 16050 NT_STATUS_OK
Close 11564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11544 1939 64 64 NT_STATUS_OK
ReadX 11544 128 248 248 NT_STATUS_OK
ReadX 11544 128 568 568 NT_STATUS_OK
ReadX 11544 3872 1536 1536 NT_STATUS_OK
ReadX 11544 3456 2560 2560 NT_STATUS_OK
ReadX 11544 3136 512 512 NT_STATUS_OK
ReadX 11544 2880 4096 4096 NT_STATUS_OK
ReadX 11544 3264 3072 3072 NT_STATUS_OK
ReadX 11544 320 4096 4096 NT_STATUS_OK
ReadX 11544 1024 4096 4096 NT_STATUS_OK
ReadX 11544 3616 4096 4096 NT_STATUS_OK
ReadX 11544 1939 64 64 NT_STATUS_OK
ReadX 11544 128 248 248 NT_STATUS_OK
ReadX 11544 128 608 608 NT_STATUS_OK
ReadX 11544 2858 1024 1024 NT_STATUS_OK
ReadX 11544 2810 4096 4096 NT_STATUS_OK
ReadX 11544 2826 4096 4096 NT_STATUS_OK
ReadX 11544 2580 2048 2048 NT_STATUS_OK
ReadX 11544 2800 2560 2560 NT_STATUS_OK
ReadX 11544 2100 4096 4096 NT_STATUS_OK
ReadX 11544 2084 4096 4096 NT_STATUS_OK
ReadX 11544 868 4096 4096 NT_STATUS_OK
ReadX 11544 2324 4096 4096 NT_STATUS_OK
ReadX 11544 884 4096 4096 NT_STATUS_OK
ReadX 11544 2604 1024 1024 NT_STATUS_OK
ReadX 11544 580 4096 4096 NT_STATUS_OK
ReadX 11544 596 4096 4096 NT_STATUS_OK
ReadX 11544 2752 4096 4096 NT_STATUS_OK
ReadX 11544 2842 1024 1024 NT_STATUS_OK
ReadX 11544 660 4096 4096 NT_STATUS_OK
ReadX 11544 2720 4096 4096 NT_STATUS_OK
ReadX 11544 2736 4096 4096 NT_STATUS_OK
ReadX 11544 628 4096 4096 NT_STATUS_OK
ReadX 11544 2704 4096 4096 NT_STATUS_OK
ReadX 11544 1556 4096 4096 NT_STATUS_OK
ReadX 11544 576 4096 4096 NT_STATUS_OK
ReadX 11544 3168 1536 1536 NT_STATUS_OK
ReadX 11544 832 4096 4096 NT_STATUS_OK
ReadX 11544 1088 4096 4096 NT_STATUS_OK
ReadX 11544 1344 4096 4096 NT_STATUS_OK
ReadX 11544 1600 4096 4096 NT_STATUS_OK
ReadX 11544 1856 4096 4096 NT_STATUS_OK
ReadX 11544 2112 4096 4096 NT_STATUS_OK
ReadX 11544 1892 4096 4096 NT_STATUS_OK
ReadX 11544 820 4096 4096 NT_STATUS_OK
ReadX 11544 788 4096 4096 NT_STATUS_OK
ReadX 11544 1604 4096 4096 NT_STATUS_OK
ReadX 11544 3648 4096 4096 NT_STATUS_OK
ReadX 11544 2608 4096 4096 NT_STATUS_OK
ReadX 11544 548 4096 4096 NT_STATUS_OK
ReadX 11544 740 4096 4096 NT_STATUS_OK
ReadX 11544 1344 4096 4096 NT_STATUS_OK
ReadX 11544 3392 4096 4096 NT_STATUS_OK
ReadX 11544 3904 4096 4096 NT_STATUS_OK
ReadX 11544 644 4096 4096 NT_STATUS_OK
ReadX 11544 676 4096 4096 NT_STATUS_OK
ReadX 11544 2688 4096 4096 NT_STATUS_OK
ReadX 11544 320 4096 4096 NT_STATUS_OK
ReadX 11544 900 4096 4096 NT_STATUS_OK
ReadX 11544 1908 4096 4096 NT_STATUS_OK
ReadX 11544 852 4096 4096 NT_STATUS_OK
ReadX 11544 724 4096 4096 NT_STATUS_OK
ReadX 11544 2292 4096 4096 NT_STATUS_OK
ReadX 11544 612 4096 4096 NT_STATUS_OK
ReadX 11544 388 4096 4096 NT_STATUS_OK
ReadX 11544 2368 4096 4096 NT_STATUS_OK
ReadX 11544 2624 4096 4096 NT_STATUS_OK
ReadX 11544 500 4096 4096 NT_STATUS_OK
ReadX 11544 356 4096 4096 NT_STATUS_OK
ReadX 11544 1024 4096 4096 NT_STATUS_OK
ReadX 11544 576 4096 4096 NT_STATUS_OK
ReadX 11544 340 4096 4096 NT_STATUS_OK
ReadX 11544 420 4096 4096 NT_STATUS_OK
ReadX 11544 1600 4096 4096 NT_STATUS_OK
ReadX 11544 404 4096 4096 NT_STATUS_OK
ReadX 11544 1428 4096 4096 NT_STATUS_OK
ReadX 11544 2656 4096 4096 NT_STATUS_OK
ReadX 11544 2624 4096 4096 NT_STATUS_OK
ReadX 11544 452 4096 4096 NT_STATUS_OK
ReadX 11544 692 4096 4096 NT_STATUS_OK
ReadX 11544 564 4096 4096 NT_STATUS_OK
ReadX 11544 372 4096 4096 NT_STATUS_OK
ReadX 11544 468 4096 4096 NT_STATUS_OK
ReadX 11544 484 4096 4096 NT_STATUS_OK
ReadX 11544 1088 4096 4096 NT_STATUS_OK
ReadX 11544 1924 4096 4096 NT_STATUS_OK
ReadX 11544 2768 4096 4096 NT_STATUS_OK
ReadX 11544 832 4096 4096 NT_STATUS_OK
ReadX 11544 836 4096 4096 NT_STATUS_OK
ReadX 11544 1856 4096 4096 NT_STATUS_OK
ReadX 11544 2640 4096 4096 NT_STATUS_OK
ReadX 11544 436 4096 4096 NT_STATUS_OK
ReadX 11544 1828 4096 4096 NT_STATUS_OK
ReadX 11544 804 4096 4096 NT_STATUS_OK
ReadX 11544 1860 4096 4096 NT_STATUS_OK
ReadX 11544 1812 4096 4096 NT_STATUS_OK
ReadX 11544 756 4096 4096 NT_STATUS_OK
ReadX 11544 1636 4096 4096 NT_STATUS_OK
ReadX 11544 772 4096 4096 NT_STATUS_OK
ReadX 11544 2036 4096 4096 NT_STATUS_OK
ReadX 11544 1220 4096 4096 NT_STATUS_OK
ReadX 11544 1652 4096 4096 NT_STATUS_OK
ReadX 11544 2588 4096 4096 NT_STATUS_OK
ReadX 11544 916 4096 4096 NT_STATUS_OK
ReadX 11544 260 4096 4096 NT_STATUS_OK
ReadX 11544 932 4096 4096 NT_STATUS_OK
ReadX 11544 2624 4096 4096 NT_STATUS_OK
ReadX 11544 308 4096 4096 NT_STATUS_OK
ReadX 11544 292 4096 4096 NT_STATUS_OK
ReadX 11544 1140 4096 4096 NT_STATUS_OK
ReadX 11544 276 4096 4096 NT_STATUS_OK
ReadX 11544 2020 4096 4096 NT_STATUS_OK
ReadX 11544 2880 4096 4096 NT_STATUS_OK
ReadX 11544 516 4096 4096 NT_STATUS_OK
ReadX 11544 1844 4096 4096 NT_STATUS_OK
ReadX 11544 1124 4096 4096 NT_STATUS_OK
ReadX 11544 3136 4096 4096 NT_STATUS_OK
ReadX 11544 324 4096 4096 NT_STATUS_OK
ReadX 11544 1156 4096 4096 NT_STATUS_OK
ReadX 11544 1172 4096 4096 NT_STATUS_OK
ReadX 11544 2112 4096 4096 NT_STATUS_OK
ReadX 11544 2368 4096 4096 NT_STATUS_OK
ReadX 11544 964 4096 4096 NT_STATUS_OK
ReadX 11544 980 4096 4096 NT_STATUS_OK
ReadX 11544 1012 4096 4096 NT_STATUS_OK
ReadX 11544 532 4096 4096 NT_STATUS_OK
ReadX 11544 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11544 1620 4096 4096 NT_STATUS_OK
ReadX 11544 1604 4096 4096 NT_STATUS_OK
ReadX 11544 2116 4096 4096 NT_STATUS_OK
ReadX 11544 2132 4096 4096 NT_STATUS_OK
ReadX 11544 2148 4096 4096 NT_STATUS_OK
ReadX 11544 2276 4096 4096 NT_STATUS_OK
ReadX 11544 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11569 NT_STATUS_OK
QUERY_FILE_INFORMATION 11524 1004 NT_STATUS_OK
Close 11524 NT_STATUS_OK
WriteX 11569 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11569 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11526 1004 NT_STATUS_OK
Close 11526 NT_STATUS_OK
WriteX 11569 0 65536 65536 NT_STATUS_OK
WriteX 11569 65536 64850 64850 NT_STATUS_OK
Close 11569 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11571 NT_STATUS_OK
WriteX 11571 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
ReadX 11544 2068 4096 4096 NT_STATUS_OK
ReadX 11544 1588 4096 4096 NT_STATUS_OK
ReadX 11544 1572 4096 4096 NT_STATUS_OK
WriteX 11571 0 18630 18630 NT_STATUS_OK
Flush 11571 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11544 612 4096 4096 NT_STATUS_OK
ReadX 11544 564 4096 4096 NT_STATUS_OK
ReadX 11544 1876 4096 4096 NT_STATUS_OK
ReadX 11544 628 4096 4096 NT_STATUS_OK
ReadX 11544 740 4096 4096 NT_STATUS_OK
ReadX 11544 724 4096 4096 NT_STATUS_OK
ReadX 11544 644 4096 4096 NT_STATUS_OK
ReadX 11544 2324 4096 4096 NT_STATUS_OK
ReadX 11544 660 4096 4096 NT_STATUS_OK
ReadX 11544 852 4096 4096 NT_STATUS_OK
ReadX 11544 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11544 2368 4096 4096 NT_STATUS_OK
ReadX 11544 1024 4096 4096 NT_STATUS_OK
ReadX 11544 320 4096 4096 NT_STATUS_OK
ReadX 11544 580 4096 4096 NT_STATUS_OK
ReadX 11544 3136 512 512 NT_STATUS_OK
ReadX 11544 2880 4096 4096 NT_STATUS_OK
Close 11544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11576 NT_STATUS_OK
ReadX 11576 61440 4096 4096 NT_STATUS_OK
ReadX 11576 126976 4096 4096 NT_STATUS_OK
WriteX 11576 0 65536 65536 NT_STATUS_OK
WriteX 11576 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 61440 4096 4096 NT_STATUS_OK
ReadX 11577 126976 4096 4096 NT_STATUS_OK
ReadX 11577 192512 4096 4096 NT_STATUS_OK
ReadX 11577 258048 4096 4096 NT_STATUS_OK
WriteX 11577 0 65536 65536 NT_STATUS_OK
WriteX 11577 65536 65536 65536 NT_STATUS_OK
WriteX 11577 131072 65536 65536 NT_STATUS_OK
WriteX 11577 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11578 NT_STATUS_OK
ReadX 11578 61440 4096 4096 NT_STATUS_OK
ReadX 11578 126976 4096 4096 NT_STATUS_OK
ReadX 11578 192512 4096 4096 NT_STATUS_OK
ReadX 11578 258048 4096 4096 NT_STATUS_OK
ReadX 11578 323584 4096 4096 NT_STATUS_OK
ReadX 11578 389120 4096 4096 NT_STATUS_OK
ReadX 11578 454656 4096 4096 NT_STATUS_OK
ReadX 11578 520192 4096 4096 NT_STATUS_OK
WriteX 11578 0 65536 65536 NT_STATUS_OK
WriteX 11578 65536 65536 65536 NT_STATUS_OK
WriteX 11578 131072 65536 65536 NT_STATUS_OK
WriteX 11578 196608 65536 65536 NT_STATUS_OK
WriteX 11578 262144 65536 65536 NT_STATUS_OK
WriteX 11578 327680 65536 65536 NT_STATUS_OK
WriteX 11578 393216 65536 65536 NT_STATUS_OK
WriteX 11578 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11581 NT_STATUS_OK
WriteX 11581 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11581 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11579 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11579 0 8192 8192 NT_STATUS_OK
Flush 11579 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11583 NT_STATUS_OK
Close 11583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11575 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11576 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Close 11578 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11586 NT_STATUS_OK
WriteX 11586 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11586 258 NT_STATUS_OK
WriteX 11586 0 62591 62591 NT_STATUS_OK
Close 11586 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11588 NT_STATUS_OK
Close 11588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11591 NT_STATUS_OK
WriteX 11591 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11591 258 NT_STATUS_OK
WriteX 11591 0 10845 10845 NT_STATUS_OK
Close 11591 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11596 NT_STATUS_OK
WriteX 11596 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11596 258 NT_STATUS_OK
WriteX 11596 0 30118 30118 NT_STATUS_OK
Close 11596 NT_STATUS_OK
WriteX 11579 0 4096 4096 NT_STATUS_OK
WriteX 11581 0 64 64 NT_STATUS_OK
Close 11581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 61440 61440 NT_STATUS_OK
ReadX 11598 61440 4096 4096 NT_STATUS_OK
ReadX 11598 65536 61440 61440 NT_STATUS_OK
ReadX 11598 126976 4096 4096 NT_STATUS_OK
ReadX 11598 131072 61440 61440 NT_STATUS_OK
ReadX 11598 192512 4096 4096 NT_STATUS_OK
ReadX 11598 196608 61440 61440 NT_STATUS_OK
ReadX 11598 258048 4096 4096 NT_STATUS_OK
ReadX 11598 262144 61440 61440 NT_STATUS_OK
ReadX 11598 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 61440 61440 NT_STATUS_OK
ReadX 11599 61440 4096 4096 NT_STATUS_OK
ReadX 11599 65536 61440 61440 NT_STATUS_OK
ReadX 11599 126976 4096 4096 NT_STATUS_OK
ReadX 11599 131072 61440 61440 NT_STATUS_OK
ReadX 11599 192512 4096 4096 NT_STATUS_OK
ReadX 11599 196608 61440 61440 NT_STATUS_OK
ReadX 11599 258048 4096 4096 NT_STATUS_OK
ReadX 11599 262144 61440 61440 NT_STATUS_OK
ReadX 11599 323584 4096 4096 NT_STATUS_OK
ReadX 11599 327680 61440 61440 NT_STATUS_OK
ReadX 11599 389120 4096 4096 NT_STATUS_OK
ReadX 11599 393216 61440 61440 NT_STATUS_OK
ReadX 11599 454656 4096 4096 NT_STATUS_OK
ReadX 11599 458752 61440 61440 NT_STATUS_OK
ReadX 11599 520192 4096 4096 NT_STATUS_OK
ReadX 11599 524288 61440 61440 NT_STATUS_OK
ReadX 11599 585728 4096 4096 NT_STATUS_OK
ReadX 11599 589824 61440 61440 NT_STATUS_OK
ReadX 11599 651264 4096 4096 NT_STATUS_OK
ReadX 11599 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 61440 61440 NT_STATUS_OK
ReadX 11600 61440 4096 4096 NT_STATUS_OK
ReadX 11600 65536 61440 61440 NT_STATUS_OK
ReadX 11600 126976 4096 4096 NT_STATUS_OK
ReadX 11600 131072 61440 61440 NT_STATUS_OK
ReadX 11600 192512 4096 4096 NT_STATUS_OK
ReadX 11600 196608 61440 61440 NT_STATUS_OK
ReadX 11600 258048 4096 4096 NT_STATUS_OK
ReadX 11600 262144 61440 61440 NT_STATUS_OK
ReadX 11600 323584 4096 4096 NT_STATUS_OK
ReadX 11600 327680 61440 61440 NT_STATUS_OK
ReadX 11600 389120 4096 4096 NT_STATUS_OK
ReadX 11600 393216 61440 61440 NT_STATUS_OK
ReadX 11600 454656 4096 4096 NT_STATUS_OK
ReadX 11600 458752 61440 61440 NT_STATUS_OK
ReadX 11600 520192 4096 4096 NT_STATUS_OK
ReadX 11600 524288 61440 61440 NT_STATUS_OK
ReadX 11600 585728 4096 4096 NT_STATUS_OK
ReadX 11600 589824 61440 61440 NT_STATUS_OK
ReadX 11600 651264 4096 4096 NT_STATUS_OK
ReadX 11600 655360 61440 61440 NT_STATUS_OK
ReadX 11600 716800 4096 4096 NT_STATUS_OK
ReadX 11600 720896 61440 61440 NT_STATUS_OK
ReadX 11600 782336 4096 4096 NT_STATUS_OK
ReadX 11600 786432 61440 61440 NT_STATUS_OK
ReadX 11600 847872 4096 4096 NT_STATUS_OK
ReadX 11600 851968 61440 61440 NT_STATUS_OK
ReadX 11600 913408 4096 4096 NT_STATUS_OK
ReadX 11600 917504 61440 61440 NT_STATUS_OK
ReadX 11600 978944 4096 4096 NT_STATUS_OK
ReadX 11600 983040 61440 61440 NT_STATUS_OK
ReadX 11600 1044480 4096 4096 NT_STATUS_OK
ReadX 11600 1048576 61440 61440 NT_STATUS_OK
ReadX 11600 1110016 4096 4096 NT_STATUS_OK
ReadX 11600 1114112 61440 61440 NT_STATUS_OK
ReadX 11600 1175552 4096 4096 NT_STATUS_OK
ReadX 11600 1179648 61440 61440 NT_STATUS_OK
ReadX 11600 1241088 4096 4096 NT_STATUS_OK
ReadX 11600 1245184 61440 61440 NT_STATUS_OK
ReadX 11600 1306624 4096 4096 NT_STATUS_OK
ReadX 11600 1310720 61440 61440 NT_STATUS_OK
ReadX 11600 1372160 4096 4096 NT_STATUS_OK
ReadX 11600 1376256 61440 61440 NT_STATUS_OK
ReadX 11600 1437696 4096 4096 NT_STATUS_OK
ReadX 11600 1441792 61440 61440 NT_STATUS_OK
ReadX 11600 1503232 4096 4096 NT_STATUS_OK
ReadX 11600 1507328 61440 61440 NT_STATUS_OK
ReadX 11600 1568768 4096 4096 NT_STATUS_OK
ReadX 11600 1572864 61440 61440 NT_STATUS_OK
ReadX 11600 1634304 4096 4096 NT_STATUS_OK
ReadX 11600 1638400 61440 61440 NT_STATUS_OK
ReadX 11600 1699840 4096 4096 NT_STATUS_OK
ReadX 11600 1703936 61440 61440 NT_STATUS_OK
ReadX 11600 1765376 4096 4096 NT_STATUS_OK
ReadX 11600 1769472 61440 61440 NT_STATUS_OK
ReadX 11600 1830912 4096 4096 NT_STATUS_OK
ReadX 11600 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11601 NT_STATUS_OK
Close 11601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11598 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11604 NT_STATUS_OK
ReadX 11604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11605 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
ReadX 11605 4096 4096 4096 NT_STATUS_OK
ReadX 11605 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11606 NT_STATUS_OK
Close 11606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11603 NT_STATUS_OK
Close 11604 NT_STATUS_OK
Close 11605 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11608 NT_STATUS_OK
ReadX 11608 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11609 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11609 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11610 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11608 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 0 8192 8192 NT_STATUS_OK
ReadX 11613 8192 8192 8192 NT_STATUS_OK
ReadX 11613 16384 8192 8192 NT_STATUS_OK
ReadX 11613 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11615 NT_STATUS_OK
Close 11615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11618 NT_STATUS_OK
WriteX 11618 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11618 258 NT_STATUS_OK
WriteX 11618 0 10438 10438 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11619 NT_STATUS_OK
Close 11619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11621 NT_STATUS_OK
Close 11621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11622 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11624 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11626 NT_STATUS_OK
Close 11626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
ReadX 11627 4096 4096 4096 NT_STATUS_OK
ReadX 11627 8192 4096 4096 NT_STATUS_OK
ReadX 11627 12288 8192 8192 NT_STATUS_OK
ReadX 11627 20480 8192 8192 NT_STATUS_OK
ReadX 11627 28672 8192 8192 NT_STATUS_OK
ReadX 11627 36864 8192 8192 NT_STATUS_OK
ReadX 11627 45056 8192 8192 NT_STATUS_OK
ReadX 11627 53248 8192 8192 NT_STATUS_OK
ReadX 11627 61440 8192 8192 NT_STATUS_OK
ReadX 11627 69632 8192 8192 NT_STATUS_OK
ReadX 11627 77824 8192 8192 NT_STATUS_OK
ReadX 11627 86016 8192 8192 NT_STATUS_OK
ReadX 11627 94208 8192 8192 NT_STATUS_OK
ReadX 11627 102400 8192 8192 NT_STATUS_OK
ReadX 11627 110592 8192 8192 NT_STATUS_OK
ReadX 11627 118784 8192 8192 NT_STATUS_OK
ReadX 11627 126976 8192 8192 NT_STATUS_OK
ReadX 11627 135168 8192 8192 NT_STATUS_OK
ReadX 11627 143360 8192 8192 NT_STATUS_OK
ReadX 11627 151552 8192 8192 NT_STATUS_OK
ReadX 11627 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11627 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11632 NT_STATUS_OK
WriteX 11632 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11632 258 NT_STATUS_OK
WriteX 11632 0 28489 28489 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11635 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11636 NT_STATUS_OK
Close 11636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 0 8192 8192 NT_STATUS_OK
ReadX 11639 8192 8192 8192 NT_STATUS_OK
ReadX 11639 16384 8192 8192 NT_STATUS_OK
ReadX 11639 24576 8192 8192 NT_STATUS_OK
ReadX 11639 32768 16384 16384 NT_STATUS_OK
ReadX 11639 49152 8192 8192 NT_STATUS_OK
ReadX 11639 57344 8192 8192 NT_STATUS_OK
ReadX 11639 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11644 NT_STATUS_OK
WriteX 11644 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11644 258 NT_STATUS_OK
WriteX 11644 0 29253 29253 NT_STATUS_OK
Close 11644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11645 NT_STATUS_OK
Close 11645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11648 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11651 NT_STATUS_OK
WriteX 11651 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11651 258 NT_STATUS_OK
WriteX 11651 0 30183 30183 NT_STATUS_OK
Close 11651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11652 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11654 NT_STATUS_OK
WriteX 11654 0 510 510 NT_STATUS_OK
WriteX 11654 510 512 512 NT_STATUS_OK
WriteX 11654 1022 510 510 NT_STATUS_OK
WriteX 11654 1532 510 510 NT_STATUS_OK
WriteX 11654 2042 168 168 NT_STATUS_OK
Close 11654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11655 NT_STATUS_OK
Close 11655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 4096 4096 NT_STATUS_OK
WriteX 11657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11658 NT_STATUS_OK
ReadX 11658 61440 4096 4096 NT_STATUS_OK
ReadX 11658 126976 4096 4096 NT_STATUS_OK
WriteX 11658 0 65536 65536 NT_STATUS_OK
WriteX 11658 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11659 NT_STATUS_OK
ReadX 11659 61440 4096 4096 NT_STATUS_OK
ReadX 11659 126976 4096 4096 NT_STATUS_OK
ReadX 11659 192512 4096 4096 NT_STATUS_OK
ReadX 11659 258048 4096 4096 NT_STATUS_OK
WriteX 11659 0 65536 65536 NT_STATUS_OK
WriteX 11659 65536 65536 65536 NT_STATUS_OK
WriteX 11659 131072 65536 65536 NT_STATUS_OK
WriteX 11659 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 61440 4096 4096 NT_STATUS_OK
ReadX 11660 126976 4096 4096 NT_STATUS_OK
ReadX 11660 192512 4096 4096 NT_STATUS_OK
ReadX 11660 258048 4096 4096 NT_STATUS_OK
ReadX 11660 323584 4096 4096 NT_STATUS_OK
ReadX 11660 389120 4096 4096 NT_STATUS_OK
ReadX 11660 454656 4096 4096 NT_STATUS_OK
ReadX 11660 520192 4096 4096 NT_STATUS_OK
WriteX 11660 0 65536 65536 NT_STATUS_OK
WriteX 11660 65536 65536 65536 NT_STATUS_OK
WriteX 11660 131072 65536 65536 NT_STATUS_OK
WriteX 11660 196608 65536 65536 NT_STATUS_OK
WriteX 11660 262144 65536 65536 NT_STATUS_OK
WriteX 11660 327680 65536 65536 NT_STATUS_OK
WriteX 11660 393216 65536 65536 NT_STATUS_OK
WriteX 11660 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11661 NT_STATUS_OK
Close 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11657 NT_STATUS_OK
Close 11658 NT_STATUS_OK
Close 11659 NT_STATUS_OK
Close 11660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11663 NT_STATUS_OK
Close 11663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11672 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11676 NT_STATUS_OK
Close 11676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11679 NT_STATUS_OK
Close 11679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11685 NT_STATUS_OK
Close 11685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11690 NT_STATUS_OK
Close 11690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11695 NT_STATUS_OK
Close 11695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11700 NT_STATUS_OK
Close 11700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11705 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11720 NT_STATUS_OK
Close 11720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11729 NT_STATUS_OK
WriteX 11729 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11729 0 65536 65536 NT_STATUS_OK
WriteX 11729 65536 65536 65536 NT_STATUS_OK
WriteX 11729 131072 65536 65536 NT_STATUS_OK
WriteX 11729 196608 65536 65536 NT_STATUS_OK
WriteX 11729 262144 26634 26634 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11734 NT_STATUS_OK
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11735 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 0 4096 4096 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 0 4096 4096 NT_STATUS_OK
ReadX 11737 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11738 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11742 NT_STATUS_OK
Close 11742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11745 NT_STATUS_OK
Close 11745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11747 NT_STATUS_OK
Close 11747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11751 NT_STATUS_OK
Close 11751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11754 NT_STATUS_OK
Close 11754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11756 NT_STATUS_OK
Close 11756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11765 NT_STATUS_OK
Close 11765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11770 NT_STATUS_OK
Close 11770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11780 NT_STATUS_OK
Close 11780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11785 NT_STATUS_OK
Close 11785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11789 NT_STATUS_OK
Close 11789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11794 NT_STATUS_OK
Close 11794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11799 NT_STATUS_OK
Close 11799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11802 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11804 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
Close 11816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
Close 11817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
Close 11830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
Close 11831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11832 NT_STATUS_OK
ReadX 11832 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11818 NT_STATUS_OK
Close 11832 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11861 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11861 0 4096 4096 NT_STATUS_OK
Close 11861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
ReadX 11863 4096 4096 4096 NT_STATUS_OK
ReadX 11863 8192 4096 4096 NT_STATUS_OK
ReadX 11863 12288 4096 4096 NT_STATUS_OK
ReadX 11863 16384 4096 4096 NT_STATUS_OK
ReadX 11863 20480 4096 4096 NT_STATUS_OK
ReadX 11863 24576 4096 4096 NT_STATUS_OK
ReadX 11863 28672 4096 4096 NT_STATUS_OK
ReadX 11863 32768 4096 4096 NT_STATUS_OK
ReadX 11863 36864 4096 4096 NT_STATUS_OK
ReadX 11863 40960 4096 4096 NT_STATUS_OK
ReadX 11863 45056 4096 4096 NT_STATUS_OK
ReadX 11863 49152 4096 4096 NT_STATUS_OK
ReadX 11863 53248 4096 4096 NT_STATUS_OK
ReadX 11863 57344 4096 4096 NT_STATUS_OK
ReadX 11863 61440 4096 4096 NT_STATUS_OK
ReadX 11863 65536 4096 4096 NT_STATUS_OK
ReadX 11863 69632 4096 4096 NT_STATUS_OK
ReadX 11863 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11863 1004 NT_STATUS_OK
WriteX 11863 0 4096 4096 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11864 NT_STATUS_OK
SET_FILE_INFORMATION 11864 1004 NT_STATUS_OK
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11866 NT_STATUS_OK
Close 11866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11869 NT_STATUS_OK
WriteX 11869 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 258 NT_STATUS_OK
WriteX 11869 0 65536 65536 NT_STATUS_OK
WriteX 11869 65536 19979 19979 NT_STATUS_OK
Close 11869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
QUERY_FILE_INFORMATION 11870 1004 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
SET_FILE_INFORMATION 11870 1004 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
Flush 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11871 NT_STATUS_OK
ReadX 11871 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 4096 4096 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 4096 4096 NT_STATUS_OK
Close 11873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 4096 4096 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11875 1004 NT_STATUS_OK
WriteX 11875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11876 NT_STATUS_OK
Close 11876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11872 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11878 NT_STATUS_OK
Close 11878 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11881 NT_STATUS_OK
WriteX 11881 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 258 NT_STATUS_OK
WriteX 11881 0 65536 65536 NT_STATUS_OK
WriteX 11881 65536 17654 17654 NT_STATUS_OK
Close 11881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11882 NT_STATUS_OK
ReadX 11882 0 4096 4096 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
QUERY_FILE_INFORMATION 11882 1004 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
SET_FILE_INFORMATION 11882 1004 NT_STATUS_OK
WriteX 11882 0 4096 4096 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11883 NT_STATUS_OK
SET_FILE_INFORMATION 11883 1004 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11885 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11887 NT_STATUS_OK
ReadX 11887 0 4096 4096 NT_STATUS_OK
ReadX 11887 4096 4096 4096 NT_STATUS_OK
ReadX 11887 8192 4096 4096 NT_STATUS_OK
ReadX 11887 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11887 16384 4096 4096 NT_STATUS_OK
ReadX 11887 20480 4096 4096 NT_STATUS_OK
ReadX 11887 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11888 NT_STATUS_OK
ReadX 11888 0 4096 4096 NT_STATUS_OK
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 0 4096 4096 NT_STATUS_OK
Close 11889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11890 1004 NT_STATUS_OK
WriteX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11893 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11896 NT_STATUS_OK
WriteX 11896 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11896 258 NT_STATUS_OK
WriteX 11896 0 65536 65536 NT_STATUS_OK
WriteX 11896 65536 19490 19490 NT_STATUS_OK
Close 11896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
QUERY_FILE_INFORMATION 11897 1004 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
SET_FILE_INFORMATION 11897 1004 NT_STATUS_OK
WriteX 11897 0 4096 4096 NT_STATUS_OK
Flush 11897 NT_STATUS_OK
Close 11897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11898 NT_STATUS_OK
SET_FILE_INFORMATION 11898 1004 NT_STATUS_OK
Close 11898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11900 NT_STATUS_OK
Close 11900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11902 0 4096 4096 NT_STATUS_OK
Close 11902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
ReadX 11904 4096 4096 4096 NT_STATUS_OK
ReadX 11904 8192 4096 4096 NT_STATUS_OK
ReadX 11904 12288 4096 4096 NT_STATUS_OK
ReadX 11904 16384 4096 4096 NT_STATUS_OK
ReadX 11904 20480 4096 4096 NT_STATUS_OK
ReadX 11904 24576 4096 4096 NT_STATUS_OK
ReadX 11904 28672 4096 4096 NT_STATUS_OK
ReadX 11904 32768 4096 4096 NT_STATUS_OK
ReadX 11904 36864 4096 4096 NT_STATUS_OK
ReadX 11904 40960 4096 4096 NT_STATUS_OK
ReadX 11904 45056 4096 4096 NT_STATUS_OK
ReadX 11904 49152 4096 4096 NT_STATUS_OK
ReadX 11904 53248 4096 4096 NT_STATUS_OK
ReadX 11904 57344 4096 4096 NT_STATUS_OK
ReadX 11904 61440 4096 4096 NT_STATUS_OK
ReadX 11904 65536 4096 4096 NT_STATUS_OK
ReadX 11904 69632 4096 4096 NT_STATUS_OK
ReadX 11904 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11904 1004 NT_STATUS_OK
WriteX 11904 0 4096 4096 NT_STATUS_OK
Close 11904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11905 NT_STATUS_OK
SET_FILE_INFORMATION 11905 1004 NT_STATUS_OK
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11907 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11910 NT_STATUS_OK
WriteX 11910 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11910 258 NT_STATUS_OK
WriteX 11910 0 65536 65536 NT_STATUS_OK
WriteX 11910 65536 8866 8866 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11911 NT_STATUS_OK
ReadX 11911 0 4096 4096 NT_STATUS_OK
WriteX 11911 0 4096 4096 NT_STATUS_OK
Flush 11911 NT_STATUS_OK
SET_FILE_INFORMATION 11911 1004 NT_STATUS_OK
WriteX 11911 0 4096 4096 NT_STATUS_OK
Flush 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 4096 4096 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11914 NT_STATUS_OK
ReadX 11914 0 4096 4096 NT_STATUS_OK
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11915 1004 NT_STATUS_OK
WriteX 11915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11916 NT_STATUS_OK
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11915 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11921 NT_STATUS_OK
WriteX 11921 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11921 258 NT_STATUS_OK
WriteX 11921 0 65536 65536 NT_STATUS_OK
WriteX 11921 65536 9298 9298 NT_STATUS_OK
Close 11921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11922 NT_STATUS_OK
ReadX 11922 0 4096 4096 NT_STATUS_OK
WriteX 11922 0 4096 4096 NT_STATUS_OK
Flush 11922 NT_STATUS_OK
SET_FILE_INFORMATION 11922 1004 NT_STATUS_OK
WriteX 11922 0 4096 4096 NT_STATUS_OK
Flush 11922 NT_STATUS_OK
Close 11922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11923 NT_STATUS_OK
SET_FILE_INFORMATION 11923 1004 NT_STATUS_OK
Close 11923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11928 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11928 0 4096 4096 NT_STATUS_OK
Close 11928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11929 4096 4096 4096 NT_STATUS_OK
ReadX 11929 8192 4096 4096 NT_STATUS_OK
ReadX 11929 12288 4096 4096 NT_STATUS_OK
ReadX 11929 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
Close 11930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
Close 11931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11932 1004 NT_STATUS_OK
WriteX 11932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11933 NT_STATUS_OK
Close 11933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11938 NT_STATUS_OK
WriteX 11938 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11938 258 NT_STATUS_OK
WriteX 11938 0 65536 65536 NT_STATUS_OK
WriteX 11938 65536 11540 11540 NT_STATUS_OK
Close 11938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 4096 4096 NT_STATUS_OK
WriteX 11939 0 4096 4096 NT_STATUS_OK
Flush 11939 NT_STATUS_OK
SET_FILE_INFORMATION 11939 1004 NT_STATUS_OK
WriteX 11939 0 4096 4096 NT_STATUS_OK
Flush 11939 NT_STATUS_OK
Close 11939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11940 NT_STATUS_OK
SET_FILE_INFORMATION 11940 1004 NT_STATUS_OK
Close 11940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 61440 4096 4096 NT_STATUS_OK
ReadX 11944 126976 4096 4096 NT_STATUS_OK
WriteX 11944 0 65536 65536 NT_STATUS_OK
WriteX 11944 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 61440 4096 4096 NT_STATUS_OK
ReadX 11945 126976 4096 4096 NT_STATUS_OK
ReadX 11945 192512 4096 4096 NT_STATUS_OK
ReadX 11945 258048 4096 4096 NT_STATUS_OK
WriteX 11945 0 65536 65536 NT_STATUS_OK
WriteX 11945 65536 65536 65536 NT_STATUS_OK
WriteX 11945 131072 65536 65536 NT_STATUS_OK
WriteX 11945 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 61440 4096 4096 NT_STATUS_OK
ReadX 11946 126976 4096 4096 NT_STATUS_OK
ReadX 11946 192512 4096 4096 NT_STATUS_OK
ReadX 11946 258048 4096 4096 NT_STATUS_OK
ReadX 11946 323584 4096 4096 NT_STATUS_OK
ReadX 11946 389120 4096 4096 NT_STATUS_OK
ReadX 11946 454656 4096 4096 NT_STATUS_OK
ReadX 11946 520192 4096 4096 NT_STATUS_OK
WriteX 11946 0 65536 65536 NT_STATUS_OK
WriteX 11946 65536 65536 65536 NT_STATUS_OK
WriteX 11946 131072 65536 65536 NT_STATUS_OK
WriteX 11946 196608 65536 65536 NT_STATUS_OK
WriteX 11946 262144 65536 65536 NT_STATUS_OK
WriteX 11946 327680 65536 65536 NT_STATUS_OK
WriteX 11946 393216 65536 65536 NT_STATUS_OK
WriteX 11946 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
ReadX 11947 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11948 NT_STATUS_OK
WriteX 11948 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11948 258 NT_STATUS_OK
WriteX 11948 0 53 53 NT_STATUS_OK
Close 11948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Close 11887 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11947 8192 4096 4096 NT_STATUS_OK
ReadX 11947 12288 4096 4096 NT_STATUS_OK
WriteX 11951 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 258 NT_STATUS_OK
ReadX 11947 16384 4096 4096 NT_STATUS_OK
ReadX 11947 20480 4096 4096 NT_STATUS_OK
WriteX 11951 0 15360 15360 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11952 NT_STATUS_OK
ReadX 11952 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11952 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11952 1004 NT_STATUS_OK
WriteX 11952 0 4096 4096 NT_STATUS_OK
Close 11952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11953 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11955 NT_STATUS_OK
ReadX 11955 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11955 4096 4096 4096 NT_STATUS_OK
ReadX 11955 8192 4096 4096 NT_STATUS_OK
ReadX 11955 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
ReadX 11958 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
ReadX 11959 4096 4096 4096 NT_STATUS_OK
ReadX 11959 8192 4096 4096 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11960 NT_STATUS_OK
WriteX 11960 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11960 258 NT_STATUS_OK
WriteX 11960 0 15360 15360 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11961 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11961 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11962 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11965 NT_STATUS_OK
SET_FILE_INFORMATION 11965 1004 NT_STATUS_OK
Close 11965 NT_STATUS_OK
WriteX 11961 0 4096 4096 NT_STATUS_OK
Close 11961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11966 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
ReadX 11968 4096 4096 4096 NT_STATUS_OK
ReadX 11968 8192 4096 4096 NT_STATUS_OK
ReadX 11968 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11969 NT_STATUS_OK
ReadX 11969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11970 NT_STATUS_OK
WriteX 11970 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11970 258 NT_STATUS_OK
WriteX 11970 0 53 53 NT_STATUS_OK
Close 11970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11971 NT_STATUS_OK
Close 11971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11969 4096 4096 4096 NT_STATUS_OK
ReadX 11969 8192 4096 4096 NT_STATUS_OK
ReadX 11969 12288 4096 4096 NT_STATUS_OK
WriteX 11973 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11973 258 NT_STATUS_OK
WriteX 11973 0 12006 12006 NT_STATUS_OK
Close 11973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11974 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11974 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
Close 11974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11975 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11977 4096 4096 4096 NT_STATUS_OK
ReadX 11977 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11980 NT_STATUS_OK
WriteX 11980 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 258 NT_STATUS_OK
WriteX 11980 0 11991 11991 NT_STATUS_OK
Close 11980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11981 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11981 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11984 NT_STATUS_OK
ReadX 11984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11985 NT_STATUS_OK
SET_FILE_INFORMATION 11985 1004 NT_STATUS_OK
Close 11985 NT_STATUS_OK
WriteX 11981 0 4096 4096 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11988 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11988 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
ReadX 11988 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
WriteX 11988 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11988 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
Close 11964 NT_STATUS_OK
WriteX 11968 0 19054 19054 NT_STATUS_OK
WriteX 11988 0 12288 12288 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11991 NT_STATUS_OK
Close 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11993 NT_STATUS_OK
Close 11993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 61440 61440 NT_STATUS_OK
ReadX 11995 61440 4096 4096 NT_STATUS_OK
ReadX 11995 65536 61440 61440 NT_STATUS_OK
ReadX 11995 126976 4096 4096 NT_STATUS_OK
ReadX 11995 131072 61440 61440 NT_STATUS_OK
ReadX 11995 192512 4096 4096 NT_STATUS_OK
ReadX 11995 196608 61440 61440 NT_STATUS_OK
ReadX 11995 258048 4096 4096 NT_STATUS_OK
ReadX 11995 262144 61440 61440 NT_STATUS_OK
ReadX 11995 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 61440 61440 NT_STATUS_OK
ReadX 11996 61440 4096 4096 NT_STATUS_OK
ReadX 11996 65536 61440 61440 NT_STATUS_OK
ReadX 11996 126976 4096 4096 NT_STATUS_OK
ReadX 11996 131072 61440 61440 NT_STATUS_OK
ReadX 11996 192512 4096 4096 NT_STATUS_OK
ReadX 11996 196608 61440 61440 NT_STATUS_OK
ReadX 11996 258048 4096 4096 NT_STATUS_OK
ReadX 11996 262144 61440 61440 NT_STATUS_OK
ReadX 11996 323584 4096 4096 NT_STATUS_OK
ReadX 11996 327680 61440 61440 NT_STATUS_OK
ReadX 11996 389120 4096 4096 NT_STATUS_OK
ReadX 11996 393216 61440 61440 NT_STATUS_OK
ReadX 11996 454656 4096 4096 NT_STATUS_OK
ReadX 11996 458752 61440 61440 NT_STATUS_OK
ReadX 11996 520192 4096 4096 NT_STATUS_OK
ReadX 11996 524288 61440 61440 NT_STATUS_OK
ReadX 11996 585728 4096 4096 NT_STATUS_OK
ReadX 11996 589824 61440 61440 NT_STATUS_OK
ReadX 11996 651264 4096 4096 NT_STATUS_OK
ReadX 11996 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11997 NT_STATUS_OK
ReadX 11997 0 61440 61440 NT_STATUS_OK
ReadX 11997 61440 4096 4096 NT_STATUS_OK
ReadX 11997 65536 61440 61440 NT_STATUS_OK
ReadX 11997 126976 4096 4096 NT_STATUS_OK
ReadX 11997 131072 61440 61440 NT_STATUS_OK
ReadX 11997 192512 4096 4096 NT_STATUS_OK
ReadX 11997 196608 61440 61440 NT_STATUS_OK
ReadX 11997 258048 4096 4096 NT_STATUS_OK
ReadX 11997 262144 61440 61440 NT_STATUS_OK
ReadX 11997 323584 4096 4096 NT_STATUS_OK
ReadX 11997 327680 61440 61440 NT_STATUS_OK
ReadX 11997 389120 4096 4096 NT_STATUS_OK
ReadX 11997 393216 61440 61440 NT_STATUS_OK
ReadX 11997 454656 4096 4096 NT_STATUS_OK
ReadX 11997 458752 61440 61440 NT_STATUS_OK
ReadX 11997 520192 4096 4096 NT_STATUS_OK
ReadX 11997 524288 61440 61440 NT_STATUS_OK
ReadX 11997 585728 4096 4096 NT_STATUS_OK
ReadX 11997 589824 61440 61440 NT_STATUS_OK
ReadX 11997 651264 4096 4096 NT_STATUS_OK
ReadX 11997 655360 61440 61440 NT_STATUS_OK
ReadX 11997 716800 4096 4096 NT_STATUS_OK
ReadX 11997 720896 61440 61440 NT_STATUS_OK
ReadX 11997 782336 4096 4096 NT_STATUS_OK
ReadX 11997 786432 61440 61440 NT_STATUS_OK
ReadX 11997 847872 4096 4096 NT_STATUS_OK
ReadX 11997 851968 61440 61440 NT_STATUS_OK
ReadX 11997 913408 4096 4096 NT_STATUS_OK
ReadX 11997 917504 61440 61440 NT_STATUS_OK
ReadX 11997 978944 4096 4096 NT_STATUS_OK
ReadX 11997 983040 61440 61440 NT_STATUS_OK
ReadX 11997 1044480 4096 4096 NT_STATUS_OK
ReadX 11997 1048576 61440 61440 NT_STATUS_OK
ReadX 11997 1110016 4096 4096 NT_STATUS_OK
ReadX 11997 1114112 61440 61440 NT_STATUS_OK
ReadX 11997 1175552 4096 4096 NT_STATUS_OK
ReadX 11997 1179648 61440 61440 NT_STATUS_OK
ReadX 11997 1241088 4096 4096 NT_STATUS_OK
ReadX 11997 1245184 61440 61440 NT_STATUS_OK
ReadX 11997 1306624 4096 4096 NT_STATUS_OK
ReadX 11997 1310720 61440 61440 NT_STATUS_OK
ReadX 11997 1372160 4096 4096 NT_STATUS_OK
ReadX 11997 1376256 61440 61440 NT_STATUS_OK
ReadX 11997 1437696 4096 4096 NT_STATUS_OK
ReadX 11997 1441792 61440 61440 NT_STATUS_OK
ReadX 11997 1503232 4096 4096 NT_STATUS_OK
ReadX 11997 1507328 61440 61440 NT_STATUS_OK
ReadX 11997 1568768 4096 4096 NT_STATUS_OK
ReadX 11997 1572864 61440 61440 NT_STATUS_OK
ReadX 11997 1634304 4096 4096 NT_STATUS_OK
ReadX 11997 1638400 61440 61440 NT_STATUS_OK
ReadX 11997 1699840 4096 4096 NT_STATUS_OK
ReadX 11997 1703936 61440 61440 NT_STATUS_OK
ReadX 11997 1765376 4096 4096 NT_STATUS_OK
ReadX 11997 1769472 61440 61440 NT_STATUS_OK
ReadX 11997 1830912 4096 4096 NT_STATUS_OK
ReadX 11997 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12004 NT_STATUS_OK
QUERY_FILE_INFORMATION 12004 1004 NT_STATUS_OK
WriteX 12004 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12004 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12005 NT_STATUS_OK
Close 12005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12006 NT_STATUS_OK
WriteX 12006 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12006 258 NT_STATUS_OK
WriteX 12006 0 491 491 NT_STATUS_OK
Close 12006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12004 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12009 NT_STATUS_OK
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12010 NT_STATUS_OK
WriteX 12010 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 258 NT_STATUS_OK
WriteX 12010 0 543 543 NT_STATUS_OK
Close 12010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11995 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 11999 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12015 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12016 NT_STATUS_OK
ReadX 12016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12018 NT_STATUS_OK
ReadX 12018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12024 NT_STATUS_OK
QUERY_FILE_INFORMATION 12024 1004 NT_STATUS_OK
WriteX 12024 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12024 258 NT_STATUS_OK
WriteX 12024 0 2048 2048 NT_STATUS_OK
Close 12024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12025 0 4096 4096 NT_STATUS_OK
Flush 12025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12030 NT_STATUS_OK
WriteX 12030 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 258 NT_STATUS_OK
WriteX 12030 0 2048 2048 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12036 NT_STATUS_OK
WriteX 12036 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12036 258 NT_STATUS_OK
WriteX 12036 0 2048 2048 NT_STATUS_OK
Close 12036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 2048 2048 NT_STATUS_OK
ReadX 12015 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
WriteX 12015 0 8192 8192 NT_STATUS_OK
WriteX 12016 0 4096 4096 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12041 NT_STATUS_OK
QUERY_FILE_INFORMATION 12041 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Close 12017 NT_STATUS_OK
Close 12018 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Close 12015 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12045 NT_STATUS_OK
ReadX 12045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12046 NT_STATUS_OK
ReadX 12046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12051 NT_STATUS_OK
ReadX 12051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12052 NT_STATUS_OK
ReadX 12052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12053 NT_STATUS_OK
ReadX 12053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12055 NT_STATUS_OK
ReadX 12055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12056 NT_STATUS_OK
ReadX 12056 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12061 NT_STATUS_OK
QUERY_FILE_INFORMATION 12061 1004 NT_STATUS_OK
WriteX 12061 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12061 258 NT_STATUS_OK
WriteX 12061 0 2048 2048 NT_STATUS_OK
Close 12061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12062 NT_STATUS_OK
ReadX 12062 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12064 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12064 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12068 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12069 NT_STATUS_OK
QUERY_FILE_INFORMATION 12069 1004 NT_STATUS_OK
WriteX 12069 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12069 258 NT_STATUS_OK
WriteX 12069 0 2048 2048 NT_STATUS_OK
Close 12069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12062 0 4096 4096 NT_STATUS_OK
Flush 12062 NT_STATUS_OK
WriteX 12070 0 4096 4096 NT_STATUS_OK
Flush 12070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12062 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12070 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12064 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12071 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12072 NT_STATUS_OK
WriteX 12072 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12072 258 NT_STATUS_OK
WriteX 12072 0 4096 4096 NT_STATUS_OK
Close 12072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12074 NT_STATUS_OK
Close 12074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12075 NT_STATUS_OK
WriteX 12075 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12075 258 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12076 NT_STATUS_OK
ReadX 12076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12076 0 4096 4096 NT_STATUS_OK
Close 12073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12056 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Close 12064 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Close 12054 NT_STATUS_OK
Close 12055 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12045 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12079 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12081 NT_STATUS_OK
ReadX 12081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12083 NT_STATUS_OK
WriteX 12083 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12083 258 NT_STATUS_OK
WriteX 12083 0 2048 2048 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12084 NT_STATUS_OK
ReadX 12084 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12086 NT_STATUS_OK
ReadX 12086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12087 NT_STATUS_OK
ReadX 12087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12088 NT_STATUS_OK
ReadX 12088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12096 NT_STATUS_OK
ReadX 12096 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12097 NT_STATUS_OK
ReadX 12097 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12098 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12081 NT_STATUS_OK
Close 12084 NT_STATUS_OK
Close 12096 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Close 12093 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Close 12097 NT_STATUS_OK
Close 12085 NT_STATUS_OK
Close 12086 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Close 12087 NT_STATUS_OK
Close 12088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12100 NT_STATUS_OK
QUERY_FILE_INFORMATION 12100 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12102 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12103 NT_STATUS_OK
ReadX 12103 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12105 NT_STATUS_OK
ReadX 12105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12109 NT_STATUS_OK
ReadX 12109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12110 NT_STATUS_OK
ReadX 12110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12111 NT_STATUS_OK
ReadX 12111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12112 NT_STATUS_OK
ReadX 12112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12114 NT_STATUS_OK
ReadX 12114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12120 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 1004 NT_STATUS_OK
WriteX 12120 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 258 NT_STATUS_OK
WriteX 12120 0 2048 2048 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12122 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12125 NT_STATUS_OK
ReadX 12125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12126 NT_STATUS_OK
ReadX 12126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12132 NT_STATUS_OK
QUERY_FILE_INFORMATION 12132 1004 NT_STATUS_OK
WriteX 12132 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12132 258 NT_STATUS_OK
WriteX 12132 0 2048 2048 NT_STATUS_OK
Close 12132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12135 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12140 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 1004 NT_STATUS_OK
WriteX 12140 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 258 NT_STATUS_OK
WriteX 12140 0 2048 2048 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
Flush 12121 NT_STATUS_OK
WriteX 12133 0 4096 4096 NT_STATUS_OK
Flush 12133 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12133 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12123 4096 16384 16384 NT_STATUS_OK
ReadX 12103 4096 16384 16384 NT_STATUS_OK
ReadX 12135 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12143 NT_STATUS_OK
ReadX 12143 0 2048 2048 NT_STATUS_OK
WriteX 12143 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12144 NT_STATUS_OK
QUERY_FILE_INFORMATION 12144 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12143 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Close 12123 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Close 12125 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Close 12135 NT_STATUS_OK
Close 12109 NT_STATUS_OK
Close 12112 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Close 12110 NT_STATUS_OK
Close 12111 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12146 NT_STATUS_OK
QUERY_FILE_INFORMATION 12146 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12148 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12151 NT_STATUS_OK
ReadX 12151 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12152 NT_STATUS_OK
ReadX 12152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12153 NT_STATUS_OK
ReadX 12153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12151 4096 16384 16384 NT_STATUS_OK
WriteX 12151 0 4096 4096 NT_STATUS_OK
WriteX 12152 0 4096 4096 NT_STATUS_OK
WriteX 12153 0 4096 4096 NT_STATUS_OK
WriteX 12154 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12158 NT_STATUS_OK
ReadX 12158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12160 NT_STATUS_OK
ReadX 12160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12163 NT_STATUS_OK
ReadX 12163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12164 NT_STATUS_OK
ReadX 12164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12165 NT_STATUS_OK
ReadX 12165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12166 NT_STATUS_OK
ReadX 12166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12168 NT_STATUS_OK
ReadX 12168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 8192 8192 NT_STATUS_OK
ReadX 12157 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12171 0 4096 4096 NT_STATUS_OK
ReadX 12171 4096 4096 4096 NT_STATUS_OK
ReadX 12171 8192 4096 4096 NT_STATUS_OK
WriteX 12157 0 4096 4096 NT_STATUS_OK
WriteX 12158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
ReadX 12172 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12151 0 4096 4096 NT_STATUS_OK
WriteX 12152 0 4096 4096 NT_STATUS_OK
WriteX 12153 0 4096 4096 NT_STATUS_OK
WriteX 12154 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12177 NT_STATUS_OK
QUERY_FILE_INFORMATION 12177 1004 NT_STATUS_OK
WriteX 12177 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12177 258 NT_STATUS_OK
WriteX 12177 0 2048 2048 NT_STATUS_OK
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12178 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12178 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 0 4096 4096 NT_STATUS_OK
ReadX 12180 4096 4096 4096 NT_STATUS_OK
WriteX 12180 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12178 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12182 NT_STATUS_OK
ReadX 12182 0 4096 4096 NT_STATUS_OK
ReadX 12182 4096 4096 4096 NT_STATUS_OK
WriteX 12182 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12183 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12170 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12151 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Close 12154 NT_STATUS_OK
Close 12163 NT_STATUS_OK
Close 12168 NT_STATUS_OK
Close 12164 NT_STATUS_OK
Close 12165 NT_STATUS_OK
Close 12166 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Close 12169 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12158 NT_STATUS_OK
Close 12161 NT_STATUS_OK
Close 12162 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12160 NT_STATUS_OK
Close 12182 NT_STATUS_OK
Close 12171 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12185 0 4096 4096 NT_STATUS_OK
ReadX 12185 4096 4096 4096 NT_STATUS_OK
ReadX 12185 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12187 NT_STATUS_OK
ReadX 12187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12188 NT_STATUS_OK
ReadX 12188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12189 NT_STATUS_OK
ReadX 12189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12190 NT_STATUS_OK
ReadX 12190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12196 NT_STATUS_OK
ReadX 12196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12198 NT_STATUS_OK
ReadX 12198 0 4096 4096 NT_STATUS_OK
ReadX 12186 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12202 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12203 NT_STATUS_OK
QUERY_FILE_INFORMATION 12203 1004 NT_STATUS_OK
WriteX 12203 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12203 258 NT_STATUS_OK
WriteX 12203 0 2048 2048 NT_STATUS_OK
Close 12203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12204 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12209 NT_STATUS_OK
QUERY_FILE_INFORMATION 12209 1004 NT_STATUS_OK
WriteX 12209 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12209 258 NT_STATUS_OK
WriteX 12209 0 2048 2048 NT_STATUS_OK
Close 12209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12210 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12193 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12211 NT_STATUS_OK
QUERY_FILE_INFORMATION 12211 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12197 NT_STATUS_OK
Close 12192 NT_STATUS_OK
Close 12198 NT_STATUS_OK
Close 12186 NT_STATUS_OK
Close 12187 NT_STATUS_OK
Close 12190 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12188 NT_STATUS_OK
Close 12189 NT_STATUS_OK
Close 12193 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Close 12196 NT_STATUS_OK
Close 12185 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12213 NT_STATUS_OK
QUERY_FILE_INFORMATION 12213 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 61440 4096 4096 NT_STATUS_OK
ReadX 12215 126976 4096 4096 NT_STATUS_OK
WriteX 12215 0 65536 65536 NT_STATUS_OK
WriteX 12215 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 61440 4096 4096 NT_STATUS_OK
ReadX 12216 126976 4096 4096 NT_STATUS_OK
ReadX 12216 192512 4096 4096 NT_STATUS_OK
ReadX 12216 258048 4096 4096 NT_STATUS_OK
WriteX 12216 0 65536 65536 NT_STATUS_OK
WriteX 12216 65536 65536 65536 NT_STATUS_OK
WriteX 12216 131072 65536 65536 NT_STATUS_OK
WriteX 12216 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 61440 4096 4096 NT_STATUS_OK
ReadX 12217 126976 4096 4096 NT_STATUS_OK
ReadX 12217 192512 4096 4096 NT_STATUS_OK
ReadX 12217 258048 4096 4096 NT_STATUS_OK
ReadX 12217 323584 4096 4096 NT_STATUS_OK
ReadX 12217 389120 4096 4096 NT_STATUS_OK
ReadX 12217 454656 4096 4096 NT_STATUS_OK
ReadX 12217 520192 4096 4096 NT_STATUS_OK
WriteX 12217 0 65536 65536 NT_STATUS_OK
WriteX 12217 65536 65536 65536 NT_STATUS_OK
WriteX 12217 131072 65536 65536 NT_STATUS_OK
WriteX 12217 196608 65536 65536 NT_STATUS_OK
WriteX 12217 262144 65536 65536 NT_STATUS_OK
WriteX 12217 327680 65536 65536 NT_STATUS_OK
WriteX 12217 393216 65536 65536 NT_STATUS_OK
WriteX 12217 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12218 NT_STATUS_OK
ReadX 12218 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12218 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12218 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12218 8192 4096 4096 NT_STATUS_OK
ReadX 12218 12288 4096 4096 NT_STATUS_OK
ReadX 12218 16384 4096 4096 NT_STATUS_OK
ReadX 12218 20480 4096 4096 NT_STATUS_OK
ReadX 12218 24576 4096 4096 NT_STATUS_OK
ReadX 12218 28672 4096 4096 NT_STATUS_OK
ReadX 12218 32768 4096 4096 NT_STATUS_OK
ReadX 12218 36864 4096 4096 NT_STATUS_OK
ReadX 12218 40960 4096 4096 NT_STATUS_OK
ReadX 12218 45056 4096 4096 NT_STATUS_OK
ReadX 12218 49152 4096 4096 NT_STATUS_OK
ReadX 12218 53248 4096 4096 NT_STATUS_OK
ReadX 12218 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12218 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12219 NT_STATUS_OK
Close 12219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Close 12217 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12221 NT_STATUS_OK
WriteX 12221 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12221 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12221 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12221 1004 NT_STATUS_OK
WriteX 12221 0 57088 57088 NT_STATUS_OK
WriteX 12221 0 4096 4096 NT_STATUS_OK
Flush 12221 NT_STATUS_OK
Close 12218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12222 NT_STATUS_OK
SET_FILE_INFORMATION 12222 1004 NT_STATUS_OK
Close 12222 NT_STATUS_OK
SET_FILE_INFORMATION 12221 1004 NT_STATUS_OK
WriteX 12221 0 4096 4096 NT_STATUS_OK
Close 12221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12223 NT_STATUS_OK
Close 12223 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12225 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12226 NT_STATUS_OK
WriteX 12226 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12226 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12226 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
WriteX 12226 0 51456 51456 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Flush 12226 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Close 12226 NT_STATUS_OK
Close 12225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12228 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12230 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12235 NT_STATUS_OK
WriteX 12235 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 53077 53077 NT_STATUS_OK
Close 12235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12236 NT_STATUS_OK
WriteX 12236 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12236 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12236 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 65536 65536 NT_STATUS_OK
WriteX 12236 65536 1856 1856 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12238 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12240 NT_STATUS_OK
ReadX 12240 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12245 NT_STATUS_OK
WriteX 12245 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12245 258 NT_STATUS_OK
WriteX 12245 0 7983 7983 NT_STATUS_OK
Close 12245 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12250 NT_STATUS_OK
WriteX 12250 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12250 258 NT_STATUS_OK
WriteX 12250 0 65536 65536 NT_STATUS_OK
WriteX 12250 65536 65536 65536 NT_STATUS_OK
WriteX 12250 131072 65536 65536 NT_STATUS_OK
WriteX 12250 196608 65536 65536 NT_STATUS_OK
WriteX 12250 262144 65536 65536 NT_STATUS_OK
WriteX 12250 327680 65536 65536 NT_STATUS_OK
WriteX 12250 393216 65536 65536 NT_STATUS_OK
WriteX 12250 458752 46731 46731 NT_STATUS_OK
Close 12250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12251 NT_STATUS_OK
WriteX 12251 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12240 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 65536 65536 NT_STATUS_OK
WriteX 12251 65536 22848 22848 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Close 12251 NT_STATUS_OK
Close 12240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12253 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12255 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12256 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12256 1004 NT_STATUS_OK
ReadX 12256 8192 4096 4096 NT_STATUS_OK
ReadX 12256 12288 4096 4096 NT_STATUS_OK
ReadX 12256 16384 4096 4096 NT_STATUS_OK
ReadX 12256 20480 4096 4096 NT_STATUS_OK
ReadX 12256 24576 4096 4096 NT_STATUS_OK
ReadX 12256 28672 4096 4096 NT_STATUS_OK
ReadX 12256 32768 4096 4096 NT_STATUS_OK
ReadX 12256 36864 4096 4096 NT_STATUS_OK
ReadX 12256 40960 4096 4096 NT_STATUS_OK
ReadX 12256 45056 4096 4096 NT_STATUS_OK
ReadX 12256 49152 4096 4096 NT_STATUS_OK
ReadX 12256 53248 4096 4096 NT_STATUS_OK
ReadX 12256 57344 4096 4096 NT_STATUS_OK
ReadX 12256 61440 4096 4096 NT_STATUS_OK
ReadX 12256 65536 4096 4096 NT_STATUS_OK
ReadX 12256 69632 4096 4096 NT_STATUS_OK
ReadX 12256 73728 4096 4096 NT_STATUS_OK
ReadX 12256 77824 4096 4096 NT_STATUS_OK
ReadX 12256 81920 4096 4096 NT_STATUS_OK
ReadX 12256 86016 4096 4096 NT_STATUS_OK
ReadX 12256 90112 4096 4096 NT_STATUS_OK
ReadX 12256 94208 4096 4096 NT_STATUS_OK
ReadX 12256 98304 4096 4096 NT_STATUS_OK
ReadX 12256 102400 4096 4096 NT_STATUS_OK
ReadX 12256 106496 4096 4096 NT_STATUS_OK
ReadX 12256 110592 4096 4096 NT_STATUS_OK
ReadX 12256 114688 4096 4096 NT_STATUS_OK
ReadX 12256 118784 4096 4096 NT_STATUS_OK
ReadX 12256 122880 4096 4096 NT_STATUS_OK
ReadX 12256 126976 4096 4096 NT_STATUS_OK
ReadX 12256 131072 4096 4096 NT_STATUS_OK
ReadX 12256 135168 4096 4096 NT_STATUS_OK
ReadX 12256 139264 4096 4096 NT_STATUS_OK
ReadX 12256 143360 4096 4096 NT_STATUS_OK
ReadX 12256 147456 4096 4096 NT_STATUS_OK
ReadX 12256 151552 4096 4096 NT_STATUS_OK
ReadX 12256 155648 4096 4096 NT_STATUS_OK
ReadX 12256 159744 4096 4096 NT_STATUS_OK
ReadX 12256 163840 4096 4096 NT_STATUS_OK
ReadX 12256 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12256 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12259 NT_STATUS_OK
WriteX 12259 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12259 258 NT_STATUS_OK
Close 12256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12260 NT_STATUS_OK
SET_FILE_INFORMATION 12260 1004 NT_STATUS_OK
Close 12260 NT_STATUS_OK
WriteX 12259 0 42388 42388 NT_STATUS_OK
Close 12259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
ReadX 12263 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12264 NT_STATUS_OK
WriteX 12264 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12264 258 NT_STATUS_OK
SET_FILE_INFORMATION 12264 1004 NT_STATUS_OK
WriteX 12264 0 42652 42652 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12266 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
ReadX 12268 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12273 NT_STATUS_OK
WriteX 12273 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12273 258 NT_STATUS_OK
WriteX 12273 0 65536 65536 NT_STATUS_OK
WriteX 12273 65536 49 49 NT_STATUS_OK
Close 12273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 61440 61440 NT_STATUS_OK
ReadX 12274 61440 4096 4096 NT_STATUS_OK
ReadX 12274 65536 61440 61440 NT_STATUS_OK
ReadX 12274 126976 4096 4096 NT_STATUS_OK
ReadX 12274 131072 61440 61440 NT_STATUS_OK
ReadX 12274 192512 4096 4096 NT_STATUS_OK
ReadX 12274 196608 61440 61440 NT_STATUS_OK
ReadX 12274 258048 4096 4096 NT_STATUS_OK
ReadX 12274 262144 61440 61440 NT_STATUS_OK
ReadX 12274 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 61440 61440 NT_STATUS_OK
ReadX 12275 61440 4096 4096 NT_STATUS_OK
ReadX 12275 65536 61440 61440 NT_STATUS_OK
ReadX 12275 126976 4096 4096 NT_STATUS_OK
ReadX 12275 131072 61440 61440 NT_STATUS_OK
ReadX 12275 192512 4096 4096 NT_STATUS_OK
ReadX 12275 196608 61440 61440 NT_STATUS_OK
ReadX 12275 258048 4096 4096 NT_STATUS_OK
ReadX 12275 262144 61440 61440 NT_STATUS_OK
ReadX 12275 323584 4096 4096 NT_STATUS_OK
ReadX 12275 327680 61440 61440 NT_STATUS_OK
ReadX 12275 389120 4096 4096 NT_STATUS_OK
ReadX 12275 393216 61440 61440 NT_STATUS_OK
ReadX 12275 454656 4096 4096 NT_STATUS_OK
ReadX 12275 458752 61440 61440 NT_STATUS_OK
ReadX 12275 520192 4096 4096 NT_STATUS_OK
ReadX 12275 524288 61440 61440 NT_STATUS_OK
ReadX 12275 585728 4096 4096 NT_STATUS_OK
ReadX 12275 589824 61440 61440 NT_STATUS_OK
ReadX 12275 651264 4096 4096 NT_STATUS_OK
ReadX 12275 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 61440 61440 NT_STATUS_OK
ReadX 12276 61440 4096 4096 NT_STATUS_OK
ReadX 12276 65536 61440 61440 NT_STATUS_OK
ReadX 12276 126976 4096 4096 NT_STATUS_OK
ReadX 12276 131072 61440 61440 NT_STATUS_OK
ReadX 12276 192512 4096 4096 NT_STATUS_OK
ReadX 12276 196608 61440 61440 NT_STATUS_OK
ReadX 12276 258048 4096 4096 NT_STATUS_OK
ReadX 12276 262144 61440 61440 NT_STATUS_OK
ReadX 12276 323584 4096 4096 NT_STATUS_OK
ReadX 12276 327680 61440 61440 NT_STATUS_OK
ReadX 12276 389120 4096 4096 NT_STATUS_OK
ReadX 12276 393216 61440 61440 NT_STATUS_OK
ReadX 12276 454656 4096 4096 NT_STATUS_OK
ReadX 12276 458752 61440 61440 NT_STATUS_OK
ReadX 12276 520192 4096 4096 NT_STATUS_OK
ReadX 12276 524288 61440 61440 NT_STATUS_OK
ReadX 12276 585728 4096 4096 NT_STATUS_OK
ReadX 12276 589824 61440 61440 NT_STATUS_OK
ReadX 12276 651264 4096 4096 NT_STATUS_OK
ReadX 12276 655360 61440 61440 NT_STATUS_OK
ReadX 12276 716800 4096 4096 NT_STATUS_OK
ReadX 12276 720896 61440 61440 NT_STATUS_OK
ReadX 12276 782336 4096 4096 NT_STATUS_OK
ReadX 12276 786432 61440 61440 NT_STATUS_OK
ReadX 12276 847872 4096 4096 NT_STATUS_OK
ReadX 12276 851968 61440 61440 NT_STATUS_OK
ReadX 12276 913408 4096 4096 NT_STATUS_OK
ReadX 12276 917504 61440 61440 NT_STATUS_OK
ReadX 12276 978944 4096 4096 NT_STATUS_OK
ReadX 12276 983040 61440 61440 NT_STATUS_OK
ReadX 12276 1044480 4096 4096 NT_STATUS_OK
ReadX 12276 1048576 61440 61440 NT_STATUS_OK
ReadX 12276 1110016 4096 4096 NT_STATUS_OK
ReadX 12276 1114112 61440 61440 NT_STATUS_OK
ReadX 12276 1175552 4096 4096 NT_STATUS_OK
ReadX 12276 1179648 61440 61440 NT_STATUS_OK
ReadX 12276 1241088 4096 4096 NT_STATUS_OK
ReadX 12276 1245184 61440 61440 NT_STATUS_OK
ReadX 12276 1306624 4096 4096 NT_STATUS_OK
ReadX 12276 1310720 61440 61440 NT_STATUS_OK
ReadX 12276 1372160 4096 4096 NT_STATUS_OK
ReadX 12276 1376256 61440 61440 NT_STATUS_OK
ReadX 12276 1437696 4096 4096 NT_STATUS_OK
ReadX 12276 1441792 61440 61440 NT_STATUS_OK
ReadX 12276 1503232 4096 4096 NT_STATUS_OK
ReadX 12276 1507328 61440 61440 NT_STATUS_OK
ReadX 12276 1568768 4096 4096 NT_STATUS_OK
ReadX 12276 1572864 61440 61440 NT_STATUS_OK
ReadX 12276 1634304 4096 4096 NT_STATUS_OK
ReadX 12276 1638400 61440 61440 NT_STATUS_OK
ReadX 12276 1699840 4096 4096 NT_STATUS_OK
ReadX 12276 1703936 61440 61440 NT_STATUS_OK
ReadX 12276 1765376 4096 4096 NT_STATUS_OK
ReadX 12276 1769472 61440 61440 NT_STATUS_OK
ReadX 12276 1830912 4096 4096 NT_STATUS_OK
ReadX 12276 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12278 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12278 1005 NT_STATUS_OK
ReadX 12278 2156 24 24 NT_STATUS_OK
ReadX 12278 2139 276 276 NT_STATUS_OK
ReadX 12278 2136 14 14 NT_STATUS_OK
ReadX 12278 2136 7 7 NT_STATUS_OK
ReadX 12278 2138 12 12 NT_STATUS_OK
ReadX 12278 2137 8 8 NT_STATUS_OK
ReadX 12278 2135 15 15 NT_STATUS_OK
ReadX 12278 0 16 16 NT_STATUS_OK
ReadX 12278 16 2048 2048 NT_STATUS_OK
ReadX 12278 2064 2048 2048 NT_STATUS_OK
ReadX 12278 257 2048 2048 NT_STATUS_OK
ReadX 12278 385 2048 2048 NT_STATUS_OK
ReadX 12278 513 2048 2048 NT_STATUS_OK
ReadX 12278 641 2048 2048 NT_STATUS_OK
ReadX 12278 769 2048 2048 NT_STATUS_OK
ReadX 12278 897 2048 2048 NT_STATUS_OK
ReadX 12278 1025 2048 2048 NT_STATUS_OK
ReadX 12278 1153 2048 2048 NT_STATUS_OK
ReadX 12278 1281 2048 2048 NT_STATUS_OK
ReadX 12278 1409 2048 2048 NT_STATUS_OK
ReadX 12278 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12283 NT_STATUS_OK
WriteX 12283 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12283 258 NT_STATUS_OK
WriteX 12283 0 10575 10575 NT_STATUS_OK
Flush 12283 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12284 NT_STATUS_OK
Close 12284 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12288 NT_STATUS_OK
LockX 12288 2147483538 1 NT_STATUS_OK
UnlockX 12288 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1005 NT_STATUS_OK
ReadX 12288 0 512 512 NT_STATUS_OK
ReadX 12288 512 512 512 NT_STATUS_OK
ReadX 12288 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12288 1004 NT_STATUS_OK
Close 12288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12289 NT_STATUS_OK
QUERY_FILE_INFORMATION 12289 1005 NT_STATUS_OK
ReadX 12289 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12290 NT_STATUS_OK
LockX 12290 2147483538 1 NT_STATUS_OK
UnlockX 12290 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12290 1005 NT_STATUS_OK
ReadX 12290 0 512 512 NT_STATUS_OK
ReadX 12290 512 512 512 NT_STATUS_OK
ReadX 12290 1024 512 512 NT_STATUS_OK
ReadX 12290 288 20 20 NT_STATUS_OK
ReadX 12290 308 2084 2084 NT_STATUS_OK
ReadX 12290 388 2084 2084 NT_STATUS_OK
ReadX 12290 388 2084 2084 NT_STATUS_OK
ReadX 12277 2157 1386 1386 NT_STATUS_OK
ReadX 12290 2472 399 399 NT_STATUS_OK
ReadX 12290 3072 1536 1536 NT_STATUS_OK
ReadX 12290 544 149 149 NT_STATUS_OK
ReadX 12290 693 485 485 NT_STATUS_OK
Close 12290 NT_STATUS_OK
ReadX 12277 2157 4096 4096 NT_STATUS_OK
ReadX 12277 6253 4096 4096 NT_STATUS_OK
ReadX 12277 10349 4096 4096 NT_STATUS_OK
ReadX 12277 14445 4096 4096 NT_STATUS_OK
ReadX 12277 18541 4096 4096 NT_STATUS_OK
ReadX 12277 22637 256 256 NT_STATUS_OK
ReadX 12277 22893 4096 4096 NT_STATUS_OK
ReadX 12277 26989 4096 4096 NT_STATUS_OK
ReadX 12277 31085 4096 4096 NT_STATUS_OK
ReadX 12277 35181 4096 4096 NT_STATUS_OK
ReadX 12277 39277 4096 4096 NT_STATUS_OK
ReadX 12277 43373 4096 4096 NT_STATUS_OK
ReadX 12277 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12277 2157 1024 1024 NT_STATUS_OK
ReadX 12277 1667 4688 4688 NT_STATUS_OK
ReadX 12277 6355 3516 3516 NT_STATUS_OK
ReadX 12277 9871 16384 16384 NT_STATUS_OK
ReadX 12277 26255 3771 3771 NT_STATUS_OK
ReadX 12277 30026 2048 2048 NT_STATUS_OK
ReadX 12277 32074 1024 1024 NT_STATUS_OK
ReadX 12277 33098 6652 6652 NT_STATUS_OK
ReadX 12277 39750 16384 16384 NT_STATUS_OK
ReadX 12277 56134 10496 10496 NT_STATUS_OK
ReadX 12277 66630 1784 1784 NT_STATUS_OK
ReadX 12277 68414 90 90 NT_STATUS_OK
ReadX 12277 68504 273 273 NT_STATUS_OK
ReadX 12277 68777 1600 1600 NT_STATUS_OK
ReadX 12277 70377 640 640 NT_STATUS_OK
ReadX 12277 71017 1280 1280 NT_STATUS_OK
ReadX 12277 72297 8464 8464 NT_STATUS_OK
ReadX 12277 80761 158 158 NT_STATUS_OK
ReadX 12277 80919 912 912 NT_STATUS_OK
ReadX 12277 81831 1980 1980 NT_STATUS_OK
ReadX 12277 83811 2256 2256 NT_STATUS_OK
ReadX 12277 86067 400 400 NT_STATUS_OK
ReadX 12277 86467 252 252 NT_STATUS_OK
ReadX 12277 86719 42 42 NT_STATUS_OK
ReadX 12277 86761 725 725 NT_STATUS_OK
ReadX 12277 2009 512 512 NT_STATUS_OK
ReadX 12277 3895 9 9 NT_STATUS_OK
ReadX 12277 3781 46 46 NT_STATUS_OK
ReadX 12277 4059 92 92 NT_STATUS_OK
ReadX 12277 3781 92 92 NT_STATUS_OK
ReadX 12277 3986 184 184 NT_STATUS_OK
ReadX 12277 3987 16384 16384 NT_STATUS_OK
ReadX 12277 3902 16384 16384 NT_STATUS_OK
ReadX 12277 3781 10240 10240 NT_STATUS_OK
ReadX 12277 3821 16384 16384 NT_STATUS_OK
ReadX 12277 3891 935 935 NT_STATUS_OK
ReadX 12277 4060 10240 10240 NT_STATUS_OK
ReadX 12277 4059 184 184 NT_STATUS_OK
ReadX 12277 256 184 184 NT_STATUS_OK
ReadX 12277 256 1026 1026 NT_STATUS_OK
ReadX 12277 3901 326 326 NT_STATUS_OK
ReadX 12277 3899 652 652 NT_STATUS_OK
ReadX 12277 256 2 2 NT_STATUS_OK
ReadX 12277 258 4948 4948 NT_STATUS_OK
Close 12277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12295 NT_STATUS_OK
WriteX 12295 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12295 258 NT_STATUS_OK
WriteX 12295 0 65536 65536 NT_STATUS_OK
WriteX 12295 65536 65536 65536 NT_STATUS_OK
WriteX 12295 131072 65536 65536 NT_STATUS_OK
WriteX 12295 196608 65536 65536 NT_STATUS_OK
WriteX 12295 262144 65536 65536 NT_STATUS_OK
WriteX 12295 327680 65536 65536 NT_STATUS_OK
WriteX 12295 393216 65536 65536 NT_STATUS_OK
WriteX 12295 458752 65536 65536 NT_STATUS_OK
WriteX 12295 524288 65536 65536 NT_STATUS_OK
WriteX 12295 589824 35257 35257 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12300 NT_STATUS_OK
WriteX 12300 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 65536 65536 NT_STATUS_OK
WriteX 12300 131072 65536 65536 NT_STATUS_OK
WriteX 12300 196608 65536 65536 NT_STATUS_OK
WriteX 12300 262144 65536 65536 NT_STATUS_OK
WriteX 12300 327680 65536 65536 NT_STATUS_OK
WriteX 12300 393216 65536 65536 NT_STATUS_OK
WriteX 12300 458752 65536 65536 NT_STATUS_OK
WriteX 12300 524288 65536 65536 NT_STATUS_OK
WriteX 12300 589824 57598 57598 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12302 NT_STATUS_OK
WriteX 12302 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12302 258 NT_STATUS_OK
WriteX 12302 0 12543 12543 NT_STATUS_OK
Flush 12302 NT_STATUS_OK
Close 12302 NT_STATUS_OK
Close 12286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12304 NT_STATUS_OK
Close 12304 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12308 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1005 NT_STATUS_OK
ReadX 12308 1938 24 24 NT_STATUS_OK
ReadX 12308 1920 276 276 NT_STATUS_OK
ReadX 12308 1918 14 14 NT_STATUS_OK
ReadX 12308 1918 7 7 NT_STATUS_OK
ReadX 12308 1919 12 12 NT_STATUS_OK
ReadX 12308 1919 8 8 NT_STATUS_OK
ReadX 12308 1917 15 15 NT_STATUS_OK
ReadX 12308 0 16 16 NT_STATUS_OK
ReadX 12308 16 2048 2048 NT_STATUS_OK
ReadX 12308 2064 2048 2048 NT_STATUS_OK
ReadX 12308 257 2048 2048 NT_STATUS_OK
ReadX 12308 385 2048 2048 NT_STATUS_OK
ReadX 12308 513 2048 2048 NT_STATUS_OK
ReadX 12308 641 2048 2048 NT_STATUS_OK
ReadX 12308 769 2048 2048 NT_STATUS_OK
ReadX 12308 897 2048 2048 NT_STATUS_OK
ReadX 12308 1025 2048 2048 NT_STATUS_OK
ReadX 12308 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12310 NT_STATUS_OK
Close 12310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12313 NT_STATUS_OK
WriteX 12313 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12313 258 NT_STATUS_OK
WriteX 12313 0 11588 11588 NT_STATUS_OK
Flush 12313 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12314 NT_STATUS_OK
Close 12314 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12316 NT_STATUS_OK
ReadX 12316 0 4096 4096 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12318 NT_STATUS_OK
WriteX 12318 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12318 258 NT_STATUS_OK
WriteX 12318 0 11615 11615 NT_STATUS_OK
Flush 12318 NT_STATUS_OK
Close 12318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12320 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12324 NT_STATUS_OK
Close 12324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12327 NT_STATUS_OK
WriteX 12327 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 65536 65536 NT_STATUS_OK
WriteX 12327 65536 16050 16050 NT_STATUS_OK
Close 12327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12307 1939 64 64 NT_STATUS_OK
ReadX 12307 128 248 248 NT_STATUS_OK
ReadX 12307 128 568 568 NT_STATUS_OK
ReadX 12307 3872 1536 1536 NT_STATUS_OK
ReadX 12307 3456 2560 2560 NT_STATUS_OK
ReadX 12307 3136 512 512 NT_STATUS_OK
ReadX 12307 2880 4096 4096 NT_STATUS_OK
ReadX 12307 3264 3072 3072 NT_STATUS_OK
ReadX 12307 320 4096 4096 NT_STATUS_OK
ReadX 12307 1024 4096 4096 NT_STATUS_OK
ReadX 12307 3616 4096 4096 NT_STATUS_OK
ReadX 12307 1939 64 64 NT_STATUS_OK
ReadX 12307 128 248 248 NT_STATUS_OK
ReadX 12307 128 608 608 NT_STATUS_OK
ReadX 12307 2858 1024 1024 NT_STATUS_OK
ReadX 12307 2810 4096 4096 NT_STATUS_OK
ReadX 12307 2826 4096 4096 NT_STATUS_OK
ReadX 12307 2580 2048 2048 NT_STATUS_OK
ReadX 12307 2800 2560 2560 NT_STATUS_OK
ReadX 12307 2100 4096 4096 NT_STATUS_OK
ReadX 12307 2084 4096 4096 NT_STATUS_OK
ReadX 12307 868 4096 4096 NT_STATUS_OK
ReadX 12307 2324 4096 4096 NT_STATUS_OK
ReadX 12307 884 4096 4096 NT_STATUS_OK
ReadX 12307 2604 1024 1024 NT_STATUS_OK
ReadX 12307 580 4096 4096 NT_STATUS_OK
ReadX 12307 596 4096 4096 NT_STATUS_OK
ReadX 12307 2752 4096 4096 NT_STATUS_OK
ReadX 12307 2842 1024 1024 NT_STATUS_OK
ReadX 12307 660 4096 4096 NT_STATUS_OK
ReadX 12307 2720 4096 4096 NT_STATUS_OK
ReadX 12307 2736 4096 4096 NT_STATUS_OK
ReadX 12307 628 4096 4096 NT_STATUS_OK
ReadX 12307 2704 4096 4096 NT_STATUS_OK
ReadX 12307 1556 4096 4096 NT_STATUS_OK
ReadX 12307 576 4096 4096 NT_STATUS_OK
ReadX 12307 3168 1536 1536 NT_STATUS_OK
ReadX 12307 832 4096 4096 NT_STATUS_OK
ReadX 12307 1088 4096 4096 NT_STATUS_OK
ReadX 12307 1344 4096 4096 NT_STATUS_OK
ReadX 12307 1600 4096 4096 NT_STATUS_OK
ReadX 12307 1856 4096 4096 NT_STATUS_OK
ReadX 12307 2112 4096 4096 NT_STATUS_OK
ReadX 12307 1892 4096 4096 NT_STATUS_OK
ReadX 12307 820 4096 4096 NT_STATUS_OK
ReadX 12307 788 4096 4096 NT_STATUS_OK
ReadX 12307 1604 4096 4096 NT_STATUS_OK
ReadX 12307 3648 4096 4096 NT_STATUS_OK
ReadX 12307 2608 4096 4096 NT_STATUS_OK
ReadX 12307 548 4096 4096 NT_STATUS_OK
ReadX 12307 740 4096 4096 NT_STATUS_OK
ReadX 12307 1344 4096 4096 NT_STATUS_OK
ReadX 12307 3392 4096 4096 NT_STATUS_OK
ReadX 12307 3904 4096 4096 NT_STATUS_OK
ReadX 12307 644 4096 4096 NT_STATUS_OK
ReadX 12307 676 4096 4096 NT_STATUS_OK
ReadX 12307 2688 4096 4096 NT_STATUS_OK
ReadX 12307 320 4096 4096 NT_STATUS_OK
ReadX 12307 900 4096 4096 NT_STATUS_OK
ReadX 12307 1908 4096 4096 NT_STATUS_OK
ReadX 12307 852 4096 4096 NT_STATUS_OK
ReadX 12307 724 4096 4096 NT_STATUS_OK
ReadX 12307 2292 4096 4096 NT_STATUS_OK
ReadX 12307 612 4096 4096 NT_STATUS_OK
ReadX 12307 388 4096 4096 NT_STATUS_OK
ReadX 12307 2368 4096 4096 NT_STATUS_OK
ReadX 12307 2624 4096 4096 NT_STATUS_OK
ReadX 12307 500 4096 4096 NT_STATUS_OK
ReadX 12307 356 4096 4096 NT_STATUS_OK
ReadX 12307 1024 4096 4096 NT_STATUS_OK
ReadX 12307 576 4096 4096 NT_STATUS_OK
ReadX 12307 340 4096 4096 NT_STATUS_OK
ReadX 12307 420 4096 4096 NT_STATUS_OK
ReadX 12307 1600 4096 4096 NT_STATUS_OK
ReadX 12307 404 4096 4096 NT_STATUS_OK
ReadX 12307 1428 4096 4096 NT_STATUS_OK
ReadX 12307 2656 4096 4096 NT_STATUS_OK
ReadX 12307 2624 4096 4096 NT_STATUS_OK
ReadX 12307 452 4096 4096 NT_STATUS_OK
ReadX 12307 692 4096 4096 NT_STATUS_OK
ReadX 12307 564 4096 4096 NT_STATUS_OK
ReadX 12307 372 4096 4096 NT_STATUS_OK
ReadX 12307 468 4096 4096 NT_STATUS_OK
ReadX 12307 484 4096 4096 NT_STATUS_OK
ReadX 12307 1088 4096 4096 NT_STATUS_OK
ReadX 12307 1924 4096 4096 NT_STATUS_OK
ReadX 12307 2768 4096 4096 NT_STATUS_OK
ReadX 12307 832 4096 4096 NT_STATUS_OK
ReadX 12307 836 4096 4096 NT_STATUS_OK
ReadX 12307 1856 4096 4096 NT_STATUS_OK
ReadX 12307 2640 4096 4096 NT_STATUS_OK
ReadX 12307 436 4096 4096 NT_STATUS_OK
ReadX 12307 1828 4096 4096 NT_STATUS_OK
ReadX 12307 804 4096 4096 NT_STATUS_OK
ReadX 12307 1860 4096 4096 NT_STATUS_OK
ReadX 12307 1812 4096 4096 NT_STATUS_OK
ReadX 12307 756 4096 4096 NT_STATUS_OK
ReadX 12307 1636 4096 4096 NT_STATUS_OK
ReadX 12307 772 4096 4096 NT_STATUS_OK
ReadX 12307 2036 4096 4096 NT_STATUS_OK
ReadX 12307 1220 4096 4096 NT_STATUS_OK
ReadX 12307 1652 4096 4096 NT_STATUS_OK
ReadX 12307 2588 4096 4096 NT_STATUS_OK
ReadX 12307 916 4096 4096 NT_STATUS_OK
ReadX 12307 260 4096 4096 NT_STATUS_OK
ReadX 12307 932 4096 4096 NT_STATUS_OK
ReadX 12307 2624 4096 4096 NT_STATUS_OK
ReadX 12307 308 4096 4096 NT_STATUS_OK
ReadX 12307 292 4096 4096 NT_STATUS_OK
ReadX 12307 1140 4096 4096 NT_STATUS_OK
ReadX 12307 276 4096 4096 NT_STATUS_OK
ReadX 12307 2020 4096 4096 NT_STATUS_OK
ReadX 12307 2880 4096 4096 NT_STATUS_OK
ReadX 12307 516 4096 4096 NT_STATUS_OK
ReadX 12307 1844 4096 4096 NT_STATUS_OK
ReadX 12307 1124 4096 4096 NT_STATUS_OK
ReadX 12307 3136 4096 4096 NT_STATUS_OK
ReadX 12307 324 4096 4096 NT_STATUS_OK
ReadX 12307 1156 4096 4096 NT_STATUS_OK
ReadX 12307 1172 4096 4096 NT_STATUS_OK
ReadX 12307 2112 4096 4096 NT_STATUS_OK
ReadX 12307 2368 4096 4096 NT_STATUS_OK
ReadX 12307 964 4096 4096 NT_STATUS_OK
ReadX 12307 980 4096 4096 NT_STATUS_OK
ReadX 12307 1012 4096 4096 NT_STATUS_OK
ReadX 12307 532 4096 4096 NT_STATUS_OK
ReadX 12307 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12307 1620 4096 4096 NT_STATUS_OK
ReadX 12307 1604 4096 4096 NT_STATUS_OK
ReadX 12307 2116 4096 4096 NT_STATUS_OK
ReadX 12307 2132 4096 4096 NT_STATUS_OK
ReadX 12307 2148 4096 4096 NT_STATUS_OK
ReadX 12307 2276 4096 4096 NT_STATUS_OK
ReadX 12307 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12332 NT_STATUS_OK
QUERY_FILE_INFORMATION 12287 1004 NT_STATUS_OK
Close 12287 NT_STATUS_OK
WriteX 12332 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12332 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12289 1004 NT_STATUS_OK
Close 12289 NT_STATUS_OK
WriteX 12332 0 65536 65536 NT_STATUS_OK
WriteX 12332 65536 64850 64850 NT_STATUS_OK
Close 12332 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12334 NT_STATUS_OK
WriteX 12334 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
ReadX 12307 2068 4096 4096 NT_STATUS_OK
ReadX 12307 1588 4096 4096 NT_STATUS_OK
ReadX 12307 1572 4096 4096 NT_STATUS_OK
WriteX 12334 0 18630 18630 NT_STATUS_OK
Flush 12334 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12307 612 4096 4096 NT_STATUS_OK
ReadX 12307 564 4096 4096 NT_STATUS_OK
ReadX 12307 1876 4096 4096 NT_STATUS_OK
ReadX 12307 628 4096 4096 NT_STATUS_OK
ReadX 12307 740 4096 4096 NT_STATUS_OK
ReadX 12307 724 4096 4096 NT_STATUS_OK
ReadX 12307 644 4096 4096 NT_STATUS_OK
ReadX 12307 2324 4096 4096 NT_STATUS_OK
ReadX 12307 660 4096 4096 NT_STATUS_OK
ReadX 12307 852 4096 4096 NT_STATUS_OK
ReadX 12307 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12307 2368 4096 4096 NT_STATUS_OK
ReadX 12307 1024 4096 4096 NT_STATUS_OK
ReadX 12307 320 4096 4096 NT_STATUS_OK
ReadX 12307 580 4096 4096 NT_STATUS_OK
ReadX 12307 3136 512 512 NT_STATUS_OK
ReadX 12307 2880 4096 4096 NT_STATUS_OK
Close 12307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12339 NT_STATUS_OK
ReadX 12339 61440 4096 4096 NT_STATUS_OK
ReadX 12339 126976 4096 4096 NT_STATUS_OK
WriteX 12339 0 65536 65536 NT_STATUS_OK
WriteX 12339 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 61440 4096 4096 NT_STATUS_OK
ReadX 12340 126976 4096 4096 NT_STATUS_OK
ReadX 12340 192512 4096 4096 NT_STATUS_OK
ReadX 12340 258048 4096 4096 NT_STATUS_OK
WriteX 12340 0 65536 65536 NT_STATUS_OK
WriteX 12340 65536 65536 65536 NT_STATUS_OK
WriteX 12340 131072 65536 65536 NT_STATUS_OK
WriteX 12340 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12341 NT_STATUS_OK
ReadX 12341 61440 4096 4096 NT_STATUS_OK
ReadX 12341 126976 4096 4096 NT_STATUS_OK
ReadX 12341 192512 4096 4096 NT_STATUS_OK
ReadX 12341 258048 4096 4096 NT_STATUS_OK
ReadX 12341 323584 4096 4096 NT_STATUS_OK
ReadX 12341 389120 4096 4096 NT_STATUS_OK
ReadX 12341 454656 4096 4096 NT_STATUS_OK
ReadX 12341 520192 4096 4096 NT_STATUS_OK
WriteX 12341 0 65536 65536 NT_STATUS_OK
WriteX 12341 65536 65536 65536 NT_STATUS_OK
WriteX 12341 131072 65536 65536 NT_STATUS_OK
WriteX 12341 196608 65536 65536 NT_STATUS_OK
WriteX 12341 262144 65536 65536 NT_STATUS_OK
WriteX 12341 327680 65536 65536 NT_STATUS_OK
WriteX 12341 393216 65536 65536 NT_STATUS_OK
WriteX 12341 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12344 NT_STATUS_OK
WriteX 12344 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12344 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12342 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12342 0 8192 8192 NT_STATUS_OK
Flush 12342 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12346 NT_STATUS_OK
Close 12346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12338 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12339 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Close 12341 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12349 NT_STATUS_OK
WriteX 12349 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12349 258 NT_STATUS_OK
WriteX 12349 0 62591 62591 NT_STATUS_OK
Close 12349 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12351 NT_STATUS_OK
Close 12351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12354 NT_STATUS_OK
WriteX 12354 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12354 258 NT_STATUS_OK
WriteX 12354 0 10845 10845 NT_STATUS_OK
Close 12354 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12359 NT_STATUS_OK
WriteX 12359 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12359 258 NT_STATUS_OK
WriteX 12359 0 30118 30118 NT_STATUS_OK
Close 12359 NT_STATUS_OK
WriteX 12342 0 4096 4096 NT_STATUS_OK
WriteX 12344 0 64 64 NT_STATUS_OK
Close 12344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 61440 61440 NT_STATUS_OK
ReadX 12361 61440 4096 4096 NT_STATUS_OK
ReadX 12361 65536 61440 61440 NT_STATUS_OK
ReadX 12361 126976 4096 4096 NT_STATUS_OK
ReadX 12361 131072 61440 61440 NT_STATUS_OK
ReadX 12361 192512 4096 4096 NT_STATUS_OK
ReadX 12361 196608 61440 61440 NT_STATUS_OK
ReadX 12361 258048 4096 4096 NT_STATUS_OK
ReadX 12361 262144 61440 61440 NT_STATUS_OK
ReadX 12361 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 61440 61440 NT_STATUS_OK
ReadX 12362 61440 4096 4096 NT_STATUS_OK
ReadX 12362 65536 61440 61440 NT_STATUS_OK
ReadX 12362 126976 4096 4096 NT_STATUS_OK
ReadX 12362 131072 61440 61440 NT_STATUS_OK
ReadX 12362 192512 4096 4096 NT_STATUS_OK
ReadX 12362 196608 61440 61440 NT_STATUS_OK
ReadX 12362 258048 4096 4096 NT_STATUS_OK
ReadX 12362 262144 61440 61440 NT_STATUS_OK
ReadX 12362 323584 4096 4096 NT_STATUS_OK
ReadX 12362 327680 61440 61440 NT_STATUS_OK
ReadX 12362 389120 4096 4096 NT_STATUS_OK
ReadX 12362 393216 61440 61440 NT_STATUS_OK
ReadX 12362 454656 4096 4096 NT_STATUS_OK
ReadX 12362 458752 61440 61440 NT_STATUS_OK
ReadX 12362 520192 4096 4096 NT_STATUS_OK
ReadX 12362 524288 61440 61440 NT_STATUS_OK
ReadX 12362 585728 4096 4096 NT_STATUS_OK
ReadX 12362 589824 61440 61440 NT_STATUS_OK
ReadX 12362 651264 4096 4096 NT_STATUS_OK
ReadX 12362 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 61440 61440 NT_STATUS_OK
ReadX 12363 61440 4096 4096 NT_STATUS_OK
ReadX 12363 65536 61440 61440 NT_STATUS_OK
ReadX 12363 126976 4096 4096 NT_STATUS_OK
ReadX 12363 131072 61440 61440 NT_STATUS_OK
ReadX 12363 192512 4096 4096 NT_STATUS_OK
ReadX 12363 196608 61440 61440 NT_STATUS_OK
ReadX 12363 258048 4096 4096 NT_STATUS_OK
ReadX 12363 262144 61440 61440 NT_STATUS_OK
ReadX 12363 323584 4096 4096 NT_STATUS_OK
ReadX 12363 327680 61440 61440 NT_STATUS_OK
ReadX 12363 389120 4096 4096 NT_STATUS_OK
ReadX 12363 393216 61440 61440 NT_STATUS_OK
ReadX 12363 454656 4096 4096 NT_STATUS_OK
ReadX 12363 458752 61440 61440 NT_STATUS_OK
ReadX 12363 520192 4096 4096 NT_STATUS_OK
ReadX 12363 524288 61440 61440 NT_STATUS_OK
ReadX 12363 585728 4096 4096 NT_STATUS_OK
ReadX 12363 589824 61440 61440 NT_STATUS_OK
ReadX 12363 651264 4096 4096 NT_STATUS_OK
ReadX 12363 655360 61440 61440 NT_STATUS_OK
ReadX 12363 716800 4096 4096 NT_STATUS_OK
ReadX 12363 720896 61440 61440 NT_STATUS_OK
ReadX 12363 782336 4096 4096 NT_STATUS_OK
ReadX 12363 786432 61440 61440 NT_STATUS_OK
ReadX 12363 847872 4096 4096 NT_STATUS_OK
ReadX 12363 851968 61440 61440 NT_STATUS_OK
ReadX 12363 913408 4096 4096 NT_STATUS_OK
ReadX 12363 917504 61440 61440 NT_STATUS_OK
ReadX 12363 978944 4096 4096 NT_STATUS_OK
ReadX 12363 983040 61440 61440 NT_STATUS_OK
ReadX 12363 1044480 4096 4096 NT_STATUS_OK
ReadX 12363 1048576 61440 61440 NT_STATUS_OK
ReadX 12363 1110016 4096 4096 NT_STATUS_OK
ReadX 12363 1114112 61440 61440 NT_STATUS_OK
ReadX 12363 1175552 4096 4096 NT_STATUS_OK
ReadX 12363 1179648 61440 61440 NT_STATUS_OK
ReadX 12363 1241088 4096 4096 NT_STATUS_OK
ReadX 12363 1245184 61440 61440 NT_STATUS_OK
ReadX 12363 1306624 4096 4096 NT_STATUS_OK
ReadX 12363 1310720 61440 61440 NT_STATUS_OK
ReadX 12363 1372160 4096 4096 NT_STATUS_OK
ReadX 12363 1376256 61440 61440 NT_STATUS_OK
ReadX 12363 1437696 4096 4096 NT_STATUS_OK
ReadX 12363 1441792 61440 61440 NT_STATUS_OK
ReadX 12363 1503232 4096 4096 NT_STATUS_OK
ReadX 12363 1507328 61440 61440 NT_STATUS_OK
ReadX 12363 1568768 4096 4096 NT_STATUS_OK
ReadX 12363 1572864 61440 61440 NT_STATUS_OK
ReadX 12363 1634304 4096 4096 NT_STATUS_OK
ReadX 12363 1638400 61440 61440 NT_STATUS_OK
ReadX 12363 1699840 4096 4096 NT_STATUS_OK
ReadX 12363 1703936 61440 61440 NT_STATUS_OK
ReadX 12363 1765376 4096 4096 NT_STATUS_OK
ReadX 12363 1769472 61440 61440 NT_STATUS_OK
ReadX 12363 1830912 4096 4096 NT_STATUS_OK
ReadX 12363 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12364 NT_STATUS_OK
Close 12364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12361 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12367 NT_STATUS_OK
ReadX 12367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12368 NT_STATUS_OK
ReadX 12368 0 4096 4096 NT_STATUS_OK
ReadX 12368 4096 4096 4096 NT_STATUS_OK
ReadX 12368 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12369 NT_STATUS_OK
Close 12369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12366 NT_STATUS_OK
Close 12367 NT_STATUS_OK
Close 12368 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12371 NT_STATUS_OK
ReadX 12371 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12372 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12373 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12371 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 0 8192 8192 NT_STATUS_OK
ReadX 12376 8192 8192 8192 NT_STATUS_OK
ReadX 12376 16384 8192 8192 NT_STATUS_OK
ReadX 12376 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12378 NT_STATUS_OK
Close 12378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12381 NT_STATUS_OK
WriteX 12381 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12381 258 NT_STATUS_OK
WriteX 12381 0 10438 10438 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12382 NT_STATUS_OK
Close 12382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12384 NT_STATUS_OK
Close 12384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12385 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12387 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12389 NT_STATUS_OK
Close 12389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
ReadX 12390 4096 4096 4096 NT_STATUS_OK
ReadX 12390 8192 4096 4096 NT_STATUS_OK
ReadX 12390 12288 8192 8192 NT_STATUS_OK
ReadX 12390 20480 8192 8192 NT_STATUS_OK
ReadX 12390 28672 8192 8192 NT_STATUS_OK
ReadX 12390 36864 8192 8192 NT_STATUS_OK
ReadX 12390 45056 8192 8192 NT_STATUS_OK
ReadX 12390 53248 8192 8192 NT_STATUS_OK
ReadX 12390 61440 8192 8192 NT_STATUS_OK
ReadX 12390 69632 8192 8192 NT_STATUS_OK
ReadX 12390 77824 8192 8192 NT_STATUS_OK
ReadX 12390 86016 8192 8192 NT_STATUS_OK
ReadX 12390 94208 8192 8192 NT_STATUS_OK
ReadX 12390 102400 8192 8192 NT_STATUS_OK
ReadX 12390 110592 8192 8192 NT_STATUS_OK
ReadX 12390 118784 8192 8192 NT_STATUS_OK
ReadX 12390 126976 8192 8192 NT_STATUS_OK
ReadX 12390 135168 8192 8192 NT_STATUS_OK
ReadX 12390 143360 8192 8192 NT_STATUS_OK
ReadX 12390 151552 8192 8192 NT_STATUS_OK
ReadX 12390 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12390 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12395 NT_STATUS_OK
WriteX 12395 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12395 258 NT_STATUS_OK
WriteX 12395 0 28489 28489 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12398 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12399 NT_STATUS_OK
Close 12399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 8192 8192 NT_STATUS_OK
ReadX 12402 8192 8192 8192 NT_STATUS_OK
ReadX 12402 16384 8192 8192 NT_STATUS_OK
ReadX 12402 24576 8192 8192 NT_STATUS_OK
ReadX 12402 32768 16384 16384 NT_STATUS_OK
ReadX 12402 49152 8192 8192 NT_STATUS_OK
ReadX 12402 57344 8192 8192 NT_STATUS_OK
ReadX 12402 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12404 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12407 NT_STATUS_OK
WriteX 12407 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12407 258 NT_STATUS_OK
WriteX 12407 0 29253 29253 NT_STATUS_OK
Close 12407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12408 NT_STATUS_OK
Close 12408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12409 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12411 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12414 NT_STATUS_OK
WriteX 12414 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12414 258 NT_STATUS_OK
WriteX 12414 0 30183 30183 NT_STATUS_OK
Close 12414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12415 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12417 NT_STATUS_OK
WriteX 12417 0 510 510 NT_STATUS_OK
WriteX 12417 510 512 512 NT_STATUS_OK
WriteX 12417 1022 510 510 NT_STATUS_OK
WriteX 12417 1532 510 510 NT_STATUS_OK
WriteX 12417 2042 168 168 NT_STATUS_OK
Close 12417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12418 NT_STATUS_OK
Close 12418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 4096 4096 NT_STATUS_OK
WriteX 12420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12421 NT_STATUS_OK
ReadX 12421 61440 4096 4096 NT_STATUS_OK
ReadX 12421 126976 4096 4096 NT_STATUS_OK
WriteX 12421 0 65536 65536 NT_STATUS_OK
WriteX 12421 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12422 NT_STATUS_OK
ReadX 12422 61440 4096 4096 NT_STATUS_OK
ReadX 12422 126976 4096 4096 NT_STATUS_OK
ReadX 12422 192512 4096 4096 NT_STATUS_OK
ReadX 12422 258048 4096 4096 NT_STATUS_OK
WriteX 12422 0 65536 65536 NT_STATUS_OK
WriteX 12422 65536 65536 65536 NT_STATUS_OK
WriteX 12422 131072 65536 65536 NT_STATUS_OK
WriteX 12422 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 61440 4096 4096 NT_STATUS_OK
ReadX 12423 126976 4096 4096 NT_STATUS_OK
ReadX 12423 192512 4096 4096 NT_STATUS_OK
ReadX 12423 258048 4096 4096 NT_STATUS_OK
ReadX 12423 323584 4096 4096 NT_STATUS_OK
ReadX 12423 389120 4096 4096 NT_STATUS_OK
ReadX 12423 454656 4096 4096 NT_STATUS_OK
ReadX 12423 520192 4096 4096 NT_STATUS_OK
WriteX 12423 0 65536 65536 NT_STATUS_OK
WriteX 12423 65536 65536 65536 NT_STATUS_OK
WriteX 12423 131072 65536 65536 NT_STATUS_OK
WriteX 12423 196608 65536 65536 NT_STATUS_OK
WriteX 12423 262144 65536 65536 NT_STATUS_OK
WriteX 12423 327680 65536 65536 NT_STATUS_OK
WriteX 12423 393216 65536 65536 NT_STATUS_OK
WriteX 12423 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12424 NT_STATUS_OK
Close 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Close 12421 NT_STATUS_OK
Close 12422 NT_STATUS_OK
Close 12423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12426 NT_STATUS_OK
Close 12426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12435 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12439 NT_STATUS_OK
Close 12439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12442 NT_STATUS_OK
Close 12442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12448 NT_STATUS_OK
Close 12448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12453 NT_STATUS_OK
Close 12453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12458 NT_STATUS_OK
Close 12458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12463 NT_STATUS_OK
Close 12463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12468 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12473 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12483 NT_STATUS_OK
Close 12483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12489 NT_STATUS_OK
Close 12489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12492 NT_STATUS_OK
WriteX 12492 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12492 0 65536 65536 NT_STATUS_OK
WriteX 12492 65536 65536 65536 NT_STATUS_OK
WriteX 12492 131072 65536 65536 NT_STATUS_OK
WriteX 12492 196608 65536 65536 NT_STATUS_OK
WriteX 12492 262144 26634 26634 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12497 NT_STATUS_OK
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12498 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 0 4096 4096 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 0 4096 4096 NT_STATUS_OK
ReadX 12500 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12501 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12505 NT_STATUS_OK
Close 12505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12508 NT_STATUS_OK
Close 12508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12510 NT_STATUS_OK
Close 12510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12514 NT_STATUS_OK
Close 12514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12517 NT_STATUS_OK
Close 12517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12519 NT_STATUS_OK
Close 12519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12528 NT_STATUS_OK
Close 12528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12533 NT_STATUS_OK
Close 12533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12538 NT_STATUS_OK
Close 12538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12543 NT_STATUS_OK
Close 12543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12548 NT_STATUS_OK
Close 12548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12552 NT_STATUS_OK
Close 12552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12557 NT_STATUS_OK
Close 12557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12562 NT_STATUS_OK
Close 12562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12565 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12567 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
Close 12579 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
Close 12580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
Close 12593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
Close 12594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12595 NT_STATUS_OK
ReadX 12595 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12581 NT_STATUS_OK
Close 12595 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12624 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12624 0 4096 4096 NT_STATUS_OK
Close 12624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
ReadX 12626 4096 4096 4096 NT_STATUS_OK
ReadX 12626 8192 4096 4096 NT_STATUS_OK
ReadX 12626 12288 4096 4096 NT_STATUS_OK
ReadX 12626 16384 4096 4096 NT_STATUS_OK
ReadX 12626 20480 4096 4096 NT_STATUS_OK
ReadX 12626 24576 4096 4096 NT_STATUS_OK
ReadX 12626 28672 4096 4096 NT_STATUS_OK
ReadX 12626 32768 4096 4096 NT_STATUS_OK
ReadX 12626 36864 4096 4096 NT_STATUS_OK
ReadX 12626 40960 4096 4096 NT_STATUS_OK
ReadX 12626 45056 4096 4096 NT_STATUS_OK
ReadX 12626 49152 4096 4096 NT_STATUS_OK
ReadX 12626 53248 4096 4096 NT_STATUS_OK
ReadX 12626 57344 4096 4096 NT_STATUS_OK
ReadX 12626 61440 4096 4096 NT_STATUS_OK
ReadX 12626 65536 4096 4096 NT_STATUS_OK
ReadX 12626 69632 4096 4096 NT_STATUS_OK
ReadX 12626 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12626 1004 NT_STATUS_OK
WriteX 12626 0 4096 4096 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12627 NT_STATUS_OK
SET_FILE_INFORMATION 12627 1004 NT_STATUS_OK
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12629 NT_STATUS_OK
Close 12629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12632 NT_STATUS_OK
WriteX 12632 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 258 NT_STATUS_OK
WriteX 12632 0 65536 65536 NT_STATUS_OK
WriteX 12632 65536 19979 19979 NT_STATUS_OK
Close 12632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
QUERY_FILE_INFORMATION 12633 1004 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
SET_FILE_INFORMATION 12633 1004 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
Flush 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12634 NT_STATUS_OK
ReadX 12634 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12635 NT_STATUS_OK
ReadX 12635 0 4096 4096 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 4096 4096 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 4096 4096 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12638 1004 NT_STATUS_OK
WriteX 12638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12639 NT_STATUS_OK
Close 12639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12635 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12641 NT_STATUS_OK
Close 12641 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12644 NT_STATUS_OK
WriteX 12644 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12644 258 NT_STATUS_OK
WriteX 12644 0 65536 65536 NT_STATUS_OK
WriteX 12644 65536 17654 17654 NT_STATUS_OK
Close 12644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12645 NT_STATUS_OK
ReadX 12645 0 4096 4096 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 1004 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
SET_FILE_INFORMATION 12645 1004 NT_STATUS_OK
WriteX 12645 0 4096 4096 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12646 NT_STATUS_OK
SET_FILE_INFORMATION 12646 1004 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12648 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 4096 4096 NT_STATUS_OK
ReadX 12650 4096 4096 4096 NT_STATUS_OK
ReadX 12650 8192 4096 4096 NT_STATUS_OK
ReadX 12650 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12650 16384 4096 4096 NT_STATUS_OK
ReadX 12650 20480 4096 4096 NT_STATUS_OK
ReadX 12650 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12651 NT_STATUS_OK
ReadX 12651 0 4096 4096 NT_STATUS_OK
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12652 NT_STATUS_OK
ReadX 12652 0 4096 4096 NT_STATUS_OK
Close 12652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12653 1004 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12654 NT_STATUS_OK
Close 12654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12656 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12659 NT_STATUS_OK
WriteX 12659 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12659 258 NT_STATUS_OK
WriteX 12659 0 65536 65536 NT_STATUS_OK
WriteX 12659 65536 19490 19490 NT_STATUS_OK
Close 12659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
QUERY_FILE_INFORMATION 12660 1004 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
SET_FILE_INFORMATION 12660 1004 NT_STATUS_OK
WriteX 12660 0 4096 4096 NT_STATUS_OK
Flush 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12661 NT_STATUS_OK
SET_FILE_INFORMATION 12661 1004 NT_STATUS_OK
Close 12661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12663 NT_STATUS_OK
Close 12663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12665 0 4096 4096 NT_STATUS_OK
Close 12665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
ReadX 12667 4096 4096 4096 NT_STATUS_OK
ReadX 12667 8192 4096 4096 NT_STATUS_OK
ReadX 12667 12288 4096 4096 NT_STATUS_OK
ReadX 12667 16384 4096 4096 NT_STATUS_OK
ReadX 12667 20480 4096 4096 NT_STATUS_OK
ReadX 12667 24576 4096 4096 NT_STATUS_OK
ReadX 12667 28672 4096 4096 NT_STATUS_OK
ReadX 12667 32768 4096 4096 NT_STATUS_OK
ReadX 12667 36864 4096 4096 NT_STATUS_OK
ReadX 12667 40960 4096 4096 NT_STATUS_OK
ReadX 12667 45056 4096 4096 NT_STATUS_OK
ReadX 12667 49152 4096 4096 NT_STATUS_OK
ReadX 12667 53248 4096 4096 NT_STATUS_OK
ReadX 12667 57344 4096 4096 NT_STATUS_OK
ReadX 12667 61440 4096 4096 NT_STATUS_OK
ReadX 12667 65536 4096 4096 NT_STATUS_OK
ReadX 12667 69632 4096 4096 NT_STATUS_OK
ReadX 12667 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12667 1004 NT_STATUS_OK
WriteX 12667 0 4096 4096 NT_STATUS_OK
Close 12667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12668 NT_STATUS_OK
SET_FILE_INFORMATION 12668 1004 NT_STATUS_OK
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12673 NT_STATUS_OK
WriteX 12673 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12673 258 NT_STATUS_OK
WriteX 12673 0 65536 65536 NT_STATUS_OK
WriteX 12673 65536 8866 8866 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12674 NT_STATUS_OK
ReadX 12674 0 4096 4096 NT_STATUS_OK
WriteX 12674 0 4096 4096 NT_STATUS_OK
Flush 12674 NT_STATUS_OK
SET_FILE_INFORMATION 12674 1004 NT_STATUS_OK
WriteX 12674 0 4096 4096 NT_STATUS_OK
Flush 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 4096 4096 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12677 NT_STATUS_OK
ReadX 12677 0 4096 4096 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12678 1004 NT_STATUS_OK
WriteX 12678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12679 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12678 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12681 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12684 NT_STATUS_OK
WriteX 12684 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12684 258 NT_STATUS_OK
WriteX 12684 0 65536 65536 NT_STATUS_OK
WriteX 12684 65536 9298 9298 NT_STATUS_OK
Close 12684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 0 4096 4096 NT_STATUS_OK
WriteX 12685 0 4096 4096 NT_STATUS_OK
Flush 12685 NT_STATUS_OK
SET_FILE_INFORMATION 12685 1004 NT_STATUS_OK
WriteX 12685 0 4096 4096 NT_STATUS_OK
Flush 12685 NT_STATUS_OK
Close 12685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12686 NT_STATUS_OK
SET_FILE_INFORMATION 12686 1004 NT_STATUS_OK
Close 12686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12691 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12691 0 4096 4096 NT_STATUS_OK
Close 12691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12692 4096 4096 4096 NT_STATUS_OK
ReadX 12692 8192 4096 4096 NT_STATUS_OK
ReadX 12692 12288 4096 4096 NT_STATUS_OK
ReadX 12692 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
Close 12693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 0 4096 4096 NT_STATUS_OK
Close 12694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12695 1004 NT_STATUS_OK
WriteX 12695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12696 NT_STATUS_OK
Close 12696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12701 NT_STATUS_OK
WriteX 12701 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12701 258 NT_STATUS_OK
WriteX 12701 0 65536 65536 NT_STATUS_OK
WriteX 12701 65536 11540 11540 NT_STATUS_OK
Close 12701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 0 4096 4096 NT_STATUS_OK
WriteX 12702 0 4096 4096 NT_STATUS_OK
Flush 12702 NT_STATUS_OK
SET_FILE_INFORMATION 12702 1004 NT_STATUS_OK
WriteX 12702 0 4096 4096 NT_STATUS_OK
Flush 12702 NT_STATUS_OK
Close 12702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12703 NT_STATUS_OK
SET_FILE_INFORMATION 12703 1004 NT_STATUS_OK
Close 12703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 61440 4096 4096 NT_STATUS_OK
ReadX 12707 126976 4096 4096 NT_STATUS_OK
WriteX 12707 0 65536 65536 NT_STATUS_OK
WriteX 12707 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 61440 4096 4096 NT_STATUS_OK
ReadX 12708 126976 4096 4096 NT_STATUS_OK
ReadX 12708 192512 4096 4096 NT_STATUS_OK
ReadX 12708 258048 4096 4096 NT_STATUS_OK
WriteX 12708 0 65536 65536 NT_STATUS_OK
WriteX 12708 65536 65536 65536 NT_STATUS_OK
WriteX 12708 131072 65536 65536 NT_STATUS_OK
WriteX 12708 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 61440 4096 4096 NT_STATUS_OK
ReadX 12709 126976 4096 4096 NT_STATUS_OK
ReadX 12709 192512 4096 4096 NT_STATUS_OK
ReadX 12709 258048 4096 4096 NT_STATUS_OK
ReadX 12709 323584 4096 4096 NT_STATUS_OK
ReadX 12709 389120 4096 4096 NT_STATUS_OK
ReadX 12709 454656 4096 4096 NT_STATUS_OK
ReadX 12709 520192 4096 4096 NT_STATUS_OK
WriteX 12709 0 65536 65536 NT_STATUS_OK
WriteX 12709 65536 65536 65536 NT_STATUS_OK
WriteX 12709 131072 65536 65536 NT_STATUS_OK
WriteX 12709 196608 65536 65536 NT_STATUS_OK
WriteX 12709 262144 65536 65536 NT_STATUS_OK
WriteX 12709 327680 65536 65536 NT_STATUS_OK
WriteX 12709 393216 65536 65536 NT_STATUS_OK
WriteX 12709 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
ReadX 12710 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12711 NT_STATUS_OK
WriteX 12711 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12711 258 NT_STATUS_OK
WriteX 12711 0 53 53 NT_STATUS_OK
Close 12711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Close 12650 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12710 8192 4096 4096 NT_STATUS_OK
ReadX 12710 12288 4096 4096 NT_STATUS_OK
WriteX 12714 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12714 258 NT_STATUS_OK
ReadX 12710 16384 4096 4096 NT_STATUS_OK
ReadX 12710 20480 4096 4096 NT_STATUS_OK
WriteX 12714 0 15360 15360 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12715 NT_STATUS_OK
ReadX 12715 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12715 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12715 1004 NT_STATUS_OK
WriteX 12715 0 4096 4096 NT_STATUS_OK
Close 12715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12716 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12718 NT_STATUS_OK
ReadX 12718 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12719 NT_STATUS_OK
Close 12719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12718 4096 4096 4096 NT_STATUS_OK
ReadX 12718 8192 4096 4096 NT_STATUS_OK
ReadX 12718 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
ReadX 12721 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
ReadX 12722 4096 4096 4096 NT_STATUS_OK
ReadX 12722 8192 4096 4096 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12723 NT_STATUS_OK
WriteX 12723 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12723 258 NT_STATUS_OK
WriteX 12723 0 15360 15360 NT_STATUS_OK
Close 12723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12724 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12724 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12725 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12728 NT_STATUS_OK
SET_FILE_INFORMATION 12728 1004 NT_STATUS_OK
Close 12728 NT_STATUS_OK
WriteX 12724 0 4096 4096 NT_STATUS_OK
Close 12724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12729 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
ReadX 12731 4096 4096 4096 NT_STATUS_OK
ReadX 12731 8192 4096 4096 NT_STATUS_OK
ReadX 12731 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12732 NT_STATUS_OK
ReadX 12732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12733 NT_STATUS_OK
WriteX 12733 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12733 258 NT_STATUS_OK
WriteX 12733 0 53 53 NT_STATUS_OK
Close 12733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12734 NT_STATUS_OK
Close 12734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12732 4096 4096 4096 NT_STATUS_OK
ReadX 12732 8192 4096 4096 NT_STATUS_OK
ReadX 12732 12288 4096 4096 NT_STATUS_OK
WriteX 12736 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12736 258 NT_STATUS_OK
WriteX 12736 0 12006 12006 NT_STATUS_OK
Close 12736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12737 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12737 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
Close 12737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12738 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12741 NT_STATUS_OK
Close 12741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12740 4096 4096 4096 NT_STATUS_OK
ReadX 12740 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12743 NT_STATUS_OK
WriteX 12743 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 258 NT_STATUS_OK
WriteX 12743 0 11991 11991 NT_STATUS_OK
Close 12743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12744 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12744 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12747 NT_STATUS_OK
ReadX 12747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12748 NT_STATUS_OK
SET_FILE_INFORMATION 12748 1004 NT_STATUS_OK
Close 12748 NT_STATUS_OK
WriteX 12744 0 4096 4096 NT_STATUS_OK
Close 12744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12749 NT_STATUS_OK
Close 12749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12751 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12751 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
ReadX 12751 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
WriteX 12751 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12751 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
Close 12727 NT_STATUS_OK
WriteX 12731 0 19054 19054 NT_STATUS_OK
WriteX 12751 0 12288 12288 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12754 NT_STATUS_OK
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Close 12751 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 61440 61440 NT_STATUS_OK
ReadX 12758 61440 4096 4096 NT_STATUS_OK
ReadX 12758 65536 61440 61440 NT_STATUS_OK
ReadX 12758 126976 4096 4096 NT_STATUS_OK
ReadX 12758 131072 61440 61440 NT_STATUS_OK
ReadX 12758 192512 4096 4096 NT_STATUS_OK
ReadX 12758 196608 61440 61440 NT_STATUS_OK
ReadX 12758 258048 4096 4096 NT_STATUS_OK
ReadX 12758 262144 61440 61440 NT_STATUS_OK
ReadX 12758 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 61440 61440 NT_STATUS_OK
ReadX 12759 61440 4096 4096 NT_STATUS_OK
ReadX 12759 65536 61440 61440 NT_STATUS_OK
ReadX 12759 126976 4096 4096 NT_STATUS_OK
ReadX 12759 131072 61440 61440 NT_STATUS_OK
ReadX 12759 192512 4096 4096 NT_STATUS_OK
ReadX 12759 196608 61440 61440 NT_STATUS_OK
ReadX 12759 258048 4096 4096 NT_STATUS_OK
ReadX 12759 262144 61440 61440 NT_STATUS_OK
ReadX 12759 323584 4096 4096 NT_STATUS_OK
ReadX 12759 327680 61440 61440 NT_STATUS_OK
ReadX 12759 389120 4096 4096 NT_STATUS_OK
ReadX 12759 393216 61440 61440 NT_STATUS_OK
ReadX 12759 454656 4096 4096 NT_STATUS_OK
ReadX 12759 458752 61440 61440 NT_STATUS_OK
ReadX 12759 520192 4096 4096 NT_STATUS_OK
ReadX 12759 524288 61440 61440 NT_STATUS_OK
ReadX 12759 585728 4096 4096 NT_STATUS_OK
ReadX 12759 589824 61440 61440 NT_STATUS_OK
ReadX 12759 651264 4096 4096 NT_STATUS_OK
ReadX 12759 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12760 NT_STATUS_OK
ReadX 12760 0 61440 61440 NT_STATUS_OK
ReadX 12760 61440 4096 4096 NT_STATUS_OK
ReadX 12760 65536 61440 61440 NT_STATUS_OK
ReadX 12760 126976 4096 4096 NT_STATUS_OK
ReadX 12760 131072 61440 61440 NT_STATUS_OK
ReadX 12760 192512 4096 4096 NT_STATUS_OK
ReadX 12760 196608 61440 61440 NT_STATUS_OK
ReadX 12760 258048 4096 4096 NT_STATUS_OK
ReadX 12760 262144 61440 61440 NT_STATUS_OK
ReadX 12760 323584 4096 4096 NT_STATUS_OK
ReadX 12760 327680 61440 61440 NT_STATUS_OK
ReadX 12760 389120 4096 4096 NT_STATUS_OK
ReadX 12760 393216 61440 61440 NT_STATUS_OK
ReadX 12760 454656 4096 4096 NT_STATUS_OK
ReadX 12760 458752 61440 61440 NT_STATUS_OK
ReadX 12760 520192 4096 4096 NT_STATUS_OK
ReadX 12760 524288 61440 61440 NT_STATUS_OK
ReadX 12760 585728 4096 4096 NT_STATUS_OK
ReadX 12760 589824 61440 61440 NT_STATUS_OK
ReadX 12760 651264 4096 4096 NT_STATUS_OK
ReadX 12760 655360 61440 61440 NT_STATUS_OK
ReadX 12760 716800 4096 4096 NT_STATUS_OK
ReadX 12760 720896 61440 61440 NT_STATUS_OK
ReadX 12760 782336 4096 4096 NT_STATUS_OK
ReadX 12760 786432 61440 61440 NT_STATUS_OK
ReadX 12760 847872 4096 4096 NT_STATUS_OK
ReadX 12760 851968 61440 61440 NT_STATUS_OK
ReadX 12760 913408 4096 4096 NT_STATUS_OK
ReadX 12760 917504 61440 61440 NT_STATUS_OK
ReadX 12760 978944 4096 4096 NT_STATUS_OK
ReadX 12760 983040 61440 61440 NT_STATUS_OK
ReadX 12760 1044480 4096 4096 NT_STATUS_OK
ReadX 12760 1048576 61440 61440 NT_STATUS_OK
ReadX 12760 1110016 4096 4096 NT_STATUS_OK
ReadX 12760 1114112 61440 61440 NT_STATUS_OK
ReadX 12760 1175552 4096 4096 NT_STATUS_OK
ReadX 12760 1179648 61440 61440 NT_STATUS_OK
ReadX 12760 1241088 4096 4096 NT_STATUS_OK
ReadX 12760 1245184 61440 61440 NT_STATUS_OK
ReadX 12760 1306624 4096 4096 NT_STATUS_OK
ReadX 12760 1310720 61440 61440 NT_STATUS_OK
ReadX 12760 1372160 4096 4096 NT_STATUS_OK
ReadX 12760 1376256 61440 61440 NT_STATUS_OK
ReadX 12760 1437696 4096 4096 NT_STATUS_OK
ReadX 12760 1441792 61440 61440 NT_STATUS_OK
ReadX 12760 1503232 4096 4096 NT_STATUS_OK
ReadX 12760 1507328 61440 61440 NT_STATUS_OK
ReadX 12760 1568768 4096 4096 NT_STATUS_OK
ReadX 12760 1572864 61440 61440 NT_STATUS_OK
ReadX 12760 1634304 4096 4096 NT_STATUS_OK
ReadX 12760 1638400 61440 61440 NT_STATUS_OK
ReadX 12760 1699840 4096 4096 NT_STATUS_OK
ReadX 12760 1703936 61440 61440 NT_STATUS_OK
ReadX 12760 1765376 4096 4096 NT_STATUS_OK
ReadX 12760 1769472 61440 61440 NT_STATUS_OK
ReadX 12760 1830912 4096 4096 NT_STATUS_OK
ReadX 12760 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12767 NT_STATUS_OK
QUERY_FILE_INFORMATION 12767 1004 NT_STATUS_OK
WriteX 12767 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12767 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12768 NT_STATUS_OK
Close 12768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12769 NT_STATUS_OK
WriteX 12769 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12769 258 NT_STATUS_OK
WriteX 12769 0 491 491 NT_STATUS_OK
Close 12769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12767 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12772 NT_STATUS_OK
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12773 NT_STATUS_OK
WriteX 12773 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 258 NT_STATUS_OK
WriteX 12773 0 543 543 NT_STATUS_OK
Close 12773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12758 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Close 12762 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12778 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12779 NT_STATUS_OK
ReadX 12779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12781 NT_STATUS_OK
ReadX 12781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12786 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12787 NT_STATUS_OK
QUERY_FILE_INFORMATION 12787 1004 NT_STATUS_OK
WriteX 12787 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12787 258 NT_STATUS_OK
WriteX 12787 0 2048 2048 NT_STATUS_OK
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12788 NT_STATUS_OK
ReadX 12788 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12788 0 4096 4096 NT_STATUS_OK
Flush 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12788 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12793 NT_STATUS_OK
WriteX 12793 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12793 258 NT_STATUS_OK
WriteX 12793 0 2048 2048 NT_STATUS_OK
Close 12793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12799 NT_STATUS_OK
WriteX 12799 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12799 258 NT_STATUS_OK
WriteX 12799 0 2048 2048 NT_STATUS_OK
Close 12799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 2048 2048 NT_STATUS_OK
ReadX 12778 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12782 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12794 0 4096 4096 NT_STATUS_OK
WriteX 12778 0 8192 8192 NT_STATUS_OK
WriteX 12779 0 4096 4096 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12803 NT_STATUS_OK
ReadX 12803 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12804 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12803 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Close 12780 NT_STATUS_OK
Close 12781 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12778 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12808 NT_STATUS_OK
ReadX 12808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12809 NT_STATUS_OK
ReadX 12809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12814 NT_STATUS_OK
ReadX 12814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12816 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12824 NT_STATUS_OK
QUERY_FILE_INFORMATION 12824 1004 NT_STATUS_OK
WriteX 12824 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12824 258 NT_STATUS_OK
WriteX 12824 0 2048 2048 NT_STATUS_OK
Close 12824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12825 NT_STATUS_OK
ReadX 12825 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12827 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12827 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12831 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12832 NT_STATUS_OK
QUERY_FILE_INFORMATION 12832 1004 NT_STATUS_OK
WriteX 12832 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12832 258 NT_STATUS_OK
WriteX 12832 0 2048 2048 NT_STATUS_OK
Close 12832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12825 0 4096 4096 NT_STATUS_OK
Flush 12825 NT_STATUS_OK
WriteX 12833 0 4096 4096 NT_STATUS_OK
Flush 12833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12825 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12833 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12827 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12834 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12835 NT_STATUS_OK
WriteX 12835 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12835 258 NT_STATUS_OK
WriteX 12835 0 4096 4096 NT_STATUS_OK
Close 12835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12837 NT_STATUS_OK
Close 12837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12838 NT_STATUS_OK
WriteX 12838 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12838 258 NT_STATUS_OK
WriteX 12838 0 4096 4096 NT_STATUS_OK
Close 12838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12839 NT_STATUS_OK
ReadX 12839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12839 0 4096 4096 NT_STATUS_OK
Close 12836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Close 12827 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12814 NT_STATUS_OK
Close 12807 NT_STATUS_OK
Close 12808 NT_STATUS_OK
Close 12811 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Close 12810 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12842 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12844 NT_STATUS_OK
ReadX 12844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12846 NT_STATUS_OK
WriteX 12846 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
WriteX 12846 0 2048 2048 NT_STATUS_OK
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12847 NT_STATUS_OK
ReadX 12847 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12848 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12849 NT_STATUS_OK
ReadX 12849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12850 NT_STATUS_OK
ReadX 12850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12851 NT_STATUS_OK
ReadX 12851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12856 NT_STATUS_OK
ReadX 12856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12859 NT_STATUS_OK
ReadX 12859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12860 NT_STATUS_OK
ReadX 12860 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12861 NT_STATUS_OK
QUERY_FILE_INFORMATION 12861 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12844 NT_STATUS_OK
Close 12847 NT_STATUS_OK
Close 12859 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Close 12856 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Close 12860 NT_STATUS_OK
Close 12848 NT_STATUS_OK
Close 12849 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Close 12851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12863 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12866 NT_STATUS_OK
ReadX 12866 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12868 NT_STATUS_OK
ReadX 12868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12869 NT_STATUS_OK
ReadX 12869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12871 NT_STATUS_OK
ReadX 12871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12872 NT_STATUS_OK
ReadX 12872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12873 NT_STATUS_OK
ReadX 12873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12874 NT_STATUS_OK
ReadX 12874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12875 NT_STATUS_OK
ReadX 12875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12877 NT_STATUS_OK
ReadX 12877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12878 NT_STATUS_OK
ReadX 12878 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12883 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 1004 NT_STATUS_OK
WriteX 12883 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 258 NT_STATUS_OK
WriteX 12883 0 2048 2048 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12886 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12888 NT_STATUS_OK
ReadX 12888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12889 NT_STATUS_OK
ReadX 12889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12895 NT_STATUS_OK
QUERY_FILE_INFORMATION 12895 1004 NT_STATUS_OK
WriteX 12895 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12895 258 NT_STATUS_OK
WriteX 12895 0 2048 2048 NT_STATUS_OK
Close 12895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12898 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12903 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 1004 NT_STATUS_OK
WriteX 12903 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 258 NT_STATUS_OK
WriteX 12903 0 2048 2048 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
Flush 12884 NT_STATUS_OK
WriteX 12896 0 4096 4096 NT_STATUS_OK
Flush 12896 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12896 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12886 4096 16384 16384 NT_STATUS_OK
ReadX 12866 4096 16384 16384 NT_STATUS_OK
ReadX 12898 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12906 NT_STATUS_OK
ReadX 12906 0 2048 2048 NT_STATUS_OK
WriteX 12906 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12907 NT_STATUS_OK
QUERY_FILE_INFORMATION 12907 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12906 NT_STATUS_OK
Close 12890 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Close 12886 NT_STATUS_OK
Close 12887 NT_STATUS_OK
Close 12888 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Close 12877 NT_STATUS_OK
Close 12898 NT_STATUS_OK
Close 12872 NT_STATUS_OK
Close 12875 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Close 12873 NT_STATUS_OK
Close 12874 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Close 12868 NT_STATUS_OK
Close 12869 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12909 NT_STATUS_OK
QUERY_FILE_INFORMATION 12909 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12911 NT_STATUS_OK
QUERY_FILE_INFORMATION 12911 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12914 NT_STATUS_OK
ReadX 12914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12915 NT_STATUS_OK
ReadX 12915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12916 NT_STATUS_OK
ReadX 12916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12914 4096 16384 16384 NT_STATUS_OK
WriteX 12914 0 4096 4096 NT_STATUS_OK
WriteX 12915 0 4096 4096 NT_STATUS_OK
WriteX 12916 0 4096 4096 NT_STATUS_OK
WriteX 12917 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12920 NT_STATUS_OK
ReadX 12920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12921 NT_STATUS_OK
ReadX 12921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12922 NT_STATUS_OK
ReadX 12922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12923 NT_STATUS_OK
ReadX 12923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12924 NT_STATUS_OK
ReadX 12924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12926 NT_STATUS_OK
ReadX 12926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12927 NT_STATUS_OK
ReadX 12927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12928 NT_STATUS_OK
ReadX 12928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12929 NT_STATUS_OK
ReadX 12929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12931 NT_STATUS_OK
ReadX 12931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12932 NT_STATUS_OK
ReadX 12932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 8192 8192 NT_STATUS_OK
ReadX 12920 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12934 0 4096 4096 NT_STATUS_OK
ReadX 12934 4096 4096 4096 NT_STATUS_OK
ReadX 12934 8192 4096 4096 NT_STATUS_OK
WriteX 12920 0 4096 4096 NT_STATUS_OK
WriteX 12921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
ReadX 12935 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12914 0 4096 4096 NT_STATUS_OK
WriteX 12915 0 4096 4096 NT_STATUS_OK
WriteX 12916 0 4096 4096 NT_STATUS_OK
WriteX 12917 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12940 NT_STATUS_OK
QUERY_FILE_INFORMATION 12940 1004 NT_STATUS_OK
WriteX 12940 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12940 258 NT_STATUS_OK
WriteX 12940 0 2048 2048 NT_STATUS_OK
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12941 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
ReadX 12943 4096 4096 4096 NT_STATUS_OK
WriteX 12943 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12945 NT_STATUS_OK
ReadX 12945 0 4096 4096 NT_STATUS_OK
ReadX 12945 4096 4096 4096 NT_STATUS_OK
WriteX 12945 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12946 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Close 12914 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Close 12917 NT_STATUS_OK
Close 12926 NT_STATUS_OK
Close 12931 NT_STATUS_OK
Close 12927 NT_STATUS_OK
Close 12928 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Close 12930 NT_STATUS_OK
Close 12932 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Close 12921 NT_STATUS_OK
Close 12924 NT_STATUS_OK
Close 12925 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Close 12923 NT_STATUS_OK
Close 12945 NT_STATUS_OK
Close 12934 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12948 0 4096 4096 NT_STATUS_OK
ReadX 12948 4096 4096 4096 NT_STATUS_OK
ReadX 12948 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12950 NT_STATUS_OK
ReadX 12950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12951 NT_STATUS_OK
ReadX 12951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12952 NT_STATUS_OK
ReadX 12952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12953 NT_STATUS_OK
ReadX 12953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12954 NT_STATUS_OK
ReadX 12954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12955 NT_STATUS_OK
ReadX 12955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12956 NT_STATUS_OK
ReadX 12956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12957 NT_STATUS_OK
ReadX 12957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12958 NT_STATUS_OK
ReadX 12958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12959 NT_STATUS_OK
ReadX 12959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12961 NT_STATUS_OK
ReadX 12961 0 4096 4096 NT_STATUS_OK
ReadX 12949 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12965 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12966 NT_STATUS_OK
QUERY_FILE_INFORMATION 12966 1004 NT_STATUS_OK
WriteX 12966 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12966 258 NT_STATUS_OK
WriteX 12966 0 2048 2048 NT_STATUS_OK
Close 12966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12967 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12972 NT_STATUS_OK
QUERY_FILE_INFORMATION 12972 1004 NT_STATUS_OK
WriteX 12972 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12972 258 NT_STATUS_OK
WriteX 12972 0 2048 2048 NT_STATUS_OK
Close 12972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12973 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12956 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12974 NT_STATUS_OK
QUERY_FILE_INFORMATION 12974 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12960 NT_STATUS_OK
Close 12955 NT_STATUS_OK
Close 12961 NT_STATUS_OK
Close 12949 NT_STATUS_OK
Close 12950 NT_STATUS_OK
Close 12953 NT_STATUS_OK
Close 12954 NT_STATUS_OK
Close 12951 NT_STATUS_OK
Close 12952 NT_STATUS_OK
Close 12956 NT_STATUS_OK
Close 12957 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Close 12959 NT_STATUS_OK
Close 12948 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12976 NT_STATUS_OK
QUERY_FILE_INFORMATION 12976 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12978 NT_STATUS_OK
ReadX 12978 61440 4096 4096 NT_STATUS_OK
ReadX 12978 126976 4096 4096 NT_STATUS_OK
WriteX 12978 0 65536 65536 NT_STATUS_OK
WriteX 12978 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 61440 4096 4096 NT_STATUS_OK
ReadX 12979 126976 4096 4096 NT_STATUS_OK
ReadX 12979 192512 4096 4096 NT_STATUS_OK
ReadX 12979 258048 4096 4096 NT_STATUS_OK
WriteX 12979 0 65536 65536 NT_STATUS_OK
WriteX 12979 65536 65536 65536 NT_STATUS_OK
WriteX 12979 131072 65536 65536 NT_STATUS_OK
WriteX 12979 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 61440 4096 4096 NT_STATUS_OK
ReadX 12980 126976 4096 4096 NT_STATUS_OK
ReadX 12980 192512 4096 4096 NT_STATUS_OK
ReadX 12980 258048 4096 4096 NT_STATUS_OK
ReadX 12980 323584 4096 4096 NT_STATUS_OK
ReadX 12980 389120 4096 4096 NT_STATUS_OK
ReadX 12980 454656 4096 4096 NT_STATUS_OK
ReadX 12980 520192 4096 4096 NT_STATUS_OK
WriteX 12980 0 65536 65536 NT_STATUS_OK
WriteX 12980 65536 65536 65536 NT_STATUS_OK
WriteX 12980 131072 65536 65536 NT_STATUS_OK
WriteX 12980 196608 65536 65536 NT_STATUS_OK
WriteX 12980 262144 65536 65536 NT_STATUS_OK
WriteX 12980 327680 65536 65536 NT_STATUS_OK
WriteX 12980 393216 65536 65536 NT_STATUS_OK
WriteX 12980 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12981 NT_STATUS_OK
ReadX 12981 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12981 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12981 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12981 8192 4096 4096 NT_STATUS_OK
ReadX 12981 12288 4096 4096 NT_STATUS_OK
ReadX 12981 16384 4096 4096 NT_STATUS_OK
ReadX 12981 20480 4096 4096 NT_STATUS_OK
ReadX 12981 24576 4096 4096 NT_STATUS_OK
ReadX 12981 28672 4096 4096 NT_STATUS_OK
ReadX 12981 32768 4096 4096 NT_STATUS_OK
ReadX 12981 36864 4096 4096 NT_STATUS_OK
ReadX 12981 40960 4096 4096 NT_STATUS_OK
ReadX 12981 45056 4096 4096 NT_STATUS_OK
ReadX 12981 49152 4096 4096 NT_STATUS_OK
ReadX 12981 53248 4096 4096 NT_STATUS_OK
ReadX 12981 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12981 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12982 NT_STATUS_OK
Close 12982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12978 NT_STATUS_OK
Close 12979 NT_STATUS_OK
Close 12980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12984 NT_STATUS_OK
WriteX 12984 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12984 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12984 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12984 1004 NT_STATUS_OK
WriteX 12984 0 57088 57088 NT_STATUS_OK
WriteX 12984 0 4096 4096 NT_STATUS_OK
Flush 12984 NT_STATUS_OK
Close 12981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12985 NT_STATUS_OK
SET_FILE_INFORMATION 12985 1004 NT_STATUS_OK
Close 12985 NT_STATUS_OK
SET_FILE_INFORMATION 12984 1004 NT_STATUS_OK
WriteX 12984 0 4096 4096 NT_STATUS_OK
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12986 NT_STATUS_OK
Close 12986 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12988 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12989 NT_STATUS_OK
WriteX 12989 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12989 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12989 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
WriteX 12989 0 51456 51456 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Flush 12989 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12993 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12998 NT_STATUS_OK
WriteX 12998 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12998 258 NT_STATUS_OK
WriteX 12998 0 53077 53077 NT_STATUS_OK
Close 12998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12999 NT_STATUS_OK
WriteX 12999 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12999 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12999 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 65536 65536 NT_STATUS_OK
WriteX 12999 65536 1856 1856 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13001 NT_STATUS_OK
Close 13001 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13008 NT_STATUS_OK
WriteX 13008 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13008 258 NT_STATUS_OK
WriteX 13008 0 7983 7983 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13013 NT_STATUS_OK
WriteX 13013 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13013 258 NT_STATUS_OK
WriteX 13013 0 65536 65536 NT_STATUS_OK
WriteX 13013 65536 65536 65536 NT_STATUS_OK
WriteX 13013 131072 65536 65536 NT_STATUS_OK
WriteX 13013 196608 65536 65536 NT_STATUS_OK
WriteX 13013 262144 65536 65536 NT_STATUS_OK
WriteX 13013 327680 65536 65536 NT_STATUS_OK
WriteX 13013 393216 65536 65536 NT_STATUS_OK
WriteX 13013 458752 46731 46731 NT_STATUS_OK
Close 13013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13014 NT_STATUS_OK
WriteX 13014 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13003 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 65536 65536 NT_STATUS_OK
WriteX 13014 65536 22848 22848 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Close 13014 NT_STATUS_OK
Close 13003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13018 NT_STATUS_OK
ReadX 13018 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13018 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13019 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13019 1004 NT_STATUS_OK
ReadX 13019 8192 4096 4096 NT_STATUS_OK
ReadX 13019 12288 4096 4096 NT_STATUS_OK
ReadX 13019 16384 4096 4096 NT_STATUS_OK
ReadX 13019 20480 4096 4096 NT_STATUS_OK
ReadX 13019 24576 4096 4096 NT_STATUS_OK
ReadX 13019 28672 4096 4096 NT_STATUS_OK
ReadX 13019 32768 4096 4096 NT_STATUS_OK
ReadX 13019 36864 4096 4096 NT_STATUS_OK
ReadX 13019 40960 4096 4096 NT_STATUS_OK
ReadX 13019 45056 4096 4096 NT_STATUS_OK
ReadX 13019 49152 4096 4096 NT_STATUS_OK
ReadX 13019 53248 4096 4096 NT_STATUS_OK
ReadX 13019 57344 4096 4096 NT_STATUS_OK
ReadX 13019 61440 4096 4096 NT_STATUS_OK
ReadX 13019 65536 4096 4096 NT_STATUS_OK
ReadX 13019 69632 4096 4096 NT_STATUS_OK
ReadX 13019 73728 4096 4096 NT_STATUS_OK
ReadX 13019 77824 4096 4096 NT_STATUS_OK
ReadX 13019 81920 4096 4096 NT_STATUS_OK
ReadX 13019 86016 4096 4096 NT_STATUS_OK
ReadX 13019 90112 4096 4096 NT_STATUS_OK
ReadX 13019 94208 4096 4096 NT_STATUS_OK
ReadX 13019 98304 4096 4096 NT_STATUS_OK
ReadX 13019 102400 4096 4096 NT_STATUS_OK
ReadX 13019 106496 4096 4096 NT_STATUS_OK
ReadX 13019 110592 4096 4096 NT_STATUS_OK
ReadX 13019 114688 4096 4096 NT_STATUS_OK
ReadX 13019 118784 4096 4096 NT_STATUS_OK
ReadX 13019 122880 4096 4096 NT_STATUS_OK
ReadX 13019 126976 4096 4096 NT_STATUS_OK
ReadX 13019 131072 4096 4096 NT_STATUS_OK
ReadX 13019 135168 4096 4096 NT_STATUS_OK
ReadX 13019 139264 4096 4096 NT_STATUS_OK
ReadX 13019 143360 4096 4096 NT_STATUS_OK
ReadX 13019 147456 4096 4096 NT_STATUS_OK
ReadX 13019 151552 4096 4096 NT_STATUS_OK
ReadX 13019 155648 4096 4096 NT_STATUS_OK
ReadX 13019 159744 4096 4096 NT_STATUS_OK
ReadX 13019 163840 4096 4096 NT_STATUS_OK
ReadX 13019 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13019 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13020 NT_STATUS_OK
Close 13020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13018 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13022 NT_STATUS_OK
WriteX 13022 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 258 NT_STATUS_OK
Close 13019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13023 NT_STATUS_OK
SET_FILE_INFORMATION 13023 1004 NT_STATUS_OK
Close 13023 NT_STATUS_OK
WriteX 13022 0 42388 42388 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13024 NT_STATUS_OK
Close 13024 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
ReadX 13026 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13027 NT_STATUS_OK
WriteX 13027 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13027 258 NT_STATUS_OK
SET_FILE_INFORMATION 13027 1004 NT_STATUS_OK
WriteX 13027 0 42652 42652 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13029 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
ReadX 13031 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13036 NT_STATUS_OK
WriteX 13036 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13036 258 NT_STATUS_OK
WriteX 13036 0 65536 65536 NT_STATUS_OK
WriteX 13036 65536 49 49 NT_STATUS_OK
Close 13036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 61440 61440 NT_STATUS_OK
ReadX 13037 61440 4096 4096 NT_STATUS_OK
ReadX 13037 65536 61440 61440 NT_STATUS_OK
ReadX 13037 126976 4096 4096 NT_STATUS_OK
ReadX 13037 131072 61440 61440 NT_STATUS_OK
ReadX 13037 192512 4096 4096 NT_STATUS_OK
ReadX 13037 196608 61440 61440 NT_STATUS_OK
ReadX 13037 258048 4096 4096 NT_STATUS_OK
ReadX 13037 262144 61440 61440 NT_STATUS_OK
ReadX 13037 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 61440 61440 NT_STATUS_OK
ReadX 13038 61440 4096 4096 NT_STATUS_OK
ReadX 13038 65536 61440 61440 NT_STATUS_OK
ReadX 13038 126976 4096 4096 NT_STATUS_OK
ReadX 13038 131072 61440 61440 NT_STATUS_OK
ReadX 13038 192512 4096 4096 NT_STATUS_OK
ReadX 13038 196608 61440 61440 NT_STATUS_OK
ReadX 13038 258048 4096 4096 NT_STATUS_OK
ReadX 13038 262144 61440 61440 NT_STATUS_OK
ReadX 13038 323584 4096 4096 NT_STATUS_OK
ReadX 13038 327680 61440 61440 NT_STATUS_OK
ReadX 13038 389120 4096 4096 NT_STATUS_OK
ReadX 13038 393216 61440 61440 NT_STATUS_OK
ReadX 13038 454656 4096 4096 NT_STATUS_OK
ReadX 13038 458752 61440 61440 NT_STATUS_OK
ReadX 13038 520192 4096 4096 NT_STATUS_OK
ReadX 13038 524288 61440 61440 NT_STATUS_OK
ReadX 13038 585728 4096 4096 NT_STATUS_OK
ReadX 13038 589824 61440 61440 NT_STATUS_OK
ReadX 13038 651264 4096 4096 NT_STATUS_OK
ReadX 13038 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 61440 61440 NT_STATUS_OK
ReadX 13039 61440 4096 4096 NT_STATUS_OK
ReadX 13039 65536 61440 61440 NT_STATUS_OK
ReadX 13039 126976 4096 4096 NT_STATUS_OK
ReadX 13039 131072 61440 61440 NT_STATUS_OK
ReadX 13039 192512 4096 4096 NT_STATUS_OK
ReadX 13039 196608 61440 61440 NT_STATUS_OK
ReadX 13039 258048 4096 4096 NT_STATUS_OK
ReadX 13039 262144 61440 61440 NT_STATUS_OK
ReadX 13039 323584 4096 4096 NT_STATUS_OK
ReadX 13039 327680 61440 61440 NT_STATUS_OK
ReadX 13039 389120 4096 4096 NT_STATUS_OK
ReadX 13039 393216 61440 61440 NT_STATUS_OK
ReadX 13039 454656 4096 4096 NT_STATUS_OK
ReadX 13039 458752 61440 61440 NT_STATUS_OK
ReadX 13039 520192 4096 4096 NT_STATUS_OK
ReadX 13039 524288 61440 61440 NT_STATUS_OK
ReadX 13039 585728 4096 4096 NT_STATUS_OK
ReadX 13039 589824 61440 61440 NT_STATUS_OK
ReadX 13039 651264 4096 4096 NT_STATUS_OK
ReadX 13039 655360 61440 61440 NT_STATUS_OK
ReadX 13039 716800 4096 4096 NT_STATUS_OK
ReadX 13039 720896 61440 61440 NT_STATUS_OK
ReadX 13039 782336 4096 4096 NT_STATUS_OK
ReadX 13039 786432 61440 61440 NT_STATUS_OK
ReadX 13039 847872 4096 4096 NT_STATUS_OK
ReadX 13039 851968 61440 61440 NT_STATUS_OK
ReadX 13039 913408 4096 4096 NT_STATUS_OK
ReadX 13039 917504 61440 61440 NT_STATUS_OK
ReadX 13039 978944 4096 4096 NT_STATUS_OK
ReadX 13039 983040 61440 61440 NT_STATUS_OK
ReadX 13039 1044480 4096 4096 NT_STATUS_OK
ReadX 13039 1048576 61440 61440 NT_STATUS_OK
ReadX 13039 1110016 4096 4096 NT_STATUS_OK
ReadX 13039 1114112 61440 61440 NT_STATUS_OK
ReadX 13039 1175552 4096 4096 NT_STATUS_OK
ReadX 13039 1179648 61440 61440 NT_STATUS_OK
ReadX 13039 1241088 4096 4096 NT_STATUS_OK
ReadX 13039 1245184 61440 61440 NT_STATUS_OK
ReadX 13039 1306624 4096 4096 NT_STATUS_OK
ReadX 13039 1310720 61440 61440 NT_STATUS_OK
ReadX 13039 1372160 4096 4096 NT_STATUS_OK
ReadX 13039 1376256 61440 61440 NT_STATUS_OK
ReadX 13039 1437696 4096 4096 NT_STATUS_OK
ReadX 13039 1441792 61440 61440 NT_STATUS_OK
ReadX 13039 1503232 4096 4096 NT_STATUS_OK
ReadX 13039 1507328 61440 61440 NT_STATUS_OK
ReadX 13039 1568768 4096 4096 NT_STATUS_OK
ReadX 13039 1572864 61440 61440 NT_STATUS_OK
ReadX 13039 1634304 4096 4096 NT_STATUS_OK
ReadX 13039 1638400 61440 61440 NT_STATUS_OK
ReadX 13039 1699840 4096 4096 NT_STATUS_OK
ReadX 13039 1703936 61440 61440 NT_STATUS_OK
ReadX 13039 1765376 4096 4096 NT_STATUS_OK
ReadX 13039 1769472 61440 61440 NT_STATUS_OK
ReadX 13039 1830912 4096 4096 NT_STATUS_OK
ReadX 13039 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13041 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 1005 NT_STATUS_OK
ReadX 13041 2156 24 24 NT_STATUS_OK
ReadX 13041 2139 276 276 NT_STATUS_OK
ReadX 13041 2136 14 14 NT_STATUS_OK
ReadX 13041 2136 7 7 NT_STATUS_OK
ReadX 13041 2138 12 12 NT_STATUS_OK
ReadX 13041 2137 8 8 NT_STATUS_OK
ReadX 13041 2135 15 15 NT_STATUS_OK
ReadX 13041 0 16 16 NT_STATUS_OK
ReadX 13041 16 2048 2048 NT_STATUS_OK
ReadX 13041 2064 2048 2048 NT_STATUS_OK
ReadX 13041 257 2048 2048 NT_STATUS_OK
ReadX 13041 385 2048 2048 NT_STATUS_OK
ReadX 13041 513 2048 2048 NT_STATUS_OK
ReadX 13041 641 2048 2048 NT_STATUS_OK
ReadX 13041 769 2048 2048 NT_STATUS_OK
ReadX 13041 897 2048 2048 NT_STATUS_OK
ReadX 13041 1025 2048 2048 NT_STATUS_OK
ReadX 13041 1153 2048 2048 NT_STATUS_OK
ReadX 13041 1281 2048 2048 NT_STATUS_OK
ReadX 13041 1409 2048 2048 NT_STATUS_OK
ReadX 13041 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13037 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Close 13039 NT_STATUS_OK
Close 13031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13046 NT_STATUS_OK
WriteX 13046 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13046 258 NT_STATUS_OK
WriteX 13046 0 10575 10575 NT_STATUS_OK
Flush 13046 NT_STATUS_OK
Close 13046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13047 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13051 NT_STATUS_OK
LockX 13051 2147483538 1 NT_STATUS_OK
UnlockX 13051 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1005 NT_STATUS_OK
ReadX 13051 0 512 512 NT_STATUS_OK
ReadX 13051 512 512 512 NT_STATUS_OK
ReadX 13051 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13051 1004 NT_STATUS_OK
Close 13051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13052 NT_STATUS_OK
QUERY_FILE_INFORMATION 13052 1005 NT_STATUS_OK
ReadX 13052 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13053 NT_STATUS_OK
LockX 13053 2147483538 1 NT_STATUS_OK
UnlockX 13053 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13053 1005 NT_STATUS_OK
ReadX 13053 0 512 512 NT_STATUS_OK
ReadX 13053 512 512 512 NT_STATUS_OK
ReadX 13053 1024 512 512 NT_STATUS_OK
ReadX 13053 288 20 20 NT_STATUS_OK
ReadX 13053 308 2084 2084 NT_STATUS_OK
ReadX 13053 388 2084 2084 NT_STATUS_OK
ReadX 13053 388 2084 2084 NT_STATUS_OK
ReadX 13040 2157 1386 1386 NT_STATUS_OK
ReadX 13053 2472 399 399 NT_STATUS_OK
ReadX 13053 3072 1536 1536 NT_STATUS_OK
ReadX 13053 544 149 149 NT_STATUS_OK
ReadX 13053 693 485 485 NT_STATUS_OK
Close 13053 NT_STATUS_OK
ReadX 13040 2157 4096 4096 NT_STATUS_OK
ReadX 13040 6253 4096 4096 NT_STATUS_OK
ReadX 13040 10349 4096 4096 NT_STATUS_OK
ReadX 13040 14445 4096 4096 NT_STATUS_OK
ReadX 13040 18541 4096 4096 NT_STATUS_OK
ReadX 13040 22637 256 256 NT_STATUS_OK
ReadX 13040 22893 4096 4096 NT_STATUS_OK
ReadX 13040 26989 4096 4096 NT_STATUS_OK
ReadX 13040 31085 4096 4096 NT_STATUS_OK
ReadX 13040 35181 4096 4096 NT_STATUS_OK
ReadX 13040 39277 4096 4096 NT_STATUS_OK
ReadX 13040 43373 4096 4096 NT_STATUS_OK
ReadX 13040 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13040 2157 1024 1024 NT_STATUS_OK
ReadX 13040 1667 4688 4688 NT_STATUS_OK
ReadX 13040 6355 3516 3516 NT_STATUS_OK
ReadX 13040 9871 16384 16384 NT_STATUS_OK
ReadX 13040 26255 3771 3771 NT_STATUS_OK
ReadX 13040 30026 2048 2048 NT_STATUS_OK
ReadX 13040 32074 1024 1024 NT_STATUS_OK
ReadX 13040 33098 6652 6652 NT_STATUS_OK
ReadX 13040 39750 16384 16384 NT_STATUS_OK
ReadX 13040 56134 10496 10496 NT_STATUS_OK
ReadX 13040 66630 1784 1784 NT_STATUS_OK
ReadX 13040 68414 90 90 NT_STATUS_OK
ReadX 13040 68504 273 273 NT_STATUS_OK
ReadX 13040 68777 1600 1600 NT_STATUS_OK
ReadX 13040 70377 640 640 NT_STATUS_OK
ReadX 13040 71017 1280 1280 NT_STATUS_OK
ReadX 13040 72297 8464 8464 NT_STATUS_OK
ReadX 13040 80761 158 158 NT_STATUS_OK
ReadX 13040 80919 912 912 NT_STATUS_OK
ReadX 13040 81831 1980 1980 NT_STATUS_OK
ReadX 13040 83811 2256 2256 NT_STATUS_OK
ReadX 13040 86067 400 400 NT_STATUS_OK
ReadX 13040 86467 252 252 NT_STATUS_OK
ReadX 13040 86719 42 42 NT_STATUS_OK
ReadX 13040 86761 725 725 NT_STATUS_OK
ReadX 13040 2009 512 512 NT_STATUS_OK
ReadX 13040 3895 9 9 NT_STATUS_OK
ReadX 13040 3781 46 46 NT_STATUS_OK
ReadX 13040 4059 92 92 NT_STATUS_OK
ReadX 13040 3781 92 92 NT_STATUS_OK
ReadX 13040 3986 184 184 NT_STATUS_OK
ReadX 13040 3987 16384 16384 NT_STATUS_OK
ReadX 13040 3902 16384 16384 NT_STATUS_OK
ReadX 13040 3781 10240 10240 NT_STATUS_OK
ReadX 13040 3821 16384 16384 NT_STATUS_OK
ReadX 13040 3891 935 935 NT_STATUS_OK
ReadX 13040 4060 10240 10240 NT_STATUS_OK
ReadX 13040 4059 184 184 NT_STATUS_OK
ReadX 13040 256 184 184 NT_STATUS_OK
ReadX 13040 256 1026 1026 NT_STATUS_OK
ReadX 13040 3901 326 326 NT_STATUS_OK
ReadX 13040 3899 652 652 NT_STATUS_OK
ReadX 13040 256 2 2 NT_STATUS_OK
ReadX 13040 258 4948 4948 NT_STATUS_OK
Close 13040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13055 NT_STATUS_OK
Close 13055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13058 NT_STATUS_OK
WriteX 13058 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13058 258 NT_STATUS_OK
WriteX 13058 0 65536 65536 NT_STATUS_OK
WriteX 13058 65536 65536 65536 NT_STATUS_OK
WriteX 13058 131072 65536 65536 NT_STATUS_OK
WriteX 13058 196608 65536 65536 NT_STATUS_OK
WriteX 13058 262144 65536 65536 NT_STATUS_OK
WriteX 13058 327680 65536 65536 NT_STATUS_OK
WriteX 13058 393216 65536 65536 NT_STATUS_OK
WriteX 13058 458752 65536 65536 NT_STATUS_OK
WriteX 13058 524288 65536 65536 NT_STATUS_OK
WriteX 13058 589824 35257 35257 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13063 NT_STATUS_OK
WriteX 13063 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 258 NT_STATUS_OK
WriteX 13063 0 65536 65536 NT_STATUS_OK
WriteX 13063 65536 65536 65536 NT_STATUS_OK
WriteX 13063 131072 65536 65536 NT_STATUS_OK
WriteX 13063 196608 65536 65536 NT_STATUS_OK
WriteX 13063 262144 65536 65536 NT_STATUS_OK
WriteX 13063 327680 65536 65536 NT_STATUS_OK
WriteX 13063 393216 65536 65536 NT_STATUS_OK
WriteX 13063 458752 65536 65536 NT_STATUS_OK
WriteX 13063 524288 65536 65536 NT_STATUS_OK
WriteX 13063 589824 57598 57598 NT_STATUS_OK
Close 13063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13065 NT_STATUS_OK
WriteX 13065 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 258 NT_STATUS_OK
WriteX 13065 0 12543 12543 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
Close 13049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13067 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13071 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1005 NT_STATUS_OK
ReadX 13071 1938 24 24 NT_STATUS_OK
ReadX 13071 1920 276 276 NT_STATUS_OK
ReadX 13071 1918 14 14 NT_STATUS_OK
ReadX 13071 1918 7 7 NT_STATUS_OK
ReadX 13071 1919 12 12 NT_STATUS_OK
ReadX 13071 1919 8 8 NT_STATUS_OK
ReadX 13071 1917 15 15 NT_STATUS_OK
ReadX 13071 0 16 16 NT_STATUS_OK
ReadX 13071 16 2048 2048 NT_STATUS_OK
ReadX 13071 2064 2048 2048 NT_STATUS_OK
ReadX 13071 257 2048 2048 NT_STATUS_OK
ReadX 13071 385 2048 2048 NT_STATUS_OK
ReadX 13071 513 2048 2048 NT_STATUS_OK
ReadX 13071 641 2048 2048 NT_STATUS_OK
ReadX 13071 769 2048 2048 NT_STATUS_OK
ReadX 13071 897 2048 2048 NT_STATUS_OK
ReadX 13071 1025 2048 2048 NT_STATUS_OK
ReadX 13071 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13076 NT_STATUS_OK
WriteX 13076 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13076 258 NT_STATUS_OK
WriteX 13076 0 11588 11588 NT_STATUS_OK
Flush 13076 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13077 NT_STATUS_OK
Close 13077 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13079 NT_STATUS_OK
ReadX 13079 0 4096 4096 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13081 NT_STATUS_OK
WriteX 13081 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13081 258 NT_STATUS_OK
WriteX 13081 0 11615 11615 NT_STATUS_OK
Flush 13081 NT_STATUS_OK
Close 13081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13083 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13087 NT_STATUS_OK
Close 13087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13090 NT_STATUS_OK
WriteX 13090 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13090 258 NT_STATUS_OK
WriteX 13090 0 65536 65536 NT_STATUS_OK
WriteX 13090 65536 16050 16050 NT_STATUS_OK
Close 13090 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13070 1939 64 64 NT_STATUS_OK
ReadX 13070 128 248 248 NT_STATUS_OK
ReadX 13070 128 568 568 NT_STATUS_OK
ReadX 13070 3872 1536 1536 NT_STATUS_OK
ReadX 13070 3456 2560 2560 NT_STATUS_OK
ReadX 13070 3136 512 512 NT_STATUS_OK
ReadX 13070 2880 4096 4096 NT_STATUS_OK
ReadX 13070 3264 3072 3072 NT_STATUS_OK
ReadX 13070 320 4096 4096 NT_STATUS_OK
ReadX 13070 1024 4096 4096 NT_STATUS_OK
ReadX 13070 3616 4096 4096 NT_STATUS_OK
ReadX 13070 1939 64 64 NT_STATUS_OK
ReadX 13070 128 248 248 NT_STATUS_OK
ReadX 13070 128 608 608 NT_STATUS_OK
ReadX 13070 2858 1024 1024 NT_STATUS_OK
ReadX 13070 2810 4096 4096 NT_STATUS_OK
ReadX 13070 2826 4096 4096 NT_STATUS_OK
ReadX 13070 2580 2048 2048 NT_STATUS_OK
ReadX 13070 2800 2560 2560 NT_STATUS_OK
ReadX 13070 2100 4096 4096 NT_STATUS_OK
ReadX 13070 2084 4096 4096 NT_STATUS_OK
ReadX 13070 868 4096 4096 NT_STATUS_OK
ReadX 13070 2324 4096 4096 NT_STATUS_OK
ReadX 13070 884 4096 4096 NT_STATUS_OK
ReadX 13070 2604 1024 1024 NT_STATUS_OK
ReadX 13070 580 4096 4096 NT_STATUS_OK
ReadX 13070 596 4096 4096 NT_STATUS_OK
ReadX 13070 2752 4096 4096 NT_STATUS_OK
ReadX 13070 2842 1024 1024 NT_STATUS_OK
ReadX 13070 660 4096 4096 NT_STATUS_OK
ReadX 13070 2720 4096 4096 NT_STATUS_OK
ReadX 13070 2736 4096 4096 NT_STATUS_OK
ReadX 13070 628 4096 4096 NT_STATUS_OK
ReadX 13070 2704 4096 4096 NT_STATUS_OK
ReadX 13070 1556 4096 4096 NT_STATUS_OK
ReadX 13070 576 4096 4096 NT_STATUS_OK
ReadX 13070 3168 1536 1536 NT_STATUS_OK
ReadX 13070 832 4096 4096 NT_STATUS_OK
ReadX 13070 1088 4096 4096 NT_STATUS_OK
ReadX 13070 1344 4096 4096 NT_STATUS_OK
ReadX 13070 1600 4096 4096 NT_STATUS_OK
ReadX 13070 1856 4096 4096 NT_STATUS_OK
ReadX 13070 2112 4096 4096 NT_STATUS_OK
ReadX 13070 1892 4096 4096 NT_STATUS_OK
ReadX 13070 820 4096 4096 NT_STATUS_OK
ReadX 13070 788 4096 4096 NT_STATUS_OK
ReadX 13070 1604 4096 4096 NT_STATUS_OK
ReadX 13070 3648 4096 4096 NT_STATUS_OK
ReadX 13070 2608 4096 4096 NT_STATUS_OK
ReadX 13070 548 4096 4096 NT_STATUS_OK
ReadX 13070 740 4096 4096 NT_STATUS_OK
ReadX 13070 1344 4096 4096 NT_STATUS_OK
ReadX 13070 3392 4096 4096 NT_STATUS_OK
ReadX 13070 3904 4096 4096 NT_STATUS_OK
ReadX 13070 644 4096 4096 NT_STATUS_OK
ReadX 13070 676 4096 4096 NT_STATUS_OK
ReadX 13070 2688 4096 4096 NT_STATUS_OK
ReadX 13070 320 4096 4096 NT_STATUS_OK
ReadX 13070 900 4096 4096 NT_STATUS_OK
ReadX 13070 1908 4096 4096 NT_STATUS_OK
ReadX 13070 852 4096 4096 NT_STATUS_OK
ReadX 13070 724 4096 4096 NT_STATUS_OK
ReadX 13070 2292 4096 4096 NT_STATUS_OK
ReadX 13070 612 4096 4096 NT_STATUS_OK
ReadX 13070 388 4096 4096 NT_STATUS_OK
ReadX 13070 2368 4096 4096 NT_STATUS_OK
ReadX 13070 2624 4096 4096 NT_STATUS_OK
ReadX 13070 500 4096 4096 NT_STATUS_OK
ReadX 13070 356 4096 4096 NT_STATUS_OK
ReadX 13070 1024 4096 4096 NT_STATUS_OK
ReadX 13070 576 4096 4096 NT_STATUS_OK
ReadX 13070 340 4096 4096 NT_STATUS_OK
ReadX 13070 420 4096 4096 NT_STATUS_OK
ReadX 13070 1600 4096 4096 NT_STATUS_OK
ReadX 13070 404 4096 4096 NT_STATUS_OK
ReadX 13070 1428 4096 4096 NT_STATUS_OK
ReadX 13070 2656 4096 4096 NT_STATUS_OK
ReadX 13070 2624 4096 4096 NT_STATUS_OK
ReadX 13070 452 4096 4096 NT_STATUS_OK
ReadX 13070 692 4096 4096 NT_STATUS_OK
ReadX 13070 564 4096 4096 NT_STATUS_OK
ReadX 13070 372 4096 4096 NT_STATUS_OK
ReadX 13070 468 4096 4096 NT_STATUS_OK
ReadX 13070 484 4096 4096 NT_STATUS_OK
ReadX 13070 1088 4096 4096 NT_STATUS_OK
ReadX 13070 1924 4096 4096 NT_STATUS_OK
ReadX 13070 2768 4096 4096 NT_STATUS_OK
ReadX 13070 832 4096 4096 NT_STATUS_OK
ReadX 13070 836 4096 4096 NT_STATUS_OK
ReadX 13070 1856 4096 4096 NT_STATUS_OK
ReadX 13070 2640 4096 4096 NT_STATUS_OK
ReadX 13070 436 4096 4096 NT_STATUS_OK
ReadX 13070 1828 4096 4096 NT_STATUS_OK
ReadX 13070 804 4096 4096 NT_STATUS_OK
ReadX 13070 1860 4096 4096 NT_STATUS_OK
ReadX 13070 1812 4096 4096 NT_STATUS_OK
ReadX 13070 756 4096 4096 NT_STATUS_OK
ReadX 13070 1636 4096 4096 NT_STATUS_OK
ReadX 13070 772 4096 4096 NT_STATUS_OK
ReadX 13070 2036 4096 4096 NT_STATUS_OK
ReadX 13070 1220 4096 4096 NT_STATUS_OK
ReadX 13070 1652 4096 4096 NT_STATUS_OK
ReadX 13070 2588 4096 4096 NT_STATUS_OK
ReadX 13070 916 4096 4096 NT_STATUS_OK
ReadX 13070 260 4096 4096 NT_STATUS_OK
ReadX 13070 932 4096 4096 NT_STATUS_OK
ReadX 13070 2624 4096 4096 NT_STATUS_OK
ReadX 13070 308 4096 4096 NT_STATUS_OK
ReadX 13070 292 4096 4096 NT_STATUS_OK
ReadX 13070 1140 4096 4096 NT_STATUS_OK
ReadX 13070 276 4096 4096 NT_STATUS_OK
ReadX 13070 2020 4096 4096 NT_STATUS_OK
ReadX 13070 2880 4096 4096 NT_STATUS_OK
ReadX 13070 516 4096 4096 NT_STATUS_OK
ReadX 13070 1844 4096 4096 NT_STATUS_OK
ReadX 13070 1124 4096 4096 NT_STATUS_OK
ReadX 13070 3136 4096 4096 NT_STATUS_OK
ReadX 13070 324 4096 4096 NT_STATUS_OK
ReadX 13070 1156 4096 4096 NT_STATUS_OK
ReadX 13070 1172 4096 4096 NT_STATUS_OK
ReadX 13070 2112 4096 4096 NT_STATUS_OK
ReadX 13070 2368 4096 4096 NT_STATUS_OK
ReadX 13070 964 4096 4096 NT_STATUS_OK
ReadX 13070 980 4096 4096 NT_STATUS_OK
ReadX 13070 1012 4096 4096 NT_STATUS_OK
ReadX 13070 532 4096 4096 NT_STATUS_OK
ReadX 13070 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13070 1620 4096 4096 NT_STATUS_OK
ReadX 13070 1604 4096 4096 NT_STATUS_OK
ReadX 13070 2116 4096 4096 NT_STATUS_OK
ReadX 13070 2132 4096 4096 NT_STATUS_OK
ReadX 13070 2148 4096 4096 NT_STATUS_OK
ReadX 13070 2276 4096 4096 NT_STATUS_OK
ReadX 13070 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13095 NT_STATUS_OK
QUERY_FILE_INFORMATION 13050 1004 NT_STATUS_OK
Close 13050 NT_STATUS_OK
WriteX 13095 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13095 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13052 1004 NT_STATUS_OK
Close 13052 NT_STATUS_OK
WriteX 13095 0 65536 65536 NT_STATUS_OK
WriteX 13095 65536 64850 64850 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13097 NT_STATUS_OK
WriteX 13097 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
ReadX 13070 2068 4096 4096 NT_STATUS_OK
ReadX 13070 1588 4096 4096 NT_STATUS_OK
ReadX 13070 1572 4096 4096 NT_STATUS_OK
WriteX 13097 0 18630 18630 NT_STATUS_OK
Flush 13097 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13070 612 4096 4096 NT_STATUS_OK
ReadX 13070 564 4096 4096 NT_STATUS_OK
ReadX 13070 1876 4096 4096 NT_STATUS_OK
ReadX 13070 628 4096 4096 NT_STATUS_OK
ReadX 13070 740 4096 4096 NT_STATUS_OK
ReadX 13070 724 4096 4096 NT_STATUS_OK
ReadX 13070 644 4096 4096 NT_STATUS_OK
ReadX 13070 2324 4096 4096 NT_STATUS_OK
ReadX 13070 660 4096 4096 NT_STATUS_OK
ReadX 13070 852 4096 4096 NT_STATUS_OK
ReadX 13070 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13070 2368 4096 4096 NT_STATUS_OK
ReadX 13070 1024 4096 4096 NT_STATUS_OK
ReadX 13070 320 4096 4096 NT_STATUS_OK
ReadX 13070 580 4096 4096 NT_STATUS_OK
ReadX 13070 3136 512 512 NT_STATUS_OK
ReadX 13070 2880 4096 4096 NT_STATUS_OK
Close 13070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 61440 4096 4096 NT_STATUS_OK
ReadX 13102 126976 4096 4096 NT_STATUS_OK
WriteX 13102 0 65536 65536 NT_STATUS_OK
WriteX 13102 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 61440 4096 4096 NT_STATUS_OK
ReadX 13103 126976 4096 4096 NT_STATUS_OK
ReadX 13103 192512 4096 4096 NT_STATUS_OK
ReadX 13103 258048 4096 4096 NT_STATUS_OK
WriteX 13103 0 65536 65536 NT_STATUS_OK
WriteX 13103 65536 65536 65536 NT_STATUS_OK
WriteX 13103 131072 65536 65536 NT_STATUS_OK
WriteX 13103 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13104 NT_STATUS_OK
ReadX 13104 61440 4096 4096 NT_STATUS_OK
ReadX 13104 126976 4096 4096 NT_STATUS_OK
ReadX 13104 192512 4096 4096 NT_STATUS_OK
ReadX 13104 258048 4096 4096 NT_STATUS_OK
ReadX 13104 323584 4096 4096 NT_STATUS_OK
ReadX 13104 389120 4096 4096 NT_STATUS_OK
ReadX 13104 454656 4096 4096 NT_STATUS_OK
ReadX 13104 520192 4096 4096 NT_STATUS_OK
WriteX 13104 0 65536 65536 NT_STATUS_OK
WriteX 13104 65536 65536 65536 NT_STATUS_OK
WriteX 13104 131072 65536 65536 NT_STATUS_OK
WriteX 13104 196608 65536 65536 NT_STATUS_OK
WriteX 13104 262144 65536 65536 NT_STATUS_OK
WriteX 13104 327680 65536 65536 NT_STATUS_OK
WriteX 13104 393216 65536 65536 NT_STATUS_OK
WriteX 13104 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13107 NT_STATUS_OK
WriteX 13107 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13107 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13105 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13101 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Close 13102 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13103 NT_STATUS_OK
Close 13104 NT_STATUS_OK
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13105 0 8192 8192 NT_STATUS_OK
Flush 13105 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13109 NT_STATUS_OK
Close 13109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13112 NT_STATUS_OK
WriteX 13112 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13112 258 NT_STATUS_OK
WriteX 13112 0 62591 62591 NT_STATUS_OK
Close 13112 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13114 NT_STATUS_OK
Close 13114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13117 NT_STATUS_OK
WriteX 13117 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13117 258 NT_STATUS_OK
WriteX 13117 0 10845 10845 NT_STATUS_OK
Close 13117 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13119 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13122 NT_STATUS_OK
WriteX 13122 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13122 258 NT_STATUS_OK
WriteX 13122 0 30118 30118 NT_STATUS_OK
Close 13122 NT_STATUS_OK
WriteX 13105 0 4096 4096 NT_STATUS_OK
WriteX 13107 0 64 64 NT_STATUS_OK
Close 13107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 61440 61440 NT_STATUS_OK
ReadX 13124 61440 4096 4096 NT_STATUS_OK
ReadX 13124 65536 61440 61440 NT_STATUS_OK
ReadX 13124 126976 4096 4096 NT_STATUS_OK
ReadX 13124 131072 61440 61440 NT_STATUS_OK
ReadX 13124 192512 4096 4096 NT_STATUS_OK
ReadX 13124 196608 61440 61440 NT_STATUS_OK
ReadX 13124 258048 4096 4096 NT_STATUS_OK
ReadX 13124 262144 61440 61440 NT_STATUS_OK
ReadX 13124 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 61440 61440 NT_STATUS_OK
ReadX 13125 61440 4096 4096 NT_STATUS_OK
ReadX 13125 65536 61440 61440 NT_STATUS_OK
ReadX 13125 126976 4096 4096 NT_STATUS_OK
ReadX 13125 131072 61440 61440 NT_STATUS_OK
ReadX 13125 192512 4096 4096 NT_STATUS_OK
ReadX 13125 196608 61440 61440 NT_STATUS_OK
ReadX 13125 258048 4096 4096 NT_STATUS_OK
ReadX 13125 262144 61440 61440 NT_STATUS_OK
ReadX 13125 323584 4096 4096 NT_STATUS_OK
ReadX 13125 327680 61440 61440 NT_STATUS_OK
ReadX 13125 389120 4096 4096 NT_STATUS_OK
ReadX 13125 393216 61440 61440 NT_STATUS_OK
ReadX 13125 454656 4096 4096 NT_STATUS_OK
ReadX 13125 458752 61440 61440 NT_STATUS_OK
ReadX 13125 520192 4096 4096 NT_STATUS_OK
ReadX 13125 524288 61440 61440 NT_STATUS_OK
ReadX 13125 585728 4096 4096 NT_STATUS_OK
ReadX 13125 589824 61440 61440 NT_STATUS_OK
ReadX 13125 651264 4096 4096 NT_STATUS_OK
ReadX 13125 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 61440 61440 NT_STATUS_OK
ReadX 13126 61440 4096 4096 NT_STATUS_OK
ReadX 13126 65536 61440 61440 NT_STATUS_OK
ReadX 13126 126976 4096 4096 NT_STATUS_OK
ReadX 13126 131072 61440 61440 NT_STATUS_OK
ReadX 13126 192512 4096 4096 NT_STATUS_OK
ReadX 13126 196608 61440 61440 NT_STATUS_OK
ReadX 13126 258048 4096 4096 NT_STATUS_OK
ReadX 13126 262144 61440 61440 NT_STATUS_OK
ReadX 13126 323584 4096 4096 NT_STATUS_OK
ReadX 13126 327680 61440 61440 NT_STATUS_OK
ReadX 13126 389120 4096 4096 NT_STATUS_OK
ReadX 13126 393216 61440 61440 NT_STATUS_OK
ReadX 13126 454656 4096 4096 NT_STATUS_OK
ReadX 13126 458752 61440 61440 NT_STATUS_OK
ReadX 13126 520192 4096 4096 NT_STATUS_OK
ReadX 13126 524288 61440 61440 NT_STATUS_OK
ReadX 13126 585728 4096 4096 NT_STATUS_OK
ReadX 13126 589824 61440 61440 NT_STATUS_OK
ReadX 13126 651264 4096 4096 NT_STATUS_OK
ReadX 13126 655360 61440 61440 NT_STATUS_OK
ReadX 13126 716800 4096 4096 NT_STATUS_OK
ReadX 13126 720896 61440 61440 NT_STATUS_OK
ReadX 13126 782336 4096 4096 NT_STATUS_OK
ReadX 13126 786432 61440 61440 NT_STATUS_OK
ReadX 13126 847872 4096 4096 NT_STATUS_OK
ReadX 13126 851968 61440 61440 NT_STATUS_OK
ReadX 13126 913408 4096 4096 NT_STATUS_OK
ReadX 13126 917504 61440 61440 NT_STATUS_OK
ReadX 13126 978944 4096 4096 NT_STATUS_OK
ReadX 13126 983040 61440 61440 NT_STATUS_OK
ReadX 13126 1044480 4096 4096 NT_STATUS_OK
ReadX 13126 1048576 61440 61440 NT_STATUS_OK
ReadX 13126 1110016 4096 4096 NT_STATUS_OK
ReadX 13126 1114112 61440 61440 NT_STATUS_OK
ReadX 13126 1175552 4096 4096 NT_STATUS_OK
ReadX 13126 1179648 61440 61440 NT_STATUS_OK
ReadX 13126 1241088 4096 4096 NT_STATUS_OK
ReadX 13126 1245184 61440 61440 NT_STATUS_OK
ReadX 13126 1306624 4096 4096 NT_STATUS_OK
ReadX 13126 1310720 61440 61440 NT_STATUS_OK
ReadX 13126 1372160 4096 4096 NT_STATUS_OK
ReadX 13126 1376256 61440 61440 NT_STATUS_OK
ReadX 13126 1437696 4096 4096 NT_STATUS_OK
ReadX 13126 1441792 61440 61440 NT_STATUS_OK
ReadX 13126 1503232 4096 4096 NT_STATUS_OK
ReadX 13126 1507328 61440 61440 NT_STATUS_OK
ReadX 13126 1568768 4096 4096 NT_STATUS_OK
ReadX 13126 1572864 61440 61440 NT_STATUS_OK
ReadX 13126 1634304 4096 4096 NT_STATUS_OK
ReadX 13126 1638400 61440 61440 NT_STATUS_OK
ReadX 13126 1699840 4096 4096 NT_STATUS_OK
ReadX 13126 1703936 61440 61440 NT_STATUS_OK
ReadX 13126 1765376 4096 4096 NT_STATUS_OK
ReadX 13126 1769472 61440 61440 NT_STATUS_OK
ReadX 13126 1830912 4096 4096 NT_STATUS_OK
ReadX 13126 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13127 NT_STATUS_OK
Close 13127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13124 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13130 NT_STATUS_OK
ReadX 13130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13131 NT_STATUS_OK
ReadX 13131 0 4096 4096 NT_STATUS_OK
ReadX 13131 4096 4096 4096 NT_STATUS_OK
ReadX 13131 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13129 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Close 13131 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13135 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13136 NT_STATUS_OK
Close 13136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13134 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13138 NT_STATUS_OK
ReadX 13138 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 0 8192 8192 NT_STATUS_OK
ReadX 13139 8192 8192 8192 NT_STATUS_OK
ReadX 13139 16384 8192 8192 NT_STATUS_OK
ReadX 13139 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13141 NT_STATUS_OK
Close 13141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Close 13138 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13144 NT_STATUS_OK
WriteX 13144 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13144 258 NT_STATUS_OK
WriteX 13144 0 10438 10438 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13145 NT_STATUS_OK
Close 13145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13147 NT_STATUS_OK
Close 13147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13148 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13149 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13150 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13151 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13152 NT_STATUS_OK
Close 13152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
ReadX 13153 4096 4096 4096 NT_STATUS_OK
ReadX 13153 8192 4096 4096 NT_STATUS_OK
ReadX 13153 12288 8192 8192 NT_STATUS_OK
ReadX 13153 20480 8192 8192 NT_STATUS_OK
ReadX 13153 28672 8192 8192 NT_STATUS_OK
ReadX 13153 36864 8192 8192 NT_STATUS_OK
ReadX 13153 45056 8192 8192 NT_STATUS_OK
ReadX 13153 53248 8192 8192 NT_STATUS_OK
ReadX 13153 61440 8192 8192 NT_STATUS_OK
ReadX 13153 69632 8192 8192 NT_STATUS_OK
ReadX 13153 77824 8192 8192 NT_STATUS_OK
ReadX 13153 86016 8192 8192 NT_STATUS_OK
ReadX 13153 94208 8192 8192 NT_STATUS_OK
ReadX 13153 102400 8192 8192 NT_STATUS_OK
ReadX 13153 110592 8192 8192 NT_STATUS_OK
ReadX 13153 118784 8192 8192 NT_STATUS_OK
ReadX 13153 126976 8192 8192 NT_STATUS_OK
ReadX 13153 135168 8192 8192 NT_STATUS_OK
ReadX 13153 143360 8192 8192 NT_STATUS_OK
ReadX 13153 151552 8192 8192 NT_STATUS_OK
ReadX 13153 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13153 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13158 NT_STATUS_OK
WriteX 13158 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13158 258 NT_STATUS_OK
WriteX 13158 0 28489 28489 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13159 NT_STATUS_OK
Close 13159 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13161 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13162 NT_STATUS_OK
Close 13162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 8192 8192 NT_STATUS_OK
ReadX 13165 8192 8192 8192 NT_STATUS_OK
ReadX 13165 16384 8192 8192 NT_STATUS_OK
ReadX 13165 24576 8192 8192 NT_STATUS_OK
ReadX 13165 32768 16384 16384 NT_STATUS_OK
ReadX 13165 49152 8192 8192 NT_STATUS_OK
ReadX 13165 57344 8192 8192 NT_STATUS_OK
ReadX 13165 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13167 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13170 NT_STATUS_OK
WriteX 13170 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13170 258 NT_STATUS_OK
WriteX 13170 0 29253 29253 NT_STATUS_OK
Close 13170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13171 NT_STATUS_OK
Close 13171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13172 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13174 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13177 NT_STATUS_OK
WriteX 13177 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13177 258 NT_STATUS_OK
WriteX 13177 0 30183 30183 NT_STATUS_OK
Close 13177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13178 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13180 NT_STATUS_OK
WriteX 13180 0 510 510 NT_STATUS_OK
WriteX 13180 510 512 512 NT_STATUS_OK
WriteX 13180 1022 510 510 NT_STATUS_OK
WriteX 13180 1532 510 510 NT_STATUS_OK
WriteX 13180 2042 168 168 NT_STATUS_OK
Close 13180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13181 NT_STATUS_OK
Close 13181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
WriteX 13183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13184 NT_STATUS_OK
ReadX 13184 61440 4096 4096 NT_STATUS_OK
ReadX 13184 126976 4096 4096 NT_STATUS_OK
WriteX 13184 0 65536 65536 NT_STATUS_OK
WriteX 13184 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13185 NT_STATUS_OK
ReadX 13185 61440 4096 4096 NT_STATUS_OK
ReadX 13185 126976 4096 4096 NT_STATUS_OK
ReadX 13185 192512 4096 4096 NT_STATUS_OK
ReadX 13185 258048 4096 4096 NT_STATUS_OK
WriteX 13185 0 65536 65536 NT_STATUS_OK
WriteX 13185 65536 65536 65536 NT_STATUS_OK
WriteX 13185 131072 65536 65536 NT_STATUS_OK
WriteX 13185 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13186 NT_STATUS_OK
ReadX 13186 61440 4096 4096 NT_STATUS_OK
ReadX 13186 126976 4096 4096 NT_STATUS_OK
ReadX 13186 192512 4096 4096 NT_STATUS_OK
ReadX 13186 258048 4096 4096 NT_STATUS_OK
ReadX 13186 323584 4096 4096 NT_STATUS_OK
ReadX 13186 389120 4096 4096 NT_STATUS_OK
ReadX 13186 454656 4096 4096 NT_STATUS_OK
ReadX 13186 520192 4096 4096 NT_STATUS_OK
WriteX 13186 0 65536 65536 NT_STATUS_OK
WriteX 13186 65536 65536 65536 NT_STATUS_OK
WriteX 13186 131072 65536 65536 NT_STATUS_OK
WriteX 13186 196608 65536 65536 NT_STATUS_OK
WriteX 13186 262144 65536 65536 NT_STATUS_OK
WriteX 13186 327680 65536 65536 NT_STATUS_OK
WriteX 13186 393216 65536 65536 NT_STATUS_OK
WriteX 13186 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13187 NT_STATUS_OK
Close 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Close 13184 NT_STATUS_OK
Close 13185 NT_STATUS_OK
Close 13186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13189 NT_STATUS_OK
Close 13189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13196 NT_STATUS_OK
Close 13196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13198 NT_STATUS_OK
Close 13198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13202 NT_STATUS_OK
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13205 NT_STATUS_OK
Close 13205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13211 NT_STATUS_OK
Close 13211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13216 NT_STATUS_OK
Close 13216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13221 NT_STATUS_OK
Close 13221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13226 NT_STATUS_OK
Close 13226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13231 NT_STATUS_OK
Close 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13236 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13246 NT_STATUS_OK
Close 13246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13249 NT_STATUS_OK
Close 13249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13252 NT_STATUS_OK
Close 13252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13255 NT_STATUS_OK
WriteX 13255 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13255 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13255 0 65536 65536 NT_STATUS_OK
WriteX 13255 65536 65536 65536 NT_STATUS_OK
WriteX 13255 131072 65536 65536 NT_STATUS_OK
WriteX 13255 196608 65536 65536 NT_STATUS_OK
WriteX 13255 262144 26634 26634 NT_STATUS_OK
Close 13255 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13261 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
Close 13262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 0 4096 4096 NT_STATUS_OK
ReadX 13263 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13264 NT_STATUS_OK
Close 13264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13263 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13268 NT_STATUS_OK
Close 13268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13271 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13273 NT_STATUS_OK
Close 13273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13277 NT_STATUS_OK
Close 13277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13280 NT_STATUS_OK
Close 13280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13282 NT_STATUS_OK
Close 13282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13286 NT_STATUS_OK
Close 13286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13291 NT_STATUS_OK
Close 13291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13296 NT_STATUS_OK
Close 13296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13301 NT_STATUS_OK
Close 13301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13306 NT_STATUS_OK
Close 13306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13311 NT_STATUS_OK
Close 13311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13315 NT_STATUS_OK
Close 13315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13320 NT_STATUS_OK
Close 13320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13328 NT_STATUS_OK
Close 13328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13330 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
Close 13342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
Close 13343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13354 NT_STATUS_OK
Close 13354 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
Close 13356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
Close 13357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13344 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13387 0 4096 4096 NT_STATUS_OK
Close 13387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
ReadX 13389 4096 4096 4096 NT_STATUS_OK
ReadX 13389 8192 4096 4096 NT_STATUS_OK
ReadX 13389 12288 4096 4096 NT_STATUS_OK
ReadX 13389 16384 4096 4096 NT_STATUS_OK
ReadX 13389 20480 4096 4096 NT_STATUS_OK
ReadX 13389 24576 4096 4096 NT_STATUS_OK
ReadX 13389 28672 4096 4096 NT_STATUS_OK
ReadX 13389 32768 4096 4096 NT_STATUS_OK
ReadX 13389 36864 4096 4096 NT_STATUS_OK
ReadX 13389 40960 4096 4096 NT_STATUS_OK
ReadX 13389 45056 4096 4096 NT_STATUS_OK
ReadX 13389 49152 4096 4096 NT_STATUS_OK
ReadX 13389 53248 4096 4096 NT_STATUS_OK
ReadX 13389 57344 4096 4096 NT_STATUS_OK
ReadX 13389 61440 4096 4096 NT_STATUS_OK
ReadX 13389 65536 4096 4096 NT_STATUS_OK
ReadX 13389 69632 4096 4096 NT_STATUS_OK
ReadX 13389 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13389 1004 NT_STATUS_OK
WriteX 13389 0 4096 4096 NT_STATUS_OK
Close 13389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13390 NT_STATUS_OK
SET_FILE_INFORMATION 13390 1004 NT_STATUS_OK
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13392 NT_STATUS_OK
Close 13392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13395 NT_STATUS_OK
WriteX 13395 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 258 NT_STATUS_OK
WriteX 13395 0 65536 65536 NT_STATUS_OK
WriteX 13395 65536 19979 19979 NT_STATUS_OK
Close 13395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13396 NT_STATUS_OK
ReadX 13396 0 4096 4096 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
QUERY_FILE_INFORMATION 13396 1004 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
SET_FILE_INFORMATION 13396 1004 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
Flush 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13398 NT_STATUS_OK
ReadX 13398 0 4096 4096 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 4096 4096 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 4096 4096 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13401 1004 NT_STATUS_OK
WriteX 13401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13402 NT_STATUS_OK
Close 13402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13398 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13404 NT_STATUS_OK
Close 13404 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13407 NT_STATUS_OK
WriteX 13407 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13407 258 NT_STATUS_OK
WriteX 13407 0 65536 65536 NT_STATUS_OK
WriteX 13407 65536 17654 17654 NT_STATUS_OK
Close 13407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 0 4096 4096 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 1004 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
SET_FILE_INFORMATION 13408 1004 NT_STATUS_OK
WriteX 13408 0 4096 4096 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13409 NT_STATUS_OK
SET_FILE_INFORMATION 13409 1004 NT_STATUS_OK
Close 13409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13411 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 4096 4096 NT_STATUS_OK
ReadX 13413 4096 4096 4096 NT_STATUS_OK
ReadX 13413 8192 4096 4096 NT_STATUS_OK
ReadX 13413 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13413 16384 4096 4096 NT_STATUS_OK
ReadX 13413 20480 4096 4096 NT_STATUS_OK
ReadX 13413 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13414 NT_STATUS_OK
ReadX 13414 0 4096 4096 NT_STATUS_OK
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 4096 4096 NT_STATUS_OK
Close 13415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13416 1004 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13417 NT_STATUS_OK
Close 13417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13419 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13422 NT_STATUS_OK
WriteX 13422 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13422 258 NT_STATUS_OK
WriteX 13422 0 65536 65536 NT_STATUS_OK
WriteX 13422 65536 19490 19490 NT_STATUS_OK
Close 13422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
QUERY_FILE_INFORMATION 13423 1004 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
SET_FILE_INFORMATION 13423 1004 NT_STATUS_OK
WriteX 13423 0 4096 4096 NT_STATUS_OK
Flush 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13424 NT_STATUS_OK
SET_FILE_INFORMATION 13424 1004 NT_STATUS_OK
Close 13424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13426 NT_STATUS_OK
Close 13426 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13428 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13428 0 4096 4096 NT_STATUS_OK
Close 13428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13429 NT_STATUS_OK
ReadX 13429 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 4096 4096 NT_STATUS_OK
ReadX 13430 4096 4096 4096 NT_STATUS_OK
ReadX 13430 8192 4096 4096 NT_STATUS_OK
ReadX 13430 12288 4096 4096 NT_STATUS_OK
ReadX 13430 16384 4096 4096 NT_STATUS_OK
ReadX 13430 20480 4096 4096 NT_STATUS_OK
ReadX 13430 24576 4096 4096 NT_STATUS_OK
ReadX 13430 28672 4096 4096 NT_STATUS_OK
ReadX 13430 32768 4096 4096 NT_STATUS_OK
ReadX 13430 36864 4096 4096 NT_STATUS_OK
ReadX 13430 40960 4096 4096 NT_STATUS_OK
ReadX 13430 45056 4096 4096 NT_STATUS_OK
ReadX 13430 49152 4096 4096 NT_STATUS_OK
ReadX 13430 53248 4096 4096 NT_STATUS_OK
ReadX 13430 57344 4096 4096 NT_STATUS_OK
ReadX 13430 61440 4096 4096 NT_STATUS_OK
ReadX 13430 65536 4096 4096 NT_STATUS_OK
ReadX 13430 69632 4096 4096 NT_STATUS_OK
ReadX 13430 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13430 1004 NT_STATUS_OK
WriteX 13430 0 4096 4096 NT_STATUS_OK
Close 13430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13431 NT_STATUS_OK
SET_FILE_INFORMATION 13431 1004 NT_STATUS_OK
Close 13431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13436 NT_STATUS_OK
WriteX 13436 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13436 258 NT_STATUS_OK
WriteX 13436 0 65536 65536 NT_STATUS_OK
WriteX 13436 65536 8866 8866 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13437 NT_STATUS_OK
ReadX 13437 0 4096 4096 NT_STATUS_OK
WriteX 13437 0 4096 4096 NT_STATUS_OK
Flush 13437 NT_STATUS_OK
SET_FILE_INFORMATION 13437 1004 NT_STATUS_OK
WriteX 13437 0 4096 4096 NT_STATUS_OK
Flush 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
Close 13439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 4096 4096 NT_STATUS_OK
Close 13440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13441 1004 NT_STATUS_OK
WriteX 13441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13442 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13441 NT_STATUS_OK
Close 13432 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13444 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13447 NT_STATUS_OK
WriteX 13447 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13447 258 NT_STATUS_OK
WriteX 13447 0 65536 65536 NT_STATUS_OK
WriteX 13447 65536 9298 9298 NT_STATUS_OK
Close 13447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 0 4096 4096 NT_STATUS_OK
WriteX 13448 0 4096 4096 NT_STATUS_OK
Flush 13448 NT_STATUS_OK
SET_FILE_INFORMATION 13448 1004 NT_STATUS_OK
WriteX 13448 0 4096 4096 NT_STATUS_OK
Flush 13448 NT_STATUS_OK
Close 13448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13449 NT_STATUS_OK
SET_FILE_INFORMATION 13449 1004 NT_STATUS_OK
Close 13449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13454 0 4096 4096 NT_STATUS_OK
Close 13454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13455 4096 4096 4096 NT_STATUS_OK
ReadX 13455 8192 4096 4096 NT_STATUS_OK
ReadX 13455 12288 4096 4096 NT_STATUS_OK
ReadX 13455 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
Close 13456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 0 4096 4096 NT_STATUS_OK
Close 13457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13458 1004 NT_STATUS_OK
WriteX 13458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13459 NT_STATUS_OK
Close 13459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13464 NT_STATUS_OK
WriteX 13464 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13464 258 NT_STATUS_OK
WriteX 13464 0 65536 65536 NT_STATUS_OK
WriteX 13464 65536 11540 11540 NT_STATUS_OK
Close 13464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 0 4096 4096 NT_STATUS_OK
WriteX 13465 0 4096 4096 NT_STATUS_OK
Flush 13465 NT_STATUS_OK
SET_FILE_INFORMATION 13465 1004 NT_STATUS_OK
WriteX 13465 0 4096 4096 NT_STATUS_OK
Flush 13465 NT_STATUS_OK
Close 13465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13466 NT_STATUS_OK
SET_FILE_INFORMATION 13466 1004 NT_STATUS_OK
Close 13466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 61440 4096 4096 NT_STATUS_OK
ReadX 13470 126976 4096 4096 NT_STATUS_OK
WriteX 13470 0 65536 65536 NT_STATUS_OK
WriteX 13470 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 61440 4096 4096 NT_STATUS_OK
ReadX 13471 126976 4096 4096 NT_STATUS_OK
ReadX 13471 192512 4096 4096 NT_STATUS_OK
ReadX 13471 258048 4096 4096 NT_STATUS_OK
WriteX 13471 0 65536 65536 NT_STATUS_OK
WriteX 13471 65536 65536 65536 NT_STATUS_OK
WriteX 13471 131072 65536 65536 NT_STATUS_OK
WriteX 13471 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13472 NT_STATUS_OK
ReadX 13472 61440 4096 4096 NT_STATUS_OK
ReadX 13472 126976 4096 4096 NT_STATUS_OK
ReadX 13472 192512 4096 4096 NT_STATUS_OK
ReadX 13472 258048 4096 4096 NT_STATUS_OK
ReadX 13472 323584 4096 4096 NT_STATUS_OK
ReadX 13472 389120 4096 4096 NT_STATUS_OK
ReadX 13472 454656 4096 4096 NT_STATUS_OK
ReadX 13472 520192 4096 4096 NT_STATUS_OK
WriteX 13472 0 65536 65536 NT_STATUS_OK
WriteX 13472 65536 65536 65536 NT_STATUS_OK
WriteX 13472 131072 65536 65536 NT_STATUS_OK
WriteX 13472 196608 65536 65536 NT_STATUS_OK
WriteX 13472 262144 65536 65536 NT_STATUS_OK
WriteX 13472 327680 65536 65536 NT_STATUS_OK
WriteX 13472 393216 65536 65536 NT_STATUS_OK
WriteX 13472 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13473 NT_STATUS_OK
ReadX 13473 0 4096 4096 NT_STATUS_OK
ReadX 13473 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13474 NT_STATUS_OK
WriteX 13474 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13474 258 NT_STATUS_OK
WriteX 13474 0 53 53 NT_STATUS_OK
Close 13474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13467 NT_STATUS_OK
Close 13413 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13472 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13473 8192 4096 4096 NT_STATUS_OK
ReadX 13473 12288 4096 4096 NT_STATUS_OK
WriteX 13477 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13477 258 NT_STATUS_OK
ReadX 13473 16384 4096 4096 NT_STATUS_OK
ReadX 13473 20480 4096 4096 NT_STATUS_OK
WriteX 13477 0 15360 15360 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13478 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13478 1004 NT_STATUS_OK
WriteX 13478 0 4096 4096 NT_STATUS_OK
Close 13478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13479 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13482 NT_STATUS_OK
Close 13482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13481 4096 4096 4096 NT_STATUS_OK
ReadX 13481 8192 4096 4096 NT_STATUS_OK
ReadX 13481 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
ReadX 13484 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
ReadX 13485 4096 4096 4096 NT_STATUS_OK
ReadX 13485 8192 4096 4096 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13486 NT_STATUS_OK
WriteX 13486 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13486 258 NT_STATUS_OK
WriteX 13486 0 15360 15360 NT_STATUS_OK
Close 13486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13487 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13487 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13488 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13490 NT_STATUS_OK
ReadX 13490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13491 NT_STATUS_OK
SET_FILE_INFORMATION 13491 1004 NT_STATUS_OK
Close 13491 NT_STATUS_OK
WriteX 13487 0 4096 4096 NT_STATUS_OK
Close 13487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13492 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
ReadX 13494 4096 4096 4096 NT_STATUS_OK
ReadX 13494 8192 4096 4096 NT_STATUS_OK
ReadX 13494 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13496 NT_STATUS_OK
WriteX 13496 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13496 258 NT_STATUS_OK
WriteX 13496 0 53 53 NT_STATUS_OK
Close 13496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13497 NT_STATUS_OK
Close 13497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13495 4096 4096 4096 NT_STATUS_OK
ReadX 13495 8192 4096 4096 NT_STATUS_OK
ReadX 13495 12288 4096 4096 NT_STATUS_OK
WriteX 13499 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13499 258 NT_STATUS_OK
WriteX 13499 0 12006 12006 NT_STATUS_OK
Close 13499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13500 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13500 1004 NT_STATUS_OK
WriteX 13500 0 4096 4096 NT_STATUS_OK
Close 13500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13501 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13504 NT_STATUS_OK
Close 13504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13503 4096 4096 4096 NT_STATUS_OK
ReadX 13503 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13506 NT_STATUS_OK
WriteX 13506 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 258 NT_STATUS_OK
WriteX 13506 0 11991 11991 NT_STATUS_OK
Close 13506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13507 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13507 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13510 NT_STATUS_OK
ReadX 13510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13511 NT_STATUS_OK
SET_FILE_INFORMATION 13511 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
WriteX 13507 0 4096 4096 NT_STATUS_OK
Close 13507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13512 NT_STATUS_OK
Close 13512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13514 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
ReadX 13514 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
WriteX 13514 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13514 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
Close 13490 NT_STATUS_OK
WriteX 13494 0 19054 19054 NT_STATUS_OK
WriteX 13514 0 12288 12288 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13517 NT_STATUS_OK
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Close 13514 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 61440 61440 NT_STATUS_OK
ReadX 13521 61440 4096 4096 NT_STATUS_OK
ReadX 13521 65536 61440 61440 NT_STATUS_OK
ReadX 13521 126976 4096 4096 NT_STATUS_OK
ReadX 13521 131072 61440 61440 NT_STATUS_OK
ReadX 13521 192512 4096 4096 NT_STATUS_OK
ReadX 13521 196608 61440 61440 NT_STATUS_OK
ReadX 13521 258048 4096 4096 NT_STATUS_OK
ReadX 13521 262144 61440 61440 NT_STATUS_OK
ReadX 13521 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13522 NT_STATUS_OK
ReadX 13522 0 61440 61440 NT_STATUS_OK
ReadX 13522 61440 4096 4096 NT_STATUS_OK
ReadX 13522 65536 61440 61440 NT_STATUS_OK
ReadX 13522 126976 4096 4096 NT_STATUS_OK
ReadX 13522 131072 61440 61440 NT_STATUS_OK
ReadX 13522 192512 4096 4096 NT_STATUS_OK
ReadX 13522 196608 61440 61440 NT_STATUS_OK
ReadX 13522 258048 4096 4096 NT_STATUS_OK
ReadX 13522 262144 61440 61440 NT_STATUS_OK
ReadX 13522 323584 4096 4096 NT_STATUS_OK
ReadX 13522 327680 61440 61440 NT_STATUS_OK
ReadX 13522 389120 4096 4096 NT_STATUS_OK
ReadX 13522 393216 61440 61440 NT_STATUS_OK
ReadX 13522 454656 4096 4096 NT_STATUS_OK
ReadX 13522 458752 61440 61440 NT_STATUS_OK
ReadX 13522 520192 4096 4096 NT_STATUS_OK
ReadX 13522 524288 61440 61440 NT_STATUS_OK
ReadX 13522 585728 4096 4096 NT_STATUS_OK
ReadX 13522 589824 61440 61440 NT_STATUS_OK
ReadX 13522 651264 4096 4096 NT_STATUS_OK
ReadX 13522 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 61440 61440 NT_STATUS_OK
ReadX 13523 61440 4096 4096 NT_STATUS_OK
ReadX 13523 65536 61440 61440 NT_STATUS_OK
ReadX 13523 126976 4096 4096 NT_STATUS_OK
ReadX 13523 131072 61440 61440 NT_STATUS_OK
ReadX 13523 192512 4096 4096 NT_STATUS_OK
ReadX 13523 196608 61440 61440 NT_STATUS_OK
ReadX 13523 258048 4096 4096 NT_STATUS_OK
ReadX 13523 262144 61440 61440 NT_STATUS_OK
ReadX 13523 323584 4096 4096 NT_STATUS_OK
ReadX 13523 327680 61440 61440 NT_STATUS_OK
ReadX 13523 389120 4096 4096 NT_STATUS_OK
ReadX 13523 393216 61440 61440 NT_STATUS_OK
ReadX 13523 454656 4096 4096 NT_STATUS_OK
ReadX 13523 458752 61440 61440 NT_STATUS_OK
ReadX 13523 520192 4096 4096 NT_STATUS_OK
ReadX 13523 524288 61440 61440 NT_STATUS_OK
ReadX 13523 585728 4096 4096 NT_STATUS_OK
ReadX 13523 589824 61440 61440 NT_STATUS_OK
ReadX 13523 651264 4096 4096 NT_STATUS_OK
ReadX 13523 655360 61440 61440 NT_STATUS_OK
ReadX 13523 716800 4096 4096 NT_STATUS_OK
ReadX 13523 720896 61440 61440 NT_STATUS_OK
ReadX 13523 782336 4096 4096 NT_STATUS_OK
ReadX 13523 786432 61440 61440 NT_STATUS_OK
ReadX 13523 847872 4096 4096 NT_STATUS_OK
ReadX 13523 851968 61440 61440 NT_STATUS_OK
ReadX 13523 913408 4096 4096 NT_STATUS_OK
ReadX 13523 917504 61440 61440 NT_STATUS_OK
ReadX 13523 978944 4096 4096 NT_STATUS_OK
ReadX 13523 983040 61440 61440 NT_STATUS_OK
ReadX 13523 1044480 4096 4096 NT_STATUS_OK
ReadX 13523 1048576 61440 61440 NT_STATUS_OK
ReadX 13523 1110016 4096 4096 NT_STATUS_OK
ReadX 13523 1114112 61440 61440 NT_STATUS_OK
ReadX 13523 1175552 4096 4096 NT_STATUS_OK
ReadX 13523 1179648 61440 61440 NT_STATUS_OK
ReadX 13523 1241088 4096 4096 NT_STATUS_OK
ReadX 13523 1245184 61440 61440 NT_STATUS_OK
ReadX 13523 1306624 4096 4096 NT_STATUS_OK
ReadX 13523 1310720 61440 61440 NT_STATUS_OK
ReadX 13523 1372160 4096 4096 NT_STATUS_OK
ReadX 13523 1376256 61440 61440 NT_STATUS_OK
ReadX 13523 1437696 4096 4096 NT_STATUS_OK
ReadX 13523 1441792 61440 61440 NT_STATUS_OK
ReadX 13523 1503232 4096 4096 NT_STATUS_OK
ReadX 13523 1507328 61440 61440 NT_STATUS_OK
ReadX 13523 1568768 4096 4096 NT_STATUS_OK
ReadX 13523 1572864 61440 61440 NT_STATUS_OK
ReadX 13523 1634304 4096 4096 NT_STATUS_OK
ReadX 13523 1638400 61440 61440 NT_STATUS_OK
ReadX 13523 1699840 4096 4096 NT_STATUS_OK
ReadX 13523 1703936 61440 61440 NT_STATUS_OK
ReadX 13523 1765376 4096 4096 NT_STATUS_OK
ReadX 13523 1769472 61440 61440 NT_STATUS_OK
ReadX 13523 1830912 4096 4096 NT_STATUS_OK
ReadX 13523 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13530 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 1004 NT_STATUS_OK
WriteX 13530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13531 NT_STATUS_OK
Close 13531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13532 NT_STATUS_OK
WriteX 13532 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13532 258 NT_STATUS_OK
WriteX 13532 0 491 491 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13530 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13535 NT_STATUS_OK
Close 13535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13536 NT_STATUS_OK
WriteX 13536 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 258 NT_STATUS_OK
WriteX 13536 0 543 543 NT_STATUS_OK
Close 13536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13521 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13541 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13542 NT_STATUS_OK
ReadX 13542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13544 NT_STATUS_OK
ReadX 13544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13549 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13550 NT_STATUS_OK
QUERY_FILE_INFORMATION 13550 1004 NT_STATUS_OK
WriteX 13550 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13550 258 NT_STATUS_OK
WriteX 13550 0 2048 2048 NT_STATUS_OK
Close 13550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13551 0 4096 4096 NT_STATUS_OK
Flush 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13551 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13556 NT_STATUS_OK
WriteX 13556 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13556 258 NT_STATUS_OK
WriteX 13556 0 2048 2048 NT_STATUS_OK
Close 13556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13562 NT_STATUS_OK
WriteX 13562 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13562 258 NT_STATUS_OK
WriteX 13562 0 2048 2048 NT_STATUS_OK
Close 13562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 2048 2048 NT_STATUS_OK
ReadX 13541 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13545 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13557 0 4096 4096 NT_STATUS_OK
WriteX 13541 0 8192 8192 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13566 NT_STATUS_OK
ReadX 13566 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13551 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13567 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13566 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Close 13543 NT_STATUS_OK
Close 13544 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13541 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13571 NT_STATUS_OK
ReadX 13571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13572 NT_STATUS_OK
ReadX 13572 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13577 NT_STATUS_OK
ReadX 13577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13579 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13587 NT_STATUS_OK
QUERY_FILE_INFORMATION 13587 1004 NT_STATUS_OK
WriteX 13587 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13587 258 NT_STATUS_OK
WriteX 13587 0 2048 2048 NT_STATUS_OK
Close 13587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13588 NT_STATUS_OK
ReadX 13588 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13590 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13590 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13595 NT_STATUS_OK
QUERY_FILE_INFORMATION 13595 1004 NT_STATUS_OK
WriteX 13595 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13595 258 NT_STATUS_OK
WriteX 13595 0 2048 2048 NT_STATUS_OK
Close 13595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13588 0 4096 4096 NT_STATUS_OK
Flush 13588 NT_STATUS_OK
WriteX 13596 0 4096 4096 NT_STATUS_OK
Flush 13596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13588 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13596 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13590 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13598 NT_STATUS_OK
WriteX 13598 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13598 258 NT_STATUS_OK
WriteX 13598 0 4096 4096 NT_STATUS_OK
Close 13598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13600 NT_STATUS_OK
Close 13600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13601 NT_STATUS_OK
WriteX 13601 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13601 258 NT_STATUS_OK
WriteX 13601 0 4096 4096 NT_STATUS_OK
Close 13601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13602 NT_STATUS_OK
ReadX 13602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13602 0 4096 4096 NT_STATUS_OK
Close 13599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Close 13590 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13577 NT_STATUS_OK
Close 13570 NT_STATUS_OK
Close 13571 NT_STATUS_OK
Close 13574 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13573 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13605 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13607 NT_STATUS_OK
ReadX 13607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13609 NT_STATUS_OK
WriteX 13609 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
WriteX 13609 0 2048 2048 NT_STATUS_OK
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13610 NT_STATUS_OK
ReadX 13610 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13611 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13611 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13612 NT_STATUS_OK
ReadX 13612 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13613 NT_STATUS_OK
ReadX 13613 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13614 NT_STATUS_OK
ReadX 13614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13619 NT_STATUS_OK
ReadX 13619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13622 NT_STATUS_OK
ReadX 13622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13623 NT_STATUS_OK
ReadX 13623 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13624 NT_STATUS_OK
QUERY_FILE_INFORMATION 13624 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13607 NT_STATUS_OK
Close 13610 NT_STATUS_OK
Close 13622 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Close 13619 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Close 13623 NT_STATUS_OK
Close 13611 NT_STATUS_OK
Close 13612 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Close 13614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13626 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13629 NT_STATUS_OK
ReadX 13629 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13631 NT_STATUS_OK
ReadX 13631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13632 NT_STATUS_OK
ReadX 13632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13634 NT_STATUS_OK
ReadX 13634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13635 NT_STATUS_OK
ReadX 13635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13636 NT_STATUS_OK
ReadX 13636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13637 NT_STATUS_OK
ReadX 13637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13638 NT_STATUS_OK
ReadX 13638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13640 NT_STATUS_OK
ReadX 13640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13641 NT_STATUS_OK
ReadX 13641 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13646 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 1004 NT_STATUS_OK
WriteX 13646 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 258 NT_STATUS_OK
WriteX 13646 0 2048 2048 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13648 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13649 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13651 NT_STATUS_OK
ReadX 13651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13652 NT_STATUS_OK
ReadX 13652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13658 NT_STATUS_OK
QUERY_FILE_INFORMATION 13658 1004 NT_STATUS_OK
WriteX 13658 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13658 258 NT_STATUS_OK
WriteX 13658 0 2048 2048 NT_STATUS_OK
Close 13658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13661 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13661 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13666 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 1004 NT_STATUS_OK
WriteX 13666 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 258 NT_STATUS_OK
WriteX 13666 0 2048 2048 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
Flush 13647 NT_STATUS_OK
WriteX 13659 0 4096 4096 NT_STATUS_OK
Flush 13659 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13659 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13649 4096 16384 16384 NT_STATUS_OK
ReadX 13629 4096 16384 16384 NT_STATUS_OK
ReadX 13661 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13669 NT_STATUS_OK
ReadX 13669 0 2048 2048 NT_STATUS_OK
WriteX 13669 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13670 NT_STATUS_OK
QUERY_FILE_INFORMATION 13670 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13669 NT_STATUS_OK
Close 13653 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Close 13649 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Close 13651 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Close 13640 NT_STATUS_OK
Close 13661 NT_STATUS_OK
Close 13635 NT_STATUS_OK
Close 13638 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Close 13636 NT_STATUS_OK
Close 13637 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Close 13631 NT_STATUS_OK
Close 13632 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13672 NT_STATUS_OK
QUERY_FILE_INFORMATION 13672 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13674 NT_STATUS_OK
QUERY_FILE_INFORMATION 13674 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13677 NT_STATUS_OK
ReadX 13677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13678 NT_STATUS_OK
ReadX 13678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13679 NT_STATUS_OK
ReadX 13679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13677 4096 16384 16384 NT_STATUS_OK
WriteX 13677 0 4096 4096 NT_STATUS_OK
WriteX 13678 0 4096 4096 NT_STATUS_OK
WriteX 13679 0 4096 4096 NT_STATUS_OK
WriteX 13680 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13683 NT_STATUS_OK
ReadX 13683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13684 NT_STATUS_OK
ReadX 13684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13685 NT_STATUS_OK
ReadX 13685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13686 NT_STATUS_OK
ReadX 13686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13687 NT_STATUS_OK
ReadX 13687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13689 NT_STATUS_OK
ReadX 13689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13690 NT_STATUS_OK
ReadX 13690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13691 NT_STATUS_OK
ReadX 13691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13692 NT_STATUS_OK
ReadX 13692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13694 NT_STATUS_OK
ReadX 13694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13695 NT_STATUS_OK
ReadX 13695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 8192 8192 NT_STATUS_OK
ReadX 13683 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13697 0 4096 4096 NT_STATUS_OK
ReadX 13697 4096 4096 4096 NT_STATUS_OK
ReadX 13697 8192 4096 4096 NT_STATUS_OK
WriteX 13683 0 4096 4096 NT_STATUS_OK
WriteX 13684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
ReadX 13698 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13677 0 4096 4096 NT_STATUS_OK
WriteX 13678 0 4096 4096 NT_STATUS_OK
WriteX 13679 0 4096 4096 NT_STATUS_OK
WriteX 13680 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13703 NT_STATUS_OK
QUERY_FILE_INFORMATION 13703 1004 NT_STATUS_OK
WriteX 13703 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13703 258 NT_STATUS_OK
WriteX 13703 0 2048 2048 NT_STATUS_OK
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13704 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
ReadX 13706 4096 4096 4096 NT_STATUS_OK
WriteX 13706 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13708 NT_STATUS_OK
ReadX 13708 0 4096 4096 NT_STATUS_OK
ReadX 13708 4096 4096 4096 NT_STATUS_OK
WriteX 13708 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13709 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Close 13677 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Close 13680 NT_STATUS_OK
Close 13689 NT_STATUS_OK
Close 13694 NT_STATUS_OK
Close 13690 NT_STATUS_OK
Close 13691 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Close 13693 NT_STATUS_OK
Close 13695 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Close 13684 NT_STATUS_OK
Close 13687 NT_STATUS_OK
Close 13688 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Close 13686 NT_STATUS_OK
Close 13708 NT_STATUS_OK
Close 13697 NT_STATUS_OK
Close 13698 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13711 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13711 0 4096 4096 NT_STATUS_OK
ReadX 13711 4096 4096 4096 NT_STATUS_OK
ReadX 13711 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13712 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13713 NT_STATUS_OK
ReadX 13713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13714 NT_STATUS_OK
ReadX 13714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13715 NT_STATUS_OK
ReadX 13715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13716 NT_STATUS_OK
ReadX 13716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13717 NT_STATUS_OK
ReadX 13717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13718 NT_STATUS_OK
ReadX 13718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13719 NT_STATUS_OK
ReadX 13719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13720 NT_STATUS_OK
ReadX 13720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13721 NT_STATUS_OK
ReadX 13721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13722 NT_STATUS_OK
ReadX 13722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13724 NT_STATUS_OK
ReadX 13724 0 4096 4096 NT_STATUS_OK
ReadX 13712 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13728 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13729 NT_STATUS_OK
QUERY_FILE_INFORMATION 13729 1004 NT_STATUS_OK
WriteX 13729 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13729 258 NT_STATUS_OK
WriteX 13729 0 2048 2048 NT_STATUS_OK
Close 13729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13730 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13735 NT_STATUS_OK
QUERY_FILE_INFORMATION 13735 1004 NT_STATUS_OK
WriteX 13735 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13735 258 NT_STATUS_OK
WriteX 13735 0 2048 2048 NT_STATUS_OK
Close 13735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13736 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13719 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13737 NT_STATUS_OK
QUERY_FILE_INFORMATION 13737 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13723 NT_STATUS_OK
Close 13718 NT_STATUS_OK
Close 13724 NT_STATUS_OK
Close 13712 NT_STATUS_OK
Close 13713 NT_STATUS_OK
Close 13716 NT_STATUS_OK
Close 13717 NT_STATUS_OK
Close 13714 NT_STATUS_OK
Close 13715 NT_STATUS_OK
Close 13719 NT_STATUS_OK
Close 13720 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Close 13722 NT_STATUS_OK
Close 13711 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13739 NT_STATUS_OK
QUERY_FILE_INFORMATION 13739 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13741 NT_STATUS_OK
ReadX 13741 61440 4096 4096 NT_STATUS_OK
ReadX 13741 126976 4096 4096 NT_STATUS_OK
WriteX 13741 0 65536 65536 NT_STATUS_OK
WriteX 13741 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 61440 4096 4096 NT_STATUS_OK
ReadX 13742 126976 4096 4096 NT_STATUS_OK
ReadX 13742 192512 4096 4096 NT_STATUS_OK
ReadX 13742 258048 4096 4096 NT_STATUS_OK
WriteX 13742 0 65536 65536 NT_STATUS_OK
WriteX 13742 65536 65536 65536 NT_STATUS_OK
WriteX 13742 131072 65536 65536 NT_STATUS_OK
WriteX 13742 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 61440 4096 4096 NT_STATUS_OK
ReadX 13743 126976 4096 4096 NT_STATUS_OK
ReadX 13743 192512 4096 4096 NT_STATUS_OK
ReadX 13743 258048 4096 4096 NT_STATUS_OK
ReadX 13743 323584 4096 4096 NT_STATUS_OK
ReadX 13743 389120 4096 4096 NT_STATUS_OK
ReadX 13743 454656 4096 4096 NT_STATUS_OK
ReadX 13743 520192 4096 4096 NT_STATUS_OK
WriteX 13743 0 65536 65536 NT_STATUS_OK
WriteX 13743 65536 65536 65536 NT_STATUS_OK
WriteX 13743 131072 65536 65536 NT_STATUS_OK
WriteX 13743 196608 65536 65536 NT_STATUS_OK
WriteX 13743 262144 65536 65536 NT_STATUS_OK
WriteX 13743 327680 65536 65536 NT_STATUS_OK
WriteX 13743 393216 65536 65536 NT_STATUS_OK
WriteX 13743 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13744 NT_STATUS_OK
ReadX 13744 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13744 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13744 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13744 8192 4096 4096 NT_STATUS_OK
ReadX 13744 12288 4096 4096 NT_STATUS_OK
ReadX 13744 16384 4096 4096 NT_STATUS_OK
ReadX 13744 20480 4096 4096 NT_STATUS_OK
ReadX 13744 24576 4096 4096 NT_STATUS_OK
ReadX 13744 28672 4096 4096 NT_STATUS_OK
ReadX 13744 32768 4096 4096 NT_STATUS_OK
ReadX 13744 36864 4096 4096 NT_STATUS_OK
ReadX 13744 40960 4096 4096 NT_STATUS_OK
ReadX 13744 45056 4096 4096 NT_STATUS_OK
ReadX 13744 49152 4096 4096 NT_STATUS_OK
ReadX 13744 53248 4096 4096 NT_STATUS_OK
ReadX 13744 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13744 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13745 NT_STATUS_OK
Close 13745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13741 NT_STATUS_OK
Close 13742 NT_STATUS_OK
Close 13743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13747 NT_STATUS_OK
WriteX 13747 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13747 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13747 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13747 1004 NT_STATUS_OK
WriteX 13747 0 57088 57088 NT_STATUS_OK
WriteX 13747 0 4096 4096 NT_STATUS_OK
Flush 13747 NT_STATUS_OK
Close 13744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13748 NT_STATUS_OK
SET_FILE_INFORMATION 13748 1004 NT_STATUS_OK
Close 13748 NT_STATUS_OK
SET_FILE_INFORMATION 13747 1004 NT_STATUS_OK
WriteX 13747 0 4096 4096 NT_STATUS_OK
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13749 NT_STATUS_OK
Close 13749 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13751 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13752 NT_STATUS_OK
WriteX 13752 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13752 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13752 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
WriteX 13752 0 51456 51456 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Flush 13752 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13756 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13761 NT_STATUS_OK
WriteX 13761 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13761 258 NT_STATUS_OK
WriteX 13761 0 53077 53077 NT_STATUS_OK
Close 13761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13762 NT_STATUS_OK
WriteX 13762 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13762 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13762 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 65536 65536 NT_STATUS_OK
WriteX 13762 65536 1856 1856 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13764 NT_STATUS_OK
Close 13764 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13771 NT_STATUS_OK
WriteX 13771 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13771 258 NT_STATUS_OK
WriteX 13771 0 7983 7983 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13776 NT_STATUS_OK
WriteX 13776 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13776 258 NT_STATUS_OK
WriteX 13776 0 65536 65536 NT_STATUS_OK
WriteX 13776 65536 65536 65536 NT_STATUS_OK
WriteX 13776 131072 65536 65536 NT_STATUS_OK
WriteX 13776 196608 65536 65536 NT_STATUS_OK
WriteX 13776 262144 65536 65536 NT_STATUS_OK
WriteX 13776 327680 65536 65536 NT_STATUS_OK
WriteX 13776 393216 65536 65536 NT_STATUS_OK
WriteX 13776 458752 46731 46731 NT_STATUS_OK
Close 13776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13777 NT_STATUS_OK
WriteX 13777 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13766 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 65536 65536 NT_STATUS_OK
WriteX 13777 65536 22848 22848 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Close 13777 NT_STATUS_OK
Close 13766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13781 NT_STATUS_OK
ReadX 13781 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13781 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13782 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13782 1004 NT_STATUS_OK
ReadX 13782 8192 4096 4096 NT_STATUS_OK
ReadX 13782 12288 4096 4096 NT_STATUS_OK
ReadX 13782 16384 4096 4096 NT_STATUS_OK
ReadX 13782 20480 4096 4096 NT_STATUS_OK
ReadX 13782 24576 4096 4096 NT_STATUS_OK
ReadX 13782 28672 4096 4096 NT_STATUS_OK
ReadX 13782 32768 4096 4096 NT_STATUS_OK
ReadX 13782 36864 4096 4096 NT_STATUS_OK
ReadX 13782 40960 4096 4096 NT_STATUS_OK
ReadX 13782 45056 4096 4096 NT_STATUS_OK
ReadX 13782 49152 4096 4096 NT_STATUS_OK
ReadX 13782 53248 4096 4096 NT_STATUS_OK
ReadX 13782 57344 4096 4096 NT_STATUS_OK
ReadX 13782 61440 4096 4096 NT_STATUS_OK
ReadX 13782 65536 4096 4096 NT_STATUS_OK
ReadX 13782 69632 4096 4096 NT_STATUS_OK
ReadX 13782 73728 4096 4096 NT_STATUS_OK
ReadX 13782 77824 4096 4096 NT_STATUS_OK
ReadX 13782 81920 4096 4096 NT_STATUS_OK
ReadX 13782 86016 4096 4096 NT_STATUS_OK
ReadX 13782 90112 4096 4096 NT_STATUS_OK
ReadX 13782 94208 4096 4096 NT_STATUS_OK
ReadX 13782 98304 4096 4096 NT_STATUS_OK
ReadX 13782 102400 4096 4096 NT_STATUS_OK
ReadX 13782 106496 4096 4096 NT_STATUS_OK
ReadX 13782 110592 4096 4096 NT_STATUS_OK
ReadX 13782 114688 4096 4096 NT_STATUS_OK
ReadX 13782 118784 4096 4096 NT_STATUS_OK
ReadX 13782 122880 4096 4096 NT_STATUS_OK
ReadX 13782 126976 4096 4096 NT_STATUS_OK
ReadX 13782 131072 4096 4096 NT_STATUS_OK
ReadX 13782 135168 4096 4096 NT_STATUS_OK
ReadX 13782 139264 4096 4096 NT_STATUS_OK
ReadX 13782 143360 4096 4096 NT_STATUS_OK
ReadX 13782 147456 4096 4096 NT_STATUS_OK
ReadX 13782 151552 4096 4096 NT_STATUS_OK
ReadX 13782 155648 4096 4096 NT_STATUS_OK
ReadX 13782 159744 4096 4096 NT_STATUS_OK
ReadX 13782 163840 4096 4096 NT_STATUS_OK
ReadX 13782 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13782 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13783 NT_STATUS_OK
Close 13783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13781 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13785 NT_STATUS_OK
WriteX 13785 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 258 NT_STATUS_OK
Close 13782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13786 NT_STATUS_OK
SET_FILE_INFORMATION 13786 1004 NT_STATUS_OK
Close 13786 NT_STATUS_OK
WriteX 13785 0 42388 42388 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13787 NT_STATUS_OK
Close 13787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
ReadX 13789 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13790 NT_STATUS_OK
WriteX 13790 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13790 258 NT_STATUS_OK
SET_FILE_INFORMATION 13790 1004 NT_STATUS_OK
WriteX 13790 0 42652 42652 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13792 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
ReadX 13794 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13799 NT_STATUS_OK
WriteX 13799 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13799 258 NT_STATUS_OK
WriteX 13799 0 65536 65536 NT_STATUS_OK
WriteX 13799 65536 49 49 NT_STATUS_OK
Close 13799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 61440 61440 NT_STATUS_OK
ReadX 13800 61440 4096 4096 NT_STATUS_OK
ReadX 13800 65536 61440 61440 NT_STATUS_OK
ReadX 13800 126976 4096 4096 NT_STATUS_OK
ReadX 13800 131072 61440 61440 NT_STATUS_OK
ReadX 13800 192512 4096 4096 NT_STATUS_OK
ReadX 13800 196608 61440 61440 NT_STATUS_OK
ReadX 13800 258048 4096 4096 NT_STATUS_OK
ReadX 13800 262144 61440 61440 NT_STATUS_OK
ReadX 13800 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 61440 61440 NT_STATUS_OK
ReadX 13801 61440 4096 4096 NT_STATUS_OK
ReadX 13801 65536 61440 61440 NT_STATUS_OK
ReadX 13801 126976 4096 4096 NT_STATUS_OK
ReadX 13801 131072 61440 61440 NT_STATUS_OK
ReadX 13801 192512 4096 4096 NT_STATUS_OK
ReadX 13801 196608 61440 61440 NT_STATUS_OK
ReadX 13801 258048 4096 4096 NT_STATUS_OK
ReadX 13801 262144 61440 61440 NT_STATUS_OK
ReadX 13801 323584 4096 4096 NT_STATUS_OK
ReadX 13801 327680 61440 61440 NT_STATUS_OK
ReadX 13801 389120 4096 4096 NT_STATUS_OK
ReadX 13801 393216 61440 61440 NT_STATUS_OK
ReadX 13801 454656 4096 4096 NT_STATUS_OK
ReadX 13801 458752 61440 61440 NT_STATUS_OK
ReadX 13801 520192 4096 4096 NT_STATUS_OK
ReadX 13801 524288 61440 61440 NT_STATUS_OK
ReadX 13801 585728 4096 4096 NT_STATUS_OK
ReadX 13801 589824 61440 61440 NT_STATUS_OK
ReadX 13801 651264 4096 4096 NT_STATUS_OK
ReadX 13801 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 61440 61440 NT_STATUS_OK
ReadX 13802 61440 4096 4096 NT_STATUS_OK
ReadX 13802 65536 61440 61440 NT_STATUS_OK
ReadX 13802 126976 4096 4096 NT_STATUS_OK
ReadX 13802 131072 61440 61440 NT_STATUS_OK
ReadX 13802 192512 4096 4096 NT_STATUS_OK
ReadX 13802 196608 61440 61440 NT_STATUS_OK
ReadX 13802 258048 4096 4096 NT_STATUS_OK
ReadX 13802 262144 61440 61440 NT_STATUS_OK
ReadX 13802 323584 4096 4096 NT_STATUS_OK
ReadX 13802 327680 61440 61440 NT_STATUS_OK
ReadX 13802 389120 4096 4096 NT_STATUS_OK
ReadX 13802 393216 61440 61440 NT_STATUS_OK
ReadX 13802 454656 4096 4096 NT_STATUS_OK
ReadX 13802 458752 61440 61440 NT_STATUS_OK
ReadX 13802 520192 4096 4096 NT_STATUS_OK
ReadX 13802 524288 61440 61440 NT_STATUS_OK
ReadX 13802 585728 4096 4096 NT_STATUS_OK
ReadX 13802 589824 61440 61440 NT_STATUS_OK
ReadX 13802 651264 4096 4096 NT_STATUS_OK
ReadX 13802 655360 61440 61440 NT_STATUS_OK
ReadX 13802 716800 4096 4096 NT_STATUS_OK
ReadX 13802 720896 61440 61440 NT_STATUS_OK
ReadX 13802 782336 4096 4096 NT_STATUS_OK
ReadX 13802 786432 61440 61440 NT_STATUS_OK
ReadX 13802 847872 4096 4096 NT_STATUS_OK
ReadX 13802 851968 61440 61440 NT_STATUS_OK
ReadX 13802 913408 4096 4096 NT_STATUS_OK
ReadX 13802 917504 61440 61440 NT_STATUS_OK
ReadX 13802 978944 4096 4096 NT_STATUS_OK
ReadX 13802 983040 61440 61440 NT_STATUS_OK
ReadX 13802 1044480 4096 4096 NT_STATUS_OK
ReadX 13802 1048576 61440 61440 NT_STATUS_OK
ReadX 13802 1110016 4096 4096 NT_STATUS_OK
ReadX 13802 1114112 61440 61440 NT_STATUS_OK
ReadX 13802 1175552 4096 4096 NT_STATUS_OK
ReadX 13802 1179648 61440 61440 NT_STATUS_OK
ReadX 13802 1241088 4096 4096 NT_STATUS_OK
ReadX 13802 1245184 61440 61440 NT_STATUS_OK
ReadX 13802 1306624 4096 4096 NT_STATUS_OK
ReadX 13802 1310720 61440 61440 NT_STATUS_OK
ReadX 13802 1372160 4096 4096 NT_STATUS_OK
ReadX 13802 1376256 61440 61440 NT_STATUS_OK
ReadX 13802 1437696 4096 4096 NT_STATUS_OK
ReadX 13802 1441792 61440 61440 NT_STATUS_OK
ReadX 13802 1503232 4096 4096 NT_STATUS_OK
ReadX 13802 1507328 61440 61440 NT_STATUS_OK
ReadX 13802 1568768 4096 4096 NT_STATUS_OK
ReadX 13802 1572864 61440 61440 NT_STATUS_OK
ReadX 13802 1634304 4096 4096 NT_STATUS_OK
ReadX 13802 1638400 61440 61440 NT_STATUS_OK
ReadX 13802 1699840 4096 4096 NT_STATUS_OK
ReadX 13802 1703936 61440 61440 NT_STATUS_OK
ReadX 13802 1765376 4096 4096 NT_STATUS_OK
ReadX 13802 1769472 61440 61440 NT_STATUS_OK
ReadX 13802 1830912 4096 4096 NT_STATUS_OK
ReadX 13802 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13804 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 1005 NT_STATUS_OK
ReadX 13804 2156 24 24 NT_STATUS_OK
ReadX 13804 2139 276 276 NT_STATUS_OK
ReadX 13804 2136 14 14 NT_STATUS_OK
ReadX 13804 2136 7 7 NT_STATUS_OK
ReadX 13804 2138 12 12 NT_STATUS_OK
ReadX 13804 2137 8 8 NT_STATUS_OK
ReadX 13804 2135 15 15 NT_STATUS_OK
ReadX 13804 0 16 16 NT_STATUS_OK
ReadX 13804 16 2048 2048 NT_STATUS_OK
ReadX 13804 2064 2048 2048 NT_STATUS_OK
ReadX 13804 257 2048 2048 NT_STATUS_OK
ReadX 13804 385 2048 2048 NT_STATUS_OK
ReadX 13804 513 2048 2048 NT_STATUS_OK
ReadX 13804 641 2048 2048 NT_STATUS_OK
ReadX 13804 769 2048 2048 NT_STATUS_OK
ReadX 13804 897 2048 2048 NT_STATUS_OK
ReadX 13804 1025 2048 2048 NT_STATUS_OK
ReadX 13804 1153 2048 2048 NT_STATUS_OK
ReadX 13804 1281 2048 2048 NT_STATUS_OK
ReadX 13804 1409 2048 2048 NT_STATUS_OK
ReadX 13804 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13800 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Close 13802 NT_STATUS_OK
Close 13794 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13809 NT_STATUS_OK
WriteX 13809 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13809 258 NT_STATUS_OK
WriteX 13809 0 10575 10575 NT_STATUS_OK
Flush 13809 NT_STATUS_OK
Close 13809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13810 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13814 NT_STATUS_OK
LockX 13814 2147483538 1 NT_STATUS_OK
UnlockX 13814 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1005 NT_STATUS_OK
ReadX 13814 0 512 512 NT_STATUS_OK
ReadX 13814 512 512 512 NT_STATUS_OK
ReadX 13814 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13814 1004 NT_STATUS_OK
Close 13814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13815 NT_STATUS_OK
QUERY_FILE_INFORMATION 13815 1005 NT_STATUS_OK
ReadX 13815 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13816 NT_STATUS_OK
LockX 13816 2147483538 1 NT_STATUS_OK
UnlockX 13816 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13816 1005 NT_STATUS_OK
ReadX 13816 0 512 512 NT_STATUS_OK
ReadX 13816 512 512 512 NT_STATUS_OK
ReadX 13816 1024 512 512 NT_STATUS_OK
ReadX 13816 288 20 20 NT_STATUS_OK
ReadX 13816 308 2084 2084 NT_STATUS_OK
ReadX 13816 388 2084 2084 NT_STATUS_OK
ReadX 13816 388 2084 2084 NT_STATUS_OK
ReadX 13803 2157 1386 1386 NT_STATUS_OK
ReadX 13816 2472 399 399 NT_STATUS_OK
ReadX 13816 3072 1536 1536 NT_STATUS_OK
ReadX 13816 544 149 149 NT_STATUS_OK
ReadX 13816 693 485 485 NT_STATUS_OK
Close 13816 NT_STATUS_OK
ReadX 13803 2157 4096 4096 NT_STATUS_OK
ReadX 13803 6253 4096 4096 NT_STATUS_OK
ReadX 13803 10349 4096 4096 NT_STATUS_OK
ReadX 13803 14445 4096 4096 NT_STATUS_OK
ReadX 13803 18541 4096 4096 NT_STATUS_OK
ReadX 13803 22637 256 256 NT_STATUS_OK
ReadX 13803 22893 4096 4096 NT_STATUS_OK
ReadX 13803 26989 4096 4096 NT_STATUS_OK
ReadX 13803 31085 4096 4096 NT_STATUS_OK
ReadX 13803 35181 4096 4096 NT_STATUS_OK
ReadX 13803 39277 4096 4096 NT_STATUS_OK
ReadX 13803 43373 4096 4096 NT_STATUS_OK
ReadX 13803 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13803 2157 1024 1024 NT_STATUS_OK
ReadX 13803 1667 4688 4688 NT_STATUS_OK
ReadX 13803 6355 3516 3516 NT_STATUS_OK
ReadX 13803 9871 16384 16384 NT_STATUS_OK
ReadX 13803 26255 3771 3771 NT_STATUS_OK
ReadX 13803 30026 2048 2048 NT_STATUS_OK
ReadX 13803 32074 1024 1024 NT_STATUS_OK
ReadX 13803 33098 6652 6652 NT_STATUS_OK
ReadX 13803 39750 16384 16384 NT_STATUS_OK
ReadX 13803 56134 10496 10496 NT_STATUS_OK
ReadX 13803 66630 1784 1784 NT_STATUS_OK
ReadX 13803 68414 90 90 NT_STATUS_OK
ReadX 13803 68504 273 273 NT_STATUS_OK
ReadX 13803 68777 1600 1600 NT_STATUS_OK
ReadX 13803 70377 640 640 NT_STATUS_OK
ReadX 13803 71017 1280 1280 NT_STATUS_OK
ReadX 13803 72297 8464 8464 NT_STATUS_OK
ReadX 13803 80761 158 158 NT_STATUS_OK
ReadX 13803 80919 912 912 NT_STATUS_OK
ReadX 13803 81831 1980 1980 NT_STATUS_OK
ReadX 13803 83811 2256 2256 NT_STATUS_OK
ReadX 13803 86067 400 400 NT_STATUS_OK
ReadX 13803 86467 252 252 NT_STATUS_OK
ReadX 13803 86719 42 42 NT_STATUS_OK
ReadX 13803 86761 725 725 NT_STATUS_OK
ReadX 13803 2009 512 512 NT_STATUS_OK
ReadX 13803 3895 9 9 NT_STATUS_OK
ReadX 13803 3781 46 46 NT_STATUS_OK
ReadX 13803 4059 92 92 NT_STATUS_OK
ReadX 13803 3781 92 92 NT_STATUS_OK
ReadX 13803 3986 184 184 NT_STATUS_OK
ReadX 13803 3987 16384 16384 NT_STATUS_OK
ReadX 13803 3902 16384 16384 NT_STATUS_OK
ReadX 13803 3781 10240 10240 NT_STATUS_OK
ReadX 13803 3821 16384 16384 NT_STATUS_OK
ReadX 13803 3891 935 935 NT_STATUS_OK
ReadX 13803 4060 10240 10240 NT_STATUS_OK
ReadX 13803 4059 184 184 NT_STATUS_OK
ReadX 13803 256 184 184 NT_STATUS_OK
ReadX 13803 256 1026 1026 NT_STATUS_OK
ReadX 13803 3901 326 326 NT_STATUS_OK
ReadX 13803 3899 652 652 NT_STATUS_OK
ReadX 13803 256 2 2 NT_STATUS_OK
ReadX 13803 258 4948 4948 NT_STATUS_OK
Close 13803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13818 NT_STATUS_OK
Close 13818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13821 NT_STATUS_OK
WriteX 13821 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13821 258 NT_STATUS_OK
WriteX 13821 0 65536 65536 NT_STATUS_OK
WriteX 13821 65536 65536 65536 NT_STATUS_OK
WriteX 13821 131072 65536 65536 NT_STATUS_OK
WriteX 13821 196608 65536 65536 NT_STATUS_OK
WriteX 13821 262144 65536 65536 NT_STATUS_OK
WriteX 13821 327680 65536 65536 NT_STATUS_OK
WriteX 13821 393216 65536 65536 NT_STATUS_OK
WriteX 13821 458752 65536 65536 NT_STATUS_OK
WriteX 13821 524288 65536 65536 NT_STATUS_OK
WriteX 13821 589824 35257 35257 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13826 NT_STATUS_OK
WriteX 13826 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 258 NT_STATUS_OK
WriteX 13826 0 65536 65536 NT_STATUS_OK
WriteX 13826 65536 65536 65536 NT_STATUS_OK
WriteX 13826 131072 65536 65536 NT_STATUS_OK
WriteX 13826 196608 65536 65536 NT_STATUS_OK
WriteX 13826 262144 65536 65536 NT_STATUS_OK
WriteX 13826 327680 65536 65536 NT_STATUS_OK
WriteX 13826 393216 65536 65536 NT_STATUS_OK
WriteX 13826 458752 65536 65536 NT_STATUS_OK
WriteX 13826 524288 65536 65536 NT_STATUS_OK
WriteX 13826 589824 57598 57598 NT_STATUS_OK
Close 13826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13828 NT_STATUS_OK
WriteX 13828 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 258 NT_STATUS_OK
WriteX 13828 0 12543 12543 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
Close 13812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13830 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13833 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13834 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1005 NT_STATUS_OK
ReadX 13834 1938 24 24 NT_STATUS_OK
ReadX 13834 1920 276 276 NT_STATUS_OK
ReadX 13834 1918 14 14 NT_STATUS_OK
ReadX 13834 1918 7 7 NT_STATUS_OK
ReadX 13834 1919 12 12 NT_STATUS_OK
ReadX 13834 1919 8 8 NT_STATUS_OK
ReadX 13834 1917 15 15 NT_STATUS_OK
ReadX 13834 0 16 16 NT_STATUS_OK
ReadX 13834 16 2048 2048 NT_STATUS_OK
ReadX 13834 2064 2048 2048 NT_STATUS_OK
ReadX 13834 257 2048 2048 NT_STATUS_OK
ReadX 13834 385 2048 2048 NT_STATUS_OK
ReadX 13834 513 2048 2048 NT_STATUS_OK
ReadX 13834 641 2048 2048 NT_STATUS_OK
ReadX 13834 769 2048 2048 NT_STATUS_OK
ReadX 13834 897 2048 2048 NT_STATUS_OK
ReadX 13834 1025 2048 2048 NT_STATUS_OK
ReadX 13834 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13839 NT_STATUS_OK
WriteX 13839 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13839 258 NT_STATUS_OK
WriteX 13839 0 11588 11588 NT_STATUS_OK
Flush 13839 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13840 NT_STATUS_OK
Close 13840 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13842 NT_STATUS_OK
ReadX 13842 0 4096 4096 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13844 NT_STATUS_OK
WriteX 13844 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13844 258 NT_STATUS_OK
WriteX 13844 0 11615 11615 NT_STATUS_OK
Flush 13844 NT_STATUS_OK
Close 13844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13846 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13850 NT_STATUS_OK
Close 13850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13853 NT_STATUS_OK
WriteX 13853 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13853 258 NT_STATUS_OK
WriteX 13853 0 65536 65536 NT_STATUS_OK
WriteX 13853 65536 16050 16050 NT_STATUS_OK
Close 13853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13833 1939 64 64 NT_STATUS_OK
ReadX 13833 128 248 248 NT_STATUS_OK
ReadX 13833 128 568 568 NT_STATUS_OK
ReadX 13833 3872 1536 1536 NT_STATUS_OK
ReadX 13833 3456 2560 2560 NT_STATUS_OK
ReadX 13833 3136 512 512 NT_STATUS_OK
ReadX 13833 2880 4096 4096 NT_STATUS_OK
ReadX 13833 3264 3072 3072 NT_STATUS_OK
ReadX 13833 320 4096 4096 NT_STATUS_OK
ReadX 13833 1024 4096 4096 NT_STATUS_OK
ReadX 13833 3616 4096 4096 NT_STATUS_OK
ReadX 13833 1939 64 64 NT_STATUS_OK
ReadX 13833 128 248 248 NT_STATUS_OK
ReadX 13833 128 608 608 NT_STATUS_OK
ReadX 13833 2858 1024 1024 NT_STATUS_OK
ReadX 13833 2810 4096 4096 NT_STATUS_OK
ReadX 13833 2826 4096 4096 NT_STATUS_OK
ReadX 13833 2580 2048 2048 NT_STATUS_OK
ReadX 13833 2800 2560 2560 NT_STATUS_OK
ReadX 13833 2100 4096 4096 NT_STATUS_OK
ReadX 13833 2084 4096 4096 NT_STATUS_OK
ReadX 13833 868 4096 4096 NT_STATUS_OK
ReadX 13833 2324 4096 4096 NT_STATUS_OK
ReadX 13833 884 4096 4096 NT_STATUS_OK
ReadX 13833 2604 1024 1024 NT_STATUS_OK
ReadX 13833 580 4096 4096 NT_STATUS_OK
ReadX 13833 596 4096 4096 NT_STATUS_OK
ReadX 13833 2752 4096 4096 NT_STATUS_OK
ReadX 13833 2842 1024 1024 NT_STATUS_OK
ReadX 13833 660 4096 4096 NT_STATUS_OK
ReadX 13833 2720 4096 4096 NT_STATUS_OK
ReadX 13833 2736 4096 4096 NT_STATUS_OK
ReadX 13833 628 4096 4096 NT_STATUS_OK
ReadX 13833 2704 4096 4096 NT_STATUS_OK
ReadX 13833 1556 4096 4096 NT_STATUS_OK
ReadX 13833 576 4096 4096 NT_STATUS_OK
ReadX 13833 3168 1536 1536 NT_STATUS_OK
ReadX 13833 832 4096 4096 NT_STATUS_OK
ReadX 13833 1088 4096 4096 NT_STATUS_OK
ReadX 13833 1344 4096 4096 NT_STATUS_OK
ReadX 13833 1600 4096 4096 NT_STATUS_OK
ReadX 13833 1856 4096 4096 NT_STATUS_OK
ReadX 13833 2112 4096 4096 NT_STATUS_OK
ReadX 13833 1892 4096 4096 NT_STATUS_OK
ReadX 13833 820 4096 4096 NT_STATUS_OK
ReadX 13833 788 4096 4096 NT_STATUS_OK
ReadX 13833 1604 4096 4096 NT_STATUS_OK
ReadX 13833 3648 4096 4096 NT_STATUS_OK
ReadX 13833 2608 4096 4096 NT_STATUS_OK
ReadX 13833 548 4096 4096 NT_STATUS_OK
ReadX 13833 740 4096 4096 NT_STATUS_OK
ReadX 13833 1344 4096 4096 NT_STATUS_OK
ReadX 13833 3392 4096 4096 NT_STATUS_OK
ReadX 13833 3904 4096 4096 NT_STATUS_OK
ReadX 13833 644 4096 4096 NT_STATUS_OK
ReadX 13833 676 4096 4096 NT_STATUS_OK
ReadX 13833 2688 4096 4096 NT_STATUS_OK
ReadX 13833 320 4096 4096 NT_STATUS_OK
ReadX 13833 900 4096 4096 NT_STATUS_OK
ReadX 13833 1908 4096 4096 NT_STATUS_OK
ReadX 13833 852 4096 4096 NT_STATUS_OK
ReadX 13833 724 4096 4096 NT_STATUS_OK
ReadX 13833 2292 4096 4096 NT_STATUS_OK
ReadX 13833 612 4096 4096 NT_STATUS_OK
ReadX 13833 388 4096 4096 NT_STATUS_OK
ReadX 13833 2368 4096 4096 NT_STATUS_OK
ReadX 13833 2624 4096 4096 NT_STATUS_OK
ReadX 13833 500 4096 4096 NT_STATUS_OK
ReadX 13833 356 4096 4096 NT_STATUS_OK
ReadX 13833 1024 4096 4096 NT_STATUS_OK
ReadX 13833 576 4096 4096 NT_STATUS_OK
ReadX 13833 340 4096 4096 NT_STATUS_OK
ReadX 13833 420 4096 4096 NT_STATUS_OK
ReadX 13833 1600 4096 4096 NT_STATUS_OK
ReadX 13833 404 4096 4096 NT_STATUS_OK
ReadX 13833 1428 4096 4096 NT_STATUS_OK
ReadX 13833 2656 4096 4096 NT_STATUS_OK
ReadX 13833 2624 4096 4096 NT_STATUS_OK
ReadX 13833 452 4096 4096 NT_STATUS_OK
ReadX 13833 692 4096 4096 NT_STATUS_OK
ReadX 13833 564 4096 4096 NT_STATUS_OK
ReadX 13833 372 4096 4096 NT_STATUS_OK
ReadX 13833 468 4096 4096 NT_STATUS_OK
ReadX 13833 484 4096 4096 NT_STATUS_OK
ReadX 13833 1088 4096 4096 NT_STATUS_OK
ReadX 13833 1924 4096 4096 NT_STATUS_OK
ReadX 13833 2768 4096 4096 NT_STATUS_OK
ReadX 13833 832 4096 4096 NT_STATUS_OK
ReadX 13833 836 4096 4096 NT_STATUS_OK
ReadX 13833 1856 4096 4096 NT_STATUS_OK
ReadX 13833 2640 4096 4096 NT_STATUS_OK
ReadX 13833 436 4096 4096 NT_STATUS_OK
ReadX 13833 1828 4096 4096 NT_STATUS_OK
ReadX 13833 804 4096 4096 NT_STATUS_OK
ReadX 13833 1860 4096 4096 NT_STATUS_OK
ReadX 13833 1812 4096 4096 NT_STATUS_OK
ReadX 13833 756 4096 4096 NT_STATUS_OK
ReadX 13833 1636 4096 4096 NT_STATUS_OK
ReadX 13833 772 4096 4096 NT_STATUS_OK
ReadX 13833 2036 4096 4096 NT_STATUS_OK
ReadX 13833 1220 4096 4096 NT_STATUS_OK
ReadX 13833 1652 4096 4096 NT_STATUS_OK
ReadX 13833 2588 4096 4096 NT_STATUS_OK
ReadX 13833 916 4096 4096 NT_STATUS_OK
ReadX 13833 260 4096 4096 NT_STATUS_OK
ReadX 13833 932 4096 4096 NT_STATUS_OK
ReadX 13833 2624 4096 4096 NT_STATUS_OK
ReadX 13833 308 4096 4096 NT_STATUS_OK
ReadX 13833 292 4096 4096 NT_STATUS_OK
ReadX 13833 1140 4096 4096 NT_STATUS_OK
ReadX 13833 276 4096 4096 NT_STATUS_OK
ReadX 13833 2020 4096 4096 NT_STATUS_OK
ReadX 13833 2880 4096 4096 NT_STATUS_OK
ReadX 13833 516 4096 4096 NT_STATUS_OK
ReadX 13833 1844 4096 4096 NT_STATUS_OK
ReadX 13833 1124 4096 4096 NT_STATUS_OK
ReadX 13833 3136 4096 4096 NT_STATUS_OK
ReadX 13833 324 4096 4096 NT_STATUS_OK
ReadX 13833 1156 4096 4096 NT_STATUS_OK
ReadX 13833 1172 4096 4096 NT_STATUS_OK
ReadX 13833 2112 4096 4096 NT_STATUS_OK
ReadX 13833 2368 4096 4096 NT_STATUS_OK
ReadX 13833 964 4096 4096 NT_STATUS_OK
ReadX 13833 980 4096 4096 NT_STATUS_OK
ReadX 13833 1012 4096 4096 NT_STATUS_OK
ReadX 13833 532 4096 4096 NT_STATUS_OK
ReadX 13833 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13833 1620 4096 4096 NT_STATUS_OK
ReadX 13833 1604 4096 4096 NT_STATUS_OK
ReadX 13833 2116 4096 4096 NT_STATUS_OK
ReadX 13833 2132 4096 4096 NT_STATUS_OK
ReadX 13833 2148 4096 4096 NT_STATUS_OK
ReadX 13833 2276 4096 4096 NT_STATUS_OK
ReadX 13833 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13858 NT_STATUS_OK
QUERY_FILE_INFORMATION 13813 1004 NT_STATUS_OK
Close 13813 NT_STATUS_OK
WriteX 13858 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13858 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13815 1004 NT_STATUS_OK
Close 13815 NT_STATUS_OK
WriteX 13858 0 65536 65536 NT_STATUS_OK
WriteX 13858 65536 64850 64850 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13860 NT_STATUS_OK
WriteX 13860 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
ReadX 13833 2068 4096 4096 NT_STATUS_OK
ReadX 13833 1588 4096 4096 NT_STATUS_OK
ReadX 13833 1572 4096 4096 NT_STATUS_OK
WriteX 13860 0 18630 18630 NT_STATUS_OK
Flush 13860 NT_STATUS_OK
Close 13860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13833 612 4096 4096 NT_STATUS_OK
ReadX 13833 564 4096 4096 NT_STATUS_OK
ReadX 13833 1876 4096 4096 NT_STATUS_OK
ReadX 13833 628 4096 4096 NT_STATUS_OK
ReadX 13833 740 4096 4096 NT_STATUS_OK
ReadX 13833 724 4096 4096 NT_STATUS_OK
ReadX 13833 644 4096 4096 NT_STATUS_OK
ReadX 13833 2324 4096 4096 NT_STATUS_OK
ReadX 13833 660 4096 4096 NT_STATUS_OK
ReadX 13833 852 4096 4096 NT_STATUS_OK
ReadX 13833 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13833 2368 4096 4096 NT_STATUS_OK
ReadX 13833 1024 4096 4096 NT_STATUS_OK
ReadX 13833 320 4096 4096 NT_STATUS_OK
ReadX 13833 580 4096 4096 NT_STATUS_OK
ReadX 13833 3136 512 512 NT_STATUS_OK
ReadX 13833 2880 4096 4096 NT_STATUS_OK
Close 13833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13865 NT_STATUS_OK
ReadX 13865 61440 4096 4096 NT_STATUS_OK
ReadX 13865 126976 4096 4096 NT_STATUS_OK
WriteX 13865 0 65536 65536 NT_STATUS_OK
WriteX 13865 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 61440 4096 4096 NT_STATUS_OK
ReadX 13866 126976 4096 4096 NT_STATUS_OK
ReadX 13866 192512 4096 4096 NT_STATUS_OK
ReadX 13866 258048 4096 4096 NT_STATUS_OK
WriteX 13866 0 65536 65536 NT_STATUS_OK
WriteX 13866 65536 65536 65536 NT_STATUS_OK
WriteX 13866 131072 65536 65536 NT_STATUS_OK
WriteX 13866 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13867 NT_STATUS_OK
ReadX 13867 61440 4096 4096 NT_STATUS_OK
ReadX 13867 126976 4096 4096 NT_STATUS_OK
ReadX 13867 192512 4096 4096 NT_STATUS_OK
ReadX 13867 258048 4096 4096 NT_STATUS_OK
ReadX 13867 323584 4096 4096 NT_STATUS_OK
ReadX 13867 389120 4096 4096 NT_STATUS_OK
ReadX 13867 454656 4096 4096 NT_STATUS_OK
ReadX 13867 520192 4096 4096 NT_STATUS_OK
WriteX 13867 0 65536 65536 NT_STATUS_OK
WriteX 13867 65536 65536 65536 NT_STATUS_OK
WriteX 13867 131072 65536 65536 NT_STATUS_OK
WriteX 13867 196608 65536 65536 NT_STATUS_OK
WriteX 13867 262144 65536 65536 NT_STATUS_OK
WriteX 13867 327680 65536 65536 NT_STATUS_OK
WriteX 13867 393216 65536 65536 NT_STATUS_OK
WriteX 13867 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13870 NT_STATUS_OK
WriteX 13870 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13870 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13868 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13868 0 8192 8192 NT_STATUS_OK
Flush 13868 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13872 NT_STATUS_OK
Close 13872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13864 NT_STATUS_OK
Close 13832 NT_STATUS_OK
Close 13865 NT_STATUS_OK
Close 13866 NT_STATUS_OK
Close 13867 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13875 NT_STATUS_OK
WriteX 13875 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13875 258 NT_STATUS_OK
WriteX 13875 0 62591 62591 NT_STATUS_OK
Close 13875 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13877 NT_STATUS_OK
Close 13877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13880 NT_STATUS_OK
WriteX 13880 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13880 258 NT_STATUS_OK
WriteX 13880 0 10845 10845 NT_STATUS_OK
Close 13880 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13882 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13885 NT_STATUS_OK
WriteX 13885 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13885 258 NT_STATUS_OK
WriteX 13885 0 30118 30118 NT_STATUS_OK
Close 13885 NT_STATUS_OK
WriteX 13868 0 4096 4096 NT_STATUS_OK
WriteX 13870 0 64 64 NT_STATUS_OK
Close 13870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 61440 61440 NT_STATUS_OK
ReadX 13887 61440 4096 4096 NT_STATUS_OK
ReadX 13887 65536 61440 61440 NT_STATUS_OK
ReadX 13887 126976 4096 4096 NT_STATUS_OK
ReadX 13887 131072 61440 61440 NT_STATUS_OK
ReadX 13887 192512 4096 4096 NT_STATUS_OK
ReadX 13887 196608 61440 61440 NT_STATUS_OK
ReadX 13887 258048 4096 4096 NT_STATUS_OK
ReadX 13887 262144 61440 61440 NT_STATUS_OK
ReadX 13887 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13888 NT_STATUS_OK
ReadX 13888 0 61440 61440 NT_STATUS_OK
ReadX 13888 61440 4096 4096 NT_STATUS_OK
ReadX 13888 65536 61440 61440 NT_STATUS_OK
ReadX 13888 126976 4096 4096 NT_STATUS_OK
ReadX 13888 131072 61440 61440 NT_STATUS_OK
ReadX 13888 192512 4096 4096 NT_STATUS_OK
ReadX 13888 196608 61440 61440 NT_STATUS_OK
ReadX 13888 258048 4096 4096 NT_STATUS_OK
ReadX 13888 262144 61440 61440 NT_STATUS_OK
ReadX 13888 323584 4096 4096 NT_STATUS_OK
ReadX 13888 327680 61440 61440 NT_STATUS_OK
ReadX 13888 389120 4096 4096 NT_STATUS_OK
ReadX 13888 393216 61440 61440 NT_STATUS_OK
ReadX 13888 454656 4096 4096 NT_STATUS_OK
ReadX 13888 458752 61440 61440 NT_STATUS_OK
ReadX 13888 520192 4096 4096 NT_STATUS_OK
ReadX 13888 524288 61440 61440 NT_STATUS_OK
ReadX 13888 585728 4096 4096 NT_STATUS_OK
ReadX 13888 589824 61440 61440 NT_STATUS_OK
ReadX 13888 651264 4096 4096 NT_STATUS_OK
ReadX 13888 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 61440 61440 NT_STATUS_OK
ReadX 13889 61440 4096 4096 NT_STATUS_OK
ReadX 13889 65536 61440 61440 NT_STATUS_OK
ReadX 13889 126976 4096 4096 NT_STATUS_OK
ReadX 13889 131072 61440 61440 NT_STATUS_OK
ReadX 13889 192512 4096 4096 NT_STATUS_OK
ReadX 13889 196608 61440 61440 NT_STATUS_OK
ReadX 13889 258048 4096 4096 NT_STATUS_OK
ReadX 13889 262144 61440 61440 NT_STATUS_OK
ReadX 13889 323584 4096 4096 NT_STATUS_OK
ReadX 13889 327680 61440 61440 NT_STATUS_OK
ReadX 13889 389120 4096 4096 NT_STATUS_OK
ReadX 13889 393216 61440 61440 NT_STATUS_OK
ReadX 13889 454656 4096 4096 NT_STATUS_OK
ReadX 13889 458752 61440 61440 NT_STATUS_OK
ReadX 13889 520192 4096 4096 NT_STATUS_OK
ReadX 13889 524288 61440 61440 NT_STATUS_OK
ReadX 13889 585728 4096 4096 NT_STATUS_OK
ReadX 13889 589824 61440 61440 NT_STATUS_OK
ReadX 13889 651264 4096 4096 NT_STATUS_OK
ReadX 13889 655360 61440 61440 NT_STATUS_OK
ReadX 13889 716800 4096 4096 NT_STATUS_OK
ReadX 13889 720896 61440 61440 NT_STATUS_OK
ReadX 13889 782336 4096 4096 NT_STATUS_OK
ReadX 13889 786432 61440 61440 NT_STATUS_OK
ReadX 13889 847872 4096 4096 NT_STATUS_OK
ReadX 13889 851968 61440 61440 NT_STATUS_OK
ReadX 13889 913408 4096 4096 NT_STATUS_OK
ReadX 13889 917504 61440 61440 NT_STATUS_OK
ReadX 13889 978944 4096 4096 NT_STATUS_OK
ReadX 13889 983040 61440 61440 NT_STATUS_OK
ReadX 13889 1044480 4096 4096 NT_STATUS_OK
ReadX 13889 1048576 61440 61440 NT_STATUS_OK
ReadX 13889 1110016 4096 4096 NT_STATUS_OK
ReadX 13889 1114112 61440 61440 NT_STATUS_OK
ReadX 13889 1175552 4096 4096 NT_STATUS_OK
ReadX 13889 1179648 61440 61440 NT_STATUS_OK
ReadX 13889 1241088 4096 4096 NT_STATUS_OK
ReadX 13889 1245184 61440 61440 NT_STATUS_OK
ReadX 13889 1306624 4096 4096 NT_STATUS_OK
ReadX 13889 1310720 61440 61440 NT_STATUS_OK
ReadX 13889 1372160 4096 4096 NT_STATUS_OK
ReadX 13889 1376256 61440 61440 NT_STATUS_OK
ReadX 13889 1437696 4096 4096 NT_STATUS_OK
ReadX 13889 1441792 61440 61440 NT_STATUS_OK
ReadX 13889 1503232 4096 4096 NT_STATUS_OK
ReadX 13889 1507328 61440 61440 NT_STATUS_OK
ReadX 13889 1568768 4096 4096 NT_STATUS_OK
ReadX 13889 1572864 61440 61440 NT_STATUS_OK
ReadX 13889 1634304 4096 4096 NT_STATUS_OK
ReadX 13889 1638400 61440 61440 NT_STATUS_OK
ReadX 13889 1699840 4096 4096 NT_STATUS_OK
ReadX 13889 1703936 61440 61440 NT_STATUS_OK
ReadX 13889 1765376 4096 4096 NT_STATUS_OK
ReadX 13889 1769472 61440 61440 NT_STATUS_OK
ReadX 13889 1830912 4096 4096 NT_STATUS_OK
ReadX 13889 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13890 NT_STATUS_OK
Close 13890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13887 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13893 NT_STATUS_OK
ReadX 13893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13894 NT_STATUS_OK
ReadX 13894 0 4096 4096 NT_STATUS_OK
ReadX 13894 4096 4096 4096 NT_STATUS_OK
ReadX 13894 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13892 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Close 13894 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13898 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13899 NT_STATUS_OK
Close 13899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13897 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13901 NT_STATUS_OK
ReadX 13901 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 0 8192 8192 NT_STATUS_OK
ReadX 13902 8192 8192 8192 NT_STATUS_OK
ReadX 13902 16384 8192 8192 NT_STATUS_OK
ReadX 13902 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13904 NT_STATUS_OK
Close 13904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Close 13901 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13907 NT_STATUS_OK
WriteX 13907 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13907 258 NT_STATUS_OK
WriteX 13907 0 10438 10438 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13908 NT_STATUS_OK
Close 13908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13910 NT_STATUS_OK
Close 13910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13911 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13912 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13913 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13915 NT_STATUS_OK
Close 13915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
ReadX 13916 4096 4096 4096 NT_STATUS_OK
ReadX 13916 8192 4096 4096 NT_STATUS_OK
ReadX 13916 12288 8192 8192 NT_STATUS_OK
ReadX 13916 20480 8192 8192 NT_STATUS_OK
ReadX 13916 28672 8192 8192 NT_STATUS_OK
ReadX 13916 36864 8192 8192 NT_STATUS_OK
ReadX 13916 45056 8192 8192 NT_STATUS_OK
ReadX 13916 53248 8192 8192 NT_STATUS_OK
ReadX 13916 61440 8192 8192 NT_STATUS_OK
ReadX 13916 69632 8192 8192 NT_STATUS_OK
ReadX 13916 77824 8192 8192 NT_STATUS_OK
ReadX 13916 86016 8192 8192 NT_STATUS_OK
ReadX 13916 94208 8192 8192 NT_STATUS_OK
ReadX 13916 102400 8192 8192 NT_STATUS_OK
ReadX 13916 110592 8192 8192 NT_STATUS_OK
ReadX 13916 118784 8192 8192 NT_STATUS_OK
ReadX 13916 126976 8192 8192 NT_STATUS_OK
ReadX 13916 135168 8192 8192 NT_STATUS_OK
ReadX 13916 143360 8192 8192 NT_STATUS_OK
ReadX 13916 151552 8192 8192 NT_STATUS_OK
ReadX 13916 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13916 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13921 NT_STATUS_OK
WriteX 13921 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13921 258 NT_STATUS_OK
WriteX 13921 0 28489 28489 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13922 NT_STATUS_OK
Close 13922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13924 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13925 NT_STATUS_OK
Close 13925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 0 8192 8192 NT_STATUS_OK
ReadX 13928 8192 8192 8192 NT_STATUS_OK
ReadX 13928 16384 8192 8192 NT_STATUS_OK
ReadX 13928 24576 8192 8192 NT_STATUS_OK
ReadX 13928 32768 16384 16384 NT_STATUS_OK
ReadX 13928 49152 8192 8192 NT_STATUS_OK
ReadX 13928 57344 8192 8192 NT_STATUS_OK
ReadX 13928 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13930 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13933 NT_STATUS_OK
WriteX 13933 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13933 258 NT_STATUS_OK
WriteX 13933 0 29253 29253 NT_STATUS_OK
Close 13933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13934 NT_STATUS_OK
Close 13934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13937 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13940 NT_STATUS_OK
WriteX 13940 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13940 258 NT_STATUS_OK
WriteX 13940 0 30183 30183 NT_STATUS_OK
Close 13940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13941 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13943 NT_STATUS_OK
WriteX 13943 0 510 510 NT_STATUS_OK
WriteX 13943 510 512 512 NT_STATUS_OK
WriteX 13943 1022 510 510 NT_STATUS_OK
WriteX 13943 1532 510 510 NT_STATUS_OK
WriteX 13943 2042 168 168 NT_STATUS_OK
Close 13943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13944 NT_STATUS_OK
Close 13944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
WriteX 13946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13947 NT_STATUS_OK
ReadX 13947 61440 4096 4096 NT_STATUS_OK
ReadX 13947 126976 4096 4096 NT_STATUS_OK
WriteX 13947 0 65536 65536 NT_STATUS_OK
WriteX 13947 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13948 NT_STATUS_OK
ReadX 13948 61440 4096 4096 NT_STATUS_OK
ReadX 13948 126976 4096 4096 NT_STATUS_OK
ReadX 13948 192512 4096 4096 NT_STATUS_OK
ReadX 13948 258048 4096 4096 NT_STATUS_OK
WriteX 13948 0 65536 65536 NT_STATUS_OK
WriteX 13948 65536 65536 65536 NT_STATUS_OK
WriteX 13948 131072 65536 65536 NT_STATUS_OK
WriteX 13948 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13949 NT_STATUS_OK
ReadX 13949 61440 4096 4096 NT_STATUS_OK
ReadX 13949 126976 4096 4096 NT_STATUS_OK
ReadX 13949 192512 4096 4096 NT_STATUS_OK
ReadX 13949 258048 4096 4096 NT_STATUS_OK
ReadX 13949 323584 4096 4096 NT_STATUS_OK
ReadX 13949 389120 4096 4096 NT_STATUS_OK
ReadX 13949 454656 4096 4096 NT_STATUS_OK
ReadX 13949 520192 4096 4096 NT_STATUS_OK
WriteX 13949 0 65536 65536 NT_STATUS_OK
WriteX 13949 65536 65536 65536 NT_STATUS_OK
WriteX 13949 131072 65536 65536 NT_STATUS_OK
WriteX 13949 196608 65536 65536 NT_STATUS_OK
WriteX 13949 262144 65536 65536 NT_STATUS_OK
WriteX 13949 327680 65536 65536 NT_STATUS_OK
WriteX 13949 393216 65536 65536 NT_STATUS_OK
WriteX 13949 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13950 NT_STATUS_OK
Close 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Close 13947 NT_STATUS_OK
Close 13948 NT_STATUS_OK
Close 13949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13952 NT_STATUS_OK
Close 13952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13959 NT_STATUS_OK
Close 13959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13961 NT_STATUS_OK
Close 13961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13965 NT_STATUS_OK
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13968 NT_STATUS_OK
Close 13968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13974 NT_STATUS_OK
Close 13974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13979 NT_STATUS_OK
Close 13979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13984 NT_STATUS_OK
Close 13984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13989 NT_STATUS_OK
Close 13989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13994 NT_STATUS_OK
Close 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13999 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 14009 NT_STATUS_OK
Close 14009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 14012 NT_STATUS_OK
Close 14012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 14015 NT_STATUS_OK
Close 14015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 14018 NT_STATUS_OK
WriteX 14018 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14018 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 14018 0 65536 65536 NT_STATUS_OK
WriteX 14018 65536 65536 65536 NT_STATUS_OK
WriteX 14018 131072 65536 65536 NT_STATUS_OK
WriteX 14018 196608 65536 65536 NT_STATUS_OK
WriteX 14018 262144 26634 26634 NT_STATUS_OK
Close 14018 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14023 NT_STATUS_OK
Close 14023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14024 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
Close 14025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 0 4096 4096 NT_STATUS_OK
ReadX 14026 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14027 NT_STATUS_OK
Close 14027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 14026 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14031 NT_STATUS_OK
Close 14031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14034 NT_STATUS_OK
Close 14034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 14036 NT_STATUS_OK
Close 14036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14040 NT_STATUS_OK
Close 14040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 14043 NT_STATUS_OK
Close 14043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14045 NT_STATUS_OK
Close 14045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14049 NT_STATUS_OK
Close 14049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14054 NT_STATUS_OK
Close 14054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14059 NT_STATUS_OK
Close 14059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 14064 NT_STATUS_OK
Close 14064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14069 NT_STATUS_OK
Close 14069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 14074 NT_STATUS_OK
Close 14074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14078 NT_STATUS_OK
Close 14078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14083 NT_STATUS_OK
Close 14083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 14091 NT_STATUS_OK
Close 14091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 14093 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9879 NT_STATUS_OK
Close 9879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9881 NT_STATUS_OK
ReadX 9881 0 4096 4096 NT_STATUS_OK
Close 9881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9882 NT_STATUS_OK
ReadX 9882 0 4096 4096 NT_STATUS_OK
Close 9882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9883 NT_STATUS_OK
ReadX 9883 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9893 NT_STATUS_OK
Close 9893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9895 NT_STATUS_OK
ReadX 9895 0 4096 4096 NT_STATUS_OK
Close 9895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 4096 4096 NT_STATUS_OK
Close 9896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9897 NT_STATUS_OK
ReadX 9897 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9883 NT_STATUS_OK
Close 9897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9926 0 4096 4096 NT_STATUS_OK
Close 9926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9928 NT_STATUS_OK
ReadX 9928 0 4096 4096 NT_STATUS_OK
ReadX 9928 4096 4096 4096 NT_STATUS_OK
ReadX 9928 8192 4096 4096 NT_STATUS_OK
ReadX 9928 12288 4096 4096 NT_STATUS_OK
ReadX 9928 16384 4096 4096 NT_STATUS_OK
ReadX 9928 20480 4096 4096 NT_STATUS_OK
ReadX 9928 24576 4096 4096 NT_STATUS_OK
ReadX 9928 28672 4096 4096 NT_STATUS_OK
ReadX 9928 32768 4096 4096 NT_STATUS_OK
ReadX 9928 36864 4096 4096 NT_STATUS_OK
ReadX 9928 40960 4096 4096 NT_STATUS_OK
ReadX 9928 45056 4096 4096 NT_STATUS_OK
ReadX 9928 49152 4096 4096 NT_STATUS_OK
ReadX 9928 53248 4096 4096 NT_STATUS_OK
ReadX 9928 57344 4096 4096 NT_STATUS_OK
ReadX 9928 61440 4096 4096 NT_STATUS_OK
ReadX 9928 65536 4096 4096 NT_STATUS_OK
ReadX 9928 69632 4096 4096 NT_STATUS_OK
ReadX 9928 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9928 1004 NT_STATUS_OK
WriteX 9928 0 4096 4096 NT_STATUS_OK
Close 9928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9929 NT_STATUS_OK
SET_FILE_INFORMATION 9929 1004 NT_STATUS_OK
Close 9929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9930 NT_STATUS_OK
ReadX 9930 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9931 NT_STATUS_OK
Close 9931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9934 NT_STATUS_OK
WriteX 9934 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9934 258 NT_STATUS_OK
WriteX 9934 0 65536 65536 NT_STATUS_OK
WriteX 9934 65536 19979 19979 NT_STATUS_OK
Close 9934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9935 NT_STATUS_OK
ReadX 9935 0 4096 4096 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
QUERY_FILE_INFORMATION 9935 1004 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
SET_FILE_INFORMATION 9935 1004 NT_STATUS_OK
WriteX 9935 0 4096 4096 NT_STATUS_OK
Flush 9935 NT_STATUS_OK
Close 9935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9936 NT_STATUS_OK
ReadX 9936 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9937 NT_STATUS_OK
ReadX 9937 0 4096 4096 NT_STATUS_OK
Close 9936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9938 NT_STATUS_OK
ReadX 9938 0 4096 4096 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 4096 4096 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9940 NT_STATUS_OK
ReadX 9940 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9940 1004 NT_STATUS_OK
WriteX 9940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9941 NT_STATUS_OK
Close 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9937 NT_STATUS_OK
Close 9940 NT_STATUS_OK
Close 9930 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9943 NT_STATUS_OK
Close 9943 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9946 NT_STATUS_OK
WriteX 9946 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 65536 65536 NT_STATUS_OK
WriteX 9946 65536 17654 17654 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
QUERY_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
SET_FILE_INFORMATION 9947 1004 NT_STATUS_OK
WriteX 9947 0 4096 4096 NT_STATUS_OK
Flush 9947 NT_STATUS_OK
Close 9947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9948 NT_STATUS_OK
SET_FILE_INFORMATION 9948 1004 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9949 NT_STATUS_OK
ReadX 9949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9952 NT_STATUS_OK
ReadX 9952 0 4096 4096 NT_STATUS_OK
ReadX 9952 4096 4096 4096 NT_STATUS_OK
ReadX 9952 8192 4096 4096 NT_STATUS_OK
ReadX 9952 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9952 16384 4096 4096 NT_STATUS_OK
ReadX 9952 20480 4096 4096 NT_STATUS_OK
ReadX 9952 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9953 NT_STATUS_OK
ReadX 9953 0 4096 4096 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9954 NT_STATUS_OK
ReadX 9954 0 4096 4096 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9955 NT_STATUS_OK
ReadX 9955 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9955 1004 NT_STATUS_OK
WriteX 9955 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9955 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9958 NT_STATUS_OK
Close 9958 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9961 NT_STATUS_OK
WriteX 9961 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9961 258 NT_STATUS_OK
WriteX 9961 0 65536 65536 NT_STATUS_OK
WriteX 9961 65536 19490 19490 NT_STATUS_OK
Close 9961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9962 NT_STATUS_OK
ReadX 9962 0 4096 4096 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
QUERY_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
SET_FILE_INFORMATION 9962 1004 NT_STATUS_OK
WriteX 9962 0 4096 4096 NT_STATUS_OK
Flush 9962 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9963 NT_STATUS_OK
SET_FILE_INFORMATION 9963 1004 NT_STATUS_OK
Close 9963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9964 NT_STATUS_OK
ReadX 9964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9965 NT_STATUS_OK
Close 9965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9967 0 4096 4096 NT_STATUS_OK
Close 9967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9968 NT_STATUS_OK
ReadX 9968 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9969 NT_STATUS_OK
ReadX 9969 0 4096 4096 NT_STATUS_OK
ReadX 9969 4096 4096 4096 NT_STATUS_OK
ReadX 9969 8192 4096 4096 NT_STATUS_OK
ReadX 9969 12288 4096 4096 NT_STATUS_OK
ReadX 9969 16384 4096 4096 NT_STATUS_OK
ReadX 9969 20480 4096 4096 NT_STATUS_OK
ReadX 9969 24576 4096 4096 NT_STATUS_OK
ReadX 9969 28672 4096 4096 NT_STATUS_OK
ReadX 9969 32768 4096 4096 NT_STATUS_OK
ReadX 9969 36864 4096 4096 NT_STATUS_OK
ReadX 9969 40960 4096 4096 NT_STATUS_OK
ReadX 9969 45056 4096 4096 NT_STATUS_OK
ReadX 9969 49152 4096 4096 NT_STATUS_OK
ReadX 9969 53248 4096 4096 NT_STATUS_OK
ReadX 9969 57344 4096 4096 NT_STATUS_OK
ReadX 9969 61440 4096 4096 NT_STATUS_OK
ReadX 9969 65536 4096 4096 NT_STATUS_OK
ReadX 9969 69632 4096 4096 NT_STATUS_OK
ReadX 9969 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9969 1004 NT_STATUS_OK
WriteX 9969 0 4096 4096 NT_STATUS_OK
Close 9969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9970 NT_STATUS_OK
SET_FILE_INFORMATION 9970 1004 NT_STATUS_OK
Close 9970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9971 NT_STATUS_OK
ReadX 9971 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9975 NT_STATUS_OK
WriteX 9975 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9975 258 NT_STATUS_OK
WriteX 9975 0 65536 65536 NT_STATUS_OK
WriteX 9975 65536 8866 8866 NT_STATUS_OK
Close 9975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9976 NT_STATUS_OK
ReadX 9976 0 4096 4096 NT_STATUS_OK
WriteX 9976 0 4096 4096 NT_STATUS_OK
Flush 9976 NT_STATUS_OK
SET_FILE_INFORMATION 9976 1004 NT_STATUS_OK
WriteX 9976 0 4096 4096 NT_STATUS_OK
Flush 9976 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9978 NT_STATUS_OK
ReadX 9978 0 4096 4096 NT_STATUS_OK
Close 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9980 NT_STATUS_OK
ReadX 9980 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9980 1004 NT_STATUS_OK
WriteX 9980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9980 NT_STATUS_OK
Close 9971 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9983 NT_STATUS_OK
Close 9983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9986 NT_STATUS_OK
WriteX 9986 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9986 258 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 9298 9298 NT_STATUS_OK
Close 9986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 0 4096 4096 NT_STATUS_OK
WriteX 9987 0 4096 4096 NT_STATUS_OK
Flush 9987 NT_STATUS_OK
SET_FILE_INFORMATION 9987 1004 NT_STATUS_OK
WriteX 9987 0 4096 4096 NT_STATUS_OK
Flush 9987 NT_STATUS_OK
Close 9987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9988 NT_STATUS_OK
SET_FILE_INFORMATION 9988 1004 NT_STATUS_OK
Close 9988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9989 NT_STATUS_OK
ReadX 9989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9993 0 4096 4096 NT_STATUS_OK
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 9994 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9994 4096 4096 4096 NT_STATUS_OK
ReadX 9994 8192 4096 4096 NT_STATUS_OK
ReadX 9994 12288 4096 4096 NT_STATUS_OK
ReadX 9994 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9995 NT_STATUS_OK
ReadX 9995 0 4096 4096 NT_STATUS_OK
Close 9995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9996 NT_STATUS_OK
ReadX 9996 0 4096 4096 NT_STATUS_OK
Close 9996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9997 1004 NT_STATUS_OK
WriteX 9997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 9998 NT_STATUS_OK
Close 9998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 9994 NT_STATUS_OK
Close 9997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10000 NT_STATUS_OK
Close 10000 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10003 NT_STATUS_OK
WriteX 10003 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 258 NT_STATUS_OK
WriteX 10003 0 65536 65536 NT_STATUS_OK
WriteX 10003 65536 11540 11540 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 4096 4096 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
SET_FILE_INFORMATION 10004 1004 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10005 NT_STATUS_OK
SET_FILE_INFORMATION 10005 1004 NT_STATUS_OK
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10006 NT_STATUS_OK
ReadX 10006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10009 NT_STATUS_OK
ReadX 10009 61440 4096 4096 NT_STATUS_OK
ReadX 10009 126976 4096 4096 NT_STATUS_OK
WriteX 10009 0 65536 65536 NT_STATUS_OK
WriteX 10009 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10010 NT_STATUS_OK
ReadX 10010 61440 4096 4096 NT_STATUS_OK
ReadX 10010 126976 4096 4096 NT_STATUS_OK
ReadX 10010 192512 4096 4096 NT_STATUS_OK
ReadX 10010 258048 4096 4096 NT_STATUS_OK
WriteX 10010 0 65536 65536 NT_STATUS_OK
WriteX 10010 65536 65536 65536 NT_STATUS_OK
WriteX 10010 131072 65536 65536 NT_STATUS_OK
WriteX 10010 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10011 NT_STATUS_OK
ReadX 10011 61440 4096 4096 NT_STATUS_OK
ReadX 10011 126976 4096 4096 NT_STATUS_OK
ReadX 10011 192512 4096 4096 NT_STATUS_OK
ReadX 10011 258048 4096 4096 NT_STATUS_OK
ReadX 10011 323584 4096 4096 NT_STATUS_OK
ReadX 10011 389120 4096 4096 NT_STATUS_OK
ReadX 10011 454656 4096 4096 NT_STATUS_OK
ReadX 10011 520192 4096 4096 NT_STATUS_OK
WriteX 10011 0 65536 65536 NT_STATUS_OK
WriteX 10011 65536 65536 65536 NT_STATUS_OK
WriteX 10011 131072 65536 65536 NT_STATUS_OK
WriteX 10011 196608 65536 65536 NT_STATUS_OK
WriteX 10011 262144 65536 65536 NT_STATUS_OK
WriteX 10011 327680 65536 65536 NT_STATUS_OK
WriteX 10011 393216 65536 65536 NT_STATUS_OK
WriteX 10011 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 4096 4096 NT_STATUS_OK
ReadX 10012 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10013 NT_STATUS_OK
WriteX 10013 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10013 258 NT_STATUS_OK
WriteX 10013 0 53 53 NT_STATUS_OK
Close 10013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10014 NT_STATUS_OK
Close 10014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10006 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Close 10009 NT_STATUS_OK
Close 10010 NT_STATUS_OK
Close 10011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10012 8192 4096 4096 NT_STATUS_OK
ReadX 10012 12288 4096 4096 NT_STATUS_OK
WriteX 10016 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10016 258 NT_STATUS_OK
ReadX 10012 16384 4096 4096 NT_STATUS_OK
ReadX 10012 20480 4096 4096 NT_STATUS_OK
WriteX 10016 0 15360 15360 NT_STATUS_OK
Close 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10017 NT_STATUS_OK
ReadX 10017 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10017 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10017 1004 NT_STATUS_OK
WriteX 10017 0 4096 4096 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10018 NT_STATUS_OK
Close 10018 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10020 NT_STATUS_OK
ReadX 10020 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10021 NT_STATUS_OK
Close 10021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10020 4096 4096 4096 NT_STATUS_OK
ReadX 10020 8192 4096 4096 NT_STATUS_OK
ReadX 10020 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10023 NT_STATUS_OK
ReadX 10023 0 4096 4096 NT_STATUS_OK
ReadX 10023 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
ReadX 10024 4096 4096 4096 NT_STATUS_OK
ReadX 10024 8192 4096 4096 NT_STATUS_OK
Close 10023 NT_STATUS_OK
Close 10024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10025 NT_STATUS_OK
WriteX 10025 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10025 258 NT_STATUS_OK
WriteX 10025 0 15360 15360 NT_STATUS_OK
Close 10025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10030 NT_STATUS_OK
SET_FILE_INFORMATION 10030 1004 NT_STATUS_OK
Close 10030 NT_STATUS_OK
WriteX 10026 0 4096 4096 NT_STATUS_OK
Close 10026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10031 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
ReadX 10033 4096 4096 4096 NT_STATUS_OK
ReadX 10033 8192 4096 4096 NT_STATUS_OK
ReadX 10033 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10033 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10033 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10035 NT_STATUS_OK
WriteX 10035 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10035 258 NT_STATUS_OK
WriteX 10035 0 53 53 NT_STATUS_OK
Close 10035 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10036 NT_STATUS_OK
Close 10036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10034 4096 4096 4096 NT_STATUS_OK
ReadX 10034 8192 4096 4096 NT_STATUS_OK
ReadX 10034 12288 4096 4096 NT_STATUS_OK
WriteX 10038 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10038 258 NT_STATUS_OK
WriteX 10038 0 12006 12006 NT_STATUS_OK
Close 10038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
WriteX 10039 0 4096 4096 NT_STATUS_OK
Close 10039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10042 NT_STATUS_OK
ReadX 10042 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10043 NT_STATUS_OK
Close 10043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10042 4096 4096 4096 NT_STATUS_OK
ReadX 10042 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10045 NT_STATUS_OK
WriteX 10045 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10045 258 NT_STATUS_OK
WriteX 10045 0 11991 11991 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10046 NT_STATUS_OK
ReadX 10046 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10046 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10050 NT_STATUS_OK
SET_FILE_INFORMATION 10050 1004 NT_STATUS_OK
Close 10050 NT_STATUS_OK
WriteX 10046 0 4096 4096 NT_STATUS_OK
Close 10046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10051 NT_STATUS_OK
Close 10051 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10053 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
ReadX 10053 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
WriteX 10053 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10053 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10053 1004 NT_STATUS_OK
Close 10029 NT_STATUS_OK
WriteX 10033 0 19054 19054 NT_STATUS_OK
WriteX 10053 0 12288 12288 NT_STATUS_OK
Close 10049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10056 NT_STATUS_OK
Close 10056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10033 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10058 NT_STATUS_OK
Close 10058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10060 NT_STATUS_OK
ReadX 10060 0 61440 61440 NT_STATUS_OK
ReadX 10060 61440 4096 4096 NT_STATUS_OK
ReadX 10060 65536 61440 61440 NT_STATUS_OK
ReadX 10060 126976 4096 4096 NT_STATUS_OK
ReadX 10060 131072 61440 61440 NT_STATUS_OK
ReadX 10060 192512 4096 4096 NT_STATUS_OK
ReadX 10060 196608 61440 61440 NT_STATUS_OK
ReadX 10060 258048 4096 4096 NT_STATUS_OK
ReadX 10060 262144 61440 61440 NT_STATUS_OK
ReadX 10060 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10061 NT_STATUS_OK
ReadX 10061 0 61440 61440 NT_STATUS_OK
ReadX 10061 61440 4096 4096 NT_STATUS_OK
ReadX 10061 65536 61440 61440 NT_STATUS_OK
ReadX 10061 126976 4096 4096 NT_STATUS_OK
ReadX 10061 131072 61440 61440 NT_STATUS_OK
ReadX 10061 192512 4096 4096 NT_STATUS_OK
ReadX 10061 196608 61440 61440 NT_STATUS_OK
ReadX 10061 258048 4096 4096 NT_STATUS_OK
ReadX 10061 262144 61440 61440 NT_STATUS_OK
ReadX 10061 323584 4096 4096 NT_STATUS_OK
ReadX 10061 327680 61440 61440 NT_STATUS_OK
ReadX 10061 389120 4096 4096 NT_STATUS_OK
ReadX 10061 393216 61440 61440 NT_STATUS_OK
ReadX 10061 454656 4096 4096 NT_STATUS_OK
ReadX 10061 458752 61440 61440 NT_STATUS_OK
ReadX 10061 520192 4096 4096 NT_STATUS_OK
ReadX 10061 524288 61440 61440 NT_STATUS_OK
ReadX 10061 585728 4096 4096 NT_STATUS_OK
ReadX 10061 589824 61440 61440 NT_STATUS_OK
ReadX 10061 651264 4096 4096 NT_STATUS_OK
ReadX 10061 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 61440 61440 NT_STATUS_OK
ReadX 10062 61440 4096 4096 NT_STATUS_OK
ReadX 10062 65536 61440 61440 NT_STATUS_OK
ReadX 10062 126976 4096 4096 NT_STATUS_OK
ReadX 10062 131072 61440 61440 NT_STATUS_OK
ReadX 10062 192512 4096 4096 NT_STATUS_OK
ReadX 10062 196608 61440 61440 NT_STATUS_OK
ReadX 10062 258048 4096 4096 NT_STATUS_OK
ReadX 10062 262144 61440 61440 NT_STATUS_OK
ReadX 10062 323584 4096 4096 NT_STATUS_OK
ReadX 10062 327680 61440 61440 NT_STATUS_OK
ReadX 10062 389120 4096 4096 NT_STATUS_OK
ReadX 10062 393216 61440 61440 NT_STATUS_OK
ReadX 10062 454656 4096 4096 NT_STATUS_OK
ReadX 10062 458752 61440 61440 NT_STATUS_OK
ReadX 10062 520192 4096 4096 NT_STATUS_OK
ReadX 10062 524288 61440 61440 NT_STATUS_OK
ReadX 10062 585728 4096 4096 NT_STATUS_OK
ReadX 10062 589824 61440 61440 NT_STATUS_OK
ReadX 10062 651264 4096 4096 NT_STATUS_OK
ReadX 10062 655360 61440 61440 NT_STATUS_OK
ReadX 10062 716800 4096 4096 NT_STATUS_OK
ReadX 10062 720896 61440 61440 NT_STATUS_OK
ReadX 10062 782336 4096 4096 NT_STATUS_OK
ReadX 10062 786432 61440 61440 NT_STATUS_OK
ReadX 10062 847872 4096 4096 NT_STATUS_OK
ReadX 10062 851968 61440 61440 NT_STATUS_OK
ReadX 10062 913408 4096 4096 NT_STATUS_OK
ReadX 10062 917504 61440 61440 NT_STATUS_OK
ReadX 10062 978944 4096 4096 NT_STATUS_OK
ReadX 10062 983040 61440 61440 NT_STATUS_OK
ReadX 10062 1044480 4096 4096 NT_STATUS_OK
ReadX 10062 1048576 61440 61440 NT_STATUS_OK
ReadX 10062 1110016 4096 4096 NT_STATUS_OK
ReadX 10062 1114112 61440 61440 NT_STATUS_OK
ReadX 10062 1175552 4096 4096 NT_STATUS_OK
ReadX 10062 1179648 61440 61440 NT_STATUS_OK
ReadX 10062 1241088 4096 4096 NT_STATUS_OK
ReadX 10062 1245184 61440 61440 NT_STATUS_OK
ReadX 10062 1306624 4096 4096 NT_STATUS_OK
ReadX 10062 1310720 61440 61440 NT_STATUS_OK
ReadX 10062 1372160 4096 4096 NT_STATUS_OK
ReadX 10062 1376256 61440 61440 NT_STATUS_OK
ReadX 10062 1437696 4096 4096 NT_STATUS_OK
ReadX 10062 1441792 61440 61440 NT_STATUS_OK
ReadX 10062 1503232 4096 4096 NT_STATUS_OK
ReadX 10062 1507328 61440 61440 NT_STATUS_OK
ReadX 10062 1568768 4096 4096 NT_STATUS_OK
ReadX 10062 1572864 61440 61440 NT_STATUS_OK
ReadX 10062 1634304 4096 4096 NT_STATUS_OK
ReadX 10062 1638400 61440 61440 NT_STATUS_OK
ReadX 10062 1699840 4096 4096 NT_STATUS_OK
ReadX 10062 1703936 61440 61440 NT_STATUS_OK
ReadX 10062 1765376 4096 4096 NT_STATUS_OK
ReadX 10062 1769472 61440 61440 NT_STATUS_OK
ReadX 10062 1830912 4096 4096 NT_STATUS_OK
ReadX 10062 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10063 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10064 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10065 NT_STATUS_OK
ReadX 10065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10067 NT_STATUS_OK
ReadX 10067 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10068 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10069 NT_STATUS_OK
QUERY_FILE_INFORMATION 10069 1004 NT_STATUS_OK
WriteX 10069 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10069 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10070 NT_STATUS_OK
Close 10070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10071 NT_STATUS_OK
WriteX 10071 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10071 258 NT_STATUS_OK
WriteX 10071 0 491 491 NT_STATUS_OK
Close 10071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10072 NT_STATUS_OK
ReadX 10072 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10069 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10074 NT_STATUS_OK
Close 10074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10075 NT_STATUS_OK
WriteX 10075 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10075 258 NT_STATUS_OK
WriteX 10075 0 543 543 NT_STATUS_OK
Close 10075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10076 NT_STATUS_OK
ReadX 10076 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Close 10061 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Close 10076 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Close 10065 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Close 10067 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10080 NT_STATUS_OK
ReadX 10080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10082 NT_STATUS_OK
ReadX 10082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10083 NT_STATUS_OK
ReadX 10083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10084 NT_STATUS_OK
ReadX 10084 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10089 NT_STATUS_OK
QUERY_FILE_INFORMATION 10089 1004 NT_STATUS_OK
WriteX 10089 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10089 258 NT_STATUS_OK
WriteX 10089 0 2048 2048 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10090 NT_STATUS_OK
ReadX 10090 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10090 0 4096 4096 NT_STATUS_OK
Flush 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10090 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10095 NT_STATUS_OK
WriteX 10095 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10095 258 NT_STATUS_OK
WriteX 10095 0 2048 2048 NT_STATUS_OK
Close 10095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10100 NT_STATUS_OK
Close 10100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10101 NT_STATUS_OK
WriteX 10101 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10101 258 NT_STATUS_OK
WriteX 10101 0 2048 2048 NT_STATUS_OK
Close 10101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10102 NT_STATUS_OK
ReadX 10102 0 2048 2048 NT_STATUS_OK
ReadX 10080 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10084 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10096 0 4096 4096 NT_STATUS_OK
WriteX 10080 0 8192 8192 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
WriteX 10082 0 4096 4096 NT_STATUS_OK
ReadX 10096 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10106 NT_STATUS_OK
QUERY_FILE_INFORMATION 10106 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10081 NT_STATUS_OK
Close 10082 NT_STATUS_OK
Close 10083 NT_STATUS_OK
Close 10096 NT_STATUS_OK
Close 10080 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10109 NT_STATUS_OK
ReadX 10109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10110 NT_STATUS_OK
ReadX 10110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10112 NT_STATUS_OK
ReadX 10112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10113 NT_STATUS_OK
ReadX 10113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10114 NT_STATUS_OK
ReadX 10114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10115 NT_STATUS_OK
ReadX 10115 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10116 NT_STATUS_OK
ReadX 10116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10117 NT_STATUS_OK
ReadX 10117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10118 NT_STATUS_OK
ReadX 10118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10120 NT_STATUS_OK
ReadX 10120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10126 NT_STATUS_OK
QUERY_FILE_INFORMATION 10126 1004 NT_STATUS_OK
WriteX 10126 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10126 258 NT_STATUS_OK
WriteX 10126 0 2048 2048 NT_STATUS_OK
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10128 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10129 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10134 NT_STATUS_OK
QUERY_FILE_INFORMATION 10134 1004 NT_STATUS_OK
WriteX 10134 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10134 258 NT_STATUS_OK
WriteX 10134 0 2048 2048 NT_STATUS_OK
Close 10134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10135 NT_STATUS_OK
ReadX 10135 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10127 0 4096 4096 NT_STATUS_OK
Flush 10127 NT_STATUS_OK
WriteX 10135 0 4096 4096 NT_STATUS_OK
Flush 10135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10127 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10135 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10129 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10136 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10137 NT_STATUS_OK
WriteX 10137 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10137 258 NT_STATUS_OK
WriteX 10137 0 4096 4096 NT_STATUS_OK
Close 10137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10138 NT_STATUS_OK
ReadX 10138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10139 NT_STATUS_OK
Close 10139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10140 NT_STATUS_OK
WriteX 10140 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10140 258 NT_STATUS_OK
WriteX 10140 0 4096 4096 NT_STATUS_OK
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10141 NT_STATUS_OK
ReadX 10141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10141 0 4096 4096 NT_STATUS_OK
Close 10138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Close 10115 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Close 10118 NT_STATUS_OK
Close 10119 NT_STATUS_OK
Close 10120 NT_STATUS_OK
Close 10116 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Close 10110 NT_STATUS_OK
Close 10113 NT_STATUS_OK
Close 10114 NT_STATUS_OK
Close 10111 NT_STATUS_OK
Close 10112 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10144 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10146 NT_STATUS_OK
ReadX 10146 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10147 NT_STATUS_OK
Close 10147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10148 NT_STATUS_OK
WriteX 10148 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 258 NT_STATUS_OK
WriteX 10148 0 2048 2048 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10149 NT_STATUS_OK
ReadX 10149 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10150 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10151 NT_STATUS_OK
ReadX 10151 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10152 NT_STATUS_OK
ReadX 10152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10153 NT_STATUS_OK
ReadX 10153 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10154 NT_STATUS_OK
ReadX 10154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10155 NT_STATUS_OK
ReadX 10155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10156 NT_STATUS_OK
ReadX 10156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10163 NT_STATUS_OK
QUERY_FILE_INFORMATION 10163 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10146 NT_STATUS_OK
Close 10149 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10156 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Close 10150 NT_STATUS_OK
Close 10151 NT_STATUS_OK
Close 10154 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Close 10152 NT_STATUS_OK
Close 10153 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10165 NT_STATUS_OK
QUERY_FILE_INFORMATION 10165 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10167 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10167 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10169 NT_STATUS_OK
ReadX 10169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10170 NT_STATUS_OK
ReadX 10170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10171 NT_STATUS_OK
ReadX 10171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10172 NT_STATUS_OK
ReadX 10172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10173 NT_STATUS_OK
ReadX 10173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10184 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10185 NT_STATUS_OK
QUERY_FILE_INFORMATION 10185 1004 NT_STATUS_OK
WriteX 10185 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10185 258 NT_STATUS_OK
WriteX 10185 0 2048 2048 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10187 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10191 NT_STATUS_OK
ReadX 10191 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10197 NT_STATUS_OK
QUERY_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10197 258 NT_STATUS_OK
WriteX 10197 0 2048 2048 NT_STATUS_OK
Close 10197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10199 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10204 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10205 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 1004 NT_STATUS_OK
WriteX 10205 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 258 NT_STATUS_OK
WriteX 10205 0 2048 2048 NT_STATUS_OK
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10186 0 4096 4096 NT_STATUS_OK
Flush 10186 NT_STATUS_OK
WriteX 10198 0 4096 4096 NT_STATUS_OK
Flush 10198 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
Flush 10206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10186 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10198 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10188 4096 16384 16384 NT_STATUS_OK
ReadX 10168 4096 16384 16384 NT_STATUS_OK
ReadX 10200 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10208 NT_STATUS_OK
ReadX 10208 0 2048 2048 NT_STATUS_OK
WriteX 10208 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10209 NT_STATUS_OK
QUERY_FILE_INFORMATION 10209 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Close 10180 NT_STATUS_OK
Close 10172 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Close 10174 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Close 10168 NT_STATUS_OK
Close 10169 NT_STATUS_OK
Close 10170 NT_STATUS_OK
Close 10171 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10211 NT_STATUS_OK
QUERY_FILE_INFORMATION 10211 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10213 NT_STATUS_OK
QUERY_FILE_INFORMATION 10213 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10219 NT_STATUS_OK
ReadX 10219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10220 NT_STATUS_OK
ReadX 10220 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10216 4096 16384 16384 NT_STATUS_OK
WriteX 10216 0 4096 4096 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
WriteX 10218 0 4096 4096 NT_STATUS_OK
WriteX 10219 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10222 NT_STATUS_OK
ReadX 10222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 8192 8192 NT_STATUS_OK
ReadX 10222 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10236 0 4096 4096 NT_STATUS_OK
ReadX 10236 4096 4096 4096 NT_STATUS_OK
ReadX 10236 8192 4096 4096 NT_STATUS_OK
WriteX 10222 0 4096 4096 NT_STATUS_OK
WriteX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10237 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
ReadX 10237 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10216 0 4096 4096 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
WriteX 10218 0 4096 4096 NT_STATUS_OK
WriteX 10219 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10242 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 1004 NT_STATUS_OK
WriteX 10242 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 258 NT_STATUS_OK
WriteX 10242 0 2048 2048 NT_STATUS_OK
Close 10242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10245 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
WriteX 10245 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10243 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 4096 4096 NT_STATUS_OK
ReadX 10247 4096 4096 4096 NT_STATUS_OK
WriteX 10247 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10248 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Close 10216 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Close 10218 NT_STATUS_OK
Close 10219 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10229 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10222 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10250 0 4096 4096 NT_STATUS_OK
ReadX 10250 4096 4096 4096 NT_STATUS_OK
ReadX 10250 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10260 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
ReadX 10251 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10268 NT_STATUS_OK
QUERY_FILE_INFORMATION 10268 1004 NT_STATUS_OK
WriteX 10268 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10268 258 NT_STATUS_OK
WriteX 10268 0 2048 2048 NT_STATUS_OK
Close 10268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10269 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10273 NT_STATUS_OK
Close 10273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10274 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 1004 NT_STATUS_OK
WriteX 10274 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10274 258 NT_STATUS_OK
WriteX 10274 0 2048 2048 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10275 NT_STATUS_OK
ReadX 10275 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10258 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10276 NT_STATUS_OK
QUERY_FILE_INFORMATION 10276 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10258 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10250 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10278 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10280 NT_STATUS_OK
ReadX 10280 61440 4096 4096 NT_STATUS_OK
ReadX 10280 126976 4096 4096 NT_STATUS_OK
WriteX 10280 0 65536 65536 NT_STATUS_OK
WriteX 10280 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10281 NT_STATUS_OK
ReadX 10281 61440 4096 4096 NT_STATUS_OK
ReadX 10281 126976 4096 4096 NT_STATUS_OK
ReadX 10281 192512 4096 4096 NT_STATUS_OK
ReadX 10281 258048 4096 4096 NT_STATUS_OK
WriteX 10281 0 65536 65536 NT_STATUS_OK
WriteX 10281 65536 65536 65536 NT_STATUS_OK
WriteX 10281 131072 65536 65536 NT_STATUS_OK
WriteX 10281 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 61440 4096 4096 NT_STATUS_OK
ReadX 10282 126976 4096 4096 NT_STATUS_OK
ReadX 10282 192512 4096 4096 NT_STATUS_OK
ReadX 10282 258048 4096 4096 NT_STATUS_OK
ReadX 10282 323584 4096 4096 NT_STATUS_OK
ReadX 10282 389120 4096 4096 NT_STATUS_OK
ReadX 10282 454656 4096 4096 NT_STATUS_OK
ReadX 10282 520192 4096 4096 NT_STATUS_OK
WriteX 10282 0 65536 65536 NT_STATUS_OK
WriteX 10282 65536 65536 65536 NT_STATUS_OK
WriteX 10282 131072 65536 65536 NT_STATUS_OK
WriteX 10282 196608 65536 65536 NT_STATUS_OK
WriteX 10282 262144 65536 65536 NT_STATUS_OK
WriteX 10282 327680 65536 65536 NT_STATUS_OK
WriteX 10282 393216 65536 65536 NT_STATUS_OK
WriteX 10282 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10283 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10283 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10283 8192 4096 4096 NT_STATUS_OK
ReadX 10283 12288 4096 4096 NT_STATUS_OK
ReadX 10283 16384 4096 4096 NT_STATUS_OK
ReadX 10283 20480 4096 4096 NT_STATUS_OK
ReadX 10283 24576 4096 4096 NT_STATUS_OK
ReadX 10283 28672 4096 4096 NT_STATUS_OK
ReadX 10283 32768 4096 4096 NT_STATUS_OK
ReadX 10283 36864 4096 4096 NT_STATUS_OK
ReadX 10283 40960 4096 4096 NT_STATUS_OK
ReadX 10283 45056 4096 4096 NT_STATUS_OK
ReadX 10283 49152 4096 4096 NT_STATUS_OK
ReadX 10283 53248 4096 4096 NT_STATUS_OK
ReadX 10283 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10283 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10284 NT_STATUS_OK
Close 10284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Close 10281 NT_STATUS_OK
Close 10282 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10286 NT_STATUS_OK
WriteX 10286 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10286 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10286 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
WriteX 10286 0 57088 57088 NT_STATUS_OK
WriteX 10286 0 4096 4096 NT_STATUS_OK
Flush 10286 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10287 NT_STATUS_OK
SET_FILE_INFORMATION 10287 1004 NT_STATUS_OK
Close 10287 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
WriteX 10286 0 4096 4096 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10290 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10291 NT_STATUS_OK
WriteX 10291 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10291 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10291 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
WriteX 10291 0 51456 51456 NT_STATUS_OK
WriteX 10291 0 4096 4096 NT_STATUS_OK
Flush 10291 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
WriteX 10291 0 4096 4096 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10293 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10295 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10300 NT_STATUS_OK
WriteX 10300 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 258 NT_STATUS_OK
WriteX 10300 0 53077 53077 NT_STATUS_OK
Close 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10301 NT_STATUS_OK
WriteX 10301 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10301 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10301 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
WriteX 10301 0 65536 65536 NT_STATUS_OK
WriteX 10301 65536 1856 1856 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Flush 10301 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10303 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10305 NT_STATUS_OK
ReadX 10305 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10307 NT_STATUS_OK
Close 10307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10310 NT_STATUS_OK
WriteX 10310 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10310 258 NT_STATUS_OK
WriteX 10310 0 7983 7983 NT_STATUS_OK
Close 10310 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10312 NT_STATUS_OK
Close 10312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10315 NT_STATUS_OK
WriteX 10315 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10315 258 NT_STATUS_OK
WriteX 10315 0 65536 65536 NT_STATUS_OK
WriteX 10315 65536 65536 65536 NT_STATUS_OK
WriteX 10315 131072 65536 65536 NT_STATUS_OK
WriteX 10315 196608 65536 65536 NT_STATUS_OK
WriteX 10315 262144 65536 65536 NT_STATUS_OK
WriteX 10315 327680 65536 65536 NT_STATUS_OK
WriteX 10315 393216 65536 65536 NT_STATUS_OK
WriteX 10315 458752 46731 46731 NT_STATUS_OK
Close 10315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10316 NT_STATUS_OK
WriteX 10316 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10305 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
WriteX 10316 0 65536 65536 NT_STATUS_OK
WriteX 10316 65536 22848 22848 NT_STATUS_OK
WriteX 10316 0 4096 4096 NT_STATUS_OK
Flush 10316 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10316 1004 NT_STATUS_OK
WriteX 10316 0 4096 4096 NT_STATUS_OK
Close 10316 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10318 NT_STATUS_OK
Close 10318 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10320 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10321 NT_STATUS_OK
ReadX 10321 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10321 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10321 1004 NT_STATUS_OK
ReadX 10321 8192 4096 4096 NT_STATUS_OK
ReadX 10321 12288 4096 4096 NT_STATUS_OK
ReadX 10321 16384 4096 4096 NT_STATUS_OK
ReadX 10321 20480 4096 4096 NT_STATUS_OK
ReadX 10321 24576 4096 4096 NT_STATUS_OK
ReadX 10321 28672 4096 4096 NT_STATUS_OK
ReadX 10321 32768 4096 4096 NT_STATUS_OK
ReadX 10321 36864 4096 4096 NT_STATUS_OK
ReadX 10321 40960 4096 4096 NT_STATUS_OK
ReadX 10321 45056 4096 4096 NT_STATUS_OK
ReadX 10321 49152 4096 4096 NT_STATUS_OK
ReadX 10321 53248 4096 4096 NT_STATUS_OK
ReadX 10321 57344 4096 4096 NT_STATUS_OK
ReadX 10321 61440 4096 4096 NT_STATUS_OK
ReadX 10321 65536 4096 4096 NT_STATUS_OK
ReadX 10321 69632 4096 4096 NT_STATUS_OK
ReadX 10321 73728 4096 4096 NT_STATUS_OK
ReadX 10321 77824 4096 4096 NT_STATUS_OK
ReadX 10321 81920 4096 4096 NT_STATUS_OK
ReadX 10321 86016 4096 4096 NT_STATUS_OK
ReadX 10321 90112 4096 4096 NT_STATUS_OK
ReadX 10321 94208 4096 4096 NT_STATUS_OK
ReadX 10321 98304 4096 4096 NT_STATUS_OK
ReadX 10321 102400 4096 4096 NT_STATUS_OK
ReadX 10321 106496 4096 4096 NT_STATUS_OK
ReadX 10321 110592 4096 4096 NT_STATUS_OK
ReadX 10321 114688 4096 4096 NT_STATUS_OK
ReadX 10321 118784 4096 4096 NT_STATUS_OK
ReadX 10321 122880 4096 4096 NT_STATUS_OK
ReadX 10321 126976 4096 4096 NT_STATUS_OK
ReadX 10321 131072 4096 4096 NT_STATUS_OK
ReadX 10321 135168 4096 4096 NT_STATUS_OK
ReadX 10321 139264 4096 4096 NT_STATUS_OK
ReadX 10321 143360 4096 4096 NT_STATUS_OK
ReadX 10321 147456 4096 4096 NT_STATUS_OK
ReadX 10321 151552 4096 4096 NT_STATUS_OK
ReadX 10321 155648 4096 4096 NT_STATUS_OK
ReadX 10321 159744 4096 4096 NT_STATUS_OK
ReadX 10321 163840 4096 4096 NT_STATUS_OK
ReadX 10321 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10321 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10322 NT_STATUS_OK
Close 10322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10320 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10324 NT_STATUS_OK
WriteX 10324 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 258 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10325 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
Close 10325 NT_STATUS_OK
WriteX 10324 0 42388 42388 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10326 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
ReadX 10328 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10329 NT_STATUS_OK
WriteX 10329 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10329 258 NT_STATUS_OK
SET_FILE_INFORMATION 10329 1004 NT_STATUS_OK
WriteX 10329 0 42652 42652 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10331 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 4096 4096 NT_STATUS_OK
ReadX 10333 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10335 NT_STATUS_OK
Close 10335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10338 NT_STATUS_OK
WriteX 10338 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 258 NT_STATUS_OK
WriteX 10338 0 65536 65536 NT_STATUS_OK
WriteX 10338 65536 49 49 NT_STATUS_OK
Close 10338 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 61440 61440 NT_STATUS_OK
ReadX 10339 61440 4096 4096 NT_STATUS_OK
ReadX 10339 65536 61440 61440 NT_STATUS_OK
ReadX 10339 126976 4096 4096 NT_STATUS_OK
ReadX 10339 131072 61440 61440 NT_STATUS_OK
ReadX 10339 192512 4096 4096 NT_STATUS_OK
ReadX 10339 196608 61440 61440 NT_STATUS_OK
ReadX 10339 258048 4096 4096 NT_STATUS_OK
ReadX 10339 262144 61440 61440 NT_STATUS_OK
ReadX 10339 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10340 NT_STATUS_OK
ReadX 10340 0 61440 61440 NT_STATUS_OK
ReadX 10340 61440 4096 4096 NT_STATUS_OK
ReadX 10340 65536 61440 61440 NT_STATUS_OK
ReadX 10340 126976 4096 4096 NT_STATUS_OK
ReadX 10340 131072 61440 61440 NT_STATUS_OK
ReadX 10340 192512 4096 4096 NT_STATUS_OK
ReadX 10340 196608 61440 61440 NT_STATUS_OK
ReadX 10340 258048 4096 4096 NT_STATUS_OK
ReadX 10340 262144 61440 61440 NT_STATUS_OK
ReadX 10340 323584 4096 4096 NT_STATUS_OK
ReadX 10340 327680 61440 61440 NT_STATUS_OK
ReadX 10340 389120 4096 4096 NT_STATUS_OK
ReadX 10340 393216 61440 61440 NT_STATUS_OK
ReadX 10340 454656 4096 4096 NT_STATUS_OK
ReadX 10340 458752 61440 61440 NT_STATUS_OK
ReadX 10340 520192 4096 4096 NT_STATUS_OK
ReadX 10340 524288 61440 61440 NT_STATUS_OK
ReadX 10340 585728 4096 4096 NT_STATUS_OK
ReadX 10340 589824 61440 61440 NT_STATUS_OK
ReadX 10340 651264 4096 4096 NT_STATUS_OK
ReadX 10340 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 61440 61440 NT_STATUS_OK
ReadX 10341 61440 4096 4096 NT_STATUS_OK
ReadX 10341 65536 61440 61440 NT_STATUS_OK
ReadX 10341 126976 4096 4096 NT_STATUS_OK
ReadX 10341 131072 61440 61440 NT_STATUS_OK
ReadX 10341 192512 4096 4096 NT_STATUS_OK
ReadX 10341 196608 61440 61440 NT_STATUS_OK
ReadX 10341 258048 4096 4096 NT_STATUS_OK
ReadX 10341 262144 61440 61440 NT_STATUS_OK
ReadX 10341 323584 4096 4096 NT_STATUS_OK
ReadX 10341 327680 61440 61440 NT_STATUS_OK
ReadX 10341 389120 4096 4096 NT_STATUS_OK
ReadX 10341 393216 61440 61440 NT_STATUS_OK
ReadX 10341 454656 4096 4096 NT_STATUS_OK
ReadX 10341 458752 61440 61440 NT_STATUS_OK
ReadX 10341 520192 4096 4096 NT_STATUS_OK
ReadX 10341 524288 61440 61440 NT_STATUS_OK
ReadX 10341 585728 4096 4096 NT_STATUS_OK
ReadX 10341 589824 61440 61440 NT_STATUS_OK
ReadX 10341 651264 4096 4096 NT_STATUS_OK
ReadX 10341 655360 61440 61440 NT_STATUS_OK
ReadX 10341 716800 4096 4096 NT_STATUS_OK
ReadX 10341 720896 61440 61440 NT_STATUS_OK
ReadX 10341 782336 4096 4096 NT_STATUS_OK
ReadX 10341 786432 61440 61440 NT_STATUS_OK
ReadX 10341 847872 4096 4096 NT_STATUS_OK
ReadX 10341 851968 61440 61440 NT_STATUS_OK
ReadX 10341 913408 4096 4096 NT_STATUS_OK
ReadX 10341 917504 61440 61440 NT_STATUS_OK
ReadX 10341 978944 4096 4096 NT_STATUS_OK
ReadX 10341 983040 61440 61440 NT_STATUS_OK
ReadX 10341 1044480 4096 4096 NT_STATUS_OK
ReadX 10341 1048576 61440 61440 NT_STATUS_OK
ReadX 10341 1110016 4096 4096 NT_STATUS_OK
ReadX 10341 1114112 61440 61440 NT_STATUS_OK
ReadX 10341 1175552 4096 4096 NT_STATUS_OK
ReadX 10341 1179648 61440 61440 NT_STATUS_OK
ReadX 10341 1241088 4096 4096 NT_STATUS_OK
ReadX 10341 1245184 61440 61440 NT_STATUS_OK
ReadX 10341 1306624 4096 4096 NT_STATUS_OK
ReadX 10341 1310720 61440 61440 NT_STATUS_OK
ReadX 10341 1372160 4096 4096 NT_STATUS_OK
ReadX 10341 1376256 61440 61440 NT_STATUS_OK
ReadX 10341 1437696 4096 4096 NT_STATUS_OK
ReadX 10341 1441792 61440 61440 NT_STATUS_OK
ReadX 10341 1503232 4096 4096 NT_STATUS_OK
ReadX 10341 1507328 61440 61440 NT_STATUS_OK
ReadX 10341 1568768 4096 4096 NT_STATUS_OK
ReadX 10341 1572864 61440 61440 NT_STATUS_OK
ReadX 10341 1634304 4096 4096 NT_STATUS_OK
ReadX 10341 1638400 61440 61440 NT_STATUS_OK
ReadX 10341 1699840 4096 4096 NT_STATUS_OK
ReadX 10341 1703936 61440 61440 NT_STATUS_OK
ReadX 10341 1765376 4096 4096 NT_STATUS_OK
ReadX 10341 1769472 61440 61440 NT_STATUS_OK
ReadX 10341 1830912 4096 4096 NT_STATUS_OK
ReadX 10341 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10343 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10343 1005 NT_STATUS_OK
ReadX 10343 2156 24 24 NT_STATUS_OK
ReadX 10343 2139 276 276 NT_STATUS_OK
ReadX 10343 2136 14 14 NT_STATUS_OK
ReadX 10343 2136 7 7 NT_STATUS_OK
ReadX 10343 2138 12 12 NT_STATUS_OK
ReadX 10343 2137 8 8 NT_STATUS_OK
ReadX 10343 2135 15 15 NT_STATUS_OK
ReadX 10343 0 16 16 NT_STATUS_OK
ReadX 10343 16 2048 2048 NT_STATUS_OK
ReadX 10343 2064 2048 2048 NT_STATUS_OK
ReadX 10343 257 2048 2048 NT_STATUS_OK
ReadX 10343 385 2048 2048 NT_STATUS_OK
ReadX 10343 513 2048 2048 NT_STATUS_OK
ReadX 10343 641 2048 2048 NT_STATUS_OK
ReadX 10343 769 2048 2048 NT_STATUS_OK
ReadX 10343 897 2048 2048 NT_STATUS_OK
ReadX 10343 1025 2048 2048 NT_STATUS_OK
ReadX 10343 1153 2048 2048 NT_STATUS_OK
ReadX 10343 1281 2048 2048 NT_STATUS_OK
ReadX 10343 1409 2048 2048 NT_STATUS_OK
ReadX 10343 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10345 NT_STATUS_OK
Close 10345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10348 NT_STATUS_OK
WriteX 10348 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10348 258 NT_STATUS_OK
WriteX 10348 0 10575 10575 NT_STATUS_OK
Flush 10348 NT_STATUS_OK
Close 10348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10349 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10351 NT_STATUS_OK
ReadX 10351 0 4096 4096 NT_STATUS_OK
Close 10343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10353 NT_STATUS_OK
LockX 10353 2147483538 1 NT_STATUS_OK
UnlockX 10353 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1005 NT_STATUS_OK
ReadX 10353 0 512 512 NT_STATUS_OK
ReadX 10353 512 512 512 NT_STATUS_OK
ReadX 10353 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1004 NT_STATUS_OK
Close 10353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10354 NT_STATUS_OK
QUERY_FILE_INFORMATION 10354 1005 NT_STATUS_OK
ReadX 10354 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10355 NT_STATUS_OK
LockX 10355 2147483538 1 NT_STATUS_OK
UnlockX 10355 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10355 1005 NT_STATUS_OK
ReadX 10355 0 512 512 NT_STATUS_OK
ReadX 10355 512 512 512 NT_STATUS_OK
ReadX 10355 1024 512 512 NT_STATUS_OK
ReadX 10355 288 20 20 NT_STATUS_OK
ReadX 10355 308 2084 2084 NT_STATUS_OK
ReadX 10355 388 2084 2084 NT_STATUS_OK
ReadX 10355 388 2084 2084 NT_STATUS_OK
ReadX 10342 2157 1386 1386 NT_STATUS_OK
ReadX 10355 2472 399 399 NT_STATUS_OK
ReadX 10355 3072 1536 1536 NT_STATUS_OK
ReadX 10355 544 149 149 NT_STATUS_OK
ReadX 10355 693 485 485 NT_STATUS_OK
Close 10355 NT_STATUS_OK
ReadX 10342 2157 4096 4096 NT_STATUS_OK
ReadX 10342 6253 4096 4096 NT_STATUS_OK
ReadX 10342 10349 4096 4096 NT_STATUS_OK
ReadX 10342 14445 4096 4096 NT_STATUS_OK
ReadX 10342 18541 4096 4096 NT_STATUS_OK
ReadX 10342 22637 256 256 NT_STATUS_OK
ReadX 10342 22893 4096 4096 NT_STATUS_OK
ReadX 10342 26989 4096 4096 NT_STATUS_OK
ReadX 10342 31085 4096 4096 NT_STATUS_OK
ReadX 10342 35181 4096 4096 NT_STATUS_OK
ReadX 10342 39277 4096 4096 NT_STATUS_OK
ReadX 10342 43373 4096 4096 NT_STATUS_OK
ReadX 10342 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10342 2157 1024 1024 NT_STATUS_OK
ReadX 10342 1667 4688 4688 NT_STATUS_OK
ReadX 10342 6355 3516 3516 NT_STATUS_OK
ReadX 10342 9871 16384 16384 NT_STATUS_OK
ReadX 10342 26255 3771 3771 NT_STATUS_OK
ReadX 10342 30026 2048 2048 NT_STATUS_OK
ReadX 10342 32074 1024 1024 NT_STATUS_OK
ReadX 10342 33098 6652 6652 NT_STATUS_OK
ReadX 10342 39750 16384 16384 NT_STATUS_OK
ReadX 10342 56134 10496 10496 NT_STATUS_OK
ReadX 10342 66630 1784 1784 NT_STATUS_OK
ReadX 10342 68414 90 90 NT_STATUS_OK
ReadX 10342 68504 273 273 NT_STATUS_OK
ReadX 10342 68777 1600 1600 NT_STATUS_OK
ReadX 10342 70377 640 640 NT_STATUS_OK
ReadX 10342 71017 1280 1280 NT_STATUS_OK
ReadX 10342 72297 8464 8464 NT_STATUS_OK
ReadX 10342 80761 158 158 NT_STATUS_OK
ReadX 10342 80919 912 912 NT_STATUS_OK
ReadX 10342 81831 1980 1980 NT_STATUS_OK
ReadX 10342 83811 2256 2256 NT_STATUS_OK
ReadX 10342 86067 400 400 NT_STATUS_OK
ReadX 10342 86467 252 252 NT_STATUS_OK
ReadX 10342 86719 42 42 NT_STATUS_OK
ReadX 10342 86761 725 725 NT_STATUS_OK
ReadX 10342 2009 512 512 NT_STATUS_OK
ReadX 10342 3895 9 9 NT_STATUS_OK
ReadX 10342 3781 46 46 NT_STATUS_OK
ReadX 10342 4059 92 92 NT_STATUS_OK
ReadX 10342 3781 92 92 NT_STATUS_OK
ReadX 10342 3986 184 184 NT_STATUS_OK
ReadX 10342 3987 16384 16384 NT_STATUS_OK
ReadX 10342 3902 16384 16384 NT_STATUS_OK
ReadX 10342 3781 10240 10240 NT_STATUS_OK
ReadX 10342 3821 16384 16384 NT_STATUS_OK
ReadX 10342 3891 935 935 NT_STATUS_OK
ReadX 10342 4060 10240 10240 NT_STATUS_OK
ReadX 10342 4059 184 184 NT_STATUS_OK
ReadX 10342 256 184 184 NT_STATUS_OK
ReadX 10342 256 1026 1026 NT_STATUS_OK
ReadX 10342 3901 326 326 NT_STATUS_OK
ReadX 10342 3899 652 652 NT_STATUS_OK
ReadX 10342 256 2 2 NT_STATUS_OK
ReadX 10342 258 4948 4948 NT_STATUS_OK
Close 10342 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10360 NT_STATUS_OK
WriteX 10360 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10360 258 NT_STATUS_OK
WriteX 10360 0 65536 65536 NT_STATUS_OK
WriteX 10360 65536 65536 65536 NT_STATUS_OK
WriteX 10360 131072 65536 65536 NT_STATUS_OK
WriteX 10360 196608 65536 65536 NT_STATUS_OK
WriteX 10360 262144 65536 65536 NT_STATUS_OK
WriteX 10360 327680 65536 65536 NT_STATUS_OK
WriteX 10360 393216 65536 65536 NT_STATUS_OK
WriteX 10360 458752 65536 65536 NT_STATUS_OK
WriteX 10360 524288 65536 65536 NT_STATUS_OK
WriteX 10360 589824 35257 35257 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10362 NT_STATUS_OK
Close 10362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10365 NT_STATUS_OK
WriteX 10365 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10365 258 NT_STATUS_OK
WriteX 10365 0 65536 65536 NT_STATUS_OK
WriteX 10365 65536 65536 65536 NT_STATUS_OK
WriteX 10365 131072 65536 65536 NT_STATUS_OK
WriteX 10365 196608 65536 65536 NT_STATUS_OK
WriteX 10365 262144 65536 65536 NT_STATUS_OK
WriteX 10365 327680 65536 65536 NT_STATUS_OK
WriteX 10365 393216 65536 65536 NT_STATUS_OK
WriteX 10365 458752 65536 65536 NT_STATUS_OK
WriteX 10365 524288 65536 65536 NT_STATUS_OK
WriteX 10365 589824 57598 57598 NT_STATUS_OK
Close 10365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10367 NT_STATUS_OK
WriteX 10367 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10367 258 NT_STATUS_OK
WriteX 10367 0 12543 12543 NT_STATUS_OK
Flush 10367 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10369 NT_STATUS_OK
Close 10369 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10373 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1005 NT_STATUS_OK
ReadX 10373 1938 24 24 NT_STATUS_OK
ReadX 10373 1920 276 276 NT_STATUS_OK
ReadX 10373 1918 14 14 NT_STATUS_OK
ReadX 10373 1918 7 7 NT_STATUS_OK
ReadX 10373 1919 12 12 NT_STATUS_OK
ReadX 10373 1919 8 8 NT_STATUS_OK
ReadX 10373 1917 15 15 NT_STATUS_OK
ReadX 10373 0 16 16 NT_STATUS_OK
ReadX 10373 16 2048 2048 NT_STATUS_OK
ReadX 10373 2064 2048 2048 NT_STATUS_OK
ReadX 10373 257 2048 2048 NT_STATUS_OK
ReadX 10373 385 2048 2048 NT_STATUS_OK
ReadX 10373 513 2048 2048 NT_STATUS_OK
ReadX 10373 641 2048 2048 NT_STATUS_OK
ReadX 10373 769 2048 2048 NT_STATUS_OK
ReadX 10373 897 2048 2048 NT_STATUS_OK
ReadX 10373 1025 2048 2048 NT_STATUS_OK
ReadX 10373 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10375 NT_STATUS_OK
Close 10375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10378 NT_STATUS_OK
WriteX 10378 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10378 258 NT_STATUS_OK
WriteX 10378 0 11588 11588 NT_STATUS_OK
Flush 10378 NT_STATUS_OK
Close 10378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 0 4096 4096 NT_STATUS_OK
Close 10373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10383 NT_STATUS_OK
WriteX 10383 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10383 258 NT_STATUS_OK
WriteX 10383 0 11615 11615 NT_STATUS_OK
Flush 10383 NT_STATUS_OK
Close 10383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10387 NT_STATUS_OK
ReadX 10387 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10389 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10392 NT_STATUS_OK
WriteX 10392 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10392 258 NT_STATUS_OK
WriteX 10392 0 65536 65536 NT_STATUS_OK
WriteX 10392 65536 16050 16050 NT_STATUS_OK
Close 10392 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10372 1939 64 64 NT_STATUS_OK
ReadX 10372 128 248 248 NT_STATUS_OK
ReadX 10372 128 568 568 NT_STATUS_OK
ReadX 10372 3872 1536 1536 NT_STATUS_OK
ReadX 10372 3456 2560 2560 NT_STATUS_OK
ReadX 10372 3136 512 512 NT_STATUS_OK
ReadX 10372 2880 4096 4096 NT_STATUS_OK
ReadX 10372 3264 3072 3072 NT_STATUS_OK
ReadX 10372 320 4096 4096 NT_STATUS_OK
ReadX 10372 1024 4096 4096 NT_STATUS_OK
ReadX 10372 3616 4096 4096 NT_STATUS_OK
ReadX 10372 1939 64 64 NT_STATUS_OK
ReadX 10372 128 248 248 NT_STATUS_OK
ReadX 10372 128 608 608 NT_STATUS_OK
ReadX 10372 2858 1024 1024 NT_STATUS_OK
ReadX 10372 2810 4096 4096 NT_STATUS_OK
ReadX 10372 2826 4096 4096 NT_STATUS_OK
ReadX 10372 2580 2048 2048 NT_STATUS_OK
ReadX 10372 2800 2560 2560 NT_STATUS_OK
ReadX 10372 2100 4096 4096 NT_STATUS_OK
ReadX 10372 2084 4096 4096 NT_STATUS_OK
ReadX 10372 868 4096 4096 NT_STATUS_OK
ReadX 10372 2324 4096 4096 NT_STATUS_OK
ReadX 10372 884 4096 4096 NT_STATUS_OK
ReadX 10372 2604 1024 1024 NT_STATUS_OK
ReadX 10372 580 4096 4096 NT_STATUS_OK
ReadX 10372 596 4096 4096 NT_STATUS_OK
ReadX 10372 2752 4096 4096 NT_STATUS_OK
ReadX 10372 2842 1024 1024 NT_STATUS_OK
ReadX 10372 660 4096 4096 NT_STATUS_OK
ReadX 10372 2720 4096 4096 NT_STATUS_OK
ReadX 10372 2736 4096 4096 NT_STATUS_OK
ReadX 10372 628 4096 4096 NT_STATUS_OK
ReadX 10372 2704 4096 4096 NT_STATUS_OK
ReadX 10372 1556 4096 4096 NT_STATUS_OK
ReadX 10372 576 4096 4096 NT_STATUS_OK
ReadX 10372 3168 1536 1536 NT_STATUS_OK
ReadX 10372 832 4096 4096 NT_STATUS_OK
ReadX 10372 1088 4096 4096 NT_STATUS_OK
ReadX 10372 1344 4096 4096 NT_STATUS_OK
ReadX 10372 1600 4096 4096 NT_STATUS_OK
ReadX 10372 1856 4096 4096 NT_STATUS_OK
ReadX 10372 2112 4096 4096 NT_STATUS_OK
ReadX 10372 1892 4096 4096 NT_STATUS_OK
ReadX 10372 820 4096 4096 NT_STATUS_OK
ReadX 10372 788 4096 4096 NT_STATUS_OK
ReadX 10372 1604 4096 4096 NT_STATUS_OK
ReadX 10372 3648 4096 4096 NT_STATUS_OK
ReadX 10372 2608 4096 4096 NT_STATUS_OK
ReadX 10372 548 4096 4096 NT_STATUS_OK
ReadX 10372 740 4096 4096 NT_STATUS_OK
ReadX 10372 1344 4096 4096 NT_STATUS_OK
ReadX 10372 3392 4096 4096 NT_STATUS_OK
ReadX 10372 3904 4096 4096 NT_STATUS_OK
ReadX 10372 644 4096 4096 NT_STATUS_OK
ReadX 10372 676 4096 4096 NT_STATUS_OK
ReadX 10372 2688 4096 4096 NT_STATUS_OK
ReadX 10372 320 4096 4096 NT_STATUS_OK
ReadX 10372 900 4096 4096 NT_STATUS_OK
ReadX 10372 1908 4096 4096 NT_STATUS_OK
ReadX 10372 852 4096 4096 NT_STATUS_OK
ReadX 10372 724 4096 4096 NT_STATUS_OK
ReadX 10372 2292 4096 4096 NT_STATUS_OK
ReadX 10372 612 4096 4096 NT_STATUS_OK
ReadX 10372 388 4096 4096 NT_STATUS_OK
ReadX 10372 2368 4096 4096 NT_STATUS_OK
ReadX 10372 2624 4096 4096 NT_STATUS_OK
ReadX 10372 500 4096 4096 NT_STATUS_OK
ReadX 10372 356 4096 4096 NT_STATUS_OK
ReadX 10372 1024 4096 4096 NT_STATUS_OK
ReadX 10372 576 4096 4096 NT_STATUS_OK
ReadX 10372 340 4096 4096 NT_STATUS_OK
ReadX 10372 420 4096 4096 NT_STATUS_OK
ReadX 10372 1600 4096 4096 NT_STATUS_OK
ReadX 10372 404 4096 4096 NT_STATUS_OK
ReadX 10372 1428 4096 4096 NT_STATUS_OK
ReadX 10372 2656 4096 4096 NT_STATUS_OK
ReadX 10372 2624 4096 4096 NT_STATUS_OK
ReadX 10372 452 4096 4096 NT_STATUS_OK
ReadX 10372 692 4096 4096 NT_STATUS_OK
ReadX 10372 564 4096 4096 NT_STATUS_OK
ReadX 10372 372 4096 4096 NT_STATUS_OK
ReadX 10372 468 4096 4096 NT_STATUS_OK
ReadX 10372 484 4096 4096 NT_STATUS_OK
ReadX 10372 1088 4096 4096 NT_STATUS_OK
ReadX 10372 1924 4096 4096 NT_STATUS_OK
ReadX 10372 2768 4096 4096 NT_STATUS_OK
ReadX 10372 832 4096 4096 NT_STATUS_OK
ReadX 10372 836 4096 4096 NT_STATUS_OK
ReadX 10372 1856 4096 4096 NT_STATUS_OK
ReadX 10372 2640 4096 4096 NT_STATUS_OK
ReadX 10372 436 4096 4096 NT_STATUS_OK
ReadX 10372 1828 4096 4096 NT_STATUS_OK
ReadX 10372 804 4096 4096 NT_STATUS_OK
ReadX 10372 1860 4096 4096 NT_STATUS_OK
ReadX 10372 1812 4096 4096 NT_STATUS_OK
ReadX 10372 756 4096 4096 NT_STATUS_OK
ReadX 10372 1636 4096 4096 NT_STATUS_OK
ReadX 10372 772 4096 4096 NT_STATUS_OK
ReadX 10372 2036 4096 4096 NT_STATUS_OK
ReadX 10372 1220 4096 4096 NT_STATUS_OK
ReadX 10372 1652 4096 4096 NT_STATUS_OK
ReadX 10372 2588 4096 4096 NT_STATUS_OK
ReadX 10372 916 4096 4096 NT_STATUS_OK
ReadX 10372 260 4096 4096 NT_STATUS_OK
ReadX 10372 932 4096 4096 NT_STATUS_OK
ReadX 10372 2624 4096 4096 NT_STATUS_OK
ReadX 10372 308 4096 4096 NT_STATUS_OK
ReadX 10372 292 4096 4096 NT_STATUS_OK
ReadX 10372 1140 4096 4096 NT_STATUS_OK
ReadX 10372 276 4096 4096 NT_STATUS_OK
ReadX 10372 2020 4096 4096 NT_STATUS_OK
ReadX 10372 2880 4096 4096 NT_STATUS_OK
ReadX 10372 516 4096 4096 NT_STATUS_OK
ReadX 10372 1844 4096 4096 NT_STATUS_OK
ReadX 10372 1124 4096 4096 NT_STATUS_OK
ReadX 10372 3136 4096 4096 NT_STATUS_OK
ReadX 10372 324 4096 4096 NT_STATUS_OK
ReadX 10372 1156 4096 4096 NT_STATUS_OK
ReadX 10372 1172 4096 4096 NT_STATUS_OK
ReadX 10372 2112 4096 4096 NT_STATUS_OK
ReadX 10372 2368 4096 4096 NT_STATUS_OK
ReadX 10372 964 4096 4096 NT_STATUS_OK
ReadX 10372 980 4096 4096 NT_STATUS_OK
ReadX 10372 1012 4096 4096 NT_STATUS_OK
ReadX 10372 532 4096 4096 NT_STATUS_OK
ReadX 10372 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10372 1620 4096 4096 NT_STATUS_OK
ReadX 10372 1604 4096 4096 NT_STATUS_OK
ReadX 10372 2116 4096 4096 NT_STATUS_OK
ReadX 10372 2132 4096 4096 NT_STATUS_OK
ReadX 10372 2148 4096 4096 NT_STATUS_OK
ReadX 10372 2276 4096 4096 NT_STATUS_OK
ReadX 10372 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10397 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
WriteX 10397 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10397 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10354 1004 NT_STATUS_OK
Close 10354 NT_STATUS_OK
WriteX 10397 0 65536 65536 NT_STATUS_OK
WriteX 10397 65536 64850 64850 NT_STATUS_OK
Close 10397 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10399 NT_STATUS_OK
WriteX 10399 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10399 258 NT_STATUS_OK
ReadX 10372 2068 4096 4096 NT_STATUS_OK
ReadX 10372 1588 4096 4096 NT_STATUS_OK
ReadX 10372 1572 4096 4096 NT_STATUS_OK
WriteX 10399 0 18630 18630 NT_STATUS_OK
Flush 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10401 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10372 612 4096 4096 NT_STATUS_OK
ReadX 10372 564 4096 4096 NT_STATUS_OK
ReadX 10372 1876 4096 4096 NT_STATUS_OK
ReadX 10372 628 4096 4096 NT_STATUS_OK
ReadX 10372 740 4096 4096 NT_STATUS_OK
ReadX 10372 724 4096 4096 NT_STATUS_OK
ReadX 10372 644 4096 4096 NT_STATUS_OK
ReadX 10372 2324 4096 4096 NT_STATUS_OK
ReadX 10372 660 4096 4096 NT_STATUS_OK
ReadX 10372 852 4096 4096 NT_STATUS_OK
ReadX 10372 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10372 2368 4096 4096 NT_STATUS_OK
ReadX 10372 1024 4096 4096 NT_STATUS_OK
ReadX 10372 320 4096 4096 NT_STATUS_OK
ReadX 10372 580 4096 4096 NT_STATUS_OK
ReadX 10372 3136 512 512 NT_STATUS_OK
ReadX 10372 2880 4096 4096 NT_STATUS_OK
Close 10372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 61440 4096 4096 NT_STATUS_OK
ReadX 10404 126976 4096 4096 NT_STATUS_OK
WriteX 10404 0 65536 65536 NT_STATUS_OK
WriteX 10404 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 61440 4096 4096 NT_STATUS_OK
ReadX 10405 126976 4096 4096 NT_STATUS_OK
ReadX 10405 192512 4096 4096 NT_STATUS_OK
ReadX 10405 258048 4096 4096 NT_STATUS_OK
WriteX 10405 0 65536 65536 NT_STATUS_OK
WriteX 10405 65536 65536 65536 NT_STATUS_OK
WriteX 10405 131072 65536 65536 NT_STATUS_OK
WriteX 10405 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 61440 4096 4096 NT_STATUS_OK
ReadX 10406 126976 4096 4096 NT_STATUS_OK
ReadX 10406 192512 4096 4096 NT_STATUS_OK
ReadX 10406 258048 4096 4096 NT_STATUS_OK
ReadX 10406 323584 4096 4096 NT_STATUS_OK
ReadX 10406 389120 4096 4096 NT_STATUS_OK
ReadX 10406 454656 4096 4096 NT_STATUS_OK
ReadX 10406 520192 4096 4096 NT_STATUS_OK
WriteX 10406 0 65536 65536 NT_STATUS_OK
WriteX 10406 65536 65536 65536 NT_STATUS_OK
WriteX 10406 131072 65536 65536 NT_STATUS_OK
WriteX 10406 196608 65536 65536 NT_STATUS_OK
WriteX 10406 262144 65536 65536 NT_STATUS_OK
WriteX 10406 327680 65536 65536 NT_STATUS_OK
WriteX 10406 393216 65536 65536 NT_STATUS_OK
WriteX 10406 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10407 NT_STATUS_OK
ReadX 10407 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10409 NT_STATUS_OK
WriteX 10409 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10409 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10407 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10407 0 8192 8192 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10411 NT_STATUS_OK
Close 10411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Close 10405 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10414 NT_STATUS_OK
WriteX 10414 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10414 258 NT_STATUS_OK
WriteX 10414 0 62591 62591 NT_STATUS_OK
Close 10414 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10419 NT_STATUS_OK
WriteX 10419 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10419 258 NT_STATUS_OK
WriteX 10419 0 10845 10845 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10421 NT_STATUS_OK
Close 10421 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10424 NT_STATUS_OK
WriteX 10424 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10424 258 NT_STATUS_OK
WriteX 10424 0 30118 30118 NT_STATUS_OK
Close 10424 NT_STATUS_OK
WriteX 10407 0 4096 4096 NT_STATUS_OK
WriteX 10409 0 64 64 NT_STATUS_OK
Close 10409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10407 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 61440 61440 NT_STATUS_OK
ReadX 10426 61440 4096 4096 NT_STATUS_OK
ReadX 10426 65536 61440 61440 NT_STATUS_OK
ReadX 10426 126976 4096 4096 NT_STATUS_OK
ReadX 10426 131072 61440 61440 NT_STATUS_OK
ReadX 10426 192512 4096 4096 NT_STATUS_OK
ReadX 10426 196608 61440 61440 NT_STATUS_OK
ReadX 10426 258048 4096 4096 NT_STATUS_OK
ReadX 10426 262144 61440 61440 NT_STATUS_OK
ReadX 10426 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10427 NT_STATUS_OK
ReadX 10427 0 61440 61440 NT_STATUS_OK
ReadX 10427 61440 4096 4096 NT_STATUS_OK
ReadX 10427 65536 61440 61440 NT_STATUS_OK
ReadX 10427 126976 4096 4096 NT_STATUS_OK
ReadX 10427 131072 61440 61440 NT_STATUS_OK
ReadX 10427 192512 4096 4096 NT_STATUS_OK
ReadX 10427 196608 61440 61440 NT_STATUS_OK
ReadX 10427 258048 4096 4096 NT_STATUS_OK
ReadX 10427 262144 61440 61440 NT_STATUS_OK
ReadX 10427 323584 4096 4096 NT_STATUS_OK
ReadX 10427 327680 61440 61440 NT_STATUS_OK
ReadX 10427 389120 4096 4096 NT_STATUS_OK
ReadX 10427 393216 61440 61440 NT_STATUS_OK
ReadX 10427 454656 4096 4096 NT_STATUS_OK
ReadX 10427 458752 61440 61440 NT_STATUS_OK
ReadX 10427 520192 4096 4096 NT_STATUS_OK
ReadX 10427 524288 61440 61440 NT_STATUS_OK
ReadX 10427 585728 4096 4096 NT_STATUS_OK
ReadX 10427 589824 61440 61440 NT_STATUS_OK
ReadX 10427 651264 4096 4096 NT_STATUS_OK
ReadX 10427 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10428 NT_STATUS_OK
ReadX 10428 0 61440 61440 NT_STATUS_OK
ReadX 10428 61440 4096 4096 NT_STATUS_OK
ReadX 10428 65536 61440 61440 NT_STATUS_OK
ReadX 10428 126976 4096 4096 NT_STATUS_OK
ReadX 10428 131072 61440 61440 NT_STATUS_OK
ReadX 10428 192512 4096 4096 NT_STATUS_OK
ReadX 10428 196608 61440 61440 NT_STATUS_OK
ReadX 10428 258048 4096 4096 NT_STATUS_OK
ReadX 10428 262144 61440 61440 NT_STATUS_OK
ReadX 10428 323584 4096 4096 NT_STATUS_OK
ReadX 10428 327680 61440 61440 NT_STATUS_OK
ReadX 10428 389120 4096 4096 NT_STATUS_OK
ReadX 10428 393216 61440 61440 NT_STATUS_OK
ReadX 10428 454656 4096 4096 NT_STATUS_OK
ReadX 10428 458752 61440 61440 NT_STATUS_OK
ReadX 10428 520192 4096 4096 NT_STATUS_OK
ReadX 10428 524288 61440 61440 NT_STATUS_OK
ReadX 10428 585728 4096 4096 NT_STATUS_OK
ReadX 10428 589824 61440 61440 NT_STATUS_OK
ReadX 10428 651264 4096 4096 NT_STATUS_OK
ReadX 10428 655360 61440 61440 NT_STATUS_OK
ReadX 10428 716800 4096 4096 NT_STATUS_OK
ReadX 10428 720896 61440 61440 NT_STATUS_OK
ReadX 10428 782336 4096 4096 NT_STATUS_OK
ReadX 10428 786432 61440 61440 NT_STATUS_OK
ReadX 10428 847872 4096 4096 NT_STATUS_OK
ReadX 10428 851968 61440 61440 NT_STATUS_OK
ReadX 10428 913408 4096 4096 NT_STATUS_OK
ReadX 10428 917504 61440 61440 NT_STATUS_OK
ReadX 10428 978944 4096 4096 NT_STATUS_OK
ReadX 10428 983040 61440 61440 NT_STATUS_OK
ReadX 10428 1044480 4096 4096 NT_STATUS_OK
ReadX 10428 1048576 61440 61440 NT_STATUS_OK
ReadX 10428 1110016 4096 4096 NT_STATUS_OK
ReadX 10428 1114112 61440 61440 NT_STATUS_OK
ReadX 10428 1175552 4096 4096 NT_STATUS_OK
ReadX 10428 1179648 61440 61440 NT_STATUS_OK
ReadX 10428 1241088 4096 4096 NT_STATUS_OK
ReadX 10428 1245184 61440 61440 NT_STATUS_OK
ReadX 10428 1306624 4096 4096 NT_STATUS_OK
ReadX 10428 1310720 61440 61440 NT_STATUS_OK
ReadX 10428 1372160 4096 4096 NT_STATUS_OK
ReadX 10428 1376256 61440 61440 NT_STATUS_OK
ReadX 10428 1437696 4096 4096 NT_STATUS_OK
ReadX 10428 1441792 61440 61440 NT_STATUS_OK
ReadX 10428 1503232 4096 4096 NT_STATUS_OK
ReadX 10428 1507328 61440 61440 NT_STATUS_OK
ReadX 10428 1568768 4096 4096 NT_STATUS_OK
ReadX 10428 1572864 61440 61440 NT_STATUS_OK
ReadX 10428 1634304 4096 4096 NT_STATUS_OK
ReadX 10428 1638400 61440 61440 NT_STATUS_OK
ReadX 10428 1699840 4096 4096 NT_STATUS_OK
ReadX 10428 1703936 61440 61440 NT_STATUS_OK
ReadX 10428 1765376 4096 4096 NT_STATUS_OK
ReadX 10428 1769472 61440 61440 NT_STATUS_OK
ReadX 10428 1830912 4096 4096 NT_STATUS_OK
ReadX 10428 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Close 10428 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 4096 4096 NT_STATUS_OK
ReadX 10433 4096 4096 4096 NT_STATUS_OK
ReadX 10433 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10431 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10437 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 8192 8192 NT_STATUS_OK
ReadX 10441 8192 8192 8192 NT_STATUS_OK
ReadX 10441 16384 8192 8192 NT_STATUS_OK
ReadX 10441 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10443 NT_STATUS_OK
Close 10443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10446 NT_STATUS_OK
WriteX 10446 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10446 258 NT_STATUS_OK
WriteX 10446 0 10438 10438 NT_STATUS_OK
Close 10446 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10447 NT_STATUS_OK
Close 10447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10448 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10449 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10450 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10451 NT_STATUS_OK
Close 10451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10452 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10454 NT_STATUS_OK
Close 10454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 4096 4096 NT_STATUS_OK
ReadX 10455 4096 4096 4096 NT_STATUS_OK
ReadX 10455 8192 4096 4096 NT_STATUS_OK
ReadX 10455 12288 8192 8192 NT_STATUS_OK
ReadX 10455 20480 8192 8192 NT_STATUS_OK
ReadX 10455 28672 8192 8192 NT_STATUS_OK
ReadX 10455 36864 8192 8192 NT_STATUS_OK
ReadX 10455 45056 8192 8192 NT_STATUS_OK
ReadX 10455 53248 8192 8192 NT_STATUS_OK
ReadX 10455 61440 8192 8192 NT_STATUS_OK
ReadX 10455 69632 8192 8192 NT_STATUS_OK
ReadX 10455 77824 8192 8192 NT_STATUS_OK
ReadX 10455 86016 8192 8192 NT_STATUS_OK
ReadX 10455 94208 8192 8192 NT_STATUS_OK
ReadX 10455 102400 8192 8192 NT_STATUS_OK
ReadX 10455 110592 8192 8192 NT_STATUS_OK
ReadX 10455 118784 8192 8192 NT_STATUS_OK
ReadX 10455 126976 8192 8192 NT_STATUS_OK
ReadX 10455 135168 8192 8192 NT_STATUS_OK
ReadX 10455 143360 8192 8192 NT_STATUS_OK
ReadX 10455 151552 8192 8192 NT_STATUS_OK
ReadX 10455 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10455 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10457 NT_STATUS_OK
Close 10457 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10460 NT_STATUS_OK
WriteX 10460 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 258 NT_STATUS_OK
WriteX 10460 0 28489 28489 NT_STATUS_OK
Close 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10461 NT_STATUS_OK
Close 10461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10463 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10464 NT_STATUS_OK
Close 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10463 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10467 NT_STATUS_OK
ReadX 10467 0 8192 8192 NT_STATUS_OK
ReadX 10467 8192 8192 8192 NT_STATUS_OK
ReadX 10467 16384 8192 8192 NT_STATUS_OK
ReadX 10467 24576 8192 8192 NT_STATUS_OK
ReadX 10467 32768 16384 16384 NT_STATUS_OK
ReadX 10467 49152 8192 8192 NT_STATUS_OK
ReadX 10467 57344 8192 8192 NT_STATUS_OK
ReadX 10467 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10469 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10467 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10472 NT_STATUS_OK
WriteX 10472 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10472 258 NT_STATUS_OK
WriteX 10472 0 29253 29253 NT_STATUS_OK
Close 10472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10473 NT_STATUS_OK
Close 10473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10476 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10479 NT_STATUS_OK
WriteX 10479 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10479 258 NT_STATUS_OK
WriteX 10479 0 30183 30183 NT_STATUS_OK
Close 10479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10480 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10482 NT_STATUS_OK
WriteX 10482 0 510 510 NT_STATUS_OK
WriteX 10482 510 512 512 NT_STATUS_OK
WriteX 10482 1022 510 510 NT_STATUS_OK
WriteX 10482 1532 510 510 NT_STATUS_OK
WriteX 10482 2042 168 168 NT_STATUS_OK
Close 10482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10483 NT_STATUS_OK
Close 10483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
WriteX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 61440 4096 4096 NT_STATUS_OK
ReadX 10486 126976 4096 4096 NT_STATUS_OK
WriteX 10486 0 65536 65536 NT_STATUS_OK
WriteX 10486 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10487 NT_STATUS_OK
ReadX 10487 61440 4096 4096 NT_STATUS_OK
ReadX 10487 126976 4096 4096 NT_STATUS_OK
ReadX 10487 192512 4096 4096 NT_STATUS_OK
ReadX 10487 258048 4096 4096 NT_STATUS_OK
WriteX 10487 0 65536 65536 NT_STATUS_OK
WriteX 10487 65536 65536 65536 NT_STATUS_OK
WriteX 10487 131072 65536 65536 NT_STATUS_OK
WriteX 10487 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 61440 4096 4096 NT_STATUS_OK
ReadX 10488 126976 4096 4096 NT_STATUS_OK
ReadX 10488 192512 4096 4096 NT_STATUS_OK
ReadX 10488 258048 4096 4096 NT_STATUS_OK
ReadX 10488 323584 4096 4096 NT_STATUS_OK
ReadX 10488 389120 4096 4096 NT_STATUS_OK
ReadX 10488 454656 4096 4096 NT_STATUS_OK
ReadX 10488 520192 4096 4096 NT_STATUS_OK
WriteX 10488 0 65536 65536 NT_STATUS_OK
WriteX 10488 65536 65536 65536 NT_STATUS_OK
WriteX 10488 131072 65536 65536 NT_STATUS_OK
WriteX 10488 196608 65536 65536 NT_STATUS_OK
WriteX 10488 262144 65536 65536 NT_STATUS_OK
WriteX 10488 327680 65536 65536 NT_STATUS_OK
WriteX 10488 393216 65536 65536 NT_STATUS_OK
WriteX 10488 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10486 NT_STATUS_OK
Close 10487 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10491 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10495 NT_STATUS_OK
Close 10495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10504 NT_STATUS_OK
Close 10504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10507 NT_STATUS_OK
Close 10507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10513 NT_STATUS_OK
Close 10513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10523 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10528 NT_STATUS_OK
Close 10528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10533 NT_STATUS_OK
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10538 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10543 NT_STATUS_OK
Close 10543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10548 NT_STATUS_OK
Close 10548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10551 NT_STATUS_OK
Close 10551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10554 NT_STATUS_OK
Close 10554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10557 NT_STATUS_OK
WriteX 10557 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10557 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10557 0 65536 65536 NT_STATUS_OK
WriteX 10557 65536 65536 65536 NT_STATUS_OK
WriteX 10557 131072 65536 65536 NT_STATUS_OK
WriteX 10557 196608 65536 65536 NT_STATUS_OK
WriteX 10557 262144 26634 26634 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10562 NT_STATUS_OK
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10563 NT_STATUS_OK
Close 10563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
Close 10564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
ReadX 10565 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10566 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10570 NT_STATUS_OK
Close 10570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10573 NT_STATUS_OK
Close 10573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10579 NT_STATUS_OK
Close 10579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10582 NT_STATUS_OK
Close 10582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10598 NT_STATUS_OK
Close 10598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10603 NT_STATUS_OK
Close 10603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10608 NT_STATUS_OK
Close 10608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10613 NT_STATUS_OK
Close 10613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10617 NT_STATUS_OK
Close 10617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10622 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10627 NT_STATUS_OK
Close 10627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10632 NT_STATUS_OK
Close 10632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10642 NT_STATUS_OK
Close 10642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10643 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10644 NT_STATUS_OK
ReadX 10644 0 4096 4096 NT_STATUS_OK
Close 10644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 4096 4096 NT_STATUS_OK
Close 10645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10646 NT_STATUS_OK
ReadX 10646 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10658 NT_STATUS_OK
ReadX 10658 0 4096 4096 NT_STATUS_OK
Close 10658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10659 NT_STATUS_OK
ReadX 10659 0 4096 4096 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10660 NT_STATUS_OK
ReadX 10660 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10646 NT_STATUS_OK
Close 10660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10689 0 4096 4096 NT_STATUS_OK
Close 10689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10691 NT_STATUS_OK
ReadX 10691 0 4096 4096 NT_STATUS_OK
ReadX 10691 4096 4096 4096 NT_STATUS_OK
ReadX 10691 8192 4096 4096 NT_STATUS_OK
ReadX 10691 12288 4096 4096 NT_STATUS_OK
ReadX 10691 16384 4096 4096 NT_STATUS_OK
ReadX 10691 20480 4096 4096 NT_STATUS_OK
ReadX 10691 24576 4096 4096 NT_STATUS_OK
ReadX 10691 28672 4096 4096 NT_STATUS_OK
ReadX 10691 32768 4096 4096 NT_STATUS_OK
ReadX 10691 36864 4096 4096 NT_STATUS_OK
ReadX 10691 40960 4096 4096 NT_STATUS_OK
ReadX 10691 45056 4096 4096 NT_STATUS_OK
ReadX 10691 49152 4096 4096 NT_STATUS_OK
ReadX 10691 53248 4096 4096 NT_STATUS_OK
ReadX 10691 57344 4096 4096 NT_STATUS_OK
ReadX 10691 61440 4096 4096 NT_STATUS_OK
ReadX 10691 65536 4096 4096 NT_STATUS_OK
ReadX 10691 69632 4096 4096 NT_STATUS_OK
ReadX 10691 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10691 1004 NT_STATUS_OK
WriteX 10691 0 4096 4096 NT_STATUS_OK
Close 10691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10692 NT_STATUS_OK
SET_FILE_INFORMATION 10692 1004 NT_STATUS_OK
Close 10692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10697 NT_STATUS_OK
WriteX 10697 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10697 258 NT_STATUS_OK
WriteX 10697 0 65536 65536 NT_STATUS_OK
WriteX 10697 65536 19979 19979 NT_STATUS_OK
Close 10697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
QUERY_FILE_INFORMATION 10698 1004 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
SET_FILE_INFORMATION 10698 1004 NT_STATUS_OK
WriteX 10698 0 4096 4096 NT_STATUS_OK
Flush 10698 NT_STATUS_OK
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10700 NT_STATUS_OK
ReadX 10700 0 4096 4096 NT_STATUS_OK
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10701 NT_STATUS_OK
ReadX 10701 0 4096 4096 NT_STATUS_OK
Close 10701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 4096 4096 NT_STATUS_OK
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10703 NT_STATUS_OK
ReadX 10703 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10703 1004 NT_STATUS_OK
WriteX 10703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10700 NT_STATUS_OK
Close 10703 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10709 NT_STATUS_OK
WriteX 10709 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 65536 65536 NT_STATUS_OK
WriteX 10709 65536 17654 17654 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
QUERY_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
SET_FILE_INFORMATION 10710 1004 NT_STATUS_OK
WriteX 10710 0 4096 4096 NT_STATUS_OK
Flush 10710 NT_STATUS_OK
Close 10710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10711 NT_STATUS_OK
SET_FILE_INFORMATION 10711 1004 NT_STATUS_OK
Close 10711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10712 NT_STATUS_OK
ReadX 10712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10715 NT_STATUS_OK
ReadX 10715 0 4096 4096 NT_STATUS_OK
ReadX 10715 4096 4096 4096 NT_STATUS_OK
ReadX 10715 8192 4096 4096 NT_STATUS_OK
ReadX 10715 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10715 16384 4096 4096 NT_STATUS_OK
ReadX 10715 20480 4096 4096 NT_STATUS_OK
ReadX 10715 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10716 NT_STATUS_OK
ReadX 10716 0 4096 4096 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10718 1004 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10718 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10721 NT_STATUS_OK
Close 10721 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10724 NT_STATUS_OK
WriteX 10724 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10724 258 NT_STATUS_OK
WriteX 10724 0 65536 65536 NT_STATUS_OK
WriteX 10724 65536 19490 19490 NT_STATUS_OK
Close 10724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
QUERY_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
SET_FILE_INFORMATION 10725 1004 NT_STATUS_OK
WriteX 10725 0 4096 4096 NT_STATUS_OK
Flush 10725 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10726 NT_STATUS_OK
SET_FILE_INFORMATION 10726 1004 NT_STATUS_OK
Close 10726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10727 NT_STATUS_OK
ReadX 10727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10728 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10730 0 4096 4096 NT_STATUS_OK
Close 10730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10731 NT_STATUS_OK
ReadX 10731 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10732 NT_STATUS_OK
ReadX 10732 0 4096 4096 NT_STATUS_OK
ReadX 10732 4096 4096 4096 NT_STATUS_OK
ReadX 10732 8192 4096 4096 NT_STATUS_OK
ReadX 10732 12288 4096 4096 NT_STATUS_OK
ReadX 10732 16384 4096 4096 NT_STATUS_OK
ReadX 10732 20480 4096 4096 NT_STATUS_OK
ReadX 10732 24576 4096 4096 NT_STATUS_OK
ReadX 10732 28672 4096 4096 NT_STATUS_OK
ReadX 10732 32768 4096 4096 NT_STATUS_OK
ReadX 10732 36864 4096 4096 NT_STATUS_OK
ReadX 10732 40960 4096 4096 NT_STATUS_OK
ReadX 10732 45056 4096 4096 NT_STATUS_OK
ReadX 10732 49152 4096 4096 NT_STATUS_OK
ReadX 10732 53248 4096 4096 NT_STATUS_OK
ReadX 10732 57344 4096 4096 NT_STATUS_OK
ReadX 10732 61440 4096 4096 NT_STATUS_OK
ReadX 10732 65536 4096 4096 NT_STATUS_OK
ReadX 10732 69632 4096 4096 NT_STATUS_OK
ReadX 10732 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10732 1004 NT_STATUS_OK
WriteX 10732 0 4096 4096 NT_STATUS_OK
Close 10732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10733 NT_STATUS_OK
SET_FILE_INFORMATION 10733 1004 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10735 NT_STATUS_OK
Close 10735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10738 NT_STATUS_OK
WriteX 10738 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10738 258 NT_STATUS_OK
WriteX 10738 0 65536 65536 NT_STATUS_OK
WriteX 10738 65536 8866 8866 NT_STATUS_OK
Close 10738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
WriteX 10739 0 4096 4096 NT_STATUS_OK
Flush 10739 NT_STATUS_OK
SET_FILE_INFORMATION 10739 1004 NT_STATUS_OK
WriteX 10739 0 4096 4096 NT_STATUS_OK
Flush 10739 NT_STATUS_OK
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
Close 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10743 1004 NT_STATUS_OK
WriteX 10743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Close 10734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10746 NT_STATUS_OK
Close 10746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10749 NT_STATUS_OK
WriteX 10749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10749 258 NT_STATUS_OK
WriteX 10749 0 65536 65536 NT_STATUS_OK
WriteX 10749 65536 9298 9298 NT_STATUS_OK
Close 10749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
WriteX 10750 0 4096 4096 NT_STATUS_OK
Flush 10750 NT_STATUS_OK
SET_FILE_INFORMATION 10750 1004 NT_STATUS_OK
WriteX 10750 0 4096 4096 NT_STATUS_OK
Flush 10750 NT_STATUS_OK
Close 10750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10751 NT_STATUS_OK
SET_FILE_INFORMATION 10751 1004 NT_STATUS_OK
Close 10751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10752 NT_STATUS_OK
ReadX 10752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10756 0 4096 4096 NT_STATUS_OK
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10757 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10757 4096 4096 4096 NT_STATUS_OK
ReadX 10757 8192 4096 4096 NT_STATUS_OK
ReadX 10757 12288 4096 4096 NT_STATUS_OK
ReadX 10757 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 4096 4096 NT_STATUS_OK
Close 10758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 4096 4096 NT_STATUS_OK
Close 10759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10760 1004 NT_STATUS_OK
WriteX 10760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10761 NT_STATUS_OK
Close 10761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10763 NT_STATUS_OK
Close 10763 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10766 NT_STATUS_OK
WriteX 10766 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 258 NT_STATUS_OK
WriteX 10766 0 65536 65536 NT_STATUS_OK
WriteX 10766 65536 11540 11540 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
SET_FILE_INFORMATION 10767 1004 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10768 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10769 NT_STATUS_OK
ReadX 10769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10772 NT_STATUS_OK
ReadX 10772 61440 4096 4096 NT_STATUS_OK
ReadX 10772 126976 4096 4096 NT_STATUS_OK
WriteX 10772 0 65536 65536 NT_STATUS_OK
WriteX 10772 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10773 NT_STATUS_OK
ReadX 10773 61440 4096 4096 NT_STATUS_OK
ReadX 10773 126976 4096 4096 NT_STATUS_OK
ReadX 10773 192512 4096 4096 NT_STATUS_OK
ReadX 10773 258048 4096 4096 NT_STATUS_OK
WriteX 10773 0 65536 65536 NT_STATUS_OK
WriteX 10773 65536 65536 65536 NT_STATUS_OK
WriteX 10773 131072 65536 65536 NT_STATUS_OK
WriteX 10773 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10774 NT_STATUS_OK
ReadX 10774 61440 4096 4096 NT_STATUS_OK
ReadX 10774 126976 4096 4096 NT_STATUS_OK
ReadX 10774 192512 4096 4096 NT_STATUS_OK
ReadX 10774 258048 4096 4096 NT_STATUS_OK
ReadX 10774 323584 4096 4096 NT_STATUS_OK
ReadX 10774 389120 4096 4096 NT_STATUS_OK
ReadX 10774 454656 4096 4096 NT_STATUS_OK
ReadX 10774 520192 4096 4096 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 65536 65536 NT_STATUS_OK
WriteX 10774 131072 65536 65536 NT_STATUS_OK
WriteX 10774 196608 65536 65536 NT_STATUS_OK
WriteX 10774 262144 65536 65536 NT_STATUS_OK
WriteX 10774 327680 65536 65536 NT_STATUS_OK
WriteX 10774 393216 65536 65536 NT_STATUS_OK
WriteX 10774 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
ReadX 10775 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10776 NT_STATUS_OK
WriteX 10776 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10776 258 NT_STATUS_OK
WriteX 10776 0 53 53 NT_STATUS_OK
Close 10776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10777 NT_STATUS_OK
Close 10777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10769 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Close 10772 NT_STATUS_OK
Close 10773 NT_STATUS_OK
Close 10774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10775 8192 4096 4096 NT_STATUS_OK
ReadX 10775 12288 4096 4096 NT_STATUS_OK
WriteX 10779 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10779 258 NT_STATUS_OK
ReadX 10775 16384 4096 4096 NT_STATUS_OK
ReadX 10775 20480 4096 4096 NT_STATUS_OK
WriteX 10779 0 15360 15360 NT_STATUS_OK
Close 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10780 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10780 1004 NT_STATUS_OK
WriteX 10780 0 4096 4096 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10781 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10783 NT_STATUS_OK
ReadX 10783 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10784 NT_STATUS_OK
Close 10784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10783 4096 4096 4096 NT_STATUS_OK
ReadX 10783 8192 4096 4096 NT_STATUS_OK
ReadX 10783 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
ReadX 10786 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
ReadX 10787 4096 4096 4096 NT_STATUS_OK
ReadX 10787 8192 4096 4096 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10788 NT_STATUS_OK
WriteX 10788 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 258 NT_STATUS_OK
WriteX 10788 0 15360 15360 NT_STATUS_OK
Close 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10793 NT_STATUS_OK
SET_FILE_INFORMATION 10793 1004 NT_STATUS_OK
Close 10793 NT_STATUS_OK
WriteX 10789 0 4096 4096 NT_STATUS_OK
Close 10789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10794 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
ReadX 10796 4096 4096 4096 NT_STATUS_OK
ReadX 10796 8192 4096 4096 NT_STATUS_OK
ReadX 10796 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10796 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10796 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10798 NT_STATUS_OK
WriteX 10798 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10798 258 NT_STATUS_OK
WriteX 10798 0 53 53 NT_STATUS_OK
Close 10798 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10799 NT_STATUS_OK
Close 10799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10797 4096 4096 4096 NT_STATUS_OK
ReadX 10797 8192 4096 4096 NT_STATUS_OK
ReadX 10797 12288 4096 4096 NT_STATUS_OK
WriteX 10801 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10801 258 NT_STATUS_OK
WriteX 10801 0 12006 12006 NT_STATUS_OK
Close 10801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
WriteX 10802 0 4096 4096 NT_STATUS_OK
Close 10802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10805 NT_STATUS_OK
ReadX 10805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10806 NT_STATUS_OK
Close 10806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10808 NT_STATUS_OK
WriteX 10808 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10808 258 NT_STATUS_OK
WriteX 10808 0 11991 11991 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10809 NT_STATUS_OK
ReadX 10809 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10809 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10813 NT_STATUS_OK
SET_FILE_INFORMATION 10813 1004 NT_STATUS_OK
Close 10813 NT_STATUS_OK
WriteX 10809 0 4096 4096 NT_STATUS_OK
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10816 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
ReadX 10816 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
WriteX 10816 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10816 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10816 1004 NT_STATUS_OK
Close 10792 NT_STATUS_OK
WriteX 10796 0 19054 19054 NT_STATUS_OK
WriteX 10816 0 12288 12288 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10819 NT_STATUS_OK
Close 10819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10821 NT_STATUS_OK
Close 10821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 61440 61440 NT_STATUS_OK
ReadX 10823 61440 4096 4096 NT_STATUS_OK
ReadX 10823 65536 61440 61440 NT_STATUS_OK
ReadX 10823 126976 4096 4096 NT_STATUS_OK
ReadX 10823 131072 61440 61440 NT_STATUS_OK
ReadX 10823 192512 4096 4096 NT_STATUS_OK
ReadX 10823 196608 61440 61440 NT_STATUS_OK
ReadX 10823 258048 4096 4096 NT_STATUS_OK
ReadX 10823 262144 61440 61440 NT_STATUS_OK
ReadX 10823 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 61440 61440 NT_STATUS_OK
ReadX 10824 61440 4096 4096 NT_STATUS_OK
ReadX 10824 65536 61440 61440 NT_STATUS_OK
ReadX 10824 126976 4096 4096 NT_STATUS_OK
ReadX 10824 131072 61440 61440 NT_STATUS_OK
ReadX 10824 192512 4096 4096 NT_STATUS_OK
ReadX 10824 196608 61440 61440 NT_STATUS_OK
ReadX 10824 258048 4096 4096 NT_STATUS_OK
ReadX 10824 262144 61440 61440 NT_STATUS_OK
ReadX 10824 323584 4096 4096 NT_STATUS_OK
ReadX 10824 327680 61440 61440 NT_STATUS_OK
ReadX 10824 389120 4096 4096 NT_STATUS_OK
ReadX 10824 393216 61440 61440 NT_STATUS_OK
ReadX 10824 454656 4096 4096 NT_STATUS_OK
ReadX 10824 458752 61440 61440 NT_STATUS_OK
ReadX 10824 520192 4096 4096 NT_STATUS_OK
ReadX 10824 524288 61440 61440 NT_STATUS_OK
ReadX 10824 585728 4096 4096 NT_STATUS_OK
ReadX 10824 589824 61440 61440 NT_STATUS_OK
ReadX 10824 651264 4096 4096 NT_STATUS_OK
ReadX 10824 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 61440 61440 NT_STATUS_OK
ReadX 10825 61440 4096 4096 NT_STATUS_OK
ReadX 10825 65536 61440 61440 NT_STATUS_OK
ReadX 10825 126976 4096 4096 NT_STATUS_OK
ReadX 10825 131072 61440 61440 NT_STATUS_OK
ReadX 10825 192512 4096 4096 NT_STATUS_OK
ReadX 10825 196608 61440 61440 NT_STATUS_OK
ReadX 10825 258048 4096 4096 NT_STATUS_OK
ReadX 10825 262144 61440 61440 NT_STATUS_OK
ReadX 10825 323584 4096 4096 NT_STATUS_OK
ReadX 10825 327680 61440 61440 NT_STATUS_OK
ReadX 10825 389120 4096 4096 NT_STATUS_OK
ReadX 10825 393216 61440 61440 NT_STATUS_OK
ReadX 10825 454656 4096 4096 NT_STATUS_OK
ReadX 10825 458752 61440 61440 NT_STATUS_OK
ReadX 10825 520192 4096 4096 NT_STATUS_OK
ReadX 10825 524288 61440 61440 NT_STATUS_OK
ReadX 10825 585728 4096 4096 NT_STATUS_OK
ReadX 10825 589824 61440 61440 NT_STATUS_OK
ReadX 10825 651264 4096 4096 NT_STATUS_OK
ReadX 10825 655360 61440 61440 NT_STATUS_OK
ReadX 10825 716800 4096 4096 NT_STATUS_OK
ReadX 10825 720896 61440 61440 NT_STATUS_OK
ReadX 10825 782336 4096 4096 NT_STATUS_OK
ReadX 10825 786432 61440 61440 NT_STATUS_OK
ReadX 10825 847872 4096 4096 NT_STATUS_OK
ReadX 10825 851968 61440 61440 NT_STATUS_OK
ReadX 10825 913408 4096 4096 NT_STATUS_OK
ReadX 10825 917504 61440 61440 NT_STATUS_OK
ReadX 10825 978944 4096 4096 NT_STATUS_OK
ReadX 10825 983040 61440 61440 NT_STATUS_OK
ReadX 10825 1044480 4096 4096 NT_STATUS_OK
ReadX 10825 1048576 61440 61440 NT_STATUS_OK
ReadX 10825 1110016 4096 4096 NT_STATUS_OK
ReadX 10825 1114112 61440 61440 NT_STATUS_OK
ReadX 10825 1175552 4096 4096 NT_STATUS_OK
ReadX 10825 1179648 61440 61440 NT_STATUS_OK
ReadX 10825 1241088 4096 4096 NT_STATUS_OK
ReadX 10825 1245184 61440 61440 NT_STATUS_OK
ReadX 10825 1306624 4096 4096 NT_STATUS_OK
ReadX 10825 1310720 61440 61440 NT_STATUS_OK
ReadX 10825 1372160 4096 4096 NT_STATUS_OK
ReadX 10825 1376256 61440 61440 NT_STATUS_OK
ReadX 10825 1437696 4096 4096 NT_STATUS_OK
ReadX 10825 1441792 61440 61440 NT_STATUS_OK
ReadX 10825 1503232 4096 4096 NT_STATUS_OK
ReadX 10825 1507328 61440 61440 NT_STATUS_OK
ReadX 10825 1568768 4096 4096 NT_STATUS_OK
ReadX 10825 1572864 61440 61440 NT_STATUS_OK
ReadX 10825 1634304 4096 4096 NT_STATUS_OK
ReadX 10825 1638400 61440 61440 NT_STATUS_OK
ReadX 10825 1699840 4096 4096 NT_STATUS_OK
ReadX 10825 1703936 61440 61440 NT_STATUS_OK
ReadX 10825 1765376 4096 4096 NT_STATUS_OK
ReadX 10825 1769472 61440 61440 NT_STATUS_OK
ReadX 10825 1830912 4096 4096 NT_STATUS_OK
ReadX 10825 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10827 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10831 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10832 NT_STATUS_OK
QUERY_FILE_INFORMATION 10832 1004 NT_STATUS_OK
WriteX 10832 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10832 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10833 NT_STATUS_OK
Close 10833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10834 NT_STATUS_OK
WriteX 10834 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10834 258 NT_STATUS_OK
WriteX 10834 0 491 491 NT_STATUS_OK
Close 10834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10835 NT_STATUS_OK
ReadX 10835 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10832 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10837 NT_STATUS_OK
Close 10837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10838 NT_STATUS_OK
WriteX 10838 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10838 258 NT_STATUS_OK
WriteX 10838 0 543 543 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10839 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Close 10830 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10845 NT_STATUS_OK
ReadX 10845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10846 NT_STATUS_OK
ReadX 10846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10847 NT_STATUS_OK
ReadX 10847 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10852 NT_STATUS_OK
QUERY_FILE_INFORMATION 10852 1004 NT_STATUS_OK
WriteX 10852 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10852 258 NT_STATUS_OK
WriteX 10852 0 2048 2048 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
Flush 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10858 NT_STATUS_OK
WriteX 10858 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10858 258 NT_STATUS_OK
WriteX 10858 0 2048 2048 NT_STATUS_OK
Close 10858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10863 NT_STATUS_OK
Close 10863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10864 NT_STATUS_OK
WriteX 10864 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10864 258 NT_STATUS_OK
WriteX 10864 0 2048 2048 NT_STATUS_OK
Close 10864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10865 NT_STATUS_OK
ReadX 10865 0 2048 2048 NT_STATUS_OK
ReadX 10843 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10847 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10859 0 4096 4096 NT_STATUS_OK
WriteX 10843 0 8192 8192 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
WriteX 10845 0 4096 4096 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10869 NT_STATUS_OK
QUERY_FILE_INFORMATION 10869 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10844 NT_STATUS_OK
Close 10845 NT_STATUS_OK
Close 10846 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Close 10843 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10872 NT_STATUS_OK
ReadX 10872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10877 NT_STATUS_OK
ReadX 10877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10878 NT_STATUS_OK
ReadX 10878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10879 NT_STATUS_OK
ReadX 10879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10889 NT_STATUS_OK
QUERY_FILE_INFORMATION 10889 1004 NT_STATUS_OK
WriteX 10889 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10889 258 NT_STATUS_OK
WriteX 10889 0 2048 2048 NT_STATUS_OK
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10892 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10897 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 1004 NT_STATUS_OK
WriteX 10897 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 258 NT_STATUS_OK
WriteX 10897 0 2048 2048 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10890 0 4096 4096 NT_STATUS_OK
Flush 10890 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
Flush 10898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10890 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10892 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10899 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10900 NT_STATUS_OK
WriteX 10900 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10900 258 NT_STATUS_OK
WriteX 10900 0 4096 4096 NT_STATUS_OK
Close 10900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10902 NT_STATUS_OK
Close 10902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10903 NT_STATUS_OK
WriteX 10903 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10903 258 NT_STATUS_OK
WriteX 10903 0 4096 4096 NT_STATUS_OK
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10904 NT_STATUS_OK
ReadX 10904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10904 0 4096 4096 NT_STATUS_OK
Close 10901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10878 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Close 10882 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Close 10879 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Close 10873 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10877 NT_STATUS_OK
Close 10874 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10907 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10909 NT_STATUS_OK
ReadX 10909 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10910 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10911 NT_STATUS_OK
WriteX 10911 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 258 NT_STATUS_OK
WriteX 10911 0 2048 2048 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10912 NT_STATUS_OK
ReadX 10912 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10914 NT_STATUS_OK
ReadX 10914 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10915 NT_STATUS_OK
ReadX 10915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10916 NT_STATUS_OK
ReadX 10916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10917 NT_STATUS_OK
ReadX 10917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10919 NT_STATUS_OK
ReadX 10919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10926 NT_STATUS_OK
QUERY_FILE_INFORMATION 10926 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10909 NT_STATUS_OK
Close 10912 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10919 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Close 10913 NT_STATUS_OK
Close 10914 NT_STATUS_OK
Close 10917 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Close 10916 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10928 NT_STATUS_OK
QUERY_FILE_INFORMATION 10928 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10930 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10930 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10932 NT_STATUS_OK
ReadX 10932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10935 NT_STATUS_OK
ReadX 10935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10936 NT_STATUS_OK
ReadX 10936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10948 NT_STATUS_OK
QUERY_FILE_INFORMATION 10948 1004 NT_STATUS_OK
WriteX 10948 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10948 258 NT_STATUS_OK
WriteX 10948 0 2048 2048 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10950 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10954 NT_STATUS_OK
ReadX 10954 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10960 NT_STATUS_OK
QUERY_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10960 258 NT_STATUS_OK
WriteX 10960 0 2048 2048 NT_STATUS_OK
Close 10960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10968 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 1004 NT_STATUS_OK
WriteX 10968 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 258 NT_STATUS_OK
WriteX 10968 0 2048 2048 NT_STATUS_OK
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10949 0 4096 4096 NT_STATUS_OK
Flush 10949 NT_STATUS_OK
WriteX 10961 0 4096 4096 NT_STATUS_OK
Flush 10961 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
Flush 10969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10949 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10961 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10951 4096 16384 16384 NT_STATUS_OK
ReadX 10931 4096 16384 16384 NT_STATUS_OK
ReadX 10963 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10971 NT_STATUS_OK
ReadX 10971 0 2048 2048 NT_STATUS_OK
WriteX 10971 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10972 NT_STATUS_OK
QUERY_FILE_INFORMATION 10972 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Close 10943 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Close 10933 NT_STATUS_OK
Close 10934 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10974 NT_STATUS_OK
QUERY_FILE_INFORMATION 10974 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10976 NT_STATUS_OK
QUERY_FILE_INFORMATION 10976 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10982 NT_STATUS_OK
ReadX 10982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10983 NT_STATUS_OK
ReadX 10983 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10979 4096 16384 16384 NT_STATUS_OK
WriteX 10979 0 4096 4096 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
WriteX 10981 0 4096 4096 NT_STATUS_OK
WriteX 10982 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10985 NT_STATUS_OK
ReadX 10985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 8192 8192 NT_STATUS_OK
ReadX 10985 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10999 0 4096 4096 NT_STATUS_OK
ReadX 10999 4096 4096 4096 NT_STATUS_OK
ReadX 10999 8192 4096 4096 NT_STATUS_OK
WriteX 10985 0 4096 4096 NT_STATUS_OK
WriteX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11000 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
ReadX 11000 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10979 0 4096 4096 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
WriteX 10981 0 4096 4096 NT_STATUS_OK
WriteX 10982 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 1004 NT_STATUS_OK
WriteX 11005 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 258 NT_STATUS_OK
WriteX 11005 0 2048 2048 NT_STATUS_OK
Close 11005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11008 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
WriteX 11008 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11006 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 4096 4096 NT_STATUS_OK
ReadX 11010 4096 4096 4096 NT_STATUS_OK
WriteX 11010 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11011 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Close 10979 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Close 10981 NT_STATUS_OK
Close 10982 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10992 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10985 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11013 0 4096 4096 NT_STATUS_OK
ReadX 11013 4096 4096 4096 NT_STATUS_OK
ReadX 11013 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11023 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
ReadX 11014 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11031 NT_STATUS_OK
QUERY_FILE_INFORMATION 11031 1004 NT_STATUS_OK
WriteX 11031 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11031 258 NT_STATUS_OK
WriteX 11031 0 2048 2048 NT_STATUS_OK
Close 11031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11032 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11036 NT_STATUS_OK
Close 11036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11037 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 1004 NT_STATUS_OK
WriteX 11037 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11037 258 NT_STATUS_OK
WriteX 11037 0 2048 2048 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11038 NT_STATUS_OK
ReadX 11038 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11021 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11039 NT_STATUS_OK
QUERY_FILE_INFORMATION 11039 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11021 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11013 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11041 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11043 NT_STATUS_OK
ReadX 11043 61440 4096 4096 NT_STATUS_OK
ReadX 11043 126976 4096 4096 NT_STATUS_OK
WriteX 11043 0 65536 65536 NT_STATUS_OK
WriteX 11043 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11044 NT_STATUS_OK
ReadX 11044 61440 4096 4096 NT_STATUS_OK
ReadX 11044 126976 4096 4096 NT_STATUS_OK
ReadX 11044 192512 4096 4096 NT_STATUS_OK
ReadX 11044 258048 4096 4096 NT_STATUS_OK
WriteX 11044 0 65536 65536 NT_STATUS_OK
WriteX 11044 65536 65536 65536 NT_STATUS_OK
WriteX 11044 131072 65536 65536 NT_STATUS_OK
WriteX 11044 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 61440 4096 4096 NT_STATUS_OK
ReadX 11045 126976 4096 4096 NT_STATUS_OK
ReadX 11045 192512 4096 4096 NT_STATUS_OK
ReadX 11045 258048 4096 4096 NT_STATUS_OK
ReadX 11045 323584 4096 4096 NT_STATUS_OK
ReadX 11045 389120 4096 4096 NT_STATUS_OK
ReadX 11045 454656 4096 4096 NT_STATUS_OK
ReadX 11045 520192 4096 4096 NT_STATUS_OK
WriteX 11045 0 65536 65536 NT_STATUS_OK
WriteX 11045 65536 65536 65536 NT_STATUS_OK
WriteX 11045 131072 65536 65536 NT_STATUS_OK
WriteX 11045 196608 65536 65536 NT_STATUS_OK
WriteX 11045 262144 65536 65536 NT_STATUS_OK
WriteX 11045 327680 65536 65536 NT_STATUS_OK
WriteX 11045 393216 65536 65536 NT_STATUS_OK
WriteX 11045 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11046 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11046 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11046 8192 4096 4096 NT_STATUS_OK
ReadX 11046 12288 4096 4096 NT_STATUS_OK
ReadX 11046 16384 4096 4096 NT_STATUS_OK
ReadX 11046 20480 4096 4096 NT_STATUS_OK
ReadX 11046 24576 4096 4096 NT_STATUS_OK
ReadX 11046 28672 4096 4096 NT_STATUS_OK
ReadX 11046 32768 4096 4096 NT_STATUS_OK
ReadX 11046 36864 4096 4096 NT_STATUS_OK
ReadX 11046 40960 4096 4096 NT_STATUS_OK
ReadX 11046 45056 4096 4096 NT_STATUS_OK
ReadX 11046 49152 4096 4096 NT_STATUS_OK
ReadX 11046 53248 4096 4096 NT_STATUS_OK
ReadX 11046 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11046 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11047 NT_STATUS_OK
Close 11047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Close 11044 NT_STATUS_OK
Close 11045 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11049 NT_STATUS_OK
WriteX 11049 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11049 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11049 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
WriteX 11049 0 57088 57088 NT_STATUS_OK
WriteX 11049 0 4096 4096 NT_STATUS_OK
Flush 11049 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11050 NT_STATUS_OK
SET_FILE_INFORMATION 11050 1004 NT_STATUS_OK
Close 11050 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
WriteX 11049 0 4096 4096 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11053 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11054 NT_STATUS_OK
WriteX 11054 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11054 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11054 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
WriteX 11054 0 51456 51456 NT_STATUS_OK
WriteX 11054 0 4096 4096 NT_STATUS_OK
Flush 11054 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
WriteX 11054 0 4096 4096 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11056 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11058 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11063 NT_STATUS_OK
WriteX 11063 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 258 NT_STATUS_OK
WriteX 11063 0 53077 53077 NT_STATUS_OK
Close 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11064 NT_STATUS_OK
WriteX 11064 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11064 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11064 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
WriteX 11064 0 65536 65536 NT_STATUS_OK
WriteX 11064 65536 1856 1856 NT_STATUS_OK
WriteX 11064 0 4096 4096 NT_STATUS_OK
Flush 11064 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
WriteX 11064 0 4096 4096 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11066 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11068 NT_STATUS_OK
ReadX 11068 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11070 NT_STATUS_OK
Close 11070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11073 NT_STATUS_OK
WriteX 11073 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11073 258 NT_STATUS_OK
WriteX 11073 0 7983 7983 NT_STATUS_OK
Close 11073 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11075 NT_STATUS_OK
Close 11075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11078 NT_STATUS_OK
WriteX 11078 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11078 258 NT_STATUS_OK
WriteX 11078 0 65536 65536 NT_STATUS_OK
WriteX 11078 65536 65536 65536 NT_STATUS_OK
WriteX 11078 131072 65536 65536 NT_STATUS_OK
WriteX 11078 196608 65536 65536 NT_STATUS_OK
WriteX 11078 262144 65536 65536 NT_STATUS_OK
WriteX 11078 327680 65536 65536 NT_STATUS_OK
WriteX 11078 393216 65536 65536 NT_STATUS_OK
WriteX 11078 458752 46731 46731 NT_STATUS_OK
Close 11078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11079 NT_STATUS_OK
WriteX 11079 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11068 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
WriteX 11079 0 65536 65536 NT_STATUS_OK
WriteX 11079 65536 22848 22848 NT_STATUS_OK
WriteX 11079 0 4096 4096 NT_STATUS_OK
Flush 11079 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11079 1004 NT_STATUS_OK
WriteX 11079 0 4096 4096 NT_STATUS_OK
Close 11079 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11081 NT_STATUS_OK
Close 11081 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11083 NT_STATUS_OK
ReadX 11083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11083 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11084 NT_STATUS_OK
ReadX 11084 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11084 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11084 1004 NT_STATUS_OK
ReadX 11084 8192 4096 4096 NT_STATUS_OK
ReadX 11084 12288 4096 4096 NT_STATUS_OK
ReadX 11084 16384 4096 4096 NT_STATUS_OK
ReadX 11084 20480 4096 4096 NT_STATUS_OK
ReadX 11084 24576 4096 4096 NT_STATUS_OK
ReadX 11084 28672 4096 4096 NT_STATUS_OK
ReadX 11084 32768 4096 4096 NT_STATUS_OK
ReadX 11084 36864 4096 4096 NT_STATUS_OK
ReadX 11084 40960 4096 4096 NT_STATUS_OK
ReadX 11084 45056 4096 4096 NT_STATUS_OK
ReadX 11084 49152 4096 4096 NT_STATUS_OK
ReadX 11084 53248 4096 4096 NT_STATUS_OK
ReadX 11084 57344 4096 4096 NT_STATUS_OK
ReadX 11084 61440 4096 4096 NT_STATUS_OK
ReadX 11084 65536 4096 4096 NT_STATUS_OK
ReadX 11084 69632 4096 4096 NT_STATUS_OK
ReadX 11084 73728 4096 4096 NT_STATUS_OK
ReadX 11084 77824 4096 4096 NT_STATUS_OK
ReadX 11084 81920 4096 4096 NT_STATUS_OK
ReadX 11084 86016 4096 4096 NT_STATUS_OK
ReadX 11084 90112 4096 4096 NT_STATUS_OK
ReadX 11084 94208 4096 4096 NT_STATUS_OK
ReadX 11084 98304 4096 4096 NT_STATUS_OK
ReadX 11084 102400 4096 4096 NT_STATUS_OK
ReadX 11084 106496 4096 4096 NT_STATUS_OK
ReadX 11084 110592 4096 4096 NT_STATUS_OK
ReadX 11084 114688 4096 4096 NT_STATUS_OK
ReadX 11084 118784 4096 4096 NT_STATUS_OK
ReadX 11084 122880 4096 4096 NT_STATUS_OK
ReadX 11084 126976 4096 4096 NT_STATUS_OK
ReadX 11084 131072 4096 4096 NT_STATUS_OK
ReadX 11084 135168 4096 4096 NT_STATUS_OK
ReadX 11084 139264 4096 4096 NT_STATUS_OK
ReadX 11084 143360 4096 4096 NT_STATUS_OK
ReadX 11084 147456 4096 4096 NT_STATUS_OK
ReadX 11084 151552 4096 4096 NT_STATUS_OK
ReadX 11084 155648 4096 4096 NT_STATUS_OK
ReadX 11084 159744 4096 4096 NT_STATUS_OK
ReadX 11084 163840 4096 4096 NT_STATUS_OK
ReadX 11084 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11084 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11085 NT_STATUS_OK
Close 11085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11083 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11087 NT_STATUS_OK
WriteX 11087 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 258 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11088 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
Close 11088 NT_STATUS_OK
WriteX 11087 0 42388 42388 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11089 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
ReadX 11091 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11092 NT_STATUS_OK
WriteX 11092 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11092 258 NT_STATUS_OK
SET_FILE_INFORMATION 11092 1004 NT_STATUS_OK
WriteX 11092 0 42652 42652 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11094 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 4096 4096 NT_STATUS_OK
ReadX 11096 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11098 NT_STATUS_OK
Close 11098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11101 NT_STATUS_OK
WriteX 11101 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11101 258 NT_STATUS_OK
WriteX 11101 0 65536 65536 NT_STATUS_OK
WriteX 11101 65536 49 49 NT_STATUS_OK
Close 11101 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 61440 61440 NT_STATUS_OK
ReadX 11102 61440 4096 4096 NT_STATUS_OK
ReadX 11102 65536 61440 61440 NT_STATUS_OK
ReadX 11102 126976 4096 4096 NT_STATUS_OK
ReadX 11102 131072 61440 61440 NT_STATUS_OK
ReadX 11102 192512 4096 4096 NT_STATUS_OK
ReadX 11102 196608 61440 61440 NT_STATUS_OK
ReadX 11102 258048 4096 4096 NT_STATUS_OK
ReadX 11102 262144 61440 61440 NT_STATUS_OK
ReadX 11102 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11103 NT_STATUS_OK
ReadX 11103 0 61440 61440 NT_STATUS_OK
ReadX 11103 61440 4096 4096 NT_STATUS_OK
ReadX 11103 65536 61440 61440 NT_STATUS_OK
ReadX 11103 126976 4096 4096 NT_STATUS_OK
ReadX 11103 131072 61440 61440 NT_STATUS_OK
ReadX 11103 192512 4096 4096 NT_STATUS_OK
ReadX 11103 196608 61440 61440 NT_STATUS_OK
ReadX 11103 258048 4096 4096 NT_STATUS_OK
ReadX 11103 262144 61440 61440 NT_STATUS_OK
ReadX 11103 323584 4096 4096 NT_STATUS_OK
ReadX 11103 327680 61440 61440 NT_STATUS_OK
ReadX 11103 389120 4096 4096 NT_STATUS_OK
ReadX 11103 393216 61440 61440 NT_STATUS_OK
ReadX 11103 454656 4096 4096 NT_STATUS_OK
ReadX 11103 458752 61440 61440 NT_STATUS_OK
ReadX 11103 520192 4096 4096 NT_STATUS_OK
ReadX 11103 524288 61440 61440 NT_STATUS_OK
ReadX 11103 585728 4096 4096 NT_STATUS_OK
ReadX 11103 589824 61440 61440 NT_STATUS_OK
ReadX 11103 651264 4096 4096 NT_STATUS_OK
ReadX 11103 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 61440 61440 NT_STATUS_OK
ReadX 11104 61440 4096 4096 NT_STATUS_OK
ReadX 11104 65536 61440 61440 NT_STATUS_OK
ReadX 11104 126976 4096 4096 NT_STATUS_OK
ReadX 11104 131072 61440 61440 NT_STATUS_OK
ReadX 11104 192512 4096 4096 NT_STATUS_OK
ReadX 11104 196608 61440 61440 NT_STATUS_OK
ReadX 11104 258048 4096 4096 NT_STATUS_OK
ReadX 11104 262144 61440 61440 NT_STATUS_OK
ReadX 11104 323584 4096 4096 NT_STATUS_OK
ReadX 11104 327680 61440 61440 NT_STATUS_OK
ReadX 11104 389120 4096 4096 NT_STATUS_OK
ReadX 11104 393216 61440 61440 NT_STATUS_OK
ReadX 11104 454656 4096 4096 NT_STATUS_OK
ReadX 11104 458752 61440 61440 NT_STATUS_OK
ReadX 11104 520192 4096 4096 NT_STATUS_OK
ReadX 11104 524288 61440 61440 NT_STATUS_OK
ReadX 11104 585728 4096 4096 NT_STATUS_OK
ReadX 11104 589824 61440 61440 NT_STATUS_OK
ReadX 11104 651264 4096 4096 NT_STATUS_OK
ReadX 11104 655360 61440 61440 NT_STATUS_OK
ReadX 11104 716800 4096 4096 NT_STATUS_OK
ReadX 11104 720896 61440 61440 NT_STATUS_OK
ReadX 11104 782336 4096 4096 NT_STATUS_OK
ReadX 11104 786432 61440 61440 NT_STATUS_OK
ReadX 11104 847872 4096 4096 NT_STATUS_OK
ReadX 11104 851968 61440 61440 NT_STATUS_OK
ReadX 11104 913408 4096 4096 NT_STATUS_OK
ReadX 11104 917504 61440 61440 NT_STATUS_OK
ReadX 11104 978944 4096 4096 NT_STATUS_OK
ReadX 11104 983040 61440 61440 NT_STATUS_OK
ReadX 11104 1044480 4096 4096 NT_STATUS_OK
ReadX 11104 1048576 61440 61440 NT_STATUS_OK
ReadX 11104 1110016 4096 4096 NT_STATUS_OK
ReadX 11104 1114112 61440 61440 NT_STATUS_OK
ReadX 11104 1175552 4096 4096 NT_STATUS_OK
ReadX 11104 1179648 61440 61440 NT_STATUS_OK
ReadX 11104 1241088 4096 4096 NT_STATUS_OK
ReadX 11104 1245184 61440 61440 NT_STATUS_OK
ReadX 11104 1306624 4096 4096 NT_STATUS_OK
ReadX 11104 1310720 61440 61440 NT_STATUS_OK
ReadX 11104 1372160 4096 4096 NT_STATUS_OK
ReadX 11104 1376256 61440 61440 NT_STATUS_OK
ReadX 11104 1437696 4096 4096 NT_STATUS_OK
ReadX 11104 1441792 61440 61440 NT_STATUS_OK
ReadX 11104 1503232 4096 4096 NT_STATUS_OK
ReadX 11104 1507328 61440 61440 NT_STATUS_OK
ReadX 11104 1568768 4096 4096 NT_STATUS_OK
ReadX 11104 1572864 61440 61440 NT_STATUS_OK
ReadX 11104 1634304 4096 4096 NT_STATUS_OK
ReadX 11104 1638400 61440 61440 NT_STATUS_OK
ReadX 11104 1699840 4096 4096 NT_STATUS_OK
ReadX 11104 1703936 61440 61440 NT_STATUS_OK
ReadX 11104 1765376 4096 4096 NT_STATUS_OK
ReadX 11104 1769472 61440 61440 NT_STATUS_OK
ReadX 11104 1830912 4096 4096 NT_STATUS_OK
ReadX 11104 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11106 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 1005 NT_STATUS_OK
ReadX 11106 2156 24 24 NT_STATUS_OK
ReadX 11106 2139 276 276 NT_STATUS_OK
ReadX 11106 2136 14 14 NT_STATUS_OK
ReadX 11106 2136 7 7 NT_STATUS_OK
ReadX 11106 2138 12 12 NT_STATUS_OK
ReadX 11106 2137 8 8 NT_STATUS_OK
ReadX 11106 2135 15 15 NT_STATUS_OK
ReadX 11106 0 16 16 NT_STATUS_OK
ReadX 11106 16 2048 2048 NT_STATUS_OK
ReadX 11106 2064 2048 2048 NT_STATUS_OK
ReadX 11106 257 2048 2048 NT_STATUS_OK
ReadX 11106 385 2048 2048 NT_STATUS_OK
ReadX 11106 513 2048 2048 NT_STATUS_OK
ReadX 11106 641 2048 2048 NT_STATUS_OK
ReadX 11106 769 2048 2048 NT_STATUS_OK
ReadX 11106 897 2048 2048 NT_STATUS_OK
ReadX 11106 1025 2048 2048 NT_STATUS_OK
ReadX 11106 1153 2048 2048 NT_STATUS_OK
ReadX 11106 1281 2048 2048 NT_STATUS_OK
ReadX 11106 1409 2048 2048 NT_STATUS_OK
ReadX 11106 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11108 NT_STATUS_OK
Close 11108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11111 NT_STATUS_OK
WriteX 11111 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11111 258 NT_STATUS_OK
WriteX 11111 0 10575 10575 NT_STATUS_OK
Flush 11111 NT_STATUS_OK
Close 11111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11112 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11114 NT_STATUS_OK
ReadX 11114 0 4096 4096 NT_STATUS_OK
Close 11106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11116 NT_STATUS_OK
LockX 11116 2147483538 1 NT_STATUS_OK
UnlockX 11116 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1005 NT_STATUS_OK
ReadX 11116 0 512 512 NT_STATUS_OK
ReadX 11116 512 512 512 NT_STATUS_OK
ReadX 11116 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11116 1004 NT_STATUS_OK
Close 11116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11117 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1005 NT_STATUS_OK
ReadX 11117 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11118 NT_STATUS_OK
LockX 11118 2147483538 1 NT_STATUS_OK
UnlockX 11118 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11118 1005 NT_STATUS_OK
ReadX 11118 0 512 512 NT_STATUS_OK
ReadX 11118 512 512 512 NT_STATUS_OK
ReadX 11118 1024 512 512 NT_STATUS_OK
ReadX 11118 288 20 20 NT_STATUS_OK
ReadX 11118 308 2084 2084 NT_STATUS_OK
ReadX 11118 388 2084 2084 NT_STATUS_OK
ReadX 11118 388 2084 2084 NT_STATUS_OK
ReadX 11105 2157 1386 1386 NT_STATUS_OK
ReadX 11118 2472 399 399 NT_STATUS_OK
ReadX 11118 3072 1536 1536 NT_STATUS_OK
ReadX 11118 544 149 149 NT_STATUS_OK
ReadX 11118 693 485 485 NT_STATUS_OK
Close 11118 NT_STATUS_OK
ReadX 11105 2157 4096 4096 NT_STATUS_OK
ReadX 11105 6253 4096 4096 NT_STATUS_OK
ReadX 11105 10349 4096 4096 NT_STATUS_OK
ReadX 11105 14445 4096 4096 NT_STATUS_OK
ReadX 11105 18541 4096 4096 NT_STATUS_OK
ReadX 11105 22637 256 256 NT_STATUS_OK
ReadX 11105 22893 4096 4096 NT_STATUS_OK
ReadX 11105 26989 4096 4096 NT_STATUS_OK
ReadX 11105 31085 4096 4096 NT_STATUS_OK
ReadX 11105 35181 4096 4096 NT_STATUS_OK
ReadX 11105 39277 4096 4096 NT_STATUS_OK
ReadX 11105 43373 4096 4096 NT_STATUS_OK
ReadX 11105 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11105 2157 1024 1024 NT_STATUS_OK
ReadX 11105 1667 4688 4688 NT_STATUS_OK
ReadX 11105 6355 3516 3516 NT_STATUS_OK
ReadX 11105 9871 16384 16384 NT_STATUS_OK
ReadX 11105 26255 3771 3771 NT_STATUS_OK
ReadX 11105 30026 2048 2048 NT_STATUS_OK
ReadX 11105 32074 1024 1024 NT_STATUS_OK
ReadX 11105 33098 6652 6652 NT_STATUS_OK
ReadX 11105 39750 16384 16384 NT_STATUS_OK
ReadX 11105 56134 10496 10496 NT_STATUS_OK
ReadX 11105 66630 1784 1784 NT_STATUS_OK
ReadX 11105 68414 90 90 NT_STATUS_OK
ReadX 11105 68504 273 273 NT_STATUS_OK
ReadX 11105 68777 1600 1600 NT_STATUS_OK
ReadX 11105 70377 640 640 NT_STATUS_OK
ReadX 11105 71017 1280 1280 NT_STATUS_OK
ReadX 11105 72297 8464 8464 NT_STATUS_OK
ReadX 11105 80761 158 158 NT_STATUS_OK
ReadX 11105 80919 912 912 NT_STATUS_OK
ReadX 11105 81831 1980 1980 NT_STATUS_OK
ReadX 11105 83811 2256 2256 NT_STATUS_OK
ReadX 11105 86067 400 400 NT_STATUS_OK
ReadX 11105 86467 252 252 NT_STATUS_OK
ReadX 11105 86719 42 42 NT_STATUS_OK
ReadX 11105 86761 725 725 NT_STATUS_OK
ReadX 11105 2009 512 512 NT_STATUS_OK
ReadX 11105 3895 9 9 NT_STATUS_OK
ReadX 11105 3781 46 46 NT_STATUS_OK
ReadX 11105 4059 92 92 NT_STATUS_OK
ReadX 11105 3781 92 92 NT_STATUS_OK
ReadX 11105 3986 184 184 NT_STATUS_OK
ReadX 11105 3987 16384 16384 NT_STATUS_OK
ReadX 11105 3902 16384 16384 NT_STATUS_OK
ReadX 11105 3781 10240 10240 NT_STATUS_OK
ReadX 11105 3821 16384 16384 NT_STATUS_OK
ReadX 11105 3891 935 935 NT_STATUS_OK
ReadX 11105 4060 10240 10240 NT_STATUS_OK
ReadX 11105 4059 184 184 NT_STATUS_OK
ReadX 11105 256 184 184 NT_STATUS_OK
ReadX 11105 256 1026 1026 NT_STATUS_OK
ReadX 11105 3901 326 326 NT_STATUS_OK
ReadX 11105 3899 652 652 NT_STATUS_OK
ReadX 11105 256 2 2 NT_STATUS_OK
ReadX 11105 258 4948 4948 NT_STATUS_OK
Close 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11123 NT_STATUS_OK
WriteX 11123 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11123 258 NT_STATUS_OK
WriteX 11123 0 65536 65536 NT_STATUS_OK
WriteX 11123 65536 65536 65536 NT_STATUS_OK
WriteX 11123 131072 65536 65536 NT_STATUS_OK
WriteX 11123 196608 65536 65536 NT_STATUS_OK
WriteX 11123 262144 65536 65536 NT_STATUS_OK
WriteX 11123 327680 65536 65536 NT_STATUS_OK
WriteX 11123 393216 65536 65536 NT_STATUS_OK
WriteX 11123 458752 65536 65536 NT_STATUS_OK
WriteX 11123 524288 65536 65536 NT_STATUS_OK
WriteX 11123 589824 35257 35257 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11125 NT_STATUS_OK
Close 11125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11128 NT_STATUS_OK
WriteX 11128 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11128 258 NT_STATUS_OK
WriteX 11128 0 65536 65536 NT_STATUS_OK
WriteX 11128 65536 65536 65536 NT_STATUS_OK
WriteX 11128 131072 65536 65536 NT_STATUS_OK
WriteX 11128 196608 65536 65536 NT_STATUS_OK
WriteX 11128 262144 65536 65536 NT_STATUS_OK
WriteX 11128 327680 65536 65536 NT_STATUS_OK
WriteX 11128 393216 65536 65536 NT_STATUS_OK
WriteX 11128 458752 65536 65536 NT_STATUS_OK
WriteX 11128 524288 65536 65536 NT_STATUS_OK
WriteX 11128 589824 57598 57598 NT_STATUS_OK
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11130 NT_STATUS_OK
WriteX 11130 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11130 258 NT_STATUS_OK
WriteX 11130 0 12543 12543 NT_STATUS_OK
Flush 11130 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11132 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11135 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11136 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 1005 NT_STATUS_OK
ReadX 11136 1938 24 24 NT_STATUS_OK
ReadX 11136 1920 276 276 NT_STATUS_OK
ReadX 11136 1918 14 14 NT_STATUS_OK
ReadX 11136 1918 7 7 NT_STATUS_OK
ReadX 11136 1919 12 12 NT_STATUS_OK
ReadX 11136 1919 8 8 NT_STATUS_OK
ReadX 11136 1917 15 15 NT_STATUS_OK
ReadX 11136 0 16 16 NT_STATUS_OK
ReadX 11136 16 2048 2048 NT_STATUS_OK
ReadX 11136 2064 2048 2048 NT_STATUS_OK
ReadX 11136 257 2048 2048 NT_STATUS_OK
ReadX 11136 385 2048 2048 NT_STATUS_OK
ReadX 11136 513 2048 2048 NT_STATUS_OK
ReadX 11136 641 2048 2048 NT_STATUS_OK
ReadX 11136 769 2048 2048 NT_STATUS_OK
ReadX 11136 897 2048 2048 NT_STATUS_OK
ReadX 11136 1025 2048 2048 NT_STATUS_OK
ReadX 11136 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11138 NT_STATUS_OK
Close 11138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11141 NT_STATUS_OK
WriteX 11141 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11141 258 NT_STATUS_OK
WriteX 11141 0 11588 11588 NT_STATUS_OK
Flush 11141 NT_STATUS_OK
Close 11141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11142 NT_STATUS_OK
Close 11142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11144 NT_STATUS_OK
ReadX 11144 0 4096 4096 NT_STATUS_OK
Close 11136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11146 NT_STATUS_OK
WriteX 11146 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11146 258 NT_STATUS_OK
WriteX 11146 0 11615 11615 NT_STATUS_OK
Flush 11146 NT_STATUS_OK
Close 11146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11150 NT_STATUS_OK
ReadX 11150 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11152 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11155 NT_STATUS_OK
WriteX 11155 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11155 258 NT_STATUS_OK
WriteX 11155 0 65536 65536 NT_STATUS_OK
WriteX 11155 65536 16050 16050 NT_STATUS_OK
Close 11155 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11135 1939 64 64 NT_STATUS_OK
ReadX 11135 128 248 248 NT_STATUS_OK
ReadX 11135 128 568 568 NT_STATUS_OK
ReadX 11135 3872 1536 1536 NT_STATUS_OK
ReadX 11135 3456 2560 2560 NT_STATUS_OK
ReadX 11135 3136 512 512 NT_STATUS_OK
ReadX 11135 2880 4096 4096 NT_STATUS_OK
ReadX 11135 3264 3072 3072 NT_STATUS_OK
ReadX 11135 320 4096 4096 NT_STATUS_OK
ReadX 11135 1024 4096 4096 NT_STATUS_OK
ReadX 11135 3616 4096 4096 NT_STATUS_OK
ReadX 11135 1939 64 64 NT_STATUS_OK
ReadX 11135 128 248 248 NT_STATUS_OK
ReadX 11135 128 608 608 NT_STATUS_OK
ReadX 11135 2858 1024 1024 NT_STATUS_OK
ReadX 11135 2810 4096 4096 NT_STATUS_OK
ReadX 11135 2826 4096 4096 NT_STATUS_OK
ReadX 11135 2580 2048 2048 NT_STATUS_OK
ReadX 11135 2800 2560 2560 NT_STATUS_OK
ReadX 11135 2100 4096 4096 NT_STATUS_OK
ReadX 11135 2084 4096 4096 NT_STATUS_OK
ReadX 11135 868 4096 4096 NT_STATUS_OK
ReadX 11135 2324 4096 4096 NT_STATUS_OK
ReadX 11135 884 4096 4096 NT_STATUS_OK
ReadX 11135 2604 1024 1024 NT_STATUS_OK
ReadX 11135 580 4096 4096 NT_STATUS_OK
ReadX 11135 596 4096 4096 NT_STATUS_OK
ReadX 11135 2752 4096 4096 NT_STATUS_OK
ReadX 11135 2842 1024 1024 NT_STATUS_OK
ReadX 11135 660 4096 4096 NT_STATUS_OK
ReadX 11135 2720 4096 4096 NT_STATUS_OK
ReadX 11135 2736 4096 4096 NT_STATUS_OK
ReadX 11135 628 4096 4096 NT_STATUS_OK
ReadX 11135 2704 4096 4096 NT_STATUS_OK
ReadX 11135 1556 4096 4096 NT_STATUS_OK
ReadX 11135 576 4096 4096 NT_STATUS_OK
ReadX 11135 3168 1536 1536 NT_STATUS_OK
ReadX 11135 832 4096 4096 NT_STATUS_OK
ReadX 11135 1088 4096 4096 NT_STATUS_OK
ReadX 11135 1344 4096 4096 NT_STATUS_OK
ReadX 11135 1600 4096 4096 NT_STATUS_OK
ReadX 11135 1856 4096 4096 NT_STATUS_OK
ReadX 11135 2112 4096 4096 NT_STATUS_OK
ReadX 11135 1892 4096 4096 NT_STATUS_OK
ReadX 11135 820 4096 4096 NT_STATUS_OK
ReadX 11135 788 4096 4096 NT_STATUS_OK
ReadX 11135 1604 4096 4096 NT_STATUS_OK
ReadX 11135 3648 4096 4096 NT_STATUS_OK
ReadX 11135 2608 4096 4096 NT_STATUS_OK
ReadX 11135 548 4096 4096 NT_STATUS_OK
ReadX 11135 740 4096 4096 NT_STATUS_OK
ReadX 11135 1344 4096 4096 NT_STATUS_OK
ReadX 11135 3392 4096 4096 NT_STATUS_OK
ReadX 11135 3904 4096 4096 NT_STATUS_OK
ReadX 11135 644 4096 4096 NT_STATUS_OK
ReadX 11135 676 4096 4096 NT_STATUS_OK
ReadX 11135 2688 4096 4096 NT_STATUS_OK
ReadX 11135 320 4096 4096 NT_STATUS_OK
ReadX 11135 900 4096 4096 NT_STATUS_OK
ReadX 11135 1908 4096 4096 NT_STATUS_OK
ReadX 11135 852 4096 4096 NT_STATUS_OK
ReadX 11135 724 4096 4096 NT_STATUS_OK
ReadX 11135 2292 4096 4096 NT_STATUS_OK
ReadX 11135 612 4096 4096 NT_STATUS_OK
ReadX 11135 388 4096 4096 NT_STATUS_OK
ReadX 11135 2368 4096 4096 NT_STATUS_OK
ReadX 11135 2624 4096 4096 NT_STATUS_OK
ReadX 11135 500 4096 4096 NT_STATUS_OK
ReadX 11135 356 4096 4096 NT_STATUS_OK
ReadX 11135 1024 4096 4096 NT_STATUS_OK
ReadX 11135 576 4096 4096 NT_STATUS_OK
ReadX 11135 340 4096 4096 NT_STATUS_OK
ReadX 11135 420 4096 4096 NT_STATUS_OK
ReadX 11135 1600 4096 4096 NT_STATUS_OK
ReadX 11135 404 4096 4096 NT_STATUS_OK
ReadX 11135 1428 4096 4096 NT_STATUS_OK
ReadX 11135 2656 4096 4096 NT_STATUS_OK
ReadX 11135 2624 4096 4096 NT_STATUS_OK
ReadX 11135 452 4096 4096 NT_STATUS_OK
ReadX 11135 692 4096 4096 NT_STATUS_OK
ReadX 11135 564 4096 4096 NT_STATUS_OK
ReadX 11135 372 4096 4096 NT_STATUS_OK
ReadX 11135 468 4096 4096 NT_STATUS_OK
ReadX 11135 484 4096 4096 NT_STATUS_OK
ReadX 11135 1088 4096 4096 NT_STATUS_OK
ReadX 11135 1924 4096 4096 NT_STATUS_OK
ReadX 11135 2768 4096 4096 NT_STATUS_OK
ReadX 11135 832 4096 4096 NT_STATUS_OK
ReadX 11135 836 4096 4096 NT_STATUS_OK
ReadX 11135 1856 4096 4096 NT_STATUS_OK
ReadX 11135 2640 4096 4096 NT_STATUS_OK
ReadX 11135 436 4096 4096 NT_STATUS_OK
ReadX 11135 1828 4096 4096 NT_STATUS_OK
ReadX 11135 804 4096 4096 NT_STATUS_OK
ReadX 11135 1860 4096 4096 NT_STATUS_OK
ReadX 11135 1812 4096 4096 NT_STATUS_OK
ReadX 11135 756 4096 4096 NT_STATUS_OK
ReadX 11135 1636 4096 4096 NT_STATUS_OK
ReadX 11135 772 4096 4096 NT_STATUS_OK
ReadX 11135 2036 4096 4096 NT_STATUS_OK
ReadX 11135 1220 4096 4096 NT_STATUS_OK
ReadX 11135 1652 4096 4096 NT_STATUS_OK
ReadX 11135 2588 4096 4096 NT_STATUS_OK
ReadX 11135 916 4096 4096 NT_STATUS_OK
ReadX 11135 260 4096 4096 NT_STATUS_OK
ReadX 11135 932 4096 4096 NT_STATUS_OK
ReadX 11135 2624 4096 4096 NT_STATUS_OK
ReadX 11135 308 4096 4096 NT_STATUS_OK
ReadX 11135 292 4096 4096 NT_STATUS_OK
ReadX 11135 1140 4096 4096 NT_STATUS_OK
ReadX 11135 276 4096 4096 NT_STATUS_OK
ReadX 11135 2020 4096 4096 NT_STATUS_OK
ReadX 11135 2880 4096 4096 NT_STATUS_OK
ReadX 11135 516 4096 4096 NT_STATUS_OK
ReadX 11135 1844 4096 4096 NT_STATUS_OK
ReadX 11135 1124 4096 4096 NT_STATUS_OK
ReadX 11135 3136 4096 4096 NT_STATUS_OK
ReadX 11135 324 4096 4096 NT_STATUS_OK
ReadX 11135 1156 4096 4096 NT_STATUS_OK
ReadX 11135 1172 4096 4096 NT_STATUS_OK
ReadX 11135 2112 4096 4096 NT_STATUS_OK
ReadX 11135 2368 4096 4096 NT_STATUS_OK
ReadX 11135 964 4096 4096 NT_STATUS_OK
ReadX 11135 980 4096 4096 NT_STATUS_OK
ReadX 11135 1012 4096 4096 NT_STATUS_OK
ReadX 11135 532 4096 4096 NT_STATUS_OK
ReadX 11135 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11135 1620 4096 4096 NT_STATUS_OK
ReadX 11135 1604 4096 4096 NT_STATUS_OK
ReadX 11135 2116 4096 4096 NT_STATUS_OK
ReadX 11135 2132 4096 4096 NT_STATUS_OK
ReadX 11135 2148 4096 4096 NT_STATUS_OK
ReadX 11135 2276 4096 4096 NT_STATUS_OK
ReadX 11135 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11160 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
WriteX 11160 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11160 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1004 NT_STATUS_OK
Close 11117 NT_STATUS_OK
WriteX 11160 0 65536 65536 NT_STATUS_OK
WriteX 11160 65536 64850 64850 NT_STATUS_OK
Close 11160 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11162 NT_STATUS_OK
WriteX 11162 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 258 NT_STATUS_OK
ReadX 11135 2068 4096 4096 NT_STATUS_OK
ReadX 11135 1588 4096 4096 NT_STATUS_OK
ReadX 11135 1572 4096 4096 NT_STATUS_OK
WriteX 11162 0 18630 18630 NT_STATUS_OK
Flush 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11135 612 4096 4096 NT_STATUS_OK
ReadX 11135 564 4096 4096 NT_STATUS_OK
ReadX 11135 1876 4096 4096 NT_STATUS_OK
ReadX 11135 628 4096 4096 NT_STATUS_OK
ReadX 11135 740 4096 4096 NT_STATUS_OK
ReadX 11135 724 4096 4096 NT_STATUS_OK
ReadX 11135 644 4096 4096 NT_STATUS_OK
ReadX 11135 2324 4096 4096 NT_STATUS_OK
ReadX 11135 660 4096 4096 NT_STATUS_OK
ReadX 11135 852 4096 4096 NT_STATUS_OK
ReadX 11135 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11135 2368 4096 4096 NT_STATUS_OK
ReadX 11135 1024 4096 4096 NT_STATUS_OK
ReadX 11135 320 4096 4096 NT_STATUS_OK
ReadX 11135 580 4096 4096 NT_STATUS_OK
ReadX 11135 3136 512 512 NT_STATUS_OK
ReadX 11135 2880 4096 4096 NT_STATUS_OK
Close 11135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 61440 4096 4096 NT_STATUS_OK
ReadX 11167 126976 4096 4096 NT_STATUS_OK
WriteX 11167 0 65536 65536 NT_STATUS_OK
WriteX 11167 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 61440 4096 4096 NT_STATUS_OK
ReadX 11168 126976 4096 4096 NT_STATUS_OK
ReadX 11168 192512 4096 4096 NT_STATUS_OK
ReadX 11168 258048 4096 4096 NT_STATUS_OK
WriteX 11168 0 65536 65536 NT_STATUS_OK
WriteX 11168 65536 65536 65536 NT_STATUS_OK
WriteX 11168 131072 65536 65536 NT_STATUS_OK
WriteX 11168 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 61440 4096 4096 NT_STATUS_OK
ReadX 11169 126976 4096 4096 NT_STATUS_OK
ReadX 11169 192512 4096 4096 NT_STATUS_OK
ReadX 11169 258048 4096 4096 NT_STATUS_OK
ReadX 11169 323584 4096 4096 NT_STATUS_OK
ReadX 11169 389120 4096 4096 NT_STATUS_OK
ReadX 11169 454656 4096 4096 NT_STATUS_OK
ReadX 11169 520192 4096 4096 NT_STATUS_OK
WriteX 11169 0 65536 65536 NT_STATUS_OK
WriteX 11169 65536 65536 65536 NT_STATUS_OK
WriteX 11169 131072 65536 65536 NT_STATUS_OK
WriteX 11169 196608 65536 65536 NT_STATUS_OK
WriteX 11169 262144 65536 65536 NT_STATUS_OK
WriteX 11169 327680 65536 65536 NT_STATUS_OK
WriteX 11169 393216 65536 65536 NT_STATUS_OK
WriteX 11169 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11170 NT_STATUS_OK
ReadX 11170 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11172 NT_STATUS_OK
WriteX 11172 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11172 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11170 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11170 0 8192 8192 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11174 NT_STATUS_OK
Close 11174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Close 11168 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11177 NT_STATUS_OK
WriteX 11177 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11177 258 NT_STATUS_OK
WriteX 11177 0 62591 62591 NT_STATUS_OK
Close 11177 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11182 NT_STATUS_OK
WriteX 11182 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11182 258 NT_STATUS_OK
WriteX 11182 0 10845 10845 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11184 NT_STATUS_OK
Close 11184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11187 NT_STATUS_OK
WriteX 11187 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11187 258 NT_STATUS_OK
WriteX 11187 0 30118 30118 NT_STATUS_OK
Close 11187 NT_STATUS_OK
WriteX 11170 0 4096 4096 NT_STATUS_OK
WriteX 11172 0 64 64 NT_STATUS_OK
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11170 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 61440 61440 NT_STATUS_OK
ReadX 11189 61440 4096 4096 NT_STATUS_OK
ReadX 11189 65536 61440 61440 NT_STATUS_OK
ReadX 11189 126976 4096 4096 NT_STATUS_OK
ReadX 11189 131072 61440 61440 NT_STATUS_OK
ReadX 11189 192512 4096 4096 NT_STATUS_OK
ReadX 11189 196608 61440 61440 NT_STATUS_OK
ReadX 11189 258048 4096 4096 NT_STATUS_OK
ReadX 11189 262144 61440 61440 NT_STATUS_OK
ReadX 11189 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11190 NT_STATUS_OK
ReadX 11190 0 61440 61440 NT_STATUS_OK
ReadX 11190 61440 4096 4096 NT_STATUS_OK
ReadX 11190 65536 61440 61440 NT_STATUS_OK
ReadX 11190 126976 4096 4096 NT_STATUS_OK
ReadX 11190 131072 61440 61440 NT_STATUS_OK
ReadX 11190 192512 4096 4096 NT_STATUS_OK
ReadX 11190 196608 61440 61440 NT_STATUS_OK
ReadX 11190 258048 4096 4096 NT_STATUS_OK
ReadX 11190 262144 61440 61440 NT_STATUS_OK
ReadX 11190 323584 4096 4096 NT_STATUS_OK
ReadX 11190 327680 61440 61440 NT_STATUS_OK
ReadX 11190 389120 4096 4096 NT_STATUS_OK
ReadX 11190 393216 61440 61440 NT_STATUS_OK
ReadX 11190 454656 4096 4096 NT_STATUS_OK
ReadX 11190 458752 61440 61440 NT_STATUS_OK
ReadX 11190 520192 4096 4096 NT_STATUS_OK
ReadX 11190 524288 61440 61440 NT_STATUS_OK
ReadX 11190 585728 4096 4096 NT_STATUS_OK
ReadX 11190 589824 61440 61440 NT_STATUS_OK
ReadX 11190 651264 4096 4096 NT_STATUS_OK
ReadX 11190 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 61440 61440 NT_STATUS_OK
ReadX 11191 61440 4096 4096 NT_STATUS_OK
ReadX 11191 65536 61440 61440 NT_STATUS_OK
ReadX 11191 126976 4096 4096 NT_STATUS_OK
ReadX 11191 131072 61440 61440 NT_STATUS_OK
ReadX 11191 192512 4096 4096 NT_STATUS_OK
ReadX 11191 196608 61440 61440 NT_STATUS_OK
ReadX 11191 258048 4096 4096 NT_STATUS_OK
ReadX 11191 262144 61440 61440 NT_STATUS_OK
ReadX 11191 323584 4096 4096 NT_STATUS_OK
ReadX 11191 327680 61440 61440 NT_STATUS_OK
ReadX 11191 389120 4096 4096 NT_STATUS_OK
ReadX 11191 393216 61440 61440 NT_STATUS_OK
ReadX 11191 454656 4096 4096 NT_STATUS_OK
ReadX 11191 458752 61440 61440 NT_STATUS_OK
ReadX 11191 520192 4096 4096 NT_STATUS_OK
ReadX 11191 524288 61440 61440 NT_STATUS_OK
ReadX 11191 585728 4096 4096 NT_STATUS_OK
ReadX 11191 589824 61440 61440 NT_STATUS_OK
ReadX 11191 651264 4096 4096 NT_STATUS_OK
ReadX 11191 655360 61440 61440 NT_STATUS_OK
ReadX 11191 716800 4096 4096 NT_STATUS_OK
ReadX 11191 720896 61440 61440 NT_STATUS_OK
ReadX 11191 782336 4096 4096 NT_STATUS_OK
ReadX 11191 786432 61440 61440 NT_STATUS_OK
ReadX 11191 847872 4096 4096 NT_STATUS_OK
ReadX 11191 851968 61440 61440 NT_STATUS_OK
ReadX 11191 913408 4096 4096 NT_STATUS_OK
ReadX 11191 917504 61440 61440 NT_STATUS_OK
ReadX 11191 978944 4096 4096 NT_STATUS_OK
ReadX 11191 983040 61440 61440 NT_STATUS_OK
ReadX 11191 1044480 4096 4096 NT_STATUS_OK
ReadX 11191 1048576 61440 61440 NT_STATUS_OK
ReadX 11191 1110016 4096 4096 NT_STATUS_OK
ReadX 11191 1114112 61440 61440 NT_STATUS_OK
ReadX 11191 1175552 4096 4096 NT_STATUS_OK
ReadX 11191 1179648 61440 61440 NT_STATUS_OK
ReadX 11191 1241088 4096 4096 NT_STATUS_OK
ReadX 11191 1245184 61440 61440 NT_STATUS_OK
ReadX 11191 1306624 4096 4096 NT_STATUS_OK
ReadX 11191 1310720 61440 61440 NT_STATUS_OK
ReadX 11191 1372160 4096 4096 NT_STATUS_OK
ReadX 11191 1376256 61440 61440 NT_STATUS_OK
ReadX 11191 1437696 4096 4096 NT_STATUS_OK
ReadX 11191 1441792 61440 61440 NT_STATUS_OK
ReadX 11191 1503232 4096 4096 NT_STATUS_OK
ReadX 11191 1507328 61440 61440 NT_STATUS_OK
ReadX 11191 1568768 4096 4096 NT_STATUS_OK
ReadX 11191 1572864 61440 61440 NT_STATUS_OK
ReadX 11191 1634304 4096 4096 NT_STATUS_OK
ReadX 11191 1638400 61440 61440 NT_STATUS_OK
ReadX 11191 1699840 4096 4096 NT_STATUS_OK
ReadX 11191 1703936 61440 61440 NT_STATUS_OK
ReadX 11191 1765376 4096 4096 NT_STATUS_OK
ReadX 11191 1769472 61440 61440 NT_STATUS_OK
ReadX 11191 1830912 4096 4096 NT_STATUS_OK
ReadX 11191 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Close 11191 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
ReadX 11196 4096 4096 4096 NT_STATUS_OK
ReadX 11196 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11194 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11196 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11200 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 8192 8192 NT_STATUS_OK
ReadX 11204 8192 8192 8192 NT_STATUS_OK
ReadX 11204 16384 8192 8192 NT_STATUS_OK
ReadX 11204 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11206 NT_STATUS_OK
Close 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11209 NT_STATUS_OK
WriteX 11209 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11209 258 NT_STATUS_OK
WriteX 11209 0 10438 10438 NT_STATUS_OK
Close 11209 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11210 NT_STATUS_OK
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11211 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11212 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11213 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11214 NT_STATUS_OK
Close 11214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11215 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11217 NT_STATUS_OK
Close 11217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11218 NT_STATUS_OK
ReadX 11218 0 4096 4096 NT_STATUS_OK
ReadX 11218 4096 4096 4096 NT_STATUS_OK
ReadX 11218 8192 4096 4096 NT_STATUS_OK
ReadX 11218 12288 8192 8192 NT_STATUS_OK
ReadX 11218 20480 8192 8192 NT_STATUS_OK
ReadX 11218 28672 8192 8192 NT_STATUS_OK
ReadX 11218 36864 8192 8192 NT_STATUS_OK
ReadX 11218 45056 8192 8192 NT_STATUS_OK
ReadX 11218 53248 8192 8192 NT_STATUS_OK
ReadX 11218 61440 8192 8192 NT_STATUS_OK
ReadX 11218 69632 8192 8192 NT_STATUS_OK
ReadX 11218 77824 8192 8192 NT_STATUS_OK
ReadX 11218 86016 8192 8192 NT_STATUS_OK
ReadX 11218 94208 8192 8192 NT_STATUS_OK
ReadX 11218 102400 8192 8192 NT_STATUS_OK
ReadX 11218 110592 8192 8192 NT_STATUS_OK
ReadX 11218 118784 8192 8192 NT_STATUS_OK
ReadX 11218 126976 8192 8192 NT_STATUS_OK
ReadX 11218 135168 8192 8192 NT_STATUS_OK
ReadX 11218 143360 8192 8192 NT_STATUS_OK
ReadX 11218 151552 8192 8192 NT_STATUS_OK
ReadX 11218 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11218 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11220 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11223 NT_STATUS_OK
WriteX 11223 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11223 258 NT_STATUS_OK
WriteX 11223 0 28489 28489 NT_STATUS_OK
Close 11223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11224 NT_STATUS_OK
Close 11224 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11226 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11227 NT_STATUS_OK
Close 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11226 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11230 NT_STATUS_OK
ReadX 11230 0 8192 8192 NT_STATUS_OK
ReadX 11230 8192 8192 8192 NT_STATUS_OK
ReadX 11230 16384 8192 8192 NT_STATUS_OK
ReadX 11230 24576 8192 8192 NT_STATUS_OK
ReadX 11230 32768 16384 16384 NT_STATUS_OK
ReadX 11230 49152 8192 8192 NT_STATUS_OK
ReadX 11230 57344 8192 8192 NT_STATUS_OK
ReadX 11230 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11232 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11235 NT_STATUS_OK
WriteX 11235 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11235 258 NT_STATUS_OK
WriteX 11235 0 29253 29253 NT_STATUS_OK
Close 11235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11236 NT_STATUS_OK
Close 11236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11237 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11239 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11242 NT_STATUS_OK
WriteX 11242 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11242 258 NT_STATUS_OK
WriteX 11242 0 30183 30183 NT_STATUS_OK
Close 11242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11243 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11245 NT_STATUS_OK
WriteX 11245 0 510 510 NT_STATUS_OK
WriteX 11245 510 512 512 NT_STATUS_OK
WriteX 11245 1022 510 510 NT_STATUS_OK
WriteX 11245 1532 510 510 NT_STATUS_OK
WriteX 11245 2042 168 168 NT_STATUS_OK
Close 11245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11246 NT_STATUS_OK
Close 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
WriteX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11249 NT_STATUS_OK
ReadX 11249 61440 4096 4096 NT_STATUS_OK
ReadX 11249 126976 4096 4096 NT_STATUS_OK
WriteX 11249 0 65536 65536 NT_STATUS_OK
WriteX 11249 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11250 NT_STATUS_OK
ReadX 11250 61440 4096 4096 NT_STATUS_OK
ReadX 11250 126976 4096 4096 NT_STATUS_OK
ReadX 11250 192512 4096 4096 NT_STATUS_OK
ReadX 11250 258048 4096 4096 NT_STATUS_OK
WriteX 11250 0 65536 65536 NT_STATUS_OK
WriteX 11250 65536 65536 65536 NT_STATUS_OK
WriteX 11250 131072 65536 65536 NT_STATUS_OK
WriteX 11250 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 61440 4096 4096 NT_STATUS_OK
ReadX 11251 126976 4096 4096 NT_STATUS_OK
ReadX 11251 192512 4096 4096 NT_STATUS_OK
ReadX 11251 258048 4096 4096 NT_STATUS_OK
ReadX 11251 323584 4096 4096 NT_STATUS_OK
ReadX 11251 389120 4096 4096 NT_STATUS_OK
ReadX 11251 454656 4096 4096 NT_STATUS_OK
ReadX 11251 520192 4096 4096 NT_STATUS_OK
WriteX 11251 0 65536 65536 NT_STATUS_OK
WriteX 11251 65536 65536 65536 NT_STATUS_OK
WriteX 11251 131072 65536 65536 NT_STATUS_OK
WriteX 11251 196608 65536 65536 NT_STATUS_OK
WriteX 11251 262144 65536 65536 NT_STATUS_OK
WriteX 11251 327680 65536 65536 NT_STATUS_OK
WriteX 11251 393216 65536 65536 NT_STATUS_OK
WriteX 11251 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11249 NT_STATUS_OK
Close 11250 NT_STATUS_OK
Close 11251 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11254 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11258 NT_STATUS_OK
Close 11258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11267 NT_STATUS_OK
Close 11267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11270 NT_STATUS_OK
Close 11270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11276 NT_STATUS_OK
Close 11276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11286 NT_STATUS_OK
Close 11286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11291 NT_STATUS_OK
Close 11291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11296 NT_STATUS_OK
Close 11296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11301 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11306 NT_STATUS_OK
Close 11306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11311 NT_STATUS_OK
Close 11311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11314 NT_STATUS_OK
Close 11314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11317 NT_STATUS_OK
Close 11317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11320 NT_STATUS_OK
WriteX 11320 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11320 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11320 0 65536 65536 NT_STATUS_OK
WriteX 11320 65536 65536 65536 NT_STATUS_OK
WriteX 11320 131072 65536 65536 NT_STATUS_OK
WriteX 11320 196608 65536 65536 NT_STATUS_OK
WriteX 11320 262144 26634 26634 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11325 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11326 NT_STATUS_OK
Close 11326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
ReadX 11328 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11329 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11336 NT_STATUS_OK
Close 11336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11342 NT_STATUS_OK
Close 11342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11345 NT_STATUS_OK
Close 11345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11361 NT_STATUS_OK
Close 11361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11366 NT_STATUS_OK
Close 11366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11371 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11376 NT_STATUS_OK
Close 11376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11385 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11390 NT_STATUS_OK
Close 11390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11393 NT_STATUS_OK
Close 11393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11395 NT_STATUS_OK
Close 11395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11405 NT_STATUS_OK
Close 11405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11406 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11407 NT_STATUS_OK
ReadX 11407 0 4096 4096 NT_STATUS_OK
Close 11407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 4096 4096 NT_STATUS_OK
Close 11408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11409 NT_STATUS_OK
ReadX 11409 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11421 NT_STATUS_OK
ReadX 11421 0 4096 4096 NT_STATUS_OK
Close 11421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11422 NT_STATUS_OK
ReadX 11422 0 4096 4096 NT_STATUS_OK
Close 11422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11423 NT_STATUS_OK
ReadX 11423 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11409 NT_STATUS_OK
Close 11423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11452 0 4096 4096 NT_STATUS_OK
Close 11452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11454 NT_STATUS_OK
ReadX 11454 0 4096 4096 NT_STATUS_OK
ReadX 11454 4096 4096 4096 NT_STATUS_OK
ReadX 11454 8192 4096 4096 NT_STATUS_OK
ReadX 11454 12288 4096 4096 NT_STATUS_OK
ReadX 11454 16384 4096 4096 NT_STATUS_OK
ReadX 11454 20480 4096 4096 NT_STATUS_OK
ReadX 11454 24576 4096 4096 NT_STATUS_OK
ReadX 11454 28672 4096 4096 NT_STATUS_OK
ReadX 11454 32768 4096 4096 NT_STATUS_OK
ReadX 11454 36864 4096 4096 NT_STATUS_OK
ReadX 11454 40960 4096 4096 NT_STATUS_OK
ReadX 11454 45056 4096 4096 NT_STATUS_OK
ReadX 11454 49152 4096 4096 NT_STATUS_OK
ReadX 11454 53248 4096 4096 NT_STATUS_OK
ReadX 11454 57344 4096 4096 NT_STATUS_OK
ReadX 11454 61440 4096 4096 NT_STATUS_OK
ReadX 11454 65536 4096 4096 NT_STATUS_OK
ReadX 11454 69632 4096 4096 NT_STATUS_OK
ReadX 11454 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11454 1004 NT_STATUS_OK
WriteX 11454 0 4096 4096 NT_STATUS_OK
Close 11454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11455 NT_STATUS_OK
SET_FILE_INFORMATION 11455 1004 NT_STATUS_OK
Close 11455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11457 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11460 NT_STATUS_OK
WriteX 11460 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11460 258 NT_STATUS_OK
WriteX 11460 0 65536 65536 NT_STATUS_OK
WriteX 11460 65536 19979 19979 NT_STATUS_OK
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
QUERY_FILE_INFORMATION 11461 1004 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
SET_FILE_INFORMATION 11461 1004 NT_STATUS_OK
WriteX 11461 0 4096 4096 NT_STATUS_OK
Flush 11461 NT_STATUS_OK
Close 11461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11463 NT_STATUS_OK
ReadX 11463 0 4096 4096 NT_STATUS_OK
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11464 NT_STATUS_OK
ReadX 11464 0 4096 4096 NT_STATUS_OK
Close 11464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 4096 4096 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11466 1004 NT_STATUS_OK
WriteX 11466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11463 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11472 NT_STATUS_OK
WriteX 11472 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 65536 65536 NT_STATUS_OK
WriteX 11472 65536 17654 17654 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
QUERY_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
SET_FILE_INFORMATION 11473 1004 NT_STATUS_OK
WriteX 11473 0 4096 4096 NT_STATUS_OK
Flush 11473 NT_STATUS_OK
Close 11473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11474 NT_STATUS_OK
SET_FILE_INFORMATION 11474 1004 NT_STATUS_OK
Close 11474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11475 NT_STATUS_OK
ReadX 11475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 4096 4096 NT_STATUS_OK
ReadX 11478 4096 4096 4096 NT_STATUS_OK
ReadX 11478 8192 4096 4096 NT_STATUS_OK
ReadX 11478 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11478 16384 4096 4096 NT_STATUS_OK
ReadX 11478 20480 4096 4096 NT_STATUS_OK
ReadX 11478 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11479 NT_STATUS_OK
ReadX 11479 0 4096 4096 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11481 1004 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11481 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11487 NT_STATUS_OK
WriteX 11487 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11487 258 NT_STATUS_OK
WriteX 11487 0 65536 65536 NT_STATUS_OK
WriteX 11487 65536 19490 19490 NT_STATUS_OK
Close 11487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
QUERY_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
SET_FILE_INFORMATION 11488 1004 NT_STATUS_OK
WriteX 11488 0 4096 4096 NT_STATUS_OK
Flush 11488 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11489 NT_STATUS_OK
SET_FILE_INFORMATION 11489 1004 NT_STATUS_OK
Close 11489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11490 NT_STATUS_OK
ReadX 11490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11493 0 4096 4096 NT_STATUS_OK
Close 11493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11494 NT_STATUS_OK
ReadX 11494 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11495 NT_STATUS_OK
ReadX 11495 0 4096 4096 NT_STATUS_OK
ReadX 11495 4096 4096 4096 NT_STATUS_OK
ReadX 11495 8192 4096 4096 NT_STATUS_OK
ReadX 11495 12288 4096 4096 NT_STATUS_OK
ReadX 11495 16384 4096 4096 NT_STATUS_OK
ReadX 11495 20480 4096 4096 NT_STATUS_OK
ReadX 11495 24576 4096 4096 NT_STATUS_OK
ReadX 11495 28672 4096 4096 NT_STATUS_OK
ReadX 11495 32768 4096 4096 NT_STATUS_OK
ReadX 11495 36864 4096 4096 NT_STATUS_OK
ReadX 11495 40960 4096 4096 NT_STATUS_OK
ReadX 11495 45056 4096 4096 NT_STATUS_OK
ReadX 11495 49152 4096 4096 NT_STATUS_OK
ReadX 11495 53248 4096 4096 NT_STATUS_OK
ReadX 11495 57344 4096 4096 NT_STATUS_OK
ReadX 11495 61440 4096 4096 NT_STATUS_OK
ReadX 11495 65536 4096 4096 NT_STATUS_OK
ReadX 11495 69632 4096 4096 NT_STATUS_OK
ReadX 11495 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11495 1004 NT_STATUS_OK
WriteX 11495 0 4096 4096 NT_STATUS_OK
Close 11495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11496 NT_STATUS_OK
SET_FILE_INFORMATION 11496 1004 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11501 NT_STATUS_OK
WriteX 11501 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11501 258 NT_STATUS_OK
WriteX 11501 0 65536 65536 NT_STATUS_OK
WriteX 11501 65536 8866 8866 NT_STATUS_OK
Close 11501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
WriteX 11502 0 4096 4096 NT_STATUS_OK
Flush 11502 NT_STATUS_OK
SET_FILE_INFORMATION 11502 1004 NT_STATUS_OK
WriteX 11502 0 4096 4096 NT_STATUS_OK
Flush 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
Close 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11506 1004 NT_STATUS_OK
WriteX 11506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Close 11497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11509 NT_STATUS_OK
Close 11509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11512 NT_STATUS_OK
WriteX 11512 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11512 258 NT_STATUS_OK
WriteX 11512 0 65536 65536 NT_STATUS_OK
WriteX 11512 65536 9298 9298 NT_STATUS_OK
Close 11512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
WriteX 11513 0 4096 4096 NT_STATUS_OK
Flush 11513 NT_STATUS_OK
SET_FILE_INFORMATION 11513 1004 NT_STATUS_OK
WriteX 11513 0 4096 4096 NT_STATUS_OK
Flush 11513 NT_STATUS_OK
Close 11513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11514 NT_STATUS_OK
SET_FILE_INFORMATION 11514 1004 NT_STATUS_OK
Close 11514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11515 NT_STATUS_OK
ReadX 11515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11519 0 4096 4096 NT_STATUS_OK
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11520 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11520 4096 4096 4096 NT_STATUS_OK
ReadX 11520 8192 4096 4096 NT_STATUS_OK
ReadX 11520 12288 4096 4096 NT_STATUS_OK
ReadX 11520 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 4096 4096 NT_STATUS_OK
Close 11521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 4096 4096 NT_STATUS_OK
Close 11522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11523 1004 NT_STATUS_OK
WriteX 11523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11524 NT_STATUS_OK
Close 11524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11526 NT_STATUS_OK
Close 11526 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11529 NT_STATUS_OK
WriteX 11529 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 258 NT_STATUS_OK
WriteX 11529 0 65536 65536 NT_STATUS_OK
WriteX 11529 65536 11540 11540 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
SET_FILE_INFORMATION 11530 1004 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11531 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11532 NT_STATUS_OK
ReadX 11532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11533 NT_STATUS_OK
Close 11533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11535 NT_STATUS_OK
ReadX 11535 61440 4096 4096 NT_STATUS_OK
ReadX 11535 126976 4096 4096 NT_STATUS_OK
WriteX 11535 0 65536 65536 NT_STATUS_OK
WriteX 11535 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11536 NT_STATUS_OK
ReadX 11536 61440 4096 4096 NT_STATUS_OK
ReadX 11536 126976 4096 4096 NT_STATUS_OK
ReadX 11536 192512 4096 4096 NT_STATUS_OK
ReadX 11536 258048 4096 4096 NT_STATUS_OK
WriteX 11536 0 65536 65536 NT_STATUS_OK
WriteX 11536 65536 65536 65536 NT_STATUS_OK
WriteX 11536 131072 65536 65536 NT_STATUS_OK
WriteX 11536 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11537 NT_STATUS_OK
ReadX 11537 61440 4096 4096 NT_STATUS_OK
ReadX 11537 126976 4096 4096 NT_STATUS_OK
ReadX 11537 192512 4096 4096 NT_STATUS_OK
ReadX 11537 258048 4096 4096 NT_STATUS_OK
ReadX 11537 323584 4096 4096 NT_STATUS_OK
ReadX 11537 389120 4096 4096 NT_STATUS_OK
ReadX 11537 454656 4096 4096 NT_STATUS_OK
ReadX 11537 520192 4096 4096 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 65536 65536 NT_STATUS_OK
WriteX 11537 131072 65536 65536 NT_STATUS_OK
WriteX 11537 196608 65536 65536 NT_STATUS_OK
WriteX 11537 262144 65536 65536 NT_STATUS_OK
WriteX 11537 327680 65536 65536 NT_STATUS_OK
WriteX 11537 393216 65536 65536 NT_STATUS_OK
WriteX 11537 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
ReadX 11538 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11539 NT_STATUS_OK
WriteX 11539 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11539 258 NT_STATUS_OK
WriteX 11539 0 53 53 NT_STATUS_OK
Close 11539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11540 NT_STATUS_OK
Close 11540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11532 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11535 NT_STATUS_OK
Close 11536 NT_STATUS_OK
Close 11537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11538 8192 4096 4096 NT_STATUS_OK
ReadX 11538 12288 4096 4096 NT_STATUS_OK
WriteX 11542 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11542 258 NT_STATUS_OK
ReadX 11538 16384 4096 4096 NT_STATUS_OK
ReadX 11538 20480 4096 4096 NT_STATUS_OK
WriteX 11542 0 15360 15360 NT_STATUS_OK
Close 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11543 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11543 1004 NT_STATUS_OK
WriteX 11543 0 4096 4096 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11546 NT_STATUS_OK
ReadX 11546 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11547 NT_STATUS_OK
Close 11547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11546 4096 4096 4096 NT_STATUS_OK
ReadX 11546 8192 4096 4096 NT_STATUS_OK
ReadX 11546 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
ReadX 11549 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
ReadX 11550 4096 4096 4096 NT_STATUS_OK
ReadX 11550 8192 4096 4096 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11551 NT_STATUS_OK
WriteX 11551 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 258 NT_STATUS_OK
WriteX 11551 0 15360 15360 NT_STATUS_OK
Close 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11556 NT_STATUS_OK
SET_FILE_INFORMATION 11556 1004 NT_STATUS_OK
Close 11556 NT_STATUS_OK
WriteX 11552 0 4096 4096 NT_STATUS_OK
Close 11552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11557 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
ReadX 11559 4096 4096 4096 NT_STATUS_OK
ReadX 11559 8192 4096 4096 NT_STATUS_OK
ReadX 11559 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11559 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11559 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11561 NT_STATUS_OK
WriteX 11561 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11561 258 NT_STATUS_OK
WriteX 11561 0 53 53 NT_STATUS_OK
Close 11561 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11560 4096 4096 4096 NT_STATUS_OK
ReadX 11560 8192 4096 4096 NT_STATUS_OK
ReadX 11560 12288 4096 4096 NT_STATUS_OK
WriteX 11564 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11564 258 NT_STATUS_OK
WriteX 11564 0 12006 12006 NT_STATUS_OK
Close 11564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
WriteX 11565 0 4096 4096 NT_STATUS_OK
Close 11565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11568 NT_STATUS_OK
ReadX 11568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11569 NT_STATUS_OK
Close 11569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11571 NT_STATUS_OK
WriteX 11571 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11571 258 NT_STATUS_OK
WriteX 11571 0 11991 11991 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11572 NT_STATUS_OK
ReadX 11572 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11572 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11576 NT_STATUS_OK
SET_FILE_INFORMATION 11576 1004 NT_STATUS_OK
Close 11576 NT_STATUS_OK
WriteX 11572 0 4096 4096 NT_STATUS_OK
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11580 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11579 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
ReadX 11579 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
WriteX 11579 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11579 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11579 1004 NT_STATUS_OK
Close 11555 NT_STATUS_OK
WriteX 11559 0 19054 19054 NT_STATUS_OK
WriteX 11579 0 12288 12288 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11582 NT_STATUS_OK
Close 11582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 61440 61440 NT_STATUS_OK
ReadX 11586 61440 4096 4096 NT_STATUS_OK
ReadX 11586 65536 61440 61440 NT_STATUS_OK
ReadX 11586 126976 4096 4096 NT_STATUS_OK
ReadX 11586 131072 61440 61440 NT_STATUS_OK
ReadX 11586 192512 4096 4096 NT_STATUS_OK
ReadX 11586 196608 61440 61440 NT_STATUS_OK
ReadX 11586 258048 4096 4096 NT_STATUS_OK
ReadX 11586 262144 61440 61440 NT_STATUS_OK
ReadX 11586 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 61440 61440 NT_STATUS_OK
ReadX 11587 61440 4096 4096 NT_STATUS_OK
ReadX 11587 65536 61440 61440 NT_STATUS_OK
ReadX 11587 126976 4096 4096 NT_STATUS_OK
ReadX 11587 131072 61440 61440 NT_STATUS_OK
ReadX 11587 192512 4096 4096 NT_STATUS_OK
ReadX 11587 196608 61440 61440 NT_STATUS_OK
ReadX 11587 258048 4096 4096 NT_STATUS_OK
ReadX 11587 262144 61440 61440 NT_STATUS_OK
ReadX 11587 323584 4096 4096 NT_STATUS_OK
ReadX 11587 327680 61440 61440 NT_STATUS_OK
ReadX 11587 389120 4096 4096 NT_STATUS_OK
ReadX 11587 393216 61440 61440 NT_STATUS_OK
ReadX 11587 454656 4096 4096 NT_STATUS_OK
ReadX 11587 458752 61440 61440 NT_STATUS_OK
ReadX 11587 520192 4096 4096 NT_STATUS_OK
ReadX 11587 524288 61440 61440 NT_STATUS_OK
ReadX 11587 585728 4096 4096 NT_STATUS_OK
ReadX 11587 589824 61440 61440 NT_STATUS_OK
ReadX 11587 651264 4096 4096 NT_STATUS_OK
ReadX 11587 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 61440 61440 NT_STATUS_OK
ReadX 11588 61440 4096 4096 NT_STATUS_OK
ReadX 11588 65536 61440 61440 NT_STATUS_OK
ReadX 11588 126976 4096 4096 NT_STATUS_OK
ReadX 11588 131072 61440 61440 NT_STATUS_OK
ReadX 11588 192512 4096 4096 NT_STATUS_OK
ReadX 11588 196608 61440 61440 NT_STATUS_OK
ReadX 11588 258048 4096 4096 NT_STATUS_OK
ReadX 11588 262144 61440 61440 NT_STATUS_OK
ReadX 11588 323584 4096 4096 NT_STATUS_OK
ReadX 11588 327680 61440 61440 NT_STATUS_OK
ReadX 11588 389120 4096 4096 NT_STATUS_OK
ReadX 11588 393216 61440 61440 NT_STATUS_OK
ReadX 11588 454656 4096 4096 NT_STATUS_OK
ReadX 11588 458752 61440 61440 NT_STATUS_OK
ReadX 11588 520192 4096 4096 NT_STATUS_OK
ReadX 11588 524288 61440 61440 NT_STATUS_OK
ReadX 11588 585728 4096 4096 NT_STATUS_OK
ReadX 11588 589824 61440 61440 NT_STATUS_OK
ReadX 11588 651264 4096 4096 NT_STATUS_OK
ReadX 11588 655360 61440 61440 NT_STATUS_OK
ReadX 11588 716800 4096 4096 NT_STATUS_OK
ReadX 11588 720896 61440 61440 NT_STATUS_OK
ReadX 11588 782336 4096 4096 NT_STATUS_OK
ReadX 11588 786432 61440 61440 NT_STATUS_OK
ReadX 11588 847872 4096 4096 NT_STATUS_OK
ReadX 11588 851968 61440 61440 NT_STATUS_OK
ReadX 11588 913408 4096 4096 NT_STATUS_OK
ReadX 11588 917504 61440 61440 NT_STATUS_OK
ReadX 11588 978944 4096 4096 NT_STATUS_OK
ReadX 11588 983040 61440 61440 NT_STATUS_OK
ReadX 11588 1044480 4096 4096 NT_STATUS_OK
ReadX 11588 1048576 61440 61440 NT_STATUS_OK
ReadX 11588 1110016 4096 4096 NT_STATUS_OK
ReadX 11588 1114112 61440 61440 NT_STATUS_OK
ReadX 11588 1175552 4096 4096 NT_STATUS_OK
ReadX 11588 1179648 61440 61440 NT_STATUS_OK
ReadX 11588 1241088 4096 4096 NT_STATUS_OK
ReadX 11588 1245184 61440 61440 NT_STATUS_OK
ReadX 11588 1306624 4096 4096 NT_STATUS_OK
ReadX 11588 1310720 61440 61440 NT_STATUS_OK
ReadX 11588 1372160 4096 4096 NT_STATUS_OK
ReadX 11588 1376256 61440 61440 NT_STATUS_OK
ReadX 11588 1437696 4096 4096 NT_STATUS_OK
ReadX 11588 1441792 61440 61440 NT_STATUS_OK
ReadX 11588 1503232 4096 4096 NT_STATUS_OK
ReadX 11588 1507328 61440 61440 NT_STATUS_OK
ReadX 11588 1568768 4096 4096 NT_STATUS_OK
ReadX 11588 1572864 61440 61440 NT_STATUS_OK
ReadX 11588 1634304 4096 4096 NT_STATUS_OK
ReadX 11588 1638400 61440 61440 NT_STATUS_OK
ReadX 11588 1699840 4096 4096 NT_STATUS_OK
ReadX 11588 1703936 61440 61440 NT_STATUS_OK
ReadX 11588 1765376 4096 4096 NT_STATUS_OK
ReadX 11588 1769472 61440 61440 NT_STATUS_OK
ReadX 11588 1830912 4096 4096 NT_STATUS_OK
ReadX 11588 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11590 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11595 NT_STATUS_OK
QUERY_FILE_INFORMATION 11595 1004 NT_STATUS_OK
WriteX 11595 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11595 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11596 NT_STATUS_OK
Close 11596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11597 NT_STATUS_OK
WriteX 11597 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11597 258 NT_STATUS_OK
WriteX 11597 0 491 491 NT_STATUS_OK
Close 11597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11598 NT_STATUS_OK
ReadX 11598 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11595 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11600 NT_STATUS_OK
Close 11600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11601 NT_STATUS_OK
WriteX 11601 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11601 258 NT_STATUS_OK
WriteX 11601 0 543 543 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11602 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Close 11593 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11608 NT_STATUS_OK
ReadX 11608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11609 NT_STATUS_OK
ReadX 11609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11610 NT_STATUS_OK
ReadX 11610 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11615 NT_STATUS_OK
QUERY_FILE_INFORMATION 11615 1004 NT_STATUS_OK
WriteX 11615 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11615 258 NT_STATUS_OK
WriteX 11615 0 2048 2048 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
Flush 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11620 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11621 NT_STATUS_OK
WriteX 11621 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11621 258 NT_STATUS_OK
WriteX 11621 0 2048 2048 NT_STATUS_OK
Close 11621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11626 NT_STATUS_OK
Close 11626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11627 NT_STATUS_OK
WriteX 11627 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11627 258 NT_STATUS_OK
WriteX 11627 0 2048 2048 NT_STATUS_OK
Close 11627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11628 NT_STATUS_OK
ReadX 11628 0 2048 2048 NT_STATUS_OK
ReadX 11606 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11610 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11622 0 4096 4096 NT_STATUS_OK
WriteX 11606 0 8192 8192 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
WriteX 11608 0 4096 4096 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11632 NT_STATUS_OK
QUERY_FILE_INFORMATION 11632 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Close 11607 NT_STATUS_OK
Close 11608 NT_STATUS_OK
Close 11609 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Close 11606 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11635 NT_STATUS_OK
ReadX 11635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11640 NT_STATUS_OK
ReadX 11640 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11641 NT_STATUS_OK
ReadX 11641 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11642 NT_STATUS_OK
ReadX 11642 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11652 NT_STATUS_OK
QUERY_FILE_INFORMATION 11652 1004 NT_STATUS_OK
WriteX 11652 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11652 258 NT_STATUS_OK
WriteX 11652 0 2048 2048 NT_STATUS_OK
Close 11652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11655 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11660 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 1004 NT_STATUS_OK
WriteX 11660 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 258 NT_STATUS_OK
WriteX 11660 0 2048 2048 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11653 0 4096 4096 NT_STATUS_OK
Flush 11653 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
Flush 11661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11653 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11655 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11663 NT_STATUS_OK
WriteX 11663 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11663 258 NT_STATUS_OK
WriteX 11663 0 4096 4096 NT_STATUS_OK
Close 11663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11665 NT_STATUS_OK
Close 11665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11666 NT_STATUS_OK
WriteX 11666 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11666 258 NT_STATUS_OK
WriteX 11666 0 4096 4096 NT_STATUS_OK
Close 11666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11667 NT_STATUS_OK
ReadX 11667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11667 0 4096 4096 NT_STATUS_OK
Close 11664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11641 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Close 11645 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Close 11642 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Close 11636 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11640 NT_STATUS_OK
Close 11637 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11670 NT_STATUS_OK
Close 11670 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11672 NT_STATUS_OK
ReadX 11672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11673 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11674 NT_STATUS_OK
WriteX 11674 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11674 258 NT_STATUS_OK
WriteX 11674 0 2048 2048 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11675 NT_STATUS_OK
ReadX 11675 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11677 NT_STATUS_OK
ReadX 11677 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11678 NT_STATUS_OK
ReadX 11678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11679 NT_STATUS_OK
ReadX 11679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11680 NT_STATUS_OK
ReadX 11680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11682 NT_STATUS_OK
ReadX 11682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11689 NT_STATUS_OK
QUERY_FILE_INFORMATION 11689 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11672 NT_STATUS_OK
Close 11675 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Close 11682 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Close 11676 NT_STATUS_OK
Close 11677 NT_STATUS_OK
Close 11680 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Close 11679 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11691 NT_STATUS_OK
QUERY_FILE_INFORMATION 11691 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11693 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11693 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11697 NT_STATUS_OK
ReadX 11697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11698 NT_STATUS_OK
ReadX 11698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11699 NT_STATUS_OK
ReadX 11699 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11711 NT_STATUS_OK
QUERY_FILE_INFORMATION 11711 1004 NT_STATUS_OK
WriteX 11711 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11711 258 NT_STATUS_OK
WriteX 11711 0 2048 2048 NT_STATUS_OK
Close 11711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11713 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11717 NT_STATUS_OK
ReadX 11717 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11723 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 258 NT_STATUS_OK
WriteX 11723 0 2048 2048 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11731 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 1004 NT_STATUS_OK
WriteX 11731 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 258 NT_STATUS_OK
WriteX 11731 0 2048 2048 NT_STATUS_OK
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11732 NT_STATUS_OK
ReadX 11732 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11712 0 4096 4096 NT_STATUS_OK
Flush 11712 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
Flush 11724 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
Flush 11732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11712 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11724 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11714 4096 16384 16384 NT_STATUS_OK
ReadX 11694 4096 16384 16384 NT_STATUS_OK
ReadX 11726 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11734 NT_STATUS_OK
ReadX 11734 0 2048 2048 NT_STATUS_OK
WriteX 11734 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11735 NT_STATUS_OK
QUERY_FILE_INFORMATION 11735 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11734 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Close 11706 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Close 11716 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Close 11702 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11697 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11737 NT_STATUS_OK
QUERY_FILE_INFORMATION 11737 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11739 NT_STATUS_OK
QUERY_FILE_INFORMATION 11739 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11744 NT_STATUS_OK
ReadX 11744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11745 NT_STATUS_OK
ReadX 11745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11746 NT_STATUS_OK
ReadX 11746 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11742 4096 16384 16384 NT_STATUS_OK
WriteX 11742 0 4096 4096 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
WriteX 11744 0 4096 4096 NT_STATUS_OK
WriteX 11745 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11748 NT_STATUS_OK
ReadX 11748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 8192 8192 NT_STATUS_OK
ReadX 11748 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11762 0 4096 4096 NT_STATUS_OK
ReadX 11762 4096 4096 4096 NT_STATUS_OK
ReadX 11762 8192 4096 4096 NT_STATUS_OK
WriteX 11748 0 4096 4096 NT_STATUS_OK
WriteX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
ReadX 11763 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11742 0 4096 4096 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
WriteX 11744 0 4096 4096 NT_STATUS_OK
WriteX 11745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11768 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 1004 NT_STATUS_OK
WriteX 11768 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 258 NT_STATUS_OK
WriteX 11768 0 2048 2048 NT_STATUS_OK
Close 11768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
WriteX 11771 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11769 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 4096 4096 NT_STATUS_OK
ReadX 11773 4096 4096 4096 NT_STATUS_OK
WriteX 11773 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11774 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Close 11742 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Close 11744 NT_STATUS_OK
Close 11745 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11748 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Close 11773 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11776 0 4096 4096 NT_STATUS_OK
ReadX 11776 4096 4096 4096 NT_STATUS_OK
ReadX 11776 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11777 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
ReadX 11777 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11793 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11794 NT_STATUS_OK
QUERY_FILE_INFORMATION 11794 1004 NT_STATUS_OK
WriteX 11794 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11794 258 NT_STATUS_OK
WriteX 11794 0 2048 2048 NT_STATUS_OK
Close 11794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11795 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11799 NT_STATUS_OK
Close 11799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11800 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 1004 NT_STATUS_OK
WriteX 11800 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11800 258 NT_STATUS_OK
WriteX 11800 0 2048 2048 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11801 NT_STATUS_OK
ReadX 11801 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11784 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11802 NT_STATUS_OK
QUERY_FILE_INFORMATION 11802 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11784 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11776 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11804 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11806 NT_STATUS_OK
ReadX 11806 61440 4096 4096 NT_STATUS_OK
ReadX 11806 126976 4096 4096 NT_STATUS_OK
WriteX 11806 0 65536 65536 NT_STATUS_OK
WriteX 11806 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11807 NT_STATUS_OK
ReadX 11807 61440 4096 4096 NT_STATUS_OK
ReadX 11807 126976 4096 4096 NT_STATUS_OK
ReadX 11807 192512 4096 4096 NT_STATUS_OK
ReadX 11807 258048 4096 4096 NT_STATUS_OK
WriteX 11807 0 65536 65536 NT_STATUS_OK
WriteX 11807 65536 65536 65536 NT_STATUS_OK
WriteX 11807 131072 65536 65536 NT_STATUS_OK
WriteX 11807 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 61440 4096 4096 NT_STATUS_OK
ReadX 11808 126976 4096 4096 NT_STATUS_OK
ReadX 11808 192512 4096 4096 NT_STATUS_OK
ReadX 11808 258048 4096 4096 NT_STATUS_OK
ReadX 11808 323584 4096 4096 NT_STATUS_OK
ReadX 11808 389120 4096 4096 NT_STATUS_OK
ReadX 11808 454656 4096 4096 NT_STATUS_OK
ReadX 11808 520192 4096 4096 NT_STATUS_OK
WriteX 11808 0 65536 65536 NT_STATUS_OK
WriteX 11808 65536 65536 65536 NT_STATUS_OK
WriteX 11808 131072 65536 65536 NT_STATUS_OK
WriteX 11808 196608 65536 65536 NT_STATUS_OK
WriteX 11808 262144 65536 65536 NT_STATUS_OK
WriteX 11808 327680 65536 65536 NT_STATUS_OK
WriteX 11808 393216 65536 65536 NT_STATUS_OK
WriteX 11808 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11809 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11809 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11809 8192 4096 4096 NT_STATUS_OK
ReadX 11809 12288 4096 4096 NT_STATUS_OK
ReadX 11809 16384 4096 4096 NT_STATUS_OK
ReadX 11809 20480 4096 4096 NT_STATUS_OK
ReadX 11809 24576 4096 4096 NT_STATUS_OK
ReadX 11809 28672 4096 4096 NT_STATUS_OK
ReadX 11809 32768 4096 4096 NT_STATUS_OK
ReadX 11809 36864 4096 4096 NT_STATUS_OK
ReadX 11809 40960 4096 4096 NT_STATUS_OK
ReadX 11809 45056 4096 4096 NT_STATUS_OK
ReadX 11809 49152 4096 4096 NT_STATUS_OK
ReadX 11809 53248 4096 4096 NT_STATUS_OK
ReadX 11809 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11809 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11810 NT_STATUS_OK
Close 11810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11806 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11812 NT_STATUS_OK
WriteX 11812 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11812 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11812 1004 NT_STATUS_OK
WriteX 11812 0 57088 57088 NT_STATUS_OK
WriteX 11812 0 4096 4096 NT_STATUS_OK
Flush 11812 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11813 NT_STATUS_OK
SET_FILE_INFORMATION 11813 1004 NT_STATUS_OK
Close 11813 NT_STATUS_OK
SET_FILE_INFORMATION 11812 1004 NT_STATUS_OK
WriteX 11812 0 4096 4096 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11816 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11817 NT_STATUS_OK
WriteX 11817 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11817 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11817 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
WriteX 11817 0 51456 51456 NT_STATUS_OK
WriteX 11817 0 4096 4096 NT_STATUS_OK
Flush 11817 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
WriteX 11817 0 4096 4096 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11819 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11821 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11826 NT_STATUS_OK
WriteX 11826 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11826 258 NT_STATUS_OK
WriteX 11826 0 53077 53077 NT_STATUS_OK
Close 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11827 NT_STATUS_OK
WriteX 11827 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11827 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 65536 65536 NT_STATUS_OK
WriteX 11827 65536 1856 1856 NT_STATUS_OK
WriteX 11827 0 4096 4096 NT_STATUS_OK
Flush 11827 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 4096 4096 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11829 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11831 NT_STATUS_OK
ReadX 11831 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11833 NT_STATUS_OK
Close 11833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11836 NT_STATUS_OK
WriteX 11836 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11836 258 NT_STATUS_OK
WriteX 11836 0 7983 7983 NT_STATUS_OK
Close 11836 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11838 NT_STATUS_OK
Close 11838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11841 NT_STATUS_OK
WriteX 11841 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11841 258 NT_STATUS_OK
WriteX 11841 0 65536 65536 NT_STATUS_OK
WriteX 11841 65536 65536 65536 NT_STATUS_OK
WriteX 11841 131072 65536 65536 NT_STATUS_OK
WriteX 11841 196608 65536 65536 NT_STATUS_OK
WriteX 11841 262144 65536 65536 NT_STATUS_OK
WriteX 11841 327680 65536 65536 NT_STATUS_OK
WriteX 11841 393216 65536 65536 NT_STATUS_OK
WriteX 11841 458752 46731 46731 NT_STATUS_OK
Close 11841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11842 NT_STATUS_OK
WriteX 11842 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11831 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11842 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
WriteX 11842 0 65536 65536 NT_STATUS_OK
WriteX 11842 65536 22848 22848 NT_STATUS_OK
WriteX 11842 0 4096 4096 NT_STATUS_OK
Flush 11842 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11842 1004 NT_STATUS_OK
WriteX 11842 0 4096 4096 NT_STATUS_OK
Close 11842 NT_STATUS_OK
Close 11831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11846 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11847 NT_STATUS_OK
ReadX 11847 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11847 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11847 1004 NT_STATUS_OK
ReadX 11847 8192 4096 4096 NT_STATUS_OK
ReadX 11847 12288 4096 4096 NT_STATUS_OK
ReadX 11847 16384 4096 4096 NT_STATUS_OK
ReadX 11847 20480 4096 4096 NT_STATUS_OK
ReadX 11847 24576 4096 4096 NT_STATUS_OK
ReadX 11847 28672 4096 4096 NT_STATUS_OK
ReadX 11847 32768 4096 4096 NT_STATUS_OK
ReadX 11847 36864 4096 4096 NT_STATUS_OK
ReadX 11847 40960 4096 4096 NT_STATUS_OK
ReadX 11847 45056 4096 4096 NT_STATUS_OK
ReadX 11847 49152 4096 4096 NT_STATUS_OK
ReadX 11847 53248 4096 4096 NT_STATUS_OK
ReadX 11847 57344 4096 4096 NT_STATUS_OK
ReadX 11847 61440 4096 4096 NT_STATUS_OK
ReadX 11847 65536 4096 4096 NT_STATUS_OK
ReadX 11847 69632 4096 4096 NT_STATUS_OK
ReadX 11847 73728 4096 4096 NT_STATUS_OK
ReadX 11847 77824 4096 4096 NT_STATUS_OK
ReadX 11847 81920 4096 4096 NT_STATUS_OK
ReadX 11847 86016 4096 4096 NT_STATUS_OK
ReadX 11847 90112 4096 4096 NT_STATUS_OK
ReadX 11847 94208 4096 4096 NT_STATUS_OK
ReadX 11847 98304 4096 4096 NT_STATUS_OK
ReadX 11847 102400 4096 4096 NT_STATUS_OK
ReadX 11847 106496 4096 4096 NT_STATUS_OK
ReadX 11847 110592 4096 4096 NT_STATUS_OK
ReadX 11847 114688 4096 4096 NT_STATUS_OK
ReadX 11847 118784 4096 4096 NT_STATUS_OK
ReadX 11847 122880 4096 4096 NT_STATUS_OK
ReadX 11847 126976 4096 4096 NT_STATUS_OK
ReadX 11847 131072 4096 4096 NT_STATUS_OK
ReadX 11847 135168 4096 4096 NT_STATUS_OK
ReadX 11847 139264 4096 4096 NT_STATUS_OK
ReadX 11847 143360 4096 4096 NT_STATUS_OK
ReadX 11847 147456 4096 4096 NT_STATUS_OK
ReadX 11847 151552 4096 4096 NT_STATUS_OK
ReadX 11847 155648 4096 4096 NT_STATUS_OK
ReadX 11847 159744 4096 4096 NT_STATUS_OK
ReadX 11847 163840 4096 4096 NT_STATUS_OK
ReadX 11847 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11847 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11848 NT_STATUS_OK
Close 11848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11846 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11850 NT_STATUS_OK
WriteX 11850 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 258 NT_STATUS_OK
Close 11847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11851 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
Close 11851 NT_STATUS_OK
WriteX 11850 0 42388 42388 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11852 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
ReadX 11854 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11855 NT_STATUS_OK
WriteX 11855 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11855 258 NT_STATUS_OK
SET_FILE_INFORMATION 11855 1004 NT_STATUS_OK
WriteX 11855 0 42652 42652 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11857 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 4096 4096 NT_STATUS_OK
ReadX 11859 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11861 NT_STATUS_OK
Close 11861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11864 NT_STATUS_OK
WriteX 11864 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 258 NT_STATUS_OK
WriteX 11864 0 65536 65536 NT_STATUS_OK
WriteX 11864 65536 49 49 NT_STATUS_OK
Close 11864 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 61440 61440 NT_STATUS_OK
ReadX 11865 61440 4096 4096 NT_STATUS_OK
ReadX 11865 65536 61440 61440 NT_STATUS_OK
ReadX 11865 126976 4096 4096 NT_STATUS_OK
ReadX 11865 131072 61440 61440 NT_STATUS_OK
ReadX 11865 192512 4096 4096 NT_STATUS_OK
ReadX 11865 196608 61440 61440 NT_STATUS_OK
ReadX 11865 258048 4096 4096 NT_STATUS_OK
ReadX 11865 262144 61440 61440 NT_STATUS_OK
ReadX 11865 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11866 NT_STATUS_OK
ReadX 11866 0 61440 61440 NT_STATUS_OK
ReadX 11866 61440 4096 4096 NT_STATUS_OK
ReadX 11866 65536 61440 61440 NT_STATUS_OK
ReadX 11866 126976 4096 4096 NT_STATUS_OK
ReadX 11866 131072 61440 61440 NT_STATUS_OK
ReadX 11866 192512 4096 4096 NT_STATUS_OK
ReadX 11866 196608 61440 61440 NT_STATUS_OK
ReadX 11866 258048 4096 4096 NT_STATUS_OK
ReadX 11866 262144 61440 61440 NT_STATUS_OK
ReadX 11866 323584 4096 4096 NT_STATUS_OK
ReadX 11866 327680 61440 61440 NT_STATUS_OK
ReadX 11866 389120 4096 4096 NT_STATUS_OK
ReadX 11866 393216 61440 61440 NT_STATUS_OK
ReadX 11866 454656 4096 4096 NT_STATUS_OK
ReadX 11866 458752 61440 61440 NT_STATUS_OK
ReadX 11866 520192 4096 4096 NT_STATUS_OK
ReadX 11866 524288 61440 61440 NT_STATUS_OK
ReadX 11866 585728 4096 4096 NT_STATUS_OK
ReadX 11866 589824 61440 61440 NT_STATUS_OK
ReadX 11866 651264 4096 4096 NT_STATUS_OK
ReadX 11866 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 61440 61440 NT_STATUS_OK
ReadX 11867 61440 4096 4096 NT_STATUS_OK
ReadX 11867 65536 61440 61440 NT_STATUS_OK
ReadX 11867 126976 4096 4096 NT_STATUS_OK
ReadX 11867 131072 61440 61440 NT_STATUS_OK
ReadX 11867 192512 4096 4096 NT_STATUS_OK
ReadX 11867 196608 61440 61440 NT_STATUS_OK
ReadX 11867 258048 4096 4096 NT_STATUS_OK
ReadX 11867 262144 61440 61440 NT_STATUS_OK
ReadX 11867 323584 4096 4096 NT_STATUS_OK
ReadX 11867 327680 61440 61440 NT_STATUS_OK
ReadX 11867 389120 4096 4096 NT_STATUS_OK
ReadX 11867 393216 61440 61440 NT_STATUS_OK
ReadX 11867 454656 4096 4096 NT_STATUS_OK
ReadX 11867 458752 61440 61440 NT_STATUS_OK
ReadX 11867 520192 4096 4096 NT_STATUS_OK
ReadX 11867 524288 61440 61440 NT_STATUS_OK
ReadX 11867 585728 4096 4096 NT_STATUS_OK
ReadX 11867 589824 61440 61440 NT_STATUS_OK
ReadX 11867 651264 4096 4096 NT_STATUS_OK
ReadX 11867 655360 61440 61440 NT_STATUS_OK
ReadX 11867 716800 4096 4096 NT_STATUS_OK
ReadX 11867 720896 61440 61440 NT_STATUS_OK
ReadX 11867 782336 4096 4096 NT_STATUS_OK
ReadX 11867 786432 61440 61440 NT_STATUS_OK
ReadX 11867 847872 4096 4096 NT_STATUS_OK
ReadX 11867 851968 61440 61440 NT_STATUS_OK
ReadX 11867 913408 4096 4096 NT_STATUS_OK
ReadX 11867 917504 61440 61440 NT_STATUS_OK
ReadX 11867 978944 4096 4096 NT_STATUS_OK
ReadX 11867 983040 61440 61440 NT_STATUS_OK
ReadX 11867 1044480 4096 4096 NT_STATUS_OK
ReadX 11867 1048576 61440 61440 NT_STATUS_OK
ReadX 11867 1110016 4096 4096 NT_STATUS_OK
ReadX 11867 1114112 61440 61440 NT_STATUS_OK
ReadX 11867 1175552 4096 4096 NT_STATUS_OK
ReadX 11867 1179648 61440 61440 NT_STATUS_OK
ReadX 11867 1241088 4096 4096 NT_STATUS_OK
ReadX 11867 1245184 61440 61440 NT_STATUS_OK
ReadX 11867 1306624 4096 4096 NT_STATUS_OK
ReadX 11867 1310720 61440 61440 NT_STATUS_OK
ReadX 11867 1372160 4096 4096 NT_STATUS_OK
ReadX 11867 1376256 61440 61440 NT_STATUS_OK
ReadX 11867 1437696 4096 4096 NT_STATUS_OK
ReadX 11867 1441792 61440 61440 NT_STATUS_OK
ReadX 11867 1503232 4096 4096 NT_STATUS_OK
ReadX 11867 1507328 61440 61440 NT_STATUS_OK
ReadX 11867 1568768 4096 4096 NT_STATUS_OK
ReadX 11867 1572864 61440 61440 NT_STATUS_OK
ReadX 11867 1634304 4096 4096 NT_STATUS_OK
ReadX 11867 1638400 61440 61440 NT_STATUS_OK
ReadX 11867 1699840 4096 4096 NT_STATUS_OK
ReadX 11867 1703936 61440 61440 NT_STATUS_OK
ReadX 11867 1765376 4096 4096 NT_STATUS_OK
ReadX 11867 1769472 61440 61440 NT_STATUS_OK
ReadX 11867 1830912 4096 4096 NT_STATUS_OK
ReadX 11867 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11869 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 1005 NT_STATUS_OK
ReadX 11869 2156 24 24 NT_STATUS_OK
ReadX 11869 2139 276 276 NT_STATUS_OK
ReadX 11869 2136 14 14 NT_STATUS_OK
ReadX 11869 2136 7 7 NT_STATUS_OK
ReadX 11869 2138 12 12 NT_STATUS_OK
ReadX 11869 2137 8 8 NT_STATUS_OK
ReadX 11869 2135 15 15 NT_STATUS_OK
ReadX 11869 0 16 16 NT_STATUS_OK
ReadX 11869 16 2048 2048 NT_STATUS_OK
ReadX 11869 2064 2048 2048 NT_STATUS_OK
ReadX 11869 257 2048 2048 NT_STATUS_OK
ReadX 11869 385 2048 2048 NT_STATUS_OK
ReadX 11869 513 2048 2048 NT_STATUS_OK
ReadX 11869 641 2048 2048 NT_STATUS_OK
ReadX 11869 769 2048 2048 NT_STATUS_OK
ReadX 11869 897 2048 2048 NT_STATUS_OK
ReadX 11869 1025 2048 2048 NT_STATUS_OK
ReadX 11869 1153 2048 2048 NT_STATUS_OK
ReadX 11869 1281 2048 2048 NT_STATUS_OK
ReadX 11869 1409 2048 2048 NT_STATUS_OK
ReadX 11869 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11871 NT_STATUS_OK
Close 11871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11874 NT_STATUS_OK
WriteX 11874 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11874 258 NT_STATUS_OK
WriteX 11874 0 10575 10575 NT_STATUS_OK
Flush 11874 NT_STATUS_OK
Close 11874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11875 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11877 NT_STATUS_OK
ReadX 11877 0 4096 4096 NT_STATUS_OK
Close 11869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11879 NT_STATUS_OK
LockX 11879 2147483538 1 NT_STATUS_OK
UnlockX 11879 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1005 NT_STATUS_OK
ReadX 11879 0 512 512 NT_STATUS_OK
ReadX 11879 512 512 512 NT_STATUS_OK
ReadX 11879 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11879 1004 NT_STATUS_OK
Close 11879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11880 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1005 NT_STATUS_OK
ReadX 11880 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11881 NT_STATUS_OK
LockX 11881 2147483538 1 NT_STATUS_OK
UnlockX 11881 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11881 1005 NT_STATUS_OK
ReadX 11881 0 512 512 NT_STATUS_OK
ReadX 11881 512 512 512 NT_STATUS_OK
ReadX 11881 1024 512 512 NT_STATUS_OK
ReadX 11881 288 20 20 NT_STATUS_OK
ReadX 11881 308 2084 2084 NT_STATUS_OK
ReadX 11881 388 2084 2084 NT_STATUS_OK
ReadX 11881 388 2084 2084 NT_STATUS_OK
ReadX 11868 2157 1386 1386 NT_STATUS_OK
ReadX 11881 2472 399 399 NT_STATUS_OK
ReadX 11881 3072 1536 1536 NT_STATUS_OK
ReadX 11881 544 149 149 NT_STATUS_OK
ReadX 11881 693 485 485 NT_STATUS_OK
Close 11881 NT_STATUS_OK
ReadX 11868 2157 4096 4096 NT_STATUS_OK
ReadX 11868 6253 4096 4096 NT_STATUS_OK
ReadX 11868 10349 4096 4096 NT_STATUS_OK
ReadX 11868 14445 4096 4096 NT_STATUS_OK
ReadX 11868 18541 4096 4096 NT_STATUS_OK
ReadX 11868 22637 256 256 NT_STATUS_OK
ReadX 11868 22893 4096 4096 NT_STATUS_OK
ReadX 11868 26989 4096 4096 NT_STATUS_OK
ReadX 11868 31085 4096 4096 NT_STATUS_OK
ReadX 11868 35181 4096 4096 NT_STATUS_OK
ReadX 11868 39277 4096 4096 NT_STATUS_OK
ReadX 11868 43373 4096 4096 NT_STATUS_OK
ReadX 11868 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11868 2157 1024 1024 NT_STATUS_OK
ReadX 11868 1667 4688 4688 NT_STATUS_OK
ReadX 11868 6355 3516 3516 NT_STATUS_OK
ReadX 11868 9871 16384 16384 NT_STATUS_OK
ReadX 11868 26255 3771 3771 NT_STATUS_OK
ReadX 11868 30026 2048 2048 NT_STATUS_OK
ReadX 11868 32074 1024 1024 NT_STATUS_OK
ReadX 11868 33098 6652 6652 NT_STATUS_OK
ReadX 11868 39750 16384 16384 NT_STATUS_OK
ReadX 11868 56134 10496 10496 NT_STATUS_OK
ReadX 11868 66630 1784 1784 NT_STATUS_OK
ReadX 11868 68414 90 90 NT_STATUS_OK
ReadX 11868 68504 273 273 NT_STATUS_OK
ReadX 11868 68777 1600 1600 NT_STATUS_OK
ReadX 11868 70377 640 640 NT_STATUS_OK
ReadX 11868 71017 1280 1280 NT_STATUS_OK
ReadX 11868 72297 8464 8464 NT_STATUS_OK
ReadX 11868 80761 158 158 NT_STATUS_OK
ReadX 11868 80919 912 912 NT_STATUS_OK
ReadX 11868 81831 1980 1980 NT_STATUS_OK
ReadX 11868 83811 2256 2256 NT_STATUS_OK
ReadX 11868 86067 400 400 NT_STATUS_OK
ReadX 11868 86467 252 252 NT_STATUS_OK
ReadX 11868 86719 42 42 NT_STATUS_OK
ReadX 11868 86761 725 725 NT_STATUS_OK
ReadX 11868 2009 512 512 NT_STATUS_OK
ReadX 11868 3895 9 9 NT_STATUS_OK
ReadX 11868 3781 46 46 NT_STATUS_OK
ReadX 11868 4059 92 92 NT_STATUS_OK
ReadX 11868 3781 92 92 NT_STATUS_OK
ReadX 11868 3986 184 184 NT_STATUS_OK
ReadX 11868 3987 16384 16384 NT_STATUS_OK
ReadX 11868 3902 16384 16384 NT_STATUS_OK
ReadX 11868 3781 10240 10240 NT_STATUS_OK
ReadX 11868 3821 16384 16384 NT_STATUS_OK
ReadX 11868 3891 935 935 NT_STATUS_OK
ReadX 11868 4060 10240 10240 NT_STATUS_OK
ReadX 11868 4059 184 184 NT_STATUS_OK
ReadX 11868 256 184 184 NT_STATUS_OK
ReadX 11868 256 1026 1026 NT_STATUS_OK
ReadX 11868 3901 326 326 NT_STATUS_OK
ReadX 11868 3899 652 652 NT_STATUS_OK
ReadX 11868 256 2 2 NT_STATUS_OK
ReadX 11868 258 4948 4948 NT_STATUS_OK
Close 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11886 NT_STATUS_OK
WriteX 11886 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11886 258 NT_STATUS_OK
WriteX 11886 0 65536 65536 NT_STATUS_OK
WriteX 11886 65536 65536 65536 NT_STATUS_OK
WriteX 11886 131072 65536 65536 NT_STATUS_OK
WriteX 11886 196608 65536 65536 NT_STATUS_OK
WriteX 11886 262144 65536 65536 NT_STATUS_OK
WriteX 11886 327680 65536 65536 NT_STATUS_OK
WriteX 11886 393216 65536 65536 NT_STATUS_OK
WriteX 11886 458752 65536 65536 NT_STATUS_OK
WriteX 11886 524288 65536 65536 NT_STATUS_OK
WriteX 11886 589824 35257 35257 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11888 NT_STATUS_OK
Close 11888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11891 NT_STATUS_OK
WriteX 11891 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11891 258 NT_STATUS_OK
WriteX 11891 0 65536 65536 NT_STATUS_OK
WriteX 11891 65536 65536 65536 NT_STATUS_OK
WriteX 11891 131072 65536 65536 NT_STATUS_OK
WriteX 11891 196608 65536 65536 NT_STATUS_OK
WriteX 11891 262144 65536 65536 NT_STATUS_OK
WriteX 11891 327680 65536 65536 NT_STATUS_OK
WriteX 11891 393216 65536 65536 NT_STATUS_OK
WriteX 11891 458752 65536 65536 NT_STATUS_OK
WriteX 11891 524288 65536 65536 NT_STATUS_OK
WriteX 11891 589824 57598 57598 NT_STATUS_OK
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11893 NT_STATUS_OK
WriteX 11893 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11893 258 NT_STATUS_OK
WriteX 11893 0 12543 12543 NT_STATUS_OK
Flush 11893 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11895 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11898 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11899 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 1005 NT_STATUS_OK
ReadX 11899 1938 24 24 NT_STATUS_OK
ReadX 11899 1920 276 276 NT_STATUS_OK
ReadX 11899 1918 14 14 NT_STATUS_OK
ReadX 11899 1918 7 7 NT_STATUS_OK
ReadX 11899 1919 12 12 NT_STATUS_OK
ReadX 11899 1919 8 8 NT_STATUS_OK
ReadX 11899 1917 15 15 NT_STATUS_OK
ReadX 11899 0 16 16 NT_STATUS_OK
ReadX 11899 16 2048 2048 NT_STATUS_OK
ReadX 11899 2064 2048 2048 NT_STATUS_OK
ReadX 11899 257 2048 2048 NT_STATUS_OK
ReadX 11899 385 2048 2048 NT_STATUS_OK
ReadX 11899 513 2048 2048 NT_STATUS_OK
ReadX 11899 641 2048 2048 NT_STATUS_OK
ReadX 11899 769 2048 2048 NT_STATUS_OK
ReadX 11899 897 2048 2048 NT_STATUS_OK
ReadX 11899 1025 2048 2048 NT_STATUS_OK
ReadX 11899 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11901 NT_STATUS_OK
Close 11901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11904 NT_STATUS_OK
WriteX 11904 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11904 258 NT_STATUS_OK
WriteX 11904 0 11588 11588 NT_STATUS_OK
Flush 11904 NT_STATUS_OK
Close 11904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11905 NT_STATUS_OK
Close 11905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11907 NT_STATUS_OK
ReadX 11907 0 4096 4096 NT_STATUS_OK
Close 11899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11909 NT_STATUS_OK
WriteX 11909 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11909 258 NT_STATUS_OK
WriteX 11909 0 11615 11615 NT_STATUS_OK
Flush 11909 NT_STATUS_OK
Close 11909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11913 NT_STATUS_OK
ReadX 11913 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11915 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11918 NT_STATUS_OK
WriteX 11918 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11918 258 NT_STATUS_OK
WriteX 11918 0 65536 65536 NT_STATUS_OK
WriteX 11918 65536 16050 16050 NT_STATUS_OK
Close 11918 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11898 1939 64 64 NT_STATUS_OK
ReadX 11898 128 248 248 NT_STATUS_OK
ReadX 11898 128 568 568 NT_STATUS_OK
ReadX 11898 3872 1536 1536 NT_STATUS_OK
ReadX 11898 3456 2560 2560 NT_STATUS_OK
ReadX 11898 3136 512 512 NT_STATUS_OK
ReadX 11898 2880 4096 4096 NT_STATUS_OK
ReadX 11898 3264 3072 3072 NT_STATUS_OK
ReadX 11898 320 4096 4096 NT_STATUS_OK
ReadX 11898 1024 4096 4096 NT_STATUS_OK
ReadX 11898 3616 4096 4096 NT_STATUS_OK
ReadX 11898 1939 64 64 NT_STATUS_OK
ReadX 11898 128 248 248 NT_STATUS_OK
ReadX 11898 128 608 608 NT_STATUS_OK
ReadX 11898 2858 1024 1024 NT_STATUS_OK
ReadX 11898 2810 4096 4096 NT_STATUS_OK
ReadX 11898 2826 4096 4096 NT_STATUS_OK
ReadX 11898 2580 2048 2048 NT_STATUS_OK
ReadX 11898 2800 2560 2560 NT_STATUS_OK
ReadX 11898 2100 4096 4096 NT_STATUS_OK
ReadX 11898 2084 4096 4096 NT_STATUS_OK
ReadX 11898 868 4096 4096 NT_STATUS_OK
ReadX 11898 2324 4096 4096 NT_STATUS_OK
ReadX 11898 884 4096 4096 NT_STATUS_OK
ReadX 11898 2604 1024 1024 NT_STATUS_OK
ReadX 11898 580 4096 4096 NT_STATUS_OK
ReadX 11898 596 4096 4096 NT_STATUS_OK
ReadX 11898 2752 4096 4096 NT_STATUS_OK
ReadX 11898 2842 1024 1024 NT_STATUS_OK
ReadX 11898 660 4096 4096 NT_STATUS_OK
ReadX 11898 2720 4096 4096 NT_STATUS_OK
ReadX 11898 2736 4096 4096 NT_STATUS_OK
ReadX 11898 628 4096 4096 NT_STATUS_OK
ReadX 11898 2704 4096 4096 NT_STATUS_OK
ReadX 11898 1556 4096 4096 NT_STATUS_OK
ReadX 11898 576 4096 4096 NT_STATUS_OK
ReadX 11898 3168 1536 1536 NT_STATUS_OK
ReadX 11898 832 4096 4096 NT_STATUS_OK
ReadX 11898 1088 4096 4096 NT_STATUS_OK
ReadX 11898 1344 4096 4096 NT_STATUS_OK
ReadX 11898 1600 4096 4096 NT_STATUS_OK
ReadX 11898 1856 4096 4096 NT_STATUS_OK
ReadX 11898 2112 4096 4096 NT_STATUS_OK
ReadX 11898 1892 4096 4096 NT_STATUS_OK
ReadX 11898 820 4096 4096 NT_STATUS_OK
ReadX 11898 788 4096 4096 NT_STATUS_OK
ReadX 11898 1604 4096 4096 NT_STATUS_OK
ReadX 11898 3648 4096 4096 NT_STATUS_OK
ReadX 11898 2608 4096 4096 NT_STATUS_OK
ReadX 11898 548 4096 4096 NT_STATUS_OK
ReadX 11898 740 4096 4096 NT_STATUS_OK
ReadX 11898 1344 4096 4096 NT_STATUS_OK
ReadX 11898 3392 4096 4096 NT_STATUS_OK
ReadX 11898 3904 4096 4096 NT_STATUS_OK
ReadX 11898 644 4096 4096 NT_STATUS_OK
ReadX 11898 676 4096 4096 NT_STATUS_OK
ReadX 11898 2688 4096 4096 NT_STATUS_OK
ReadX 11898 320 4096 4096 NT_STATUS_OK
ReadX 11898 900 4096 4096 NT_STATUS_OK
ReadX 11898 1908 4096 4096 NT_STATUS_OK
ReadX 11898 852 4096 4096 NT_STATUS_OK
ReadX 11898 724 4096 4096 NT_STATUS_OK
ReadX 11898 2292 4096 4096 NT_STATUS_OK
ReadX 11898 612 4096 4096 NT_STATUS_OK
ReadX 11898 388 4096 4096 NT_STATUS_OK
ReadX 11898 2368 4096 4096 NT_STATUS_OK
ReadX 11898 2624 4096 4096 NT_STATUS_OK
ReadX 11898 500 4096 4096 NT_STATUS_OK
ReadX 11898 356 4096 4096 NT_STATUS_OK
ReadX 11898 1024 4096 4096 NT_STATUS_OK
ReadX 11898 576 4096 4096 NT_STATUS_OK
ReadX 11898 340 4096 4096 NT_STATUS_OK
ReadX 11898 420 4096 4096 NT_STATUS_OK
ReadX 11898 1600 4096 4096 NT_STATUS_OK
ReadX 11898 404 4096 4096 NT_STATUS_OK
ReadX 11898 1428 4096 4096 NT_STATUS_OK
ReadX 11898 2656 4096 4096 NT_STATUS_OK
ReadX 11898 2624 4096 4096 NT_STATUS_OK
ReadX 11898 452 4096 4096 NT_STATUS_OK
ReadX 11898 692 4096 4096 NT_STATUS_OK
ReadX 11898 564 4096 4096 NT_STATUS_OK
ReadX 11898 372 4096 4096 NT_STATUS_OK
ReadX 11898 468 4096 4096 NT_STATUS_OK
ReadX 11898 484 4096 4096 NT_STATUS_OK
ReadX 11898 1088 4096 4096 NT_STATUS_OK
ReadX 11898 1924 4096 4096 NT_STATUS_OK
ReadX 11898 2768 4096 4096 NT_STATUS_OK
ReadX 11898 832 4096 4096 NT_STATUS_OK
ReadX 11898 836 4096 4096 NT_STATUS_OK
ReadX 11898 1856 4096 4096 NT_STATUS_OK
ReadX 11898 2640 4096 4096 NT_STATUS_OK
ReadX 11898 436 4096 4096 NT_STATUS_OK
ReadX 11898 1828 4096 4096 NT_STATUS_OK
ReadX 11898 804 4096 4096 NT_STATUS_OK
ReadX 11898 1860 4096 4096 NT_STATUS_OK
ReadX 11898 1812 4096 4096 NT_STATUS_OK
ReadX 11898 756 4096 4096 NT_STATUS_OK
ReadX 11898 1636 4096 4096 NT_STATUS_OK
ReadX 11898 772 4096 4096 NT_STATUS_OK
ReadX 11898 2036 4096 4096 NT_STATUS_OK
ReadX 11898 1220 4096 4096 NT_STATUS_OK
ReadX 11898 1652 4096 4096 NT_STATUS_OK
ReadX 11898 2588 4096 4096 NT_STATUS_OK
ReadX 11898 916 4096 4096 NT_STATUS_OK
ReadX 11898 260 4096 4096 NT_STATUS_OK
ReadX 11898 932 4096 4096 NT_STATUS_OK
ReadX 11898 2624 4096 4096 NT_STATUS_OK
ReadX 11898 308 4096 4096 NT_STATUS_OK
ReadX 11898 292 4096 4096 NT_STATUS_OK
ReadX 11898 1140 4096 4096 NT_STATUS_OK
ReadX 11898 276 4096 4096 NT_STATUS_OK
ReadX 11898 2020 4096 4096 NT_STATUS_OK
ReadX 11898 2880 4096 4096 NT_STATUS_OK
ReadX 11898 516 4096 4096 NT_STATUS_OK
ReadX 11898 1844 4096 4096 NT_STATUS_OK
ReadX 11898 1124 4096 4096 NT_STATUS_OK
ReadX 11898 3136 4096 4096 NT_STATUS_OK
ReadX 11898 324 4096 4096 NT_STATUS_OK
ReadX 11898 1156 4096 4096 NT_STATUS_OK
ReadX 11898 1172 4096 4096 NT_STATUS_OK
ReadX 11898 2112 4096 4096 NT_STATUS_OK
ReadX 11898 2368 4096 4096 NT_STATUS_OK
ReadX 11898 964 4096 4096 NT_STATUS_OK
ReadX 11898 980 4096 4096 NT_STATUS_OK
ReadX 11898 1012 4096 4096 NT_STATUS_OK
ReadX 11898 532 4096 4096 NT_STATUS_OK
ReadX 11898 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11898 1620 4096 4096 NT_STATUS_OK
ReadX 11898 1604 4096 4096 NT_STATUS_OK
ReadX 11898 2116 4096 4096 NT_STATUS_OK
ReadX 11898 2132 4096 4096 NT_STATUS_OK
ReadX 11898 2148 4096 4096 NT_STATUS_OK
ReadX 11898 2276 4096 4096 NT_STATUS_OK
ReadX 11898 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11920 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11923 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
WriteX 11923 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11923 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1004 NT_STATUS_OK
Close 11880 NT_STATUS_OK
WriteX 11923 0 65536 65536 NT_STATUS_OK
WriteX 11923 65536 64850 64850 NT_STATUS_OK
Close 11923 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11925 NT_STATUS_OK
WriteX 11925 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11925 258 NT_STATUS_OK
ReadX 11898 2068 4096 4096 NT_STATUS_OK
ReadX 11898 1588 4096 4096 NT_STATUS_OK
ReadX 11898 1572 4096 4096 NT_STATUS_OK
WriteX 11925 0 18630 18630 NT_STATUS_OK
Flush 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11898 612 4096 4096 NT_STATUS_OK
ReadX 11898 564 4096 4096 NT_STATUS_OK
ReadX 11898 1876 4096 4096 NT_STATUS_OK
ReadX 11898 628 4096 4096 NT_STATUS_OK
ReadX 11898 740 4096 4096 NT_STATUS_OK
ReadX 11898 724 4096 4096 NT_STATUS_OK
ReadX 11898 644 4096 4096 NT_STATUS_OK
ReadX 11898 2324 4096 4096 NT_STATUS_OK
ReadX 11898 660 4096 4096 NT_STATUS_OK
ReadX 11898 852 4096 4096 NT_STATUS_OK
ReadX 11898 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11898 2368 4096 4096 NT_STATUS_OK
ReadX 11898 1024 4096 4096 NT_STATUS_OK
ReadX 11898 320 4096 4096 NT_STATUS_OK
ReadX 11898 580 4096 4096 NT_STATUS_OK
ReadX 11898 3136 512 512 NT_STATUS_OK
ReadX 11898 2880 4096 4096 NT_STATUS_OK
Close 11898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 61440 4096 4096 NT_STATUS_OK
ReadX 11930 126976 4096 4096 NT_STATUS_OK
WriteX 11930 0 65536 65536 NT_STATUS_OK
WriteX 11930 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 61440 4096 4096 NT_STATUS_OK
ReadX 11931 126976 4096 4096 NT_STATUS_OK
ReadX 11931 192512 4096 4096 NT_STATUS_OK
ReadX 11931 258048 4096 4096 NT_STATUS_OK
WriteX 11931 0 65536 65536 NT_STATUS_OK
WriteX 11931 65536 65536 65536 NT_STATUS_OK
WriteX 11931 131072 65536 65536 NT_STATUS_OK
WriteX 11931 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 61440 4096 4096 NT_STATUS_OK
ReadX 11932 126976 4096 4096 NT_STATUS_OK
ReadX 11932 192512 4096 4096 NT_STATUS_OK
ReadX 11932 258048 4096 4096 NT_STATUS_OK
ReadX 11932 323584 4096 4096 NT_STATUS_OK
ReadX 11932 389120 4096 4096 NT_STATUS_OK
ReadX 11932 454656 4096 4096 NT_STATUS_OK
ReadX 11932 520192 4096 4096 NT_STATUS_OK
WriteX 11932 0 65536 65536 NT_STATUS_OK
WriteX 11932 65536 65536 65536 NT_STATUS_OK
WriteX 11932 131072 65536 65536 NT_STATUS_OK
WriteX 11932 196608 65536 65536 NT_STATUS_OK
WriteX 11932 262144 65536 65536 NT_STATUS_OK
WriteX 11932 327680 65536 65536 NT_STATUS_OK
WriteX 11932 393216 65536 65536 NT_STATUS_OK
WriteX 11932 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11933 NT_STATUS_OK
ReadX 11933 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11935 NT_STATUS_OK
WriteX 11935 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11935 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11933 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11933 0 8192 8192 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11937 NT_STATUS_OK
Close 11937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Close 11931 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11940 NT_STATUS_OK
WriteX 11940 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11940 258 NT_STATUS_OK
WriteX 11940 0 62591 62591 NT_STATUS_OK
Close 11940 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11945 NT_STATUS_OK
WriteX 11945 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11945 258 NT_STATUS_OK
WriteX 11945 0 10845 10845 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11947 NT_STATUS_OK
Close 11947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11950 NT_STATUS_OK
WriteX 11950 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11950 258 NT_STATUS_OK
WriteX 11950 0 30118 30118 NT_STATUS_OK
Close 11950 NT_STATUS_OK
WriteX 11933 0 4096 4096 NT_STATUS_OK
WriteX 11935 0 64 64 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11933 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11952 NT_STATUS_OK
ReadX 11952 0 61440 61440 NT_STATUS_OK
ReadX 11952 61440 4096 4096 NT_STATUS_OK
ReadX 11952 65536 61440 61440 NT_STATUS_OK
ReadX 11952 126976 4096 4096 NT_STATUS_OK
ReadX 11952 131072 61440 61440 NT_STATUS_OK
ReadX 11952 192512 4096 4096 NT_STATUS_OK
ReadX 11952 196608 61440 61440 NT_STATUS_OK
ReadX 11952 258048 4096 4096 NT_STATUS_OK
ReadX 11952 262144 61440 61440 NT_STATUS_OK
ReadX 11952 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11953 NT_STATUS_OK
ReadX 11953 0 61440 61440 NT_STATUS_OK
ReadX 11953 61440 4096 4096 NT_STATUS_OK
ReadX 11953 65536 61440 61440 NT_STATUS_OK
ReadX 11953 126976 4096 4096 NT_STATUS_OK
ReadX 11953 131072 61440 61440 NT_STATUS_OK
ReadX 11953 192512 4096 4096 NT_STATUS_OK
ReadX 11953 196608 61440 61440 NT_STATUS_OK
ReadX 11953 258048 4096 4096 NT_STATUS_OK
ReadX 11953 262144 61440 61440 NT_STATUS_OK
ReadX 11953 323584 4096 4096 NT_STATUS_OK
ReadX 11953 327680 61440 61440 NT_STATUS_OK
ReadX 11953 389120 4096 4096 NT_STATUS_OK
ReadX 11953 393216 61440 61440 NT_STATUS_OK
ReadX 11953 454656 4096 4096 NT_STATUS_OK
ReadX 11953 458752 61440 61440 NT_STATUS_OK
ReadX 11953 520192 4096 4096 NT_STATUS_OK
ReadX 11953 524288 61440 61440 NT_STATUS_OK
ReadX 11953 585728 4096 4096 NT_STATUS_OK
ReadX 11953 589824 61440 61440 NT_STATUS_OK
ReadX 11953 651264 4096 4096 NT_STATUS_OK
ReadX 11953 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 61440 61440 NT_STATUS_OK
ReadX 11954 61440 4096 4096 NT_STATUS_OK
ReadX 11954 65536 61440 61440 NT_STATUS_OK
ReadX 11954 126976 4096 4096 NT_STATUS_OK
ReadX 11954 131072 61440 61440 NT_STATUS_OK
ReadX 11954 192512 4096 4096 NT_STATUS_OK
ReadX 11954 196608 61440 61440 NT_STATUS_OK
ReadX 11954 258048 4096 4096 NT_STATUS_OK
ReadX 11954 262144 61440 61440 NT_STATUS_OK
ReadX 11954 323584 4096 4096 NT_STATUS_OK
ReadX 11954 327680 61440 61440 NT_STATUS_OK
ReadX 11954 389120 4096 4096 NT_STATUS_OK
ReadX 11954 393216 61440 61440 NT_STATUS_OK
ReadX 11954 454656 4096 4096 NT_STATUS_OK
ReadX 11954 458752 61440 61440 NT_STATUS_OK
ReadX 11954 520192 4096 4096 NT_STATUS_OK
ReadX 11954 524288 61440 61440 NT_STATUS_OK
ReadX 11954 585728 4096 4096 NT_STATUS_OK
ReadX 11954 589824 61440 61440 NT_STATUS_OK
ReadX 11954 651264 4096 4096 NT_STATUS_OK
ReadX 11954 655360 61440 61440 NT_STATUS_OK
ReadX 11954 716800 4096 4096 NT_STATUS_OK
ReadX 11954 720896 61440 61440 NT_STATUS_OK
ReadX 11954 782336 4096 4096 NT_STATUS_OK
ReadX 11954 786432 61440 61440 NT_STATUS_OK
ReadX 11954 847872 4096 4096 NT_STATUS_OK
ReadX 11954 851968 61440 61440 NT_STATUS_OK
ReadX 11954 913408 4096 4096 NT_STATUS_OK
ReadX 11954 917504 61440 61440 NT_STATUS_OK
ReadX 11954 978944 4096 4096 NT_STATUS_OK
ReadX 11954 983040 61440 61440 NT_STATUS_OK
ReadX 11954 1044480 4096 4096 NT_STATUS_OK
ReadX 11954 1048576 61440 61440 NT_STATUS_OK
ReadX 11954 1110016 4096 4096 NT_STATUS_OK
ReadX 11954 1114112 61440 61440 NT_STATUS_OK
ReadX 11954 1175552 4096 4096 NT_STATUS_OK
ReadX 11954 1179648 61440 61440 NT_STATUS_OK
ReadX 11954 1241088 4096 4096 NT_STATUS_OK
ReadX 11954 1245184 61440 61440 NT_STATUS_OK
ReadX 11954 1306624 4096 4096 NT_STATUS_OK
ReadX 11954 1310720 61440 61440 NT_STATUS_OK
ReadX 11954 1372160 4096 4096 NT_STATUS_OK
ReadX 11954 1376256 61440 61440 NT_STATUS_OK
ReadX 11954 1437696 4096 4096 NT_STATUS_OK
ReadX 11954 1441792 61440 61440 NT_STATUS_OK
ReadX 11954 1503232 4096 4096 NT_STATUS_OK
ReadX 11954 1507328 61440 61440 NT_STATUS_OK
ReadX 11954 1568768 4096 4096 NT_STATUS_OK
ReadX 11954 1572864 61440 61440 NT_STATUS_OK
ReadX 11954 1634304 4096 4096 NT_STATUS_OK
ReadX 11954 1638400 61440 61440 NT_STATUS_OK
ReadX 11954 1699840 4096 4096 NT_STATUS_OK
ReadX 11954 1703936 61440 61440 NT_STATUS_OK
ReadX 11954 1765376 4096 4096 NT_STATUS_OK
ReadX 11954 1769472 61440 61440 NT_STATUS_OK
ReadX 11954 1830912 4096 4096 NT_STATUS_OK
ReadX 11954 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Close 11954 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
ReadX 11959 4096 4096 4096 NT_STATUS_OK
ReadX 11959 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11957 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11963 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 8192 8192 NT_STATUS_OK
ReadX 11967 8192 8192 8192 NT_STATUS_OK
ReadX 11967 16384 8192 8192 NT_STATUS_OK
ReadX 11967 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11969 NT_STATUS_OK
Close 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11972 NT_STATUS_OK
WriteX 11972 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11972 258 NT_STATUS_OK
WriteX 11972 0 10438 10438 NT_STATUS_OK
Close 11972 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11973 NT_STATUS_OK
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11974 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11975 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11977 NT_STATUS_OK
Close 11977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11978 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11980 NT_STATUS_OK
Close 11980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11981 NT_STATUS_OK
ReadX 11981 0 4096 4096 NT_STATUS_OK
ReadX 11981 4096 4096 4096 NT_STATUS_OK
ReadX 11981 8192 4096 4096 NT_STATUS_OK
ReadX 11981 12288 8192 8192 NT_STATUS_OK
ReadX 11981 20480 8192 8192 NT_STATUS_OK
ReadX 11981 28672 8192 8192 NT_STATUS_OK
ReadX 11981 36864 8192 8192 NT_STATUS_OK
ReadX 11981 45056 8192 8192 NT_STATUS_OK
ReadX 11981 53248 8192 8192 NT_STATUS_OK
ReadX 11981 61440 8192 8192 NT_STATUS_OK
ReadX 11981 69632 8192 8192 NT_STATUS_OK
ReadX 11981 77824 8192 8192 NT_STATUS_OK
ReadX 11981 86016 8192 8192 NT_STATUS_OK
ReadX 11981 94208 8192 8192 NT_STATUS_OK
ReadX 11981 102400 8192 8192 NT_STATUS_OK
ReadX 11981 110592 8192 8192 NT_STATUS_OK
ReadX 11981 118784 8192 8192 NT_STATUS_OK
ReadX 11981 126976 8192 8192 NT_STATUS_OK
ReadX 11981 135168 8192 8192 NT_STATUS_OK
ReadX 11981 143360 8192 8192 NT_STATUS_OK
ReadX 11981 151552 8192 8192 NT_STATUS_OK
ReadX 11981 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11981 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11983 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11986 NT_STATUS_OK
WriteX 11986 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11986 258 NT_STATUS_OK
WriteX 11986 0 28489 28489 NT_STATUS_OK
Close 11986 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11987 NT_STATUS_OK
Close 11987 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11989 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11990 NT_STATUS_OK
Close 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11989 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11993 NT_STATUS_OK
ReadX 11993 0 8192 8192 NT_STATUS_OK
ReadX 11993 8192 8192 8192 NT_STATUS_OK
ReadX 11993 16384 8192 8192 NT_STATUS_OK
ReadX 11993 24576 8192 8192 NT_STATUS_OK
ReadX 11993 32768 16384 16384 NT_STATUS_OK
ReadX 11993 49152 8192 8192 NT_STATUS_OK
ReadX 11993 57344 8192 8192 NT_STATUS_OK
ReadX 11993 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11995 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11998 NT_STATUS_OK
WriteX 11998 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11998 258 NT_STATUS_OK
WriteX 11998 0 29253 29253 NT_STATUS_OK
Close 11998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11999 NT_STATUS_OK
Close 11999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12000 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12005 NT_STATUS_OK
WriteX 12005 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12005 258 NT_STATUS_OK
WriteX 12005 0 30183 30183 NT_STATUS_OK
Close 12005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12006 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12008 NT_STATUS_OK
WriteX 12008 0 510 510 NT_STATUS_OK
WriteX 12008 510 512 512 NT_STATUS_OK
WriteX 12008 1022 510 510 NT_STATUS_OK
WriteX 12008 1532 510 510 NT_STATUS_OK
WriteX 12008 2042 168 168 NT_STATUS_OK
Close 12008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12009 NT_STATUS_OK
Close 12009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
WriteX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12012 NT_STATUS_OK
ReadX 12012 61440 4096 4096 NT_STATUS_OK
ReadX 12012 126976 4096 4096 NT_STATUS_OK
WriteX 12012 0 65536 65536 NT_STATUS_OK
WriteX 12012 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12013 NT_STATUS_OK
ReadX 12013 61440 4096 4096 NT_STATUS_OK
ReadX 12013 126976 4096 4096 NT_STATUS_OK
ReadX 12013 192512 4096 4096 NT_STATUS_OK
ReadX 12013 258048 4096 4096 NT_STATUS_OK
WriteX 12013 0 65536 65536 NT_STATUS_OK
WriteX 12013 65536 65536 65536 NT_STATUS_OK
WriteX 12013 131072 65536 65536 NT_STATUS_OK
WriteX 12013 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 61440 4096 4096 NT_STATUS_OK
ReadX 12014 126976 4096 4096 NT_STATUS_OK
ReadX 12014 192512 4096 4096 NT_STATUS_OK
ReadX 12014 258048 4096 4096 NT_STATUS_OK
ReadX 12014 323584 4096 4096 NT_STATUS_OK
ReadX 12014 389120 4096 4096 NT_STATUS_OK
ReadX 12014 454656 4096 4096 NT_STATUS_OK
ReadX 12014 520192 4096 4096 NT_STATUS_OK
WriteX 12014 0 65536 65536 NT_STATUS_OK
WriteX 12014 65536 65536 65536 NT_STATUS_OK
WriteX 12014 131072 65536 65536 NT_STATUS_OK
WriteX 12014 196608 65536 65536 NT_STATUS_OK
WriteX 12014 262144 65536 65536 NT_STATUS_OK
WriteX 12014 327680 65536 65536 NT_STATUS_OK
WriteX 12014 393216 65536 65536 NT_STATUS_OK
WriteX 12014 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 12012 NT_STATUS_OK
Close 12013 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12017 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12021 NT_STATUS_OK
Close 12021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12033 NT_STATUS_OK
Close 12033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12039 NT_STATUS_OK
Close 12039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12044 NT_STATUS_OK
Close 12044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12049 NT_STATUS_OK
Close 12049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12054 NT_STATUS_OK
Close 12054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12059 NT_STATUS_OK
Close 12059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12064 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12069 NT_STATUS_OK
Close 12069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12074 NT_STATUS_OK
Close 12074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12080 NT_STATUS_OK
Close 12080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12083 NT_STATUS_OK
WriteX 12083 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12083 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12083 0 65536 65536 NT_STATUS_OK
WriteX 12083 65536 65536 65536 NT_STATUS_OK
WriteX 12083 131072 65536 65536 NT_STATUS_OK
WriteX 12083 196608 65536 65536 NT_STATUS_OK
WriteX 12083 262144 26634 26634 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12088 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12089 NT_STATUS_OK
Close 12089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
ReadX 12091 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12092 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12099 NT_STATUS_OK
Close 12099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12105 NT_STATUS_OK
Close 12105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12108 NT_STATUS_OK
Close 12108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12124 NT_STATUS_OK
Close 12124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12129 NT_STATUS_OK
Close 12129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12134 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12139 NT_STATUS_OK
Close 12139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12148 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12153 NT_STATUS_OK
Close 12153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12156 NT_STATUS_OK
Close 12156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12158 NT_STATUS_OK
Close 12158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12168 NT_STATUS_OK
Close 12168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12169 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12170 NT_STATUS_OK
ReadX 12170 0 4096 4096 NT_STATUS_OK
Close 12170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 4096 4096 NT_STATUS_OK
Close 12171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12172 NT_STATUS_OK
ReadX 12172 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12184 NT_STATUS_OK
ReadX 12184 0 4096 4096 NT_STATUS_OK
Close 12184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12185 NT_STATUS_OK
ReadX 12185 0 4096 4096 NT_STATUS_OK
Close 12185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12186 NT_STATUS_OK
ReadX 12186 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12172 NT_STATUS_OK
Close 12186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12215 0 4096 4096 NT_STATUS_OK
Close 12215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12217 NT_STATUS_OK
ReadX 12217 0 4096 4096 NT_STATUS_OK
ReadX 12217 4096 4096 4096 NT_STATUS_OK
ReadX 12217 8192 4096 4096 NT_STATUS_OK
ReadX 12217 12288 4096 4096 NT_STATUS_OK
ReadX 12217 16384 4096 4096 NT_STATUS_OK
ReadX 12217 20480 4096 4096 NT_STATUS_OK
ReadX 12217 24576 4096 4096 NT_STATUS_OK
ReadX 12217 28672 4096 4096 NT_STATUS_OK
ReadX 12217 32768 4096 4096 NT_STATUS_OK
ReadX 12217 36864 4096 4096 NT_STATUS_OK
ReadX 12217 40960 4096 4096 NT_STATUS_OK
ReadX 12217 45056 4096 4096 NT_STATUS_OK
ReadX 12217 49152 4096 4096 NT_STATUS_OK
ReadX 12217 53248 4096 4096 NT_STATUS_OK
ReadX 12217 57344 4096 4096 NT_STATUS_OK
ReadX 12217 61440 4096 4096 NT_STATUS_OK
ReadX 12217 65536 4096 4096 NT_STATUS_OK
ReadX 12217 69632 4096 4096 NT_STATUS_OK
ReadX 12217 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12217 1004 NT_STATUS_OK
WriteX 12217 0 4096 4096 NT_STATUS_OK
Close 12217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12218 NT_STATUS_OK
SET_FILE_INFORMATION 12218 1004 NT_STATUS_OK
Close 12218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12220 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12223 NT_STATUS_OK
WriteX 12223 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12223 258 NT_STATUS_OK
WriteX 12223 0 65536 65536 NT_STATUS_OK
WriteX 12223 65536 19979 19979 NT_STATUS_OK
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
QUERY_FILE_INFORMATION 12224 1004 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
SET_FILE_INFORMATION 12224 1004 NT_STATUS_OK
WriteX 12224 0 4096 4096 NT_STATUS_OK
Flush 12224 NT_STATUS_OK
Close 12224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12226 NT_STATUS_OK
ReadX 12226 0 4096 4096 NT_STATUS_OK
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12227 NT_STATUS_OK
ReadX 12227 0 4096 4096 NT_STATUS_OK
Close 12227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12228 NT_STATUS_OK
Close 12226 NT_STATUS_OK
ReadX 12228 0 4096 4096 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12229 1004 NT_STATUS_OK
WriteX 12229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12235 NT_STATUS_OK
WriteX 12235 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 65536 65536 NT_STATUS_OK
WriteX 12235 65536 17654 17654 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
QUERY_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
SET_FILE_INFORMATION 12236 1004 NT_STATUS_OK
WriteX 12236 0 4096 4096 NT_STATUS_OK
Flush 12236 NT_STATUS_OK
Close 12236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12237 NT_STATUS_OK
SET_FILE_INFORMATION 12237 1004 NT_STATUS_OK
Close 12237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12238 NT_STATUS_OK
ReadX 12238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 4096 4096 NT_STATUS_OK
ReadX 12241 4096 4096 4096 NT_STATUS_OK
ReadX 12241 8192 4096 4096 NT_STATUS_OK
ReadX 12241 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12241 16384 4096 4096 NT_STATUS_OK
ReadX 12241 20480 4096 4096 NT_STATUS_OK
ReadX 12241 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12242 NT_STATUS_OK
ReadX 12242 0 4096 4096 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12244 1004 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12244 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12250 NT_STATUS_OK
WriteX 12250 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12250 258 NT_STATUS_OK
WriteX 12250 0 65536 65536 NT_STATUS_OK
WriteX 12250 65536 19490 19490 NT_STATUS_OK
Close 12250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
QUERY_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
SET_FILE_INFORMATION 12251 1004 NT_STATUS_OK
WriteX 12251 0 4096 4096 NT_STATUS_OK
Flush 12251 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12252 NT_STATUS_OK
SET_FILE_INFORMATION 12252 1004 NT_STATUS_OK
Close 12252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12253 NT_STATUS_OK
ReadX 12253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12256 0 4096 4096 NT_STATUS_OK
Close 12256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12257 NT_STATUS_OK
ReadX 12257 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12258 NT_STATUS_OK
ReadX 12258 0 4096 4096 NT_STATUS_OK
ReadX 12258 4096 4096 4096 NT_STATUS_OK
ReadX 12258 8192 4096 4096 NT_STATUS_OK
ReadX 12258 12288 4096 4096 NT_STATUS_OK
ReadX 12258 16384 4096 4096 NT_STATUS_OK
ReadX 12258 20480 4096 4096 NT_STATUS_OK
ReadX 12258 24576 4096 4096 NT_STATUS_OK
ReadX 12258 28672 4096 4096 NT_STATUS_OK
ReadX 12258 32768 4096 4096 NT_STATUS_OK
ReadX 12258 36864 4096 4096 NT_STATUS_OK
ReadX 12258 40960 4096 4096 NT_STATUS_OK
ReadX 12258 45056 4096 4096 NT_STATUS_OK
ReadX 12258 49152 4096 4096 NT_STATUS_OK
ReadX 12258 53248 4096 4096 NT_STATUS_OK
ReadX 12258 57344 4096 4096 NT_STATUS_OK
ReadX 12258 61440 4096 4096 NT_STATUS_OK
ReadX 12258 65536 4096 4096 NT_STATUS_OK
ReadX 12258 69632 4096 4096 NT_STATUS_OK
ReadX 12258 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12258 1004 NT_STATUS_OK
WriteX 12258 0 4096 4096 NT_STATUS_OK
Close 12258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12259 NT_STATUS_OK
SET_FILE_INFORMATION 12259 1004 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12264 NT_STATUS_OK
WriteX 12264 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12264 258 NT_STATUS_OK
WriteX 12264 0 65536 65536 NT_STATUS_OK
WriteX 12264 65536 8866 8866 NT_STATUS_OK
Close 12264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
WriteX 12265 0 4096 4096 NT_STATUS_OK
Flush 12265 NT_STATUS_OK
SET_FILE_INFORMATION 12265 1004 NT_STATUS_OK
WriteX 12265 0 4096 4096 NT_STATUS_OK
Flush 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
Close 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12269 1004 NT_STATUS_OK
WriteX 12269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Close 12260 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12272 NT_STATUS_OK
Close 12272 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12275 NT_STATUS_OK
WriteX 12275 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12275 258 NT_STATUS_OK
WriteX 12275 0 65536 65536 NT_STATUS_OK
WriteX 12275 65536 9298 9298 NT_STATUS_OK
Close 12275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
WriteX 12276 0 4096 4096 NT_STATUS_OK
Flush 12276 NT_STATUS_OK
SET_FILE_INFORMATION 12276 1004 NT_STATUS_OK
WriteX 12276 0 4096 4096 NT_STATUS_OK
Flush 12276 NT_STATUS_OK
Close 12276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12277 NT_STATUS_OK
SET_FILE_INFORMATION 12277 1004 NT_STATUS_OK
Close 12277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12278 NT_STATUS_OK
ReadX 12278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12282 0 4096 4096 NT_STATUS_OK
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12283 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12283 4096 4096 4096 NT_STATUS_OK
ReadX 12283 8192 4096 4096 NT_STATUS_OK
ReadX 12283 12288 4096 4096 NT_STATUS_OK
ReadX 12283 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 4096 4096 NT_STATUS_OK
Close 12284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
Close 12285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12286 1004 NT_STATUS_OK
WriteX 12286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12287 NT_STATUS_OK
Close 12287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12286 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12289 NT_STATUS_OK
Close 12289 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12292 NT_STATUS_OK
WriteX 12292 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 258 NT_STATUS_OK
WriteX 12292 0 65536 65536 NT_STATUS_OK
WriteX 12292 65536 11540 11540 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
SET_FILE_INFORMATION 12293 1004 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12294 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12295 NT_STATUS_OK
ReadX 12295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12296 NT_STATUS_OK
Close 12296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12298 NT_STATUS_OK
ReadX 12298 61440 4096 4096 NT_STATUS_OK
ReadX 12298 126976 4096 4096 NT_STATUS_OK
WriteX 12298 0 65536 65536 NT_STATUS_OK
WriteX 12298 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12299 NT_STATUS_OK
ReadX 12299 61440 4096 4096 NT_STATUS_OK
ReadX 12299 126976 4096 4096 NT_STATUS_OK
ReadX 12299 192512 4096 4096 NT_STATUS_OK
ReadX 12299 258048 4096 4096 NT_STATUS_OK
WriteX 12299 0 65536 65536 NT_STATUS_OK
WriteX 12299 65536 65536 65536 NT_STATUS_OK
WriteX 12299 131072 65536 65536 NT_STATUS_OK
WriteX 12299 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12300 NT_STATUS_OK
ReadX 12300 61440 4096 4096 NT_STATUS_OK
ReadX 12300 126976 4096 4096 NT_STATUS_OK
ReadX 12300 192512 4096 4096 NT_STATUS_OK
ReadX 12300 258048 4096 4096 NT_STATUS_OK
ReadX 12300 323584 4096 4096 NT_STATUS_OK
ReadX 12300 389120 4096 4096 NT_STATUS_OK
ReadX 12300 454656 4096 4096 NT_STATUS_OK
ReadX 12300 520192 4096 4096 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 65536 65536 NT_STATUS_OK
WriteX 12300 131072 65536 65536 NT_STATUS_OK
WriteX 12300 196608 65536 65536 NT_STATUS_OK
WriteX 12300 262144 65536 65536 NT_STATUS_OK
WriteX 12300 327680 65536 65536 NT_STATUS_OK
WriteX 12300 393216 65536 65536 NT_STATUS_OK
WriteX 12300 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
ReadX 12301 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12302 NT_STATUS_OK
WriteX 12302 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12302 258 NT_STATUS_OK
WriteX 12302 0 53 53 NT_STATUS_OK
Close 12302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12303 NT_STATUS_OK
Close 12303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12295 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12298 NT_STATUS_OK
Close 12299 NT_STATUS_OK
Close 12300 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12301 8192 4096 4096 NT_STATUS_OK
ReadX 12301 12288 4096 4096 NT_STATUS_OK
WriteX 12305 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12305 258 NT_STATUS_OK
ReadX 12301 16384 4096 4096 NT_STATUS_OK
ReadX 12301 20480 4096 4096 NT_STATUS_OK
WriteX 12305 0 15360 15360 NT_STATUS_OK
Close 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12306 1004 NT_STATUS_OK
WriteX 12306 0 4096 4096 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12309 NT_STATUS_OK
ReadX 12309 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12310 NT_STATUS_OK
Close 12310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12309 4096 4096 4096 NT_STATUS_OK
ReadX 12309 8192 4096 4096 NT_STATUS_OK
ReadX 12309 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
ReadX 12312 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
ReadX 12313 4096 4096 4096 NT_STATUS_OK
ReadX 12313 8192 4096 4096 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12314 NT_STATUS_OK
WriteX 12314 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 258 NT_STATUS_OK
WriteX 12314 0 15360 15360 NT_STATUS_OK
Close 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12319 NT_STATUS_OK
SET_FILE_INFORMATION 12319 1004 NT_STATUS_OK
Close 12319 NT_STATUS_OK
WriteX 12315 0 4096 4096 NT_STATUS_OK
Close 12315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12320 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
ReadX 12322 4096 4096 4096 NT_STATUS_OK
ReadX 12322 8192 4096 4096 NT_STATUS_OK
ReadX 12322 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12322 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12322 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12324 NT_STATUS_OK
WriteX 12324 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12324 258 NT_STATUS_OK
WriteX 12324 0 53 53 NT_STATUS_OK
Close 12324 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12323 4096 4096 4096 NT_STATUS_OK
ReadX 12323 8192 4096 4096 NT_STATUS_OK
ReadX 12323 12288 4096 4096 NT_STATUS_OK
WriteX 12327 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12327 258 NT_STATUS_OK
WriteX 12327 0 12006 12006 NT_STATUS_OK
Close 12327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
WriteX 12328 0 4096 4096 NT_STATUS_OK
Close 12328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12331 NT_STATUS_OK
ReadX 12331 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12332 NT_STATUS_OK
Close 12332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
WriteX 12322 0 19054 19054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12334 NT_STATUS_OK
WriteX 12334 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12334 258 NT_STATUS_OK
WriteX 12334 0 11991 11991 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12335 NT_STATUS_OK
ReadX 12335 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12335 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12339 NT_STATUS_OK
SET_FILE_INFORMATION 12339 1004 NT_STATUS_OK
Close 12339 NT_STATUS_OK
WriteX 12335 0 4096 4096 NT_STATUS_OK
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12343 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12342 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
ReadX 12342 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
WriteX 12342 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12342 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12342 1004 NT_STATUS_OK
Close 12318 NT_STATUS_OK
WriteX 12342 0 12288 12288 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12345 NT_STATUS_OK
Close 12345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 61440 61440 NT_STATUS_OK
ReadX 12349 61440 4096 4096 NT_STATUS_OK
ReadX 12349 65536 61440 61440 NT_STATUS_OK
ReadX 12349 126976 4096 4096 NT_STATUS_OK
ReadX 12349 131072 61440 61440 NT_STATUS_OK
ReadX 12349 192512 4096 4096 NT_STATUS_OK
ReadX 12349 196608 61440 61440 NT_STATUS_OK
ReadX 12349 258048 4096 4096 NT_STATUS_OK
ReadX 12349 262144 61440 61440 NT_STATUS_OK
ReadX 12349 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 61440 61440 NT_STATUS_OK
ReadX 12350 61440 4096 4096 NT_STATUS_OK
ReadX 12350 65536 61440 61440 NT_STATUS_OK
ReadX 12350 126976 4096 4096 NT_STATUS_OK
ReadX 12350 131072 61440 61440 NT_STATUS_OK
ReadX 12350 192512 4096 4096 NT_STATUS_OK
ReadX 12350 196608 61440 61440 NT_STATUS_OK
ReadX 12350 258048 4096 4096 NT_STATUS_OK
ReadX 12350 262144 61440 61440 NT_STATUS_OK
ReadX 12350 323584 4096 4096 NT_STATUS_OK
ReadX 12350 327680 61440 61440 NT_STATUS_OK
ReadX 12350 389120 4096 4096 NT_STATUS_OK
ReadX 12350 393216 61440 61440 NT_STATUS_OK
ReadX 12350 454656 4096 4096 NT_STATUS_OK
ReadX 12350 458752 61440 61440 NT_STATUS_OK
ReadX 12350 520192 4096 4096 NT_STATUS_OK
ReadX 12350 524288 61440 61440 NT_STATUS_OK
ReadX 12350 585728 4096 4096 NT_STATUS_OK
ReadX 12350 589824 61440 61440 NT_STATUS_OK
ReadX 12350 651264 4096 4096 NT_STATUS_OK
ReadX 12350 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 61440 61440 NT_STATUS_OK
ReadX 12351 61440 4096 4096 NT_STATUS_OK
ReadX 12351 65536 61440 61440 NT_STATUS_OK
ReadX 12351 126976 4096 4096 NT_STATUS_OK
ReadX 12351 131072 61440 61440 NT_STATUS_OK
ReadX 12351 192512 4096 4096 NT_STATUS_OK
ReadX 12351 196608 61440 61440 NT_STATUS_OK
ReadX 12351 258048 4096 4096 NT_STATUS_OK
ReadX 12351 262144 61440 61440 NT_STATUS_OK
ReadX 12351 323584 4096 4096 NT_STATUS_OK
ReadX 12351 327680 61440 61440 NT_STATUS_OK
ReadX 12351 389120 4096 4096 NT_STATUS_OK
ReadX 12351 393216 61440 61440 NT_STATUS_OK
ReadX 12351 454656 4096 4096 NT_STATUS_OK
ReadX 12351 458752 61440 61440 NT_STATUS_OK
ReadX 12351 520192 4096 4096 NT_STATUS_OK
ReadX 12351 524288 61440 61440 NT_STATUS_OK
ReadX 12351 585728 4096 4096 NT_STATUS_OK
ReadX 12351 589824 61440 61440 NT_STATUS_OK
ReadX 12351 651264 4096 4096 NT_STATUS_OK
ReadX 12351 655360 61440 61440 NT_STATUS_OK
ReadX 12351 716800 4096 4096 NT_STATUS_OK
ReadX 12351 720896 61440 61440 NT_STATUS_OK
ReadX 12351 782336 4096 4096 NT_STATUS_OK
ReadX 12351 786432 61440 61440 NT_STATUS_OK
ReadX 12351 847872 4096 4096 NT_STATUS_OK
ReadX 12351 851968 61440 61440 NT_STATUS_OK
ReadX 12351 913408 4096 4096 NT_STATUS_OK
ReadX 12351 917504 61440 61440 NT_STATUS_OK
ReadX 12351 978944 4096 4096 NT_STATUS_OK
ReadX 12351 983040 61440 61440 NT_STATUS_OK
ReadX 12351 1044480 4096 4096 NT_STATUS_OK
ReadX 12351 1048576 61440 61440 NT_STATUS_OK
ReadX 12351 1110016 4096 4096 NT_STATUS_OK
ReadX 12351 1114112 61440 61440 NT_STATUS_OK
ReadX 12351 1175552 4096 4096 NT_STATUS_OK
ReadX 12351 1179648 61440 61440 NT_STATUS_OK
ReadX 12351 1241088 4096 4096 NT_STATUS_OK
ReadX 12351 1245184 61440 61440 NT_STATUS_OK
ReadX 12351 1306624 4096 4096 NT_STATUS_OK
ReadX 12351 1310720 61440 61440 NT_STATUS_OK
ReadX 12351 1372160 4096 4096 NT_STATUS_OK
ReadX 12351 1376256 61440 61440 NT_STATUS_OK
ReadX 12351 1437696 4096 4096 NT_STATUS_OK
ReadX 12351 1441792 61440 61440 NT_STATUS_OK
ReadX 12351 1503232 4096 4096 NT_STATUS_OK
ReadX 12351 1507328 61440 61440 NT_STATUS_OK
ReadX 12351 1568768 4096 4096 NT_STATUS_OK
ReadX 12351 1572864 61440 61440 NT_STATUS_OK
ReadX 12351 1634304 4096 4096 NT_STATUS_OK
ReadX 12351 1638400 61440 61440 NT_STATUS_OK
ReadX 12351 1699840 4096 4096 NT_STATUS_OK
ReadX 12351 1703936 61440 61440 NT_STATUS_OK
ReadX 12351 1765376 4096 4096 NT_STATUS_OK
ReadX 12351 1769472 61440 61440 NT_STATUS_OK
ReadX 12351 1830912 4096 4096 NT_STATUS_OK
ReadX 12351 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12358 NT_STATUS_OK
QUERY_FILE_INFORMATION 12358 1004 NT_STATUS_OK
WriteX 12358 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12358 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12359 NT_STATUS_OK
Close 12359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12360 NT_STATUS_OK
WriteX 12360 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12360 258 NT_STATUS_OK
WriteX 12360 0 491 491 NT_STATUS_OK
Close 12360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12361 NT_STATUS_OK
ReadX 12361 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12358 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12363 NT_STATUS_OK
Close 12363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12364 NT_STATUS_OK
WriteX 12364 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12364 258 NT_STATUS_OK
WriteX 12364 0 543 543 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12365 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Close 12356 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12371 NT_STATUS_OK
ReadX 12371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12372 NT_STATUS_OK
ReadX 12372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12373 NT_STATUS_OK
ReadX 12373 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12378 NT_STATUS_OK
QUERY_FILE_INFORMATION 12378 1004 NT_STATUS_OK
WriteX 12378 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12378 258 NT_STATUS_OK
WriteX 12378 0 2048 2048 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
Flush 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12384 NT_STATUS_OK
WriteX 12384 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12384 258 NT_STATUS_OK
WriteX 12384 0 2048 2048 NT_STATUS_OK
Close 12384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12389 NT_STATUS_OK
Close 12389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12390 NT_STATUS_OK
WriteX 12390 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12390 258 NT_STATUS_OK
WriteX 12390 0 2048 2048 NT_STATUS_OK
Close 12390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12391 NT_STATUS_OK
ReadX 12391 0 2048 2048 NT_STATUS_OK
ReadX 12369 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12373 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12385 0 4096 4096 NT_STATUS_OK
WriteX 12369 0 8192 8192 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
WriteX 12371 0 4096 4096 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12395 NT_STATUS_OK
QUERY_FILE_INFORMATION 12395 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Close 12370 NT_STATUS_OK
Close 12371 NT_STATUS_OK
Close 12372 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Close 12369 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12398 NT_STATUS_OK
ReadX 12398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12403 NT_STATUS_OK
ReadX 12403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12404 NT_STATUS_OK
ReadX 12404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12405 NT_STATUS_OK
ReadX 12405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12415 NT_STATUS_OK
QUERY_FILE_INFORMATION 12415 1004 NT_STATUS_OK
WriteX 12415 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12415 258 NT_STATUS_OK
WriteX 12415 0 2048 2048 NT_STATUS_OK
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12423 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 1004 NT_STATUS_OK
WriteX 12423 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 258 NT_STATUS_OK
WriteX 12423 0 2048 2048 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12416 0 4096 4096 NT_STATUS_OK
Flush 12416 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
Flush 12424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12416 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12418 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12426 NT_STATUS_OK
WriteX 12426 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12426 258 NT_STATUS_OK
WriteX 12426 0 4096 4096 NT_STATUS_OK
Close 12426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12428 NT_STATUS_OK
Close 12428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12429 NT_STATUS_OK
WriteX 12429 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12429 258 NT_STATUS_OK
WriteX 12429 0 4096 4096 NT_STATUS_OK
Close 12429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12430 NT_STATUS_OK
ReadX 12430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12430 0 4096 4096 NT_STATUS_OK
Close 12427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12404 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Close 12408 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Close 12405 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Close 12399 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12403 NT_STATUS_OK
Close 12400 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12433 NT_STATUS_OK
Close 12433 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12435 NT_STATUS_OK
ReadX 12435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12437 NT_STATUS_OK
WriteX 12437 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 2048 2048 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12440 NT_STATUS_OK
ReadX 12440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12441 NT_STATUS_OK
ReadX 12441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12442 NT_STATUS_OK
ReadX 12442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12443 NT_STATUS_OK
ReadX 12443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12444 NT_STATUS_OK
ReadX 12444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12445 NT_STATUS_OK
ReadX 12445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12452 NT_STATUS_OK
QUERY_FILE_INFORMATION 12452 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12435 NT_STATUS_OK
Close 12438 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Close 12445 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Close 12439 NT_STATUS_OK
Close 12440 NT_STATUS_OK
Close 12443 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Close 12442 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12454 NT_STATUS_OK
QUERY_FILE_INFORMATION 12454 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12456 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12460 NT_STATUS_OK
ReadX 12460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12461 NT_STATUS_OK
ReadX 12461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12462 NT_STATUS_OK
ReadX 12462 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12474 NT_STATUS_OK
QUERY_FILE_INFORMATION 12474 1004 NT_STATUS_OK
WriteX 12474 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12474 258 NT_STATUS_OK
WriteX 12474 0 2048 2048 NT_STATUS_OK
Close 12474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12476 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12480 NT_STATUS_OK
ReadX 12480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12486 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 258 NT_STATUS_OK
WriteX 12486 0 2048 2048 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12489 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12494 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 1004 NT_STATUS_OK
WriteX 12494 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 258 NT_STATUS_OK
WriteX 12494 0 2048 2048 NT_STATUS_OK
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12495 NT_STATUS_OK
ReadX 12495 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12475 0 4096 4096 NT_STATUS_OK
Flush 12475 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
Flush 12487 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
Flush 12495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12475 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12477 4096 16384 16384 NT_STATUS_OK
ReadX 12457 4096 16384 16384 NT_STATUS_OK
ReadX 12489 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12497 NT_STATUS_OK
ReadX 12497 0 2048 2048 NT_STATUS_OK
WriteX 12497 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12498 NT_STATUS_OK
QUERY_FILE_INFORMATION 12498 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Close 12469 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Close 12479 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12460 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12500 NT_STATUS_OK
QUERY_FILE_INFORMATION 12500 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12502 NT_STATUS_OK
QUERY_FILE_INFORMATION 12502 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12507 NT_STATUS_OK
ReadX 12507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12508 NT_STATUS_OK
ReadX 12508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12509 NT_STATUS_OK
ReadX 12509 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12505 4096 16384 16384 NT_STATUS_OK
WriteX 12505 0 4096 4096 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
WriteX 12507 0 4096 4096 NT_STATUS_OK
WriteX 12508 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12510 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12511 NT_STATUS_OK
ReadX 12511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 8192 8192 NT_STATUS_OK
ReadX 12511 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12525 0 4096 4096 NT_STATUS_OK
ReadX 12525 4096 4096 4096 NT_STATUS_OK
ReadX 12525 8192 4096 4096 NT_STATUS_OK
WriteX 12511 0 4096 4096 NT_STATUS_OK
WriteX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
ReadX 12526 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12505 0 4096 4096 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
WriteX 12507 0 4096 4096 NT_STATUS_OK
WriteX 12508 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12531 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 1004 NT_STATUS_OK
WriteX 12531 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 258 NT_STATUS_OK
WriteX 12531 0 2048 2048 NT_STATUS_OK
Close 12531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
ReadX 12534 4096 4096 4096 NT_STATUS_OK
WriteX 12534 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12532 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12536 NT_STATUS_OK
ReadX 12536 0 4096 4096 NT_STATUS_OK
ReadX 12536 4096 4096 4096 NT_STATUS_OK
WriteX 12536 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12537 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Close 12505 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Close 12507 NT_STATUS_OK
Close 12508 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12511 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Close 12536 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12539 0 4096 4096 NT_STATUS_OK
ReadX 12539 4096 4096 4096 NT_STATUS_OK
ReadX 12539 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
ReadX 12540 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12556 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12557 NT_STATUS_OK
QUERY_FILE_INFORMATION 12557 1004 NT_STATUS_OK
WriteX 12557 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12557 258 NT_STATUS_OK
WriteX 12557 0 2048 2048 NT_STATUS_OK
Close 12557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12558 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12562 NT_STATUS_OK
Close 12562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12563 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 1004 NT_STATUS_OK
WriteX 12563 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12563 258 NT_STATUS_OK
WriteX 12563 0 2048 2048 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12564 NT_STATUS_OK
ReadX 12564 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12564 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12547 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12565 NT_STATUS_OK
QUERY_FILE_INFORMATION 12565 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12547 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12539 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12567 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12569 NT_STATUS_OK
ReadX 12569 61440 4096 4096 NT_STATUS_OK
ReadX 12569 126976 4096 4096 NT_STATUS_OK
WriteX 12569 0 65536 65536 NT_STATUS_OK
WriteX 12569 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 61440 4096 4096 NT_STATUS_OK
ReadX 12570 126976 4096 4096 NT_STATUS_OK
ReadX 12570 192512 4096 4096 NT_STATUS_OK
ReadX 12570 258048 4096 4096 NT_STATUS_OK
WriteX 12570 0 65536 65536 NT_STATUS_OK
WriteX 12570 65536 65536 65536 NT_STATUS_OK
WriteX 12570 131072 65536 65536 NT_STATUS_OK
WriteX 12570 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 61440 4096 4096 NT_STATUS_OK
ReadX 12571 126976 4096 4096 NT_STATUS_OK
ReadX 12571 192512 4096 4096 NT_STATUS_OK
ReadX 12571 258048 4096 4096 NT_STATUS_OK
ReadX 12571 323584 4096 4096 NT_STATUS_OK
ReadX 12571 389120 4096 4096 NT_STATUS_OK
ReadX 12571 454656 4096 4096 NT_STATUS_OK
ReadX 12571 520192 4096 4096 NT_STATUS_OK
WriteX 12571 0 65536 65536 NT_STATUS_OK
WriteX 12571 65536 65536 65536 NT_STATUS_OK
WriteX 12571 131072 65536 65536 NT_STATUS_OK
WriteX 12571 196608 65536 65536 NT_STATUS_OK
WriteX 12571 262144 65536 65536 NT_STATUS_OK
WriteX 12571 327680 65536 65536 NT_STATUS_OK
WriteX 12571 393216 65536 65536 NT_STATUS_OK
WriteX 12571 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12572 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12572 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12572 8192 4096 4096 NT_STATUS_OK
ReadX 12572 12288 4096 4096 NT_STATUS_OK
ReadX 12572 16384 4096 4096 NT_STATUS_OK
ReadX 12572 20480 4096 4096 NT_STATUS_OK
ReadX 12572 24576 4096 4096 NT_STATUS_OK
ReadX 12572 28672 4096 4096 NT_STATUS_OK
ReadX 12572 32768 4096 4096 NT_STATUS_OK
ReadX 12572 36864 4096 4096 NT_STATUS_OK
ReadX 12572 40960 4096 4096 NT_STATUS_OK
ReadX 12572 45056 4096 4096 NT_STATUS_OK
ReadX 12572 49152 4096 4096 NT_STATUS_OK
ReadX 12572 53248 4096 4096 NT_STATUS_OK
ReadX 12572 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12572 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12573 NT_STATUS_OK
Close 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12569 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Close 12571 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12575 NT_STATUS_OK
WriteX 12575 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12575 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12575 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12575 1004 NT_STATUS_OK
WriteX 12575 0 57088 57088 NT_STATUS_OK
WriteX 12575 0 4096 4096 NT_STATUS_OK
Flush 12575 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12576 NT_STATUS_OK
SET_FILE_INFORMATION 12576 1004 NT_STATUS_OK
Close 12576 NT_STATUS_OK
SET_FILE_INFORMATION 12575 1004 NT_STATUS_OK
WriteX 12575 0 4096 4096 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12579 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12580 NT_STATUS_OK
WriteX 12580 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12580 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
WriteX 12580 0 51456 51456 NT_STATUS_OK
WriteX 12580 0 4096 4096 NT_STATUS_OK
Flush 12580 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
WriteX 12580 0 4096 4096 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Close 12579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12582 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12584 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12589 NT_STATUS_OK
WriteX 12589 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12589 258 NT_STATUS_OK
WriteX 12589 0 53077 53077 NT_STATUS_OK
Close 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12590 NT_STATUS_OK
WriteX 12590 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12590 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 65536 65536 NT_STATUS_OK
WriteX 12590 65536 1856 1856 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
Flush 12590 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12592 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12594 NT_STATUS_OK
ReadX 12594 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12596 NT_STATUS_OK
Close 12596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12599 NT_STATUS_OK
WriteX 12599 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12599 258 NT_STATUS_OK
WriteX 12599 0 7983 7983 NT_STATUS_OK
Close 12599 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12601 NT_STATUS_OK
Close 12601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12604 NT_STATUS_OK
WriteX 12604 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 258 NT_STATUS_OK
WriteX 12604 0 65536 65536 NT_STATUS_OK
WriteX 12604 65536 65536 65536 NT_STATUS_OK
WriteX 12604 131072 65536 65536 NT_STATUS_OK
WriteX 12604 196608 65536 65536 NT_STATUS_OK
WriteX 12604 262144 65536 65536 NT_STATUS_OK
WriteX 12604 327680 65536 65536 NT_STATUS_OK
WriteX 12604 393216 65536 65536 NT_STATUS_OK
WriteX 12604 458752 46731 46731 NT_STATUS_OK
Close 12604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12605 NT_STATUS_OK
WriteX 12605 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12594 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12605 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
WriteX 12605 0 65536 65536 NT_STATUS_OK
WriteX 12605 65536 22848 22848 NT_STATUS_OK
WriteX 12605 0 4096 4096 NT_STATUS_OK
Flush 12605 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12605 1004 NT_STATUS_OK
WriteX 12605 0 4096 4096 NT_STATUS_OK
Close 12605 NT_STATUS_OK
Close 12594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12607 NT_STATUS_OK
Close 12607 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12609 NT_STATUS_OK
ReadX 12609 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12609 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12610 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12610 1004 NT_STATUS_OK
ReadX 12610 8192 4096 4096 NT_STATUS_OK
ReadX 12610 12288 4096 4096 NT_STATUS_OK
ReadX 12610 16384 4096 4096 NT_STATUS_OK
ReadX 12610 20480 4096 4096 NT_STATUS_OK
ReadX 12610 24576 4096 4096 NT_STATUS_OK
ReadX 12610 28672 4096 4096 NT_STATUS_OK
ReadX 12610 32768 4096 4096 NT_STATUS_OK
ReadX 12610 36864 4096 4096 NT_STATUS_OK
ReadX 12610 40960 4096 4096 NT_STATUS_OK
ReadX 12610 45056 4096 4096 NT_STATUS_OK
ReadX 12610 49152 4096 4096 NT_STATUS_OK
ReadX 12610 53248 4096 4096 NT_STATUS_OK
ReadX 12610 57344 4096 4096 NT_STATUS_OK
ReadX 12610 61440 4096 4096 NT_STATUS_OK
ReadX 12610 65536 4096 4096 NT_STATUS_OK
ReadX 12610 69632 4096 4096 NT_STATUS_OK
ReadX 12610 73728 4096 4096 NT_STATUS_OK
ReadX 12610 77824 4096 4096 NT_STATUS_OK
ReadX 12610 81920 4096 4096 NT_STATUS_OK
ReadX 12610 86016 4096 4096 NT_STATUS_OK
ReadX 12610 90112 4096 4096 NT_STATUS_OK
ReadX 12610 94208 4096 4096 NT_STATUS_OK
ReadX 12610 98304 4096 4096 NT_STATUS_OK
ReadX 12610 102400 4096 4096 NT_STATUS_OK
ReadX 12610 106496 4096 4096 NT_STATUS_OK
ReadX 12610 110592 4096 4096 NT_STATUS_OK
ReadX 12610 114688 4096 4096 NT_STATUS_OK
ReadX 12610 118784 4096 4096 NT_STATUS_OK
ReadX 12610 122880 4096 4096 NT_STATUS_OK
ReadX 12610 126976 4096 4096 NT_STATUS_OK
ReadX 12610 131072 4096 4096 NT_STATUS_OK
ReadX 12610 135168 4096 4096 NT_STATUS_OK
ReadX 12610 139264 4096 4096 NT_STATUS_OK
ReadX 12610 143360 4096 4096 NT_STATUS_OK
ReadX 12610 147456 4096 4096 NT_STATUS_OK
ReadX 12610 151552 4096 4096 NT_STATUS_OK
ReadX 12610 155648 4096 4096 NT_STATUS_OK
ReadX 12610 159744 4096 4096 NT_STATUS_OK
ReadX 12610 163840 4096 4096 NT_STATUS_OK
ReadX 12610 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12610 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12611 NT_STATUS_OK
Close 12611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12609 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12613 NT_STATUS_OK
WriteX 12613 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 258 NT_STATUS_OK
Close 12610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12614 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
Close 12614 NT_STATUS_OK
WriteX 12613 0 42388 42388 NT_STATUS_OK
Close 12613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12615 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
ReadX 12617 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12618 NT_STATUS_OK
WriteX 12618 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12618 258 NT_STATUS_OK
SET_FILE_INFORMATION 12618 1004 NT_STATUS_OK
WriteX 12618 0 42652 42652 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12620 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 4096 4096 NT_STATUS_OK
ReadX 12622 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12624 NT_STATUS_OK
Close 12624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12627 NT_STATUS_OK
WriteX 12627 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 258 NT_STATUS_OK
WriteX 12627 0 65536 65536 NT_STATUS_OK
WriteX 12627 65536 49 49 NT_STATUS_OK
Close 12627 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 61440 61440 NT_STATUS_OK
ReadX 12628 61440 4096 4096 NT_STATUS_OK
ReadX 12628 65536 61440 61440 NT_STATUS_OK
ReadX 12628 126976 4096 4096 NT_STATUS_OK
ReadX 12628 131072 61440 61440 NT_STATUS_OK
ReadX 12628 192512 4096 4096 NT_STATUS_OK
ReadX 12628 196608 61440 61440 NT_STATUS_OK
ReadX 12628 258048 4096 4096 NT_STATUS_OK
ReadX 12628 262144 61440 61440 NT_STATUS_OK
ReadX 12628 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12629 NT_STATUS_OK
ReadX 12629 0 61440 61440 NT_STATUS_OK
ReadX 12629 61440 4096 4096 NT_STATUS_OK
ReadX 12629 65536 61440 61440 NT_STATUS_OK
ReadX 12629 126976 4096 4096 NT_STATUS_OK
ReadX 12629 131072 61440 61440 NT_STATUS_OK
ReadX 12629 192512 4096 4096 NT_STATUS_OK
ReadX 12629 196608 61440 61440 NT_STATUS_OK
ReadX 12629 258048 4096 4096 NT_STATUS_OK
ReadX 12629 262144 61440 61440 NT_STATUS_OK
ReadX 12629 323584 4096 4096 NT_STATUS_OK
ReadX 12629 327680 61440 61440 NT_STATUS_OK
ReadX 12629 389120 4096 4096 NT_STATUS_OK
ReadX 12629 393216 61440 61440 NT_STATUS_OK
ReadX 12629 454656 4096 4096 NT_STATUS_OK
ReadX 12629 458752 61440 61440 NT_STATUS_OK
ReadX 12629 520192 4096 4096 NT_STATUS_OK
ReadX 12629 524288 61440 61440 NT_STATUS_OK
ReadX 12629 585728 4096 4096 NT_STATUS_OK
ReadX 12629 589824 61440 61440 NT_STATUS_OK
ReadX 12629 651264 4096 4096 NT_STATUS_OK
ReadX 12629 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 61440 61440 NT_STATUS_OK
ReadX 12630 61440 4096 4096 NT_STATUS_OK
ReadX 12630 65536 61440 61440 NT_STATUS_OK
ReadX 12630 126976 4096 4096 NT_STATUS_OK
ReadX 12630 131072 61440 61440 NT_STATUS_OK
ReadX 12630 192512 4096 4096 NT_STATUS_OK
ReadX 12630 196608 61440 61440 NT_STATUS_OK
ReadX 12630 258048 4096 4096 NT_STATUS_OK
ReadX 12630 262144 61440 61440 NT_STATUS_OK
ReadX 12630 323584 4096 4096 NT_STATUS_OK
ReadX 12630 327680 61440 61440 NT_STATUS_OK
ReadX 12630 389120 4096 4096 NT_STATUS_OK
ReadX 12630 393216 61440 61440 NT_STATUS_OK
ReadX 12630 454656 4096 4096 NT_STATUS_OK
ReadX 12630 458752 61440 61440 NT_STATUS_OK
ReadX 12630 520192 4096 4096 NT_STATUS_OK
ReadX 12630 524288 61440 61440 NT_STATUS_OK
ReadX 12630 585728 4096 4096 NT_STATUS_OK
ReadX 12630 589824 61440 61440 NT_STATUS_OK
ReadX 12630 651264 4096 4096 NT_STATUS_OK
ReadX 12630 655360 61440 61440 NT_STATUS_OK
ReadX 12630 716800 4096 4096 NT_STATUS_OK
ReadX 12630 720896 61440 61440 NT_STATUS_OK
ReadX 12630 782336 4096 4096 NT_STATUS_OK
ReadX 12630 786432 61440 61440 NT_STATUS_OK
ReadX 12630 847872 4096 4096 NT_STATUS_OK
ReadX 12630 851968 61440 61440 NT_STATUS_OK
ReadX 12630 913408 4096 4096 NT_STATUS_OK
ReadX 12630 917504 61440 61440 NT_STATUS_OK
ReadX 12630 978944 4096 4096 NT_STATUS_OK
ReadX 12630 983040 61440 61440 NT_STATUS_OK
ReadX 12630 1044480 4096 4096 NT_STATUS_OK
ReadX 12630 1048576 61440 61440 NT_STATUS_OK
ReadX 12630 1110016 4096 4096 NT_STATUS_OK
ReadX 12630 1114112 61440 61440 NT_STATUS_OK
ReadX 12630 1175552 4096 4096 NT_STATUS_OK
ReadX 12630 1179648 61440 61440 NT_STATUS_OK
ReadX 12630 1241088 4096 4096 NT_STATUS_OK
ReadX 12630 1245184 61440 61440 NT_STATUS_OK
ReadX 12630 1306624 4096 4096 NT_STATUS_OK
ReadX 12630 1310720 61440 61440 NT_STATUS_OK
ReadX 12630 1372160 4096 4096 NT_STATUS_OK
ReadX 12630 1376256 61440 61440 NT_STATUS_OK
ReadX 12630 1437696 4096 4096 NT_STATUS_OK
ReadX 12630 1441792 61440 61440 NT_STATUS_OK
ReadX 12630 1503232 4096 4096 NT_STATUS_OK
ReadX 12630 1507328 61440 61440 NT_STATUS_OK
ReadX 12630 1568768 4096 4096 NT_STATUS_OK
ReadX 12630 1572864 61440 61440 NT_STATUS_OK
ReadX 12630 1634304 4096 4096 NT_STATUS_OK
ReadX 12630 1638400 61440 61440 NT_STATUS_OK
ReadX 12630 1699840 4096 4096 NT_STATUS_OK
ReadX 12630 1703936 61440 61440 NT_STATUS_OK
ReadX 12630 1765376 4096 4096 NT_STATUS_OK
ReadX 12630 1769472 61440 61440 NT_STATUS_OK
ReadX 12630 1830912 4096 4096 NT_STATUS_OK
ReadX 12630 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12632 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 1005 NT_STATUS_OK
ReadX 12632 2156 24 24 NT_STATUS_OK
ReadX 12632 2139 276 276 NT_STATUS_OK
ReadX 12632 2136 14 14 NT_STATUS_OK
ReadX 12632 2136 7 7 NT_STATUS_OK
ReadX 12632 2138 12 12 NT_STATUS_OK
ReadX 12632 2137 8 8 NT_STATUS_OK
ReadX 12632 2135 15 15 NT_STATUS_OK
ReadX 12632 0 16 16 NT_STATUS_OK
ReadX 12632 16 2048 2048 NT_STATUS_OK
ReadX 12632 2064 2048 2048 NT_STATUS_OK
ReadX 12632 257 2048 2048 NT_STATUS_OK
ReadX 12632 385 2048 2048 NT_STATUS_OK
ReadX 12632 513 2048 2048 NT_STATUS_OK
ReadX 12632 641 2048 2048 NT_STATUS_OK
ReadX 12632 769 2048 2048 NT_STATUS_OK
ReadX 12632 897 2048 2048 NT_STATUS_OK
ReadX 12632 1025 2048 2048 NT_STATUS_OK
ReadX 12632 1153 2048 2048 NT_STATUS_OK
ReadX 12632 1281 2048 2048 NT_STATUS_OK
ReadX 12632 1409 2048 2048 NT_STATUS_OK
ReadX 12632 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12634 NT_STATUS_OK
Close 12634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12637 NT_STATUS_OK
WriteX 12637 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12637 258 NT_STATUS_OK
WriteX 12637 0 10575 10575 NT_STATUS_OK
Flush 12637 NT_STATUS_OK
Close 12637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12638 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12640 NT_STATUS_OK
ReadX 12640 0 4096 4096 NT_STATUS_OK
Close 12632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12642 NT_STATUS_OK
LockX 12642 2147483538 1 NT_STATUS_OK
UnlockX 12642 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1005 NT_STATUS_OK
ReadX 12642 0 512 512 NT_STATUS_OK
ReadX 12642 512 512 512 NT_STATUS_OK
ReadX 12642 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12642 1004 NT_STATUS_OK
Close 12642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1005 NT_STATUS_OK
ReadX 12643 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12644 NT_STATUS_OK
LockX 12644 2147483538 1 NT_STATUS_OK
UnlockX 12644 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12644 1005 NT_STATUS_OK
ReadX 12644 0 512 512 NT_STATUS_OK
ReadX 12644 512 512 512 NT_STATUS_OK
ReadX 12644 1024 512 512 NT_STATUS_OK
ReadX 12644 288 20 20 NT_STATUS_OK
ReadX 12644 308 2084 2084 NT_STATUS_OK
ReadX 12644 388 2084 2084 NT_STATUS_OK
ReadX 12644 388 2084 2084 NT_STATUS_OK
ReadX 12631 2157 1386 1386 NT_STATUS_OK
ReadX 12644 2472 399 399 NT_STATUS_OK
ReadX 12644 3072 1536 1536 NT_STATUS_OK
ReadX 12644 544 149 149 NT_STATUS_OK
ReadX 12644 693 485 485 NT_STATUS_OK
Close 12644 NT_STATUS_OK
ReadX 12631 2157 4096 4096 NT_STATUS_OK
ReadX 12631 6253 4096 4096 NT_STATUS_OK
ReadX 12631 10349 4096 4096 NT_STATUS_OK
ReadX 12631 14445 4096 4096 NT_STATUS_OK
ReadX 12631 18541 4096 4096 NT_STATUS_OK
ReadX 12631 22637 256 256 NT_STATUS_OK
ReadX 12631 22893 4096 4096 NT_STATUS_OK
ReadX 12631 26989 4096 4096 NT_STATUS_OK
ReadX 12631 31085 4096 4096 NT_STATUS_OK
ReadX 12631 35181 4096 4096 NT_STATUS_OK
ReadX 12631 39277 4096 4096 NT_STATUS_OK
ReadX 12631 43373 4096 4096 NT_STATUS_OK
ReadX 12631 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12631 2157 1024 1024 NT_STATUS_OK
ReadX 12631 1667 4688 4688 NT_STATUS_OK
ReadX 12631 6355 3516 3516 NT_STATUS_OK
ReadX 12631 9871 16384 16384 NT_STATUS_OK
ReadX 12631 26255 3771 3771 NT_STATUS_OK
ReadX 12631 30026 2048 2048 NT_STATUS_OK
ReadX 12631 32074 1024 1024 NT_STATUS_OK
ReadX 12631 33098 6652 6652 NT_STATUS_OK
ReadX 12631 39750 16384 16384 NT_STATUS_OK
ReadX 12631 56134 10496 10496 NT_STATUS_OK
ReadX 12631 66630 1784 1784 NT_STATUS_OK
ReadX 12631 68414 90 90 NT_STATUS_OK
ReadX 12631 68504 273 273 NT_STATUS_OK
ReadX 12631 68777 1600 1600 NT_STATUS_OK
ReadX 12631 70377 640 640 NT_STATUS_OK
ReadX 12631 71017 1280 1280 NT_STATUS_OK
ReadX 12631 72297 8464 8464 NT_STATUS_OK
ReadX 12631 80761 158 158 NT_STATUS_OK
ReadX 12631 80919 912 912 NT_STATUS_OK
ReadX 12631 81831 1980 1980 NT_STATUS_OK
ReadX 12631 83811 2256 2256 NT_STATUS_OK
ReadX 12631 86067 400 400 NT_STATUS_OK
ReadX 12631 86467 252 252 NT_STATUS_OK
ReadX 12631 86719 42 42 NT_STATUS_OK
ReadX 12631 86761 725 725 NT_STATUS_OK
ReadX 12631 2009 512 512 NT_STATUS_OK
ReadX 12631 3895 9 9 NT_STATUS_OK
ReadX 12631 3781 46 46 NT_STATUS_OK
ReadX 12631 4059 92 92 NT_STATUS_OK
ReadX 12631 3781 92 92 NT_STATUS_OK
ReadX 12631 3986 184 184 NT_STATUS_OK
ReadX 12631 3987 16384 16384 NT_STATUS_OK
ReadX 12631 3902 16384 16384 NT_STATUS_OK
ReadX 12631 3781 10240 10240 NT_STATUS_OK
ReadX 12631 3821 16384 16384 NT_STATUS_OK
ReadX 12631 3891 935 935 NT_STATUS_OK
ReadX 12631 4060 10240 10240 NT_STATUS_OK
ReadX 12631 4059 184 184 NT_STATUS_OK
ReadX 12631 256 184 184 NT_STATUS_OK
ReadX 12631 256 1026 1026 NT_STATUS_OK
ReadX 12631 3901 326 326 NT_STATUS_OK
ReadX 12631 3899 652 652 NT_STATUS_OK
ReadX 12631 256 2 2 NT_STATUS_OK
ReadX 12631 258 4948 4948 NT_STATUS_OK
Close 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12649 NT_STATUS_OK
WriteX 12649 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12649 258 NT_STATUS_OK
WriteX 12649 0 65536 65536 NT_STATUS_OK
WriteX 12649 65536 65536 65536 NT_STATUS_OK
WriteX 12649 131072 65536 65536 NT_STATUS_OK
WriteX 12649 196608 65536 65536 NT_STATUS_OK
WriteX 12649 262144 65536 65536 NT_STATUS_OK
WriteX 12649 327680 65536 65536 NT_STATUS_OK
WriteX 12649 393216 65536 65536 NT_STATUS_OK
WriteX 12649 458752 65536 65536 NT_STATUS_OK
WriteX 12649 524288 65536 65536 NT_STATUS_OK
WriteX 12649 589824 35257 35257 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12654 NT_STATUS_OK
WriteX 12654 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12654 258 NT_STATUS_OK
WriteX 12654 0 65536 65536 NT_STATUS_OK
WriteX 12654 65536 65536 65536 NT_STATUS_OK
WriteX 12654 131072 65536 65536 NT_STATUS_OK
WriteX 12654 196608 65536 65536 NT_STATUS_OK
WriteX 12654 262144 65536 65536 NT_STATUS_OK
WriteX 12654 327680 65536 65536 NT_STATUS_OK
WriteX 12654 393216 65536 65536 NT_STATUS_OK
WriteX 12654 458752 65536 65536 NT_STATUS_OK
WriteX 12654 524288 65536 65536 NT_STATUS_OK
WriteX 12654 589824 57598 57598 NT_STATUS_OK
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12656 NT_STATUS_OK
WriteX 12656 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12656 258 NT_STATUS_OK
WriteX 12656 0 12543 12543 NT_STATUS_OK
Flush 12656 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12658 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12661 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12662 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 1005 NT_STATUS_OK
ReadX 12662 1938 24 24 NT_STATUS_OK
ReadX 12662 1920 276 276 NT_STATUS_OK
ReadX 12662 1918 14 14 NT_STATUS_OK
ReadX 12662 1918 7 7 NT_STATUS_OK
ReadX 12662 1919 12 12 NT_STATUS_OK
ReadX 12662 1919 8 8 NT_STATUS_OK
ReadX 12662 1917 15 15 NT_STATUS_OK
ReadX 12662 0 16 16 NT_STATUS_OK
ReadX 12662 16 2048 2048 NT_STATUS_OK
ReadX 12662 2064 2048 2048 NT_STATUS_OK
ReadX 12662 257 2048 2048 NT_STATUS_OK
ReadX 12662 385 2048 2048 NT_STATUS_OK
ReadX 12662 513 2048 2048 NT_STATUS_OK
ReadX 12662 641 2048 2048 NT_STATUS_OK
ReadX 12662 769 2048 2048 NT_STATUS_OK
ReadX 12662 897 2048 2048 NT_STATUS_OK
ReadX 12662 1025 2048 2048 NT_STATUS_OK
ReadX 12662 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12664 NT_STATUS_OK
Close 12664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12667 NT_STATUS_OK
WriteX 12667 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12667 258 NT_STATUS_OK
WriteX 12667 0 11588 11588 NT_STATUS_OK
Flush 12667 NT_STATUS_OK
Close 12667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12668 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12670 NT_STATUS_OK
ReadX 12670 0 4096 4096 NT_STATUS_OK
Close 12662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12672 NT_STATUS_OK
WriteX 12672 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 258 NT_STATUS_OK
WriteX 12672 0 11615 11615 NT_STATUS_OK
Flush 12672 NT_STATUS_OK
Close 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12676 NT_STATUS_OK
ReadX 12676 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12678 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12681 NT_STATUS_OK
WriteX 12681 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12681 258 NT_STATUS_OK
WriteX 12681 0 65536 65536 NT_STATUS_OK
WriteX 12681 65536 16050 16050 NT_STATUS_OK
Close 12681 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12661 1939 64 64 NT_STATUS_OK
ReadX 12661 128 248 248 NT_STATUS_OK
ReadX 12661 128 568 568 NT_STATUS_OK
ReadX 12661 3872 1536 1536 NT_STATUS_OK
ReadX 12661 3456 2560 2560 NT_STATUS_OK
ReadX 12661 3136 512 512 NT_STATUS_OK
ReadX 12661 2880 4096 4096 NT_STATUS_OK
ReadX 12661 3264 3072 3072 NT_STATUS_OK
ReadX 12661 320 4096 4096 NT_STATUS_OK
ReadX 12661 1024 4096 4096 NT_STATUS_OK
ReadX 12661 3616 4096 4096 NT_STATUS_OK
ReadX 12661 1939 64 64 NT_STATUS_OK
ReadX 12661 128 248 248 NT_STATUS_OK
ReadX 12661 128 608 608 NT_STATUS_OK
ReadX 12661 2858 1024 1024 NT_STATUS_OK
ReadX 12661 2810 4096 4096 NT_STATUS_OK
ReadX 12661 2826 4096 4096 NT_STATUS_OK
ReadX 12661 2580 2048 2048 NT_STATUS_OK
ReadX 12661 2800 2560 2560 NT_STATUS_OK
ReadX 12661 2100 4096 4096 NT_STATUS_OK
ReadX 12661 2084 4096 4096 NT_STATUS_OK
ReadX 12661 868 4096 4096 NT_STATUS_OK
ReadX 12661 2324 4096 4096 NT_STATUS_OK
ReadX 12661 884 4096 4096 NT_STATUS_OK
ReadX 12661 2604 1024 1024 NT_STATUS_OK
ReadX 12661 580 4096 4096 NT_STATUS_OK
ReadX 12661 596 4096 4096 NT_STATUS_OK
ReadX 12661 2752 4096 4096 NT_STATUS_OK
ReadX 12661 2842 1024 1024 NT_STATUS_OK
ReadX 12661 660 4096 4096 NT_STATUS_OK
ReadX 12661 2720 4096 4096 NT_STATUS_OK
ReadX 12661 2736 4096 4096 NT_STATUS_OK
ReadX 12661 628 4096 4096 NT_STATUS_OK
ReadX 12661 2704 4096 4096 NT_STATUS_OK
ReadX 12661 1556 4096 4096 NT_STATUS_OK
ReadX 12661 576 4096 4096 NT_STATUS_OK
ReadX 12661 3168 1536 1536 NT_STATUS_OK
ReadX 12661 832 4096 4096 NT_STATUS_OK
ReadX 12661 1088 4096 4096 NT_STATUS_OK
ReadX 12661 1344 4096 4096 NT_STATUS_OK
ReadX 12661 1600 4096 4096 NT_STATUS_OK
ReadX 12661 1856 4096 4096 NT_STATUS_OK
ReadX 12661 2112 4096 4096 NT_STATUS_OK
ReadX 12661 1892 4096 4096 NT_STATUS_OK
ReadX 12661 820 4096 4096 NT_STATUS_OK
ReadX 12661 788 4096 4096 NT_STATUS_OK
ReadX 12661 1604 4096 4096 NT_STATUS_OK
ReadX 12661 3648 4096 4096 NT_STATUS_OK
ReadX 12661 2608 4096 4096 NT_STATUS_OK
ReadX 12661 548 4096 4096 NT_STATUS_OK
ReadX 12661 740 4096 4096 NT_STATUS_OK
ReadX 12661 1344 4096 4096 NT_STATUS_OK
ReadX 12661 3392 4096 4096 NT_STATUS_OK
ReadX 12661 3904 4096 4096 NT_STATUS_OK
ReadX 12661 644 4096 4096 NT_STATUS_OK
ReadX 12661 676 4096 4096 NT_STATUS_OK
ReadX 12661 2688 4096 4096 NT_STATUS_OK
ReadX 12661 320 4096 4096 NT_STATUS_OK
ReadX 12661 900 4096 4096 NT_STATUS_OK
ReadX 12661 1908 4096 4096 NT_STATUS_OK
ReadX 12661 852 4096 4096 NT_STATUS_OK
ReadX 12661 724 4096 4096 NT_STATUS_OK
ReadX 12661 2292 4096 4096 NT_STATUS_OK
ReadX 12661 612 4096 4096 NT_STATUS_OK
ReadX 12661 388 4096 4096 NT_STATUS_OK
ReadX 12661 2368 4096 4096 NT_STATUS_OK
ReadX 12661 2624 4096 4096 NT_STATUS_OK
ReadX 12661 500 4096 4096 NT_STATUS_OK
ReadX 12661 356 4096 4096 NT_STATUS_OK
ReadX 12661 1024 4096 4096 NT_STATUS_OK
ReadX 12661 576 4096 4096 NT_STATUS_OK
ReadX 12661 340 4096 4096 NT_STATUS_OK
ReadX 12661 420 4096 4096 NT_STATUS_OK
ReadX 12661 1600 4096 4096 NT_STATUS_OK
ReadX 12661 404 4096 4096 NT_STATUS_OK
ReadX 12661 1428 4096 4096 NT_STATUS_OK
ReadX 12661 2656 4096 4096 NT_STATUS_OK
ReadX 12661 2624 4096 4096 NT_STATUS_OK
ReadX 12661 452 4096 4096 NT_STATUS_OK
ReadX 12661 692 4096 4096 NT_STATUS_OK
ReadX 12661 564 4096 4096 NT_STATUS_OK
ReadX 12661 372 4096 4096 NT_STATUS_OK
ReadX 12661 468 4096 4096 NT_STATUS_OK
ReadX 12661 484 4096 4096 NT_STATUS_OK
ReadX 12661 1088 4096 4096 NT_STATUS_OK
ReadX 12661 1924 4096 4096 NT_STATUS_OK
ReadX 12661 2768 4096 4096 NT_STATUS_OK
ReadX 12661 832 4096 4096 NT_STATUS_OK
ReadX 12661 836 4096 4096 NT_STATUS_OK
ReadX 12661 1856 4096 4096 NT_STATUS_OK
ReadX 12661 2640 4096 4096 NT_STATUS_OK
ReadX 12661 436 4096 4096 NT_STATUS_OK
ReadX 12661 1828 4096 4096 NT_STATUS_OK
ReadX 12661 804 4096 4096 NT_STATUS_OK
ReadX 12661 1860 4096 4096 NT_STATUS_OK
ReadX 12661 1812 4096 4096 NT_STATUS_OK
ReadX 12661 756 4096 4096 NT_STATUS_OK
ReadX 12661 1636 4096 4096 NT_STATUS_OK
ReadX 12661 772 4096 4096 NT_STATUS_OK
ReadX 12661 2036 4096 4096 NT_STATUS_OK
ReadX 12661 1220 4096 4096 NT_STATUS_OK
ReadX 12661 1652 4096 4096 NT_STATUS_OK
ReadX 12661 2588 4096 4096 NT_STATUS_OK
ReadX 12661 916 4096 4096 NT_STATUS_OK
ReadX 12661 260 4096 4096 NT_STATUS_OK
ReadX 12661 932 4096 4096 NT_STATUS_OK
ReadX 12661 2624 4096 4096 NT_STATUS_OK
ReadX 12661 308 4096 4096 NT_STATUS_OK
ReadX 12661 292 4096 4096 NT_STATUS_OK
ReadX 12661 1140 4096 4096 NT_STATUS_OK
ReadX 12661 276 4096 4096 NT_STATUS_OK
ReadX 12661 2020 4096 4096 NT_STATUS_OK
ReadX 12661 2880 4096 4096 NT_STATUS_OK
ReadX 12661 516 4096 4096 NT_STATUS_OK
ReadX 12661 1844 4096 4096 NT_STATUS_OK
ReadX 12661 1124 4096 4096 NT_STATUS_OK
ReadX 12661 3136 4096 4096 NT_STATUS_OK
ReadX 12661 324 4096 4096 NT_STATUS_OK
ReadX 12661 1156 4096 4096 NT_STATUS_OK
ReadX 12661 1172 4096 4096 NT_STATUS_OK
ReadX 12661 2112 4096 4096 NT_STATUS_OK
ReadX 12661 2368 4096 4096 NT_STATUS_OK
ReadX 12661 964 4096 4096 NT_STATUS_OK
ReadX 12661 980 4096 4096 NT_STATUS_OK
ReadX 12661 1012 4096 4096 NT_STATUS_OK
ReadX 12661 532 4096 4096 NT_STATUS_OK
ReadX 12661 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12661 1620 4096 4096 NT_STATUS_OK
ReadX 12661 1604 4096 4096 NT_STATUS_OK
ReadX 12661 2116 4096 4096 NT_STATUS_OK
ReadX 12661 2132 4096 4096 NT_STATUS_OK
ReadX 12661 2148 4096 4096 NT_STATUS_OK
ReadX 12661 2276 4096 4096 NT_STATUS_OK
ReadX 12661 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12683 NT_STATUS_OK
Close 12683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12686 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1004 NT_STATUS_OK
Close 12641 NT_STATUS_OK
WriteX 12686 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12686 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
WriteX 12686 0 65536 65536 NT_STATUS_OK
WriteX 12686 65536 64850 64850 NT_STATUS_OK
Close 12686 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12688 NT_STATUS_OK
WriteX 12688 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12688 258 NT_STATUS_OK
ReadX 12661 2068 4096 4096 NT_STATUS_OK
ReadX 12661 1588 4096 4096 NT_STATUS_OK
ReadX 12661 1572 4096 4096 NT_STATUS_OK
WriteX 12688 0 18630 18630 NT_STATUS_OK
Flush 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12690 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12661 612 4096 4096 NT_STATUS_OK
ReadX 12661 564 4096 4096 NT_STATUS_OK
ReadX 12661 1876 4096 4096 NT_STATUS_OK
ReadX 12661 628 4096 4096 NT_STATUS_OK
ReadX 12661 740 4096 4096 NT_STATUS_OK
ReadX 12661 724 4096 4096 NT_STATUS_OK
ReadX 12661 644 4096 4096 NT_STATUS_OK
ReadX 12661 2324 4096 4096 NT_STATUS_OK
ReadX 12661 660 4096 4096 NT_STATUS_OK
ReadX 12661 852 4096 4096 NT_STATUS_OK
ReadX 12661 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12661 2368 4096 4096 NT_STATUS_OK
ReadX 12661 1024 4096 4096 NT_STATUS_OK
ReadX 12661 320 4096 4096 NT_STATUS_OK
ReadX 12661 580 4096 4096 NT_STATUS_OK
ReadX 12661 3136 512 512 NT_STATUS_OK
ReadX 12661 2880 4096 4096 NT_STATUS_OK
Close 12661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 61440 4096 4096 NT_STATUS_OK
ReadX 12693 126976 4096 4096 NT_STATUS_OK
WriteX 12693 0 65536 65536 NT_STATUS_OK
WriteX 12693 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 61440 4096 4096 NT_STATUS_OK
ReadX 12694 126976 4096 4096 NT_STATUS_OK
ReadX 12694 192512 4096 4096 NT_STATUS_OK
ReadX 12694 258048 4096 4096 NT_STATUS_OK
WriteX 12694 0 65536 65536 NT_STATUS_OK
WriteX 12694 65536 65536 65536 NT_STATUS_OK
WriteX 12694 131072 65536 65536 NT_STATUS_OK
WriteX 12694 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 61440 4096 4096 NT_STATUS_OK
ReadX 12695 126976 4096 4096 NT_STATUS_OK
ReadX 12695 192512 4096 4096 NT_STATUS_OK
ReadX 12695 258048 4096 4096 NT_STATUS_OK
ReadX 12695 323584 4096 4096 NT_STATUS_OK
ReadX 12695 389120 4096 4096 NT_STATUS_OK
ReadX 12695 454656 4096 4096 NT_STATUS_OK
ReadX 12695 520192 4096 4096 NT_STATUS_OK
WriteX 12695 0 65536 65536 NT_STATUS_OK
WriteX 12695 65536 65536 65536 NT_STATUS_OK
WriteX 12695 131072 65536 65536 NT_STATUS_OK
WriteX 12695 196608 65536 65536 NT_STATUS_OK
WriteX 12695 262144 65536 65536 NT_STATUS_OK
WriteX 12695 327680 65536 65536 NT_STATUS_OK
WriteX 12695 393216 65536 65536 NT_STATUS_OK
WriteX 12695 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12696 NT_STATUS_OK
ReadX 12696 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12697 NT_STATUS_OK
Close 12697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12698 NT_STATUS_OK
WriteX 12698 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12698 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12696 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12696 0 8192 8192 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12700 NT_STATUS_OK
Close 12700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Close 12694 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12703 NT_STATUS_OK
WriteX 12703 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12703 258 NT_STATUS_OK
WriteX 12703 0 62591 62591 NT_STATUS_OK
Close 12703 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12708 NT_STATUS_OK
WriteX 12708 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12708 258 NT_STATUS_OK
WriteX 12708 0 10845 10845 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12710 NT_STATUS_OK
Close 12710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12713 NT_STATUS_OK
WriteX 12713 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12713 258 NT_STATUS_OK
WriteX 12713 0 30118 30118 NT_STATUS_OK
Close 12713 NT_STATUS_OK
WriteX 12696 0 4096 4096 NT_STATUS_OK
WriteX 12698 0 64 64 NT_STATUS_OK
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12715 NT_STATUS_OK
ReadX 12715 0 61440 61440 NT_STATUS_OK
ReadX 12715 61440 4096 4096 NT_STATUS_OK
ReadX 12715 65536 61440 61440 NT_STATUS_OK
ReadX 12715 126976 4096 4096 NT_STATUS_OK
ReadX 12715 131072 61440 61440 NT_STATUS_OK
ReadX 12715 192512 4096 4096 NT_STATUS_OK
ReadX 12715 196608 61440 61440 NT_STATUS_OK
ReadX 12715 258048 4096 4096 NT_STATUS_OK
ReadX 12715 262144 61440 61440 NT_STATUS_OK
ReadX 12715 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12716 NT_STATUS_OK
ReadX 12716 0 61440 61440 NT_STATUS_OK
ReadX 12716 61440 4096 4096 NT_STATUS_OK
ReadX 12716 65536 61440 61440 NT_STATUS_OK
ReadX 12716 126976 4096 4096 NT_STATUS_OK
ReadX 12716 131072 61440 61440 NT_STATUS_OK
ReadX 12716 192512 4096 4096 NT_STATUS_OK
ReadX 12716 196608 61440 61440 NT_STATUS_OK
ReadX 12716 258048 4096 4096 NT_STATUS_OK
ReadX 12716 262144 61440 61440 NT_STATUS_OK
ReadX 12716 323584 4096 4096 NT_STATUS_OK
ReadX 12716 327680 61440 61440 NT_STATUS_OK
ReadX 12716 389120 4096 4096 NT_STATUS_OK
ReadX 12716 393216 61440 61440 NT_STATUS_OK
ReadX 12716 454656 4096 4096 NT_STATUS_OK
ReadX 12716 458752 61440 61440 NT_STATUS_OK
ReadX 12716 520192 4096 4096 NT_STATUS_OK
ReadX 12716 524288 61440 61440 NT_STATUS_OK
ReadX 12716 585728 4096 4096 NT_STATUS_OK
ReadX 12716 589824 61440 61440 NT_STATUS_OK
ReadX 12716 651264 4096 4096 NT_STATUS_OK
ReadX 12716 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12717 NT_STATUS_OK
ReadX 12717 0 61440 61440 NT_STATUS_OK
ReadX 12717 61440 4096 4096 NT_STATUS_OK
ReadX 12717 65536 61440 61440 NT_STATUS_OK
ReadX 12717 126976 4096 4096 NT_STATUS_OK
ReadX 12717 131072 61440 61440 NT_STATUS_OK
ReadX 12717 192512 4096 4096 NT_STATUS_OK
ReadX 12717 196608 61440 61440 NT_STATUS_OK
ReadX 12717 258048 4096 4096 NT_STATUS_OK
ReadX 12717 262144 61440 61440 NT_STATUS_OK
ReadX 12717 323584 4096 4096 NT_STATUS_OK
ReadX 12717 327680 61440 61440 NT_STATUS_OK
ReadX 12717 389120 4096 4096 NT_STATUS_OK
ReadX 12717 393216 61440 61440 NT_STATUS_OK
ReadX 12717 454656 4096 4096 NT_STATUS_OK
ReadX 12717 458752 61440 61440 NT_STATUS_OK
ReadX 12717 520192 4096 4096 NT_STATUS_OK
ReadX 12717 524288 61440 61440 NT_STATUS_OK
ReadX 12717 585728 4096 4096 NT_STATUS_OK
ReadX 12717 589824 61440 61440 NT_STATUS_OK
ReadX 12717 651264 4096 4096 NT_STATUS_OK
ReadX 12717 655360 61440 61440 NT_STATUS_OK
ReadX 12717 716800 4096 4096 NT_STATUS_OK
ReadX 12717 720896 61440 61440 NT_STATUS_OK
ReadX 12717 782336 4096 4096 NT_STATUS_OK
ReadX 12717 786432 61440 61440 NT_STATUS_OK
ReadX 12717 847872 4096 4096 NT_STATUS_OK
ReadX 12717 851968 61440 61440 NT_STATUS_OK
ReadX 12717 913408 4096 4096 NT_STATUS_OK
ReadX 12717 917504 61440 61440 NT_STATUS_OK
ReadX 12717 978944 4096 4096 NT_STATUS_OK
ReadX 12717 983040 61440 61440 NT_STATUS_OK
ReadX 12717 1044480 4096 4096 NT_STATUS_OK
ReadX 12717 1048576 61440 61440 NT_STATUS_OK
ReadX 12717 1110016 4096 4096 NT_STATUS_OK
ReadX 12717 1114112 61440 61440 NT_STATUS_OK
ReadX 12717 1175552 4096 4096 NT_STATUS_OK
ReadX 12717 1179648 61440 61440 NT_STATUS_OK
ReadX 12717 1241088 4096 4096 NT_STATUS_OK
ReadX 12717 1245184 61440 61440 NT_STATUS_OK
ReadX 12717 1306624 4096 4096 NT_STATUS_OK
ReadX 12717 1310720 61440 61440 NT_STATUS_OK
ReadX 12717 1372160 4096 4096 NT_STATUS_OK
ReadX 12717 1376256 61440 61440 NT_STATUS_OK
ReadX 12717 1437696 4096 4096 NT_STATUS_OK
ReadX 12717 1441792 61440 61440 NT_STATUS_OK
ReadX 12717 1503232 4096 4096 NT_STATUS_OK
ReadX 12717 1507328 61440 61440 NT_STATUS_OK
ReadX 12717 1568768 4096 4096 NT_STATUS_OK
ReadX 12717 1572864 61440 61440 NT_STATUS_OK
ReadX 12717 1634304 4096 4096 NT_STATUS_OK
ReadX 12717 1638400 61440 61440 NT_STATUS_OK
ReadX 12717 1699840 4096 4096 NT_STATUS_OK
ReadX 12717 1703936 61440 61440 NT_STATUS_OK
ReadX 12717 1765376 4096 4096 NT_STATUS_OK
ReadX 12717 1769472 61440 61440 NT_STATUS_OK
ReadX 12717 1830912 4096 4096 NT_STATUS_OK
ReadX 12717 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12715 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Close 12717 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
ReadX 12722 4096 4096 4096 NT_STATUS_OK
ReadX 12722 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12723 NT_STATUS_OK
Close 12723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12720 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12726 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12726 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 8192 8192 NT_STATUS_OK
ReadX 12730 8192 8192 8192 NT_STATUS_OK
ReadX 12730 16384 8192 8192 NT_STATUS_OK
ReadX 12730 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12732 NT_STATUS_OK
Close 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12735 NT_STATUS_OK
WriteX 12735 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12735 258 NT_STATUS_OK
WriteX 12735 0 10438 10438 NT_STATUS_OK
Close 12735 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12736 NT_STATUS_OK
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12737 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12738 NT_STATUS_OK
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12740 NT_STATUS_OK
Close 12740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12741 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12743 NT_STATUS_OK
Close 12743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12744 NT_STATUS_OK
ReadX 12744 0 4096 4096 NT_STATUS_OK
ReadX 12744 4096 4096 4096 NT_STATUS_OK
ReadX 12744 8192 4096 4096 NT_STATUS_OK
ReadX 12744 12288 8192 8192 NT_STATUS_OK
ReadX 12744 20480 8192 8192 NT_STATUS_OK
ReadX 12744 28672 8192 8192 NT_STATUS_OK
ReadX 12744 36864 8192 8192 NT_STATUS_OK
ReadX 12744 45056 8192 8192 NT_STATUS_OK
ReadX 12744 53248 8192 8192 NT_STATUS_OK
ReadX 12744 61440 8192 8192 NT_STATUS_OK
ReadX 12744 69632 8192 8192 NT_STATUS_OK
ReadX 12744 77824 8192 8192 NT_STATUS_OK
ReadX 12744 86016 8192 8192 NT_STATUS_OK
ReadX 12744 94208 8192 8192 NT_STATUS_OK
ReadX 12744 102400 8192 8192 NT_STATUS_OK
ReadX 12744 110592 8192 8192 NT_STATUS_OK
ReadX 12744 118784 8192 8192 NT_STATUS_OK
ReadX 12744 126976 8192 8192 NT_STATUS_OK
ReadX 12744 135168 8192 8192 NT_STATUS_OK
ReadX 12744 143360 8192 8192 NT_STATUS_OK
ReadX 12744 151552 8192 8192 NT_STATUS_OK
ReadX 12744 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12744 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12746 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12749 NT_STATUS_OK
WriteX 12749 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12749 258 NT_STATUS_OK
WriteX 12749 0 28489 28489 NT_STATUS_OK
Close 12749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12750 NT_STATUS_OK
Close 12750 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12752 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12752 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12753 NT_STATUS_OK
Close 12753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12756 NT_STATUS_OK
ReadX 12756 0 8192 8192 NT_STATUS_OK
ReadX 12756 8192 8192 8192 NT_STATUS_OK
ReadX 12756 16384 8192 8192 NT_STATUS_OK
ReadX 12756 24576 8192 8192 NT_STATUS_OK
ReadX 12756 32768 16384 16384 NT_STATUS_OK
ReadX 12756 49152 8192 8192 NT_STATUS_OK
ReadX 12756 57344 8192 8192 NT_STATUS_OK
ReadX 12756 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12758 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12761 NT_STATUS_OK
WriteX 12761 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12761 258 NT_STATUS_OK
WriteX 12761 0 29253 29253 NT_STATUS_OK
Close 12761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12762 NT_STATUS_OK
Close 12762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12765 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12768 NT_STATUS_OK
WriteX 12768 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12768 258 NT_STATUS_OK
WriteX 12768 0 30183 30183 NT_STATUS_OK
Close 12768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12769 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12771 NT_STATUS_OK
WriteX 12771 0 510 510 NT_STATUS_OK
WriteX 12771 510 512 512 NT_STATUS_OK
WriteX 12771 1022 510 510 NT_STATUS_OK
WriteX 12771 1532 510 510 NT_STATUS_OK
WriteX 12771 2042 168 168 NT_STATUS_OK
Close 12771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12772 NT_STATUS_OK
Close 12772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12775 NT_STATUS_OK
ReadX 12775 61440 4096 4096 NT_STATUS_OK
ReadX 12775 126976 4096 4096 NT_STATUS_OK
WriteX 12775 0 65536 65536 NT_STATUS_OK
WriteX 12775 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12776 NT_STATUS_OK
ReadX 12776 61440 4096 4096 NT_STATUS_OK
ReadX 12776 126976 4096 4096 NT_STATUS_OK
ReadX 12776 192512 4096 4096 NT_STATUS_OK
ReadX 12776 258048 4096 4096 NT_STATUS_OK
WriteX 12776 0 65536 65536 NT_STATUS_OK
WriteX 12776 65536 65536 65536 NT_STATUS_OK
WriteX 12776 131072 65536 65536 NT_STATUS_OK
WriteX 12776 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 61440 4096 4096 NT_STATUS_OK
ReadX 12777 126976 4096 4096 NT_STATUS_OK
ReadX 12777 192512 4096 4096 NT_STATUS_OK
ReadX 12777 258048 4096 4096 NT_STATUS_OK
ReadX 12777 323584 4096 4096 NT_STATUS_OK
ReadX 12777 389120 4096 4096 NT_STATUS_OK
ReadX 12777 454656 4096 4096 NT_STATUS_OK
ReadX 12777 520192 4096 4096 NT_STATUS_OK
WriteX 12777 0 65536 65536 NT_STATUS_OK
WriteX 12777 65536 65536 65536 NT_STATUS_OK
WriteX 12777 131072 65536 65536 NT_STATUS_OK
WriteX 12777 196608 65536 65536 NT_STATUS_OK
WriteX 12777 262144 65536 65536 NT_STATUS_OK
WriteX 12777 327680 65536 65536 NT_STATUS_OK
WriteX 12777 393216 65536 65536 NT_STATUS_OK
WriteX 12777 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Close 12775 NT_STATUS_OK
Close 12776 NT_STATUS_OK
Close 12777 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12780 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12784 NT_STATUS_OK
Close 12784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12796 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12802 NT_STATUS_OK
Close 12802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12807 NT_STATUS_OK
Close 12807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12812 NT_STATUS_OK
Close 12812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12817 NT_STATUS_OK
Close 12817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12822 NT_STATUS_OK
Close 12822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12827 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12832 NT_STATUS_OK
Close 12832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12837 NT_STATUS_OK
Close 12837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12843 NT_STATUS_OK
Close 12843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12846 NT_STATUS_OK
WriteX 12846 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12846 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12846 0 65536 65536 NT_STATUS_OK
WriteX 12846 65536 65536 65536 NT_STATUS_OK
WriteX 12846 131072 65536 65536 NT_STATUS_OK
WriteX 12846 196608 65536 65536 NT_STATUS_OK
WriteX 12846 262144 26634 26634 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12851 NT_STATUS_OK
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12852 NT_STATUS_OK
Close 12852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
ReadX 12854 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12854 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12862 NT_STATUS_OK
Close 12862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12864 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12871 NT_STATUS_OK
Close 12871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12873 NT_STATUS_OK
Close 12873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12877 NT_STATUS_OK
Close 12877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12882 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12887 NT_STATUS_OK
Close 12887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12892 NT_STATUS_OK
Close 12892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12897 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12902 NT_STATUS_OK
Close 12902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12916 NT_STATUS_OK
Close 12916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12921 NT_STATUS_OK
Close 12921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12931 NT_STATUS_OK
Close 12931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12932 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
Close 12933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12934 NT_STATUS_OK
ReadX 12934 0 4096 4096 NT_STATUS_OK
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12935 NT_STATUS_OK
ReadX 12935 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12947 NT_STATUS_OK
ReadX 12947 0 4096 4096 NT_STATUS_OK
Close 12947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12948 NT_STATUS_OK
ReadX 12948 0 4096 4096 NT_STATUS_OK
Close 12948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12935 NT_STATUS_OK
Close 12949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12978 0 4096 4096 NT_STATUS_OK
Close 12978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12980 NT_STATUS_OK
ReadX 12980 0 4096 4096 NT_STATUS_OK
ReadX 12980 4096 4096 4096 NT_STATUS_OK
ReadX 12980 8192 4096 4096 NT_STATUS_OK
ReadX 12980 12288 4096 4096 NT_STATUS_OK
ReadX 12980 16384 4096 4096 NT_STATUS_OK
ReadX 12980 20480 4096 4096 NT_STATUS_OK
ReadX 12980 24576 4096 4096 NT_STATUS_OK
ReadX 12980 28672 4096 4096 NT_STATUS_OK
ReadX 12980 32768 4096 4096 NT_STATUS_OK
ReadX 12980 36864 4096 4096 NT_STATUS_OK
ReadX 12980 40960 4096 4096 NT_STATUS_OK
ReadX 12980 45056 4096 4096 NT_STATUS_OK
ReadX 12980 49152 4096 4096 NT_STATUS_OK
ReadX 12980 53248 4096 4096 NT_STATUS_OK
ReadX 12980 57344 4096 4096 NT_STATUS_OK
ReadX 12980 61440 4096 4096 NT_STATUS_OK
ReadX 12980 65536 4096 4096 NT_STATUS_OK
ReadX 12980 69632 4096 4096 NT_STATUS_OK
ReadX 12980 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12980 1004 NT_STATUS_OK
WriteX 12980 0 4096 4096 NT_STATUS_OK
Close 12980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12981 NT_STATUS_OK
SET_FILE_INFORMATION 12981 1004 NT_STATUS_OK
Close 12981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12982 NT_STATUS_OK
ReadX 12982 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12983 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12986 NT_STATUS_OK
WriteX 12986 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12986 258 NT_STATUS_OK
WriteX 12986 0 65536 65536 NT_STATUS_OK
WriteX 12986 65536 19979 19979 NT_STATUS_OK
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12987 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
QUERY_FILE_INFORMATION 12987 1004 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
SET_FILE_INFORMATION 12987 1004 NT_STATUS_OK
WriteX 12987 0 4096 4096 NT_STATUS_OK
Flush 12987 NT_STATUS_OK
Close 12987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 4096 4096 NT_STATUS_OK
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 4096 4096 NT_STATUS_OK
Close 12990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12991 NT_STATUS_OK
ReadX 12991 0 4096 4096 NT_STATUS_OK
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12992 NT_STATUS_OK
ReadX 12992 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12992 1004 NT_STATUS_OK
WriteX 12992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12993 NT_STATUS_OK
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12992 NT_STATUS_OK
Close 12982 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12998 NT_STATUS_OK
WriteX 12998 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12998 258 NT_STATUS_OK
WriteX 12998 0 65536 65536 NT_STATUS_OK
WriteX 12998 65536 17654 17654 NT_STATUS_OK
Close 12998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
QUERY_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
SET_FILE_INFORMATION 12999 1004 NT_STATUS_OK
WriteX 12999 0 4096 4096 NT_STATUS_OK
Flush 12999 NT_STATUS_OK
Close 12999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13000 NT_STATUS_OK
SET_FILE_INFORMATION 13000 1004 NT_STATUS_OK
Close 13000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13001 NT_STATUS_OK
ReadX 13001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13002 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13004 NT_STATUS_OK
ReadX 13004 0 4096 4096 NT_STATUS_OK
ReadX 13004 4096 4096 4096 NT_STATUS_OK
ReadX 13004 8192 4096 4096 NT_STATUS_OK
ReadX 13004 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13004 16384 4096 4096 NT_STATUS_OK
ReadX 13004 20480 4096 4096 NT_STATUS_OK
ReadX 13004 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13005 NT_STATUS_OK
ReadX 13005 0 4096 4096 NT_STATUS_OK
Close 13005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13006 NT_STATUS_OK
ReadX 13006 0 4096 4096 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13007 1004 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13013 NT_STATUS_OK
WriteX 13013 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13013 258 NT_STATUS_OK
WriteX 13013 0 65536 65536 NT_STATUS_OK
WriteX 13013 65536 19490 19490 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
QUERY_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
SET_FILE_INFORMATION 13014 1004 NT_STATUS_OK
WriteX 13014 0 4096 4096 NT_STATUS_OK
Flush 13014 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13015 NT_STATUS_OK
SET_FILE_INFORMATION 13015 1004 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13016 NT_STATUS_OK
ReadX 13016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13019 0 4096 4096 NT_STATUS_OK
Close 13019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13020 NT_STATUS_OK
ReadX 13020 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13021 NT_STATUS_OK
ReadX 13021 0 4096 4096 NT_STATUS_OK
ReadX 13021 4096 4096 4096 NT_STATUS_OK
ReadX 13021 8192 4096 4096 NT_STATUS_OK
ReadX 13021 12288 4096 4096 NT_STATUS_OK
ReadX 13021 16384 4096 4096 NT_STATUS_OK
ReadX 13021 20480 4096 4096 NT_STATUS_OK
ReadX 13021 24576 4096 4096 NT_STATUS_OK
ReadX 13021 28672 4096 4096 NT_STATUS_OK
ReadX 13021 32768 4096 4096 NT_STATUS_OK
ReadX 13021 36864 4096 4096 NT_STATUS_OK
ReadX 13021 40960 4096 4096 NT_STATUS_OK
ReadX 13021 45056 4096 4096 NT_STATUS_OK
ReadX 13021 49152 4096 4096 NT_STATUS_OK
ReadX 13021 53248 4096 4096 NT_STATUS_OK
ReadX 13021 57344 4096 4096 NT_STATUS_OK
ReadX 13021 61440 4096 4096 NT_STATUS_OK
ReadX 13021 65536 4096 4096 NT_STATUS_OK
ReadX 13021 69632 4096 4096 NT_STATUS_OK
ReadX 13021 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13021 1004 NT_STATUS_OK
WriteX 13021 0 4096 4096 NT_STATUS_OK
Close 13021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13022 NT_STATUS_OK
SET_FILE_INFORMATION 13022 1004 NT_STATUS_OK
Close 13022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13024 NT_STATUS_OK
Close 13024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13027 NT_STATUS_OK
WriteX 13027 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13027 258 NT_STATUS_OK
WriteX 13027 0 65536 65536 NT_STATUS_OK
WriteX 13027 65536 8866 8866 NT_STATUS_OK
Close 13027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
WriteX 13028 0 4096 4096 NT_STATUS_OK
Flush 13028 NT_STATUS_OK
SET_FILE_INFORMATION 13028 1004 NT_STATUS_OK
WriteX 13028 0 4096 4096 NT_STATUS_OK
Flush 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
Close 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13032 NT_STATUS_OK
ReadX 13032 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13032 1004 NT_STATUS_OK
WriteX 13032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13038 NT_STATUS_OK
WriteX 13038 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13038 258 NT_STATUS_OK
WriteX 13038 0 65536 65536 NT_STATUS_OK
WriteX 13038 65536 9298 9298 NT_STATUS_OK
Close 13038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
WriteX 13039 0 4096 4096 NT_STATUS_OK
Flush 13039 NT_STATUS_OK
SET_FILE_INFORMATION 13039 1004 NT_STATUS_OK
WriteX 13039 0 4096 4096 NT_STATUS_OK
Flush 13039 NT_STATUS_OK
Close 13039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13040 NT_STATUS_OK
SET_FILE_INFORMATION 13040 1004 NT_STATUS_OK
Close 13040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13041 NT_STATUS_OK
ReadX 13041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13045 0 4096 4096 NT_STATUS_OK
Close 13045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13046 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13046 4096 4096 4096 NT_STATUS_OK
ReadX 13046 8192 4096 4096 NT_STATUS_OK
ReadX 13046 12288 4096 4096 NT_STATUS_OK
ReadX 13046 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
Close 13048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13049 1004 NT_STATUS_OK
WriteX 13049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13050 NT_STATUS_OK
Close 13050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13052 NT_STATUS_OK
Close 13052 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13055 NT_STATUS_OK
WriteX 13055 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13055 258 NT_STATUS_OK
WriteX 13055 0 65536 65536 NT_STATUS_OK
WriteX 13055 65536 11540 11540 NT_STATUS_OK
Close 13055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 4096 4096 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
Flush 13056 NT_STATUS_OK
SET_FILE_INFORMATION 13056 1004 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
Flush 13056 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13057 NT_STATUS_OK
SET_FILE_INFORMATION 13057 1004 NT_STATUS_OK
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13059 NT_STATUS_OK
Close 13059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13061 NT_STATUS_OK
ReadX 13061 61440 4096 4096 NT_STATUS_OK
ReadX 13061 126976 4096 4096 NT_STATUS_OK
WriteX 13061 0 65536 65536 NT_STATUS_OK
WriteX 13061 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13062 NT_STATUS_OK
ReadX 13062 61440 4096 4096 NT_STATUS_OK
ReadX 13062 126976 4096 4096 NT_STATUS_OK
ReadX 13062 192512 4096 4096 NT_STATUS_OK
ReadX 13062 258048 4096 4096 NT_STATUS_OK
WriteX 13062 0 65536 65536 NT_STATUS_OK
WriteX 13062 65536 65536 65536 NT_STATUS_OK
WriteX 13062 131072 65536 65536 NT_STATUS_OK
WriteX 13062 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13063 NT_STATUS_OK
ReadX 13063 61440 4096 4096 NT_STATUS_OK
ReadX 13063 126976 4096 4096 NT_STATUS_OK
ReadX 13063 192512 4096 4096 NT_STATUS_OK
ReadX 13063 258048 4096 4096 NT_STATUS_OK
ReadX 13063 323584 4096 4096 NT_STATUS_OK
ReadX 13063 389120 4096 4096 NT_STATUS_OK
ReadX 13063 454656 4096 4096 NT_STATUS_OK
ReadX 13063 520192 4096 4096 NT_STATUS_OK
WriteX 13063 0 65536 65536 NT_STATUS_OK
WriteX 13063 65536 65536 65536 NT_STATUS_OK
WriteX 13063 131072 65536 65536 NT_STATUS_OK
WriteX 13063 196608 65536 65536 NT_STATUS_OK
WriteX 13063 262144 65536 65536 NT_STATUS_OK
WriteX 13063 327680 65536 65536 NT_STATUS_OK
WriteX 13063 393216 65536 65536 NT_STATUS_OK
WriteX 13063 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 4096 4096 NT_STATUS_OK
ReadX 13064 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13065 NT_STATUS_OK
WriteX 13065 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13065 258 NT_STATUS_OK
WriteX 13065 0 53 53 NT_STATUS_OK
Close 13065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13066 NT_STATUS_OK
Close 13066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13058 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Close 13061 NT_STATUS_OK
Close 13062 NT_STATUS_OK
Close 13063 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13064 8192 4096 4096 NT_STATUS_OK
ReadX 13064 12288 4096 4096 NT_STATUS_OK
WriteX 13068 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13068 258 NT_STATUS_OK
ReadX 13064 16384 4096 4096 NT_STATUS_OK
ReadX 13064 20480 4096 4096 NT_STATUS_OK
WriteX 13068 0 15360 15360 NT_STATUS_OK
Close 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13069 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13069 1004 NT_STATUS_OK
WriteX 13069 0 4096 4096 NT_STATUS_OK
Close 13069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13070 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13072 NT_STATUS_OK
ReadX 13072 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13073 NT_STATUS_OK
Close 13073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13072 4096 4096 4096 NT_STATUS_OK
ReadX 13072 8192 4096 4096 NT_STATUS_OK
ReadX 13072 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
ReadX 13075 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
ReadX 13076 4096 4096 4096 NT_STATUS_OK
ReadX 13076 8192 4096 4096 NT_STATUS_OK
Close 13075 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13077 NT_STATUS_OK
WriteX 13077 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 258 NT_STATUS_OK
WriteX 13077 0 15360 15360 NT_STATUS_OK
Close 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13079 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13082 NT_STATUS_OK
SET_FILE_INFORMATION 13082 1004 NT_STATUS_OK
Close 13082 NT_STATUS_OK
WriteX 13078 0 4096 4096 NT_STATUS_OK
Close 13078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13083 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
ReadX 13085 4096 4096 4096 NT_STATUS_OK
ReadX 13085 8192 4096 4096 NT_STATUS_OK
ReadX 13085 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13085 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13085 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13087 NT_STATUS_OK
WriteX 13087 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13087 258 NT_STATUS_OK
WriteX 13087 0 53 53 NT_STATUS_OK
Close 13087 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13085 0 19054 19054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13086 4096 4096 4096 NT_STATUS_OK
ReadX 13086 8192 4096 4096 NT_STATUS_OK
ReadX 13086 12288 4096 4096 NT_STATUS_OK
WriteX 13090 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13090 258 NT_STATUS_OK
WriteX 13090 0 12006 12006 NT_STATUS_OK
Close 13090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13091 NT_STATUS_OK
ReadX 13091 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13091 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13091 1004 NT_STATUS_OK
WriteX 13091 0 4096 4096 NT_STATUS_OK
Close 13091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13095 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13094 4096 4096 4096 NT_STATUS_OK
ReadX 13094 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13097 NT_STATUS_OK
WriteX 13097 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13097 258 NT_STATUS_OK
WriteX 13097 0 11991 11991 NT_STATUS_OK
Close 13097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13098 NT_STATUS_OK
ReadX 13098 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13098 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13098 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13102 NT_STATUS_OK
SET_FILE_INFORMATION 13102 1004 NT_STATUS_OK
Close 13102 NT_STATUS_OK
WriteX 13098 0 4096 4096 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13106 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13105 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
ReadX 13105 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
WriteX 13105 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13105 1004 NT_STATUS_OK
Close 13081 NT_STATUS_OK
WriteX 13105 0 12288 12288 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13112 NT_STATUS_OK
ReadX 13112 0 61440 61440 NT_STATUS_OK
ReadX 13112 61440 4096 4096 NT_STATUS_OK
ReadX 13112 65536 61440 61440 NT_STATUS_OK
ReadX 13112 126976 4096 4096 NT_STATUS_OK
ReadX 13112 131072 61440 61440 NT_STATUS_OK
ReadX 13112 192512 4096 4096 NT_STATUS_OK
ReadX 13112 196608 61440 61440 NT_STATUS_OK
ReadX 13112 258048 4096 4096 NT_STATUS_OK
ReadX 13112 262144 61440 61440 NT_STATUS_OK
ReadX 13112 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 61440 61440 NT_STATUS_OK
ReadX 13113 61440 4096 4096 NT_STATUS_OK
ReadX 13113 65536 61440 61440 NT_STATUS_OK
ReadX 13113 126976 4096 4096 NT_STATUS_OK
ReadX 13113 131072 61440 61440 NT_STATUS_OK
ReadX 13113 192512 4096 4096 NT_STATUS_OK
ReadX 13113 196608 61440 61440 NT_STATUS_OK
ReadX 13113 258048 4096 4096 NT_STATUS_OK
ReadX 13113 262144 61440 61440 NT_STATUS_OK
ReadX 13113 323584 4096 4096 NT_STATUS_OK
ReadX 13113 327680 61440 61440 NT_STATUS_OK
ReadX 13113 389120 4096 4096 NT_STATUS_OK
ReadX 13113 393216 61440 61440 NT_STATUS_OK
ReadX 13113 454656 4096 4096 NT_STATUS_OK
ReadX 13113 458752 61440 61440 NT_STATUS_OK
ReadX 13113 520192 4096 4096 NT_STATUS_OK
ReadX 13113 524288 61440 61440 NT_STATUS_OK
ReadX 13113 585728 4096 4096 NT_STATUS_OK
ReadX 13113 589824 61440 61440 NT_STATUS_OK
ReadX 13113 651264 4096 4096 NT_STATUS_OK
ReadX 13113 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 61440 61440 NT_STATUS_OK
ReadX 13114 61440 4096 4096 NT_STATUS_OK
ReadX 13114 65536 61440 61440 NT_STATUS_OK
ReadX 13114 126976 4096 4096 NT_STATUS_OK
ReadX 13114 131072 61440 61440 NT_STATUS_OK
ReadX 13114 192512 4096 4096 NT_STATUS_OK
ReadX 13114 196608 61440 61440 NT_STATUS_OK
ReadX 13114 258048 4096 4096 NT_STATUS_OK
ReadX 13114 262144 61440 61440 NT_STATUS_OK
ReadX 13114 323584 4096 4096 NT_STATUS_OK
ReadX 13114 327680 61440 61440 NT_STATUS_OK
ReadX 13114 389120 4096 4096 NT_STATUS_OK
ReadX 13114 393216 61440 61440 NT_STATUS_OK
ReadX 13114 454656 4096 4096 NT_STATUS_OK
ReadX 13114 458752 61440 61440 NT_STATUS_OK
ReadX 13114 520192 4096 4096 NT_STATUS_OK
ReadX 13114 524288 61440 61440 NT_STATUS_OK
ReadX 13114 585728 4096 4096 NT_STATUS_OK
ReadX 13114 589824 61440 61440 NT_STATUS_OK
ReadX 13114 651264 4096 4096 NT_STATUS_OK
ReadX 13114 655360 61440 61440 NT_STATUS_OK
ReadX 13114 716800 4096 4096 NT_STATUS_OK
ReadX 13114 720896 61440 61440 NT_STATUS_OK
ReadX 13114 782336 4096 4096 NT_STATUS_OK
ReadX 13114 786432 61440 61440 NT_STATUS_OK
ReadX 13114 847872 4096 4096 NT_STATUS_OK
ReadX 13114 851968 61440 61440 NT_STATUS_OK
ReadX 13114 913408 4096 4096 NT_STATUS_OK
ReadX 13114 917504 61440 61440 NT_STATUS_OK
ReadX 13114 978944 4096 4096 NT_STATUS_OK
ReadX 13114 983040 61440 61440 NT_STATUS_OK
ReadX 13114 1044480 4096 4096 NT_STATUS_OK
ReadX 13114 1048576 61440 61440 NT_STATUS_OK
ReadX 13114 1110016 4096 4096 NT_STATUS_OK
ReadX 13114 1114112 61440 61440 NT_STATUS_OK
ReadX 13114 1175552 4096 4096 NT_STATUS_OK
ReadX 13114 1179648 61440 61440 NT_STATUS_OK
ReadX 13114 1241088 4096 4096 NT_STATUS_OK
ReadX 13114 1245184 61440 61440 NT_STATUS_OK
ReadX 13114 1306624 4096 4096 NT_STATUS_OK
ReadX 13114 1310720 61440 61440 NT_STATUS_OK
ReadX 13114 1372160 4096 4096 NT_STATUS_OK
ReadX 13114 1376256 61440 61440 NT_STATUS_OK
ReadX 13114 1437696 4096 4096 NT_STATUS_OK
ReadX 13114 1441792 61440 61440 NT_STATUS_OK
ReadX 13114 1503232 4096 4096 NT_STATUS_OK
ReadX 13114 1507328 61440 61440 NT_STATUS_OK
ReadX 13114 1568768 4096 4096 NT_STATUS_OK
ReadX 13114 1572864 61440 61440 NT_STATUS_OK
ReadX 13114 1634304 4096 4096 NT_STATUS_OK
ReadX 13114 1638400 61440 61440 NT_STATUS_OK
ReadX 13114 1699840 4096 4096 NT_STATUS_OK
ReadX 13114 1703936 61440 61440 NT_STATUS_OK
ReadX 13114 1765376 4096 4096 NT_STATUS_OK
ReadX 13114 1769472 61440 61440 NT_STATUS_OK
ReadX 13114 1830912 4096 4096 NT_STATUS_OK
ReadX 13114 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13121 NT_STATUS_OK
QUERY_FILE_INFORMATION 13121 1004 NT_STATUS_OK
WriteX 13121 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13121 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13122 NT_STATUS_OK
Close 13122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13123 NT_STATUS_OK
WriteX 13123 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13123 258 NT_STATUS_OK
WriteX 13123 0 491 491 NT_STATUS_OK
Close 13123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13124 NT_STATUS_OK
ReadX 13124 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13121 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13126 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13127 NT_STATUS_OK
WriteX 13127 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13127 258 NT_STATUS_OK
WriteX 13127 0 543 543 NT_STATUS_OK
Close 13127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Close 13128 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Close 13119 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13131 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13134 NT_STATUS_OK
ReadX 13134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13135 NT_STATUS_OK
ReadX 13135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13141 NT_STATUS_OK
QUERY_FILE_INFORMATION 13141 1004 NT_STATUS_OK
WriteX 13141 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13141 258 NT_STATUS_OK
WriteX 13141 0 2048 2048 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
Flush 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13147 NT_STATUS_OK
WriteX 13147 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13147 258 NT_STATUS_OK
WriteX 13147 0 2048 2048 NT_STATUS_OK
Close 13147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13152 NT_STATUS_OK
Close 13152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13153 NT_STATUS_OK
WriteX 13153 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13153 258 NT_STATUS_OK
WriteX 13153 0 2048 2048 NT_STATUS_OK
Close 13153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13154 NT_STATUS_OK
ReadX 13154 0 2048 2048 NT_STATUS_OK
ReadX 13132 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13148 0 4096 4096 NT_STATUS_OK
WriteX 13132 0 8192 8192 NT_STATUS_OK
WriteX 13133 0 4096 4096 NT_STATUS_OK
WriteX 13134 0 4096 4096 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13158 NT_STATUS_OK
QUERY_FILE_INFORMATION 13158 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Close 13133 NT_STATUS_OK
Close 13134 NT_STATUS_OK
Close 13135 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Close 13132 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13161 NT_STATUS_OK
ReadX 13161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13166 NT_STATUS_OK
ReadX 13166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13167 NT_STATUS_OK
ReadX 13167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13168 NT_STATUS_OK
ReadX 13168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13177 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13178 NT_STATUS_OK
QUERY_FILE_INFORMATION 13178 1004 NT_STATUS_OK
WriteX 13178 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13178 258 NT_STATUS_OK
WriteX 13178 0 2048 2048 NT_STATUS_OK
Close 13178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13186 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 1004 NT_STATUS_OK
WriteX 13186 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 258 NT_STATUS_OK
WriteX 13186 0 2048 2048 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13179 0 4096 4096 NT_STATUS_OK
Flush 13179 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
Flush 13187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13179 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13181 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13189 NT_STATUS_OK
WriteX 13189 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13189 258 NT_STATUS_OK
WriteX 13189 0 4096 4096 NT_STATUS_OK
Close 13189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13191 NT_STATUS_OK
Close 13191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13192 NT_STATUS_OK
WriteX 13192 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13192 258 NT_STATUS_OK
WriteX 13192 0 4096 4096 NT_STATUS_OK
Close 13192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13193 NT_STATUS_OK
ReadX 13193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13193 0 4096 4096 NT_STATUS_OK
Close 13190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13167 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Close 13171 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Close 13168 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Close 13162 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13166 NT_STATUS_OK
Close 13163 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13196 NT_STATUS_OK
Close 13196 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13198 NT_STATUS_OK
ReadX 13198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13199 NT_STATUS_OK
Close 13199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13200 NT_STATUS_OK
WriteX 13200 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13200 258 NT_STATUS_OK
WriteX 13200 0 2048 2048 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13201 NT_STATUS_OK
ReadX 13201 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13202 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13203 NT_STATUS_OK
ReadX 13203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13204 NT_STATUS_OK
ReadX 13204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13205 NT_STATUS_OK
ReadX 13205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13215 NT_STATUS_OK
QUERY_FILE_INFORMATION 13215 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13198 NT_STATUS_OK
Close 13201 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13209 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Close 13202 NT_STATUS_OK
Close 13203 NT_STATUS_OK
Close 13206 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Close 13205 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13217 NT_STATUS_OK
QUERY_FILE_INFORMATION 13217 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13223 NT_STATUS_OK
ReadX 13223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13224 NT_STATUS_OK
ReadX 13224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13225 NT_STATUS_OK
ReadX 13225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13231 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13237 NT_STATUS_OK
QUERY_FILE_INFORMATION 13237 1004 NT_STATUS_OK
WriteX 13237 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13237 258 NT_STATUS_OK
WriteX 13237 0 2048 2048 NT_STATUS_OK
Close 13237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13239 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13243 NT_STATUS_OK
ReadX 13243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13244 NT_STATUS_OK
ReadX 13244 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13249 NT_STATUS_OK
QUERY_FILE_INFORMATION 13249 1004 NT_STATUS_OK
WriteX 13249 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13249 258 NT_STATUS_OK
WriteX 13249 0 2048 2048 NT_STATUS_OK
Close 13249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13257 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 1004 NT_STATUS_OK
WriteX 13257 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 258 NT_STATUS_OK
WriteX 13257 0 2048 2048 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13258 NT_STATUS_OK
ReadX 13258 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13238 0 4096 4096 NT_STATUS_OK
Flush 13238 NT_STATUS_OK
WriteX 13250 0 4096 4096 NT_STATUS_OK
Flush 13250 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
Flush 13258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13238 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13250 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13240 4096 16384 16384 NT_STATUS_OK
ReadX 13220 4096 16384 16384 NT_STATUS_OK
ReadX 13252 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 2048 2048 NT_STATUS_OK
WriteX 13260 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13261 NT_STATUS_OK
QUERY_FILE_INFORMATION 13261 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Close 13232 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13241 NT_STATUS_OK
Close 13242 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Close 13223 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13263 NT_STATUS_OK
QUERY_FILE_INFORMATION 13263 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13265 NT_STATUS_OK
QUERY_FILE_INFORMATION 13265 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13270 NT_STATUS_OK
ReadX 13270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13268 4096 16384 16384 NT_STATUS_OK
WriteX 13268 0 4096 4096 NT_STATUS_OK
WriteX 13269 0 4096 4096 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
WriteX 13271 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13273 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13275 NT_STATUS_OK
ReadX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 8192 8192 NT_STATUS_OK
ReadX 13274 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13288 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13288 0 4096 4096 NT_STATUS_OK
ReadX 13288 4096 4096 4096 NT_STATUS_OK
ReadX 13288 8192 4096 4096 NT_STATUS_OK
WriteX 13274 0 4096 4096 NT_STATUS_OK
WriteX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13289 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
ReadX 13289 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13268 0 4096 4096 NT_STATUS_OK
WriteX 13269 0 4096 4096 NT_STATUS_OK
WriteX 13270 0 4096 4096 NT_STATUS_OK
WriteX 13271 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13293 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13294 NT_STATUS_OK
QUERY_FILE_INFORMATION 13294 1004 NT_STATUS_OK
WriteX 13294 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13294 258 NT_STATUS_OK
WriteX 13294 0 2048 2048 NT_STATUS_OK
Close 13294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13295 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13295 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
ReadX 13297 4096 4096 4096 NT_STATUS_OK
WriteX 13297 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13295 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13297 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13299 NT_STATUS_OK
ReadX 13299 0 4096 4096 NT_STATUS_OK
ReadX 13299 4096 4096 4096 NT_STATUS_OK
WriteX 13299 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13300 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13272 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Close 13269 NT_STATUS_OK
Close 13270 NT_STATUS_OK
Close 13271 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Close 13275 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13299 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13302 0 4096 4096 NT_STATUS_OK
ReadX 13302 4096 4096 4096 NT_STATUS_OK
ReadX 13302 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13303 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13311 NT_STATUS_OK
ReadX 13311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
ReadX 13303 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13319 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13320 NT_STATUS_OK
QUERY_FILE_INFORMATION 13320 1004 NT_STATUS_OK
WriteX 13320 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13320 258 NT_STATUS_OK
WriteX 13320 0 2048 2048 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13321 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13326 NT_STATUS_OK
QUERY_FILE_INFORMATION 13326 1004 NT_STATUS_OK
WriteX 13326 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13326 258 NT_STATUS_OK
WriteX 13326 0 2048 2048 NT_STATUS_OK
Close 13326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13327 NT_STATUS_OK
ReadX 13327 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13327 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13310 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13328 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Close 13303 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13302 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13330 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13332 NT_STATUS_OK
ReadX 13332 61440 4096 4096 NT_STATUS_OK
ReadX 13332 126976 4096 4096 NT_STATUS_OK
WriteX 13332 0 65536 65536 NT_STATUS_OK
WriteX 13332 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13333 NT_STATUS_OK
ReadX 13333 61440 4096 4096 NT_STATUS_OK
ReadX 13333 126976 4096 4096 NT_STATUS_OK
ReadX 13333 192512 4096 4096 NT_STATUS_OK
ReadX 13333 258048 4096 4096 NT_STATUS_OK
WriteX 13333 0 65536 65536 NT_STATUS_OK
WriteX 13333 65536 65536 65536 NT_STATUS_OK
WriteX 13333 131072 65536 65536 NT_STATUS_OK
WriteX 13333 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 61440 4096 4096 NT_STATUS_OK
ReadX 13334 126976 4096 4096 NT_STATUS_OK
ReadX 13334 192512 4096 4096 NT_STATUS_OK
ReadX 13334 258048 4096 4096 NT_STATUS_OK
ReadX 13334 323584 4096 4096 NT_STATUS_OK
ReadX 13334 389120 4096 4096 NT_STATUS_OK
ReadX 13334 454656 4096 4096 NT_STATUS_OK
ReadX 13334 520192 4096 4096 NT_STATUS_OK
WriteX 13334 0 65536 65536 NT_STATUS_OK
WriteX 13334 65536 65536 65536 NT_STATUS_OK
WriteX 13334 131072 65536 65536 NT_STATUS_OK
WriteX 13334 196608 65536 65536 NT_STATUS_OK
WriteX 13334 262144 65536 65536 NT_STATUS_OK
WriteX 13334 327680 65536 65536 NT_STATUS_OK
WriteX 13334 393216 65536 65536 NT_STATUS_OK
WriteX 13334 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13335 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13335 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13335 8192 4096 4096 NT_STATUS_OK
ReadX 13335 12288 4096 4096 NT_STATUS_OK
ReadX 13335 16384 4096 4096 NT_STATUS_OK
ReadX 13335 20480 4096 4096 NT_STATUS_OK
ReadX 13335 24576 4096 4096 NT_STATUS_OK
ReadX 13335 28672 4096 4096 NT_STATUS_OK
ReadX 13335 32768 4096 4096 NT_STATUS_OK
ReadX 13335 36864 4096 4096 NT_STATUS_OK
ReadX 13335 40960 4096 4096 NT_STATUS_OK
ReadX 13335 45056 4096 4096 NT_STATUS_OK
ReadX 13335 49152 4096 4096 NT_STATUS_OK
ReadX 13335 53248 4096 4096 NT_STATUS_OK
ReadX 13335 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13335 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13336 NT_STATUS_OK
Close 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13332 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13338 NT_STATUS_OK
WriteX 13338 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13338 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13338 1004 NT_STATUS_OK
WriteX 13338 0 57088 57088 NT_STATUS_OK
WriteX 13338 0 4096 4096 NT_STATUS_OK
Flush 13338 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13339 NT_STATUS_OK
SET_FILE_INFORMATION 13339 1004 NT_STATUS_OK
Close 13339 NT_STATUS_OK
SET_FILE_INFORMATION 13338 1004 NT_STATUS_OK
WriteX 13338 0 4096 4096 NT_STATUS_OK
Close 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13342 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13343 NT_STATUS_OK
WriteX 13343 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13343 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
WriteX 13343 0 51456 51456 NT_STATUS_OK
WriteX 13343 0 4096 4096 NT_STATUS_OK
Flush 13343 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
WriteX 13343 0 4096 4096 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13345 NT_STATUS_OK
Close 13345 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13347 NT_STATUS_OK
ReadX 13347 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13347 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13352 NT_STATUS_OK
WriteX 13352 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13352 258 NT_STATUS_OK
WriteX 13352 0 53077 53077 NT_STATUS_OK
Close 13352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13353 NT_STATUS_OK
WriteX 13353 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13353 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
WriteX 13353 0 65536 65536 NT_STATUS_OK
WriteX 13353 65536 1856 1856 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
Flush 13353 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
WriteX 13353 0 4096 4096 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13355 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13357 NT_STATUS_OK
ReadX 13357 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13359 NT_STATUS_OK
Close 13359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13362 NT_STATUS_OK
WriteX 13362 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13362 258 NT_STATUS_OK
WriteX 13362 0 7983 7983 NT_STATUS_OK
Close 13362 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13364 NT_STATUS_OK
Close 13364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13367 NT_STATUS_OK
WriteX 13367 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13367 258 NT_STATUS_OK
WriteX 13367 0 65536 65536 NT_STATUS_OK
WriteX 13367 65536 65536 65536 NT_STATUS_OK
WriteX 13367 131072 65536 65536 NT_STATUS_OK
WriteX 13367 196608 65536 65536 NT_STATUS_OK
WriteX 13367 262144 65536 65536 NT_STATUS_OK
WriteX 13367 327680 65536 65536 NT_STATUS_OK
WriteX 13367 393216 65536 65536 NT_STATUS_OK
WriteX 13367 458752 46731 46731 NT_STATUS_OK
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13368 NT_STATUS_OK
WriteX 13368 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13357 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
WriteX 13368 0 65536 65536 NT_STATUS_OK
WriteX 13368 65536 22848 22848 NT_STATUS_OK
WriteX 13368 0 4096 4096 NT_STATUS_OK
Flush 13368 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13368 1004 NT_STATUS_OK
WriteX 13368 0 4096 4096 NT_STATUS_OK
Close 13368 NT_STATUS_OK
Close 13357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13370 NT_STATUS_OK
Close 13370 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13372 NT_STATUS_OK
ReadX 13372 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13372 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13373 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13373 1004 NT_STATUS_OK
ReadX 13373 8192 4096 4096 NT_STATUS_OK
ReadX 13373 12288 4096 4096 NT_STATUS_OK
ReadX 13373 16384 4096 4096 NT_STATUS_OK
ReadX 13373 20480 4096 4096 NT_STATUS_OK
ReadX 13373 24576 4096 4096 NT_STATUS_OK
ReadX 13373 28672 4096 4096 NT_STATUS_OK
ReadX 13373 32768 4096 4096 NT_STATUS_OK
ReadX 13373 36864 4096 4096 NT_STATUS_OK
ReadX 13373 40960 4096 4096 NT_STATUS_OK
ReadX 13373 45056 4096 4096 NT_STATUS_OK
ReadX 13373 49152 4096 4096 NT_STATUS_OK
ReadX 13373 53248 4096 4096 NT_STATUS_OK
ReadX 13373 57344 4096 4096 NT_STATUS_OK
ReadX 13373 61440 4096 4096 NT_STATUS_OK
ReadX 13373 65536 4096 4096 NT_STATUS_OK
ReadX 13373 69632 4096 4096 NT_STATUS_OK
ReadX 13373 73728 4096 4096 NT_STATUS_OK
ReadX 13373 77824 4096 4096 NT_STATUS_OK
ReadX 13373 81920 4096 4096 NT_STATUS_OK
ReadX 13373 86016 4096 4096 NT_STATUS_OK
ReadX 13373 90112 4096 4096 NT_STATUS_OK
ReadX 13373 94208 4096 4096 NT_STATUS_OK
ReadX 13373 98304 4096 4096 NT_STATUS_OK
ReadX 13373 102400 4096 4096 NT_STATUS_OK
ReadX 13373 106496 4096 4096 NT_STATUS_OK
ReadX 13373 110592 4096 4096 NT_STATUS_OK
ReadX 13373 114688 4096 4096 NT_STATUS_OK
ReadX 13373 118784 4096 4096 NT_STATUS_OK
ReadX 13373 122880 4096 4096 NT_STATUS_OK
ReadX 13373 126976 4096 4096 NT_STATUS_OK
ReadX 13373 131072 4096 4096 NT_STATUS_OK
ReadX 13373 135168 4096 4096 NT_STATUS_OK
ReadX 13373 139264 4096 4096 NT_STATUS_OK
ReadX 13373 143360 4096 4096 NT_STATUS_OK
ReadX 13373 147456 4096 4096 NT_STATUS_OK
ReadX 13373 151552 4096 4096 NT_STATUS_OK
ReadX 13373 155648 4096 4096 NT_STATUS_OK
ReadX 13373 159744 4096 4096 NT_STATUS_OK
ReadX 13373 163840 4096 4096 NT_STATUS_OK
ReadX 13373 167936 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13373 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13374 NT_STATUS_OK
Close 13374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13372 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13376 NT_STATUS_OK
WriteX 13376 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 258 NT_STATUS_OK
Close 13373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13377 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
Close 13377 NT_STATUS_OK
WriteX 13376 0 42388 42388 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13378 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
ReadX 13380 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13381 NT_STATUS_OK
WriteX 13381 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13381 258 NT_STATUS_OK
SET_FILE_INFORMATION 13381 1004 NT_STATUS_OK
WriteX 13381 0 42652 42652 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 4096 4096 NT_STATUS_OK
ReadX 13385 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13387 NT_STATUS_OK
Close 13387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13390 NT_STATUS_OK
WriteX 13390 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 258 NT_STATUS_OK
WriteX 13390 0 65536 65536 NT_STATUS_OK
WriteX 13390 65536 49 49 NT_STATUS_OK
Close 13390 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 61440 61440 NT_STATUS_OK
ReadX 13391 61440 4096 4096 NT_STATUS_OK
ReadX 13391 65536 61440 61440 NT_STATUS_OK
ReadX 13391 126976 4096 4096 NT_STATUS_OK
ReadX 13391 131072 61440 61440 NT_STATUS_OK
ReadX 13391 192512 4096 4096 NT_STATUS_OK
ReadX 13391 196608 61440 61440 NT_STATUS_OK
ReadX 13391 258048 4096 4096 NT_STATUS_OK
ReadX 13391 262144 61440 61440 NT_STATUS_OK
ReadX 13391 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 61440 61440 NT_STATUS_OK
ReadX 13392 61440 4096 4096 NT_STATUS_OK
ReadX 13392 65536 61440 61440 NT_STATUS_OK
ReadX 13392 126976 4096 4096 NT_STATUS_OK
ReadX 13392 131072 61440 61440 NT_STATUS_OK
ReadX 13392 192512 4096 4096 NT_STATUS_OK
ReadX 13392 196608 61440 61440 NT_STATUS_OK
ReadX 13392 258048 4096 4096 NT_STATUS_OK
ReadX 13392 262144 61440 61440 NT_STATUS_OK
ReadX 13392 323584 4096 4096 NT_STATUS_OK
ReadX 13392 327680 61440 61440 NT_STATUS_OK
ReadX 13392 389120 4096 4096 NT_STATUS_OK
ReadX 13392 393216 61440 61440 NT_STATUS_OK
ReadX 13392 454656 4096 4096 NT_STATUS_OK
ReadX 13392 458752 61440 61440 NT_STATUS_OK
ReadX 13392 520192 4096 4096 NT_STATUS_OK
ReadX 13392 524288 61440 61440 NT_STATUS_OK
ReadX 13392 585728 4096 4096 NT_STATUS_OK
ReadX 13392 589824 61440 61440 NT_STATUS_OK
ReadX 13392 651264 4096 4096 NT_STATUS_OK
ReadX 13392 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 61440 61440 NT_STATUS_OK
ReadX 13393 61440 4096 4096 NT_STATUS_OK
ReadX 13393 65536 61440 61440 NT_STATUS_OK
ReadX 13393 126976 4096 4096 NT_STATUS_OK
ReadX 13393 131072 61440 61440 NT_STATUS_OK
ReadX 13393 192512 4096 4096 NT_STATUS_OK
ReadX 13393 196608 61440 61440 NT_STATUS_OK
ReadX 13393 258048 4096 4096 NT_STATUS_OK
ReadX 13393 262144 61440 61440 NT_STATUS_OK
ReadX 13393 323584 4096 4096 NT_STATUS_OK
ReadX 13393 327680 61440 61440 NT_STATUS_OK
ReadX 13393 389120 4096 4096 NT_STATUS_OK
ReadX 13393 393216 61440 61440 NT_STATUS_OK
ReadX 13393 454656 4096 4096 NT_STATUS_OK
ReadX 13393 458752 61440 61440 NT_STATUS_OK
ReadX 13393 520192 4096 4096 NT_STATUS_OK
ReadX 13393 524288 61440 61440 NT_STATUS_OK
ReadX 13393 585728 4096 4096 NT_STATUS_OK
ReadX 13393 589824 61440 61440 NT_STATUS_OK
ReadX 13393 651264 4096 4096 NT_STATUS_OK
ReadX 13393 655360 61440 61440 NT_STATUS_OK
ReadX 13393 716800 4096 4096 NT_STATUS_OK
ReadX 13393 720896 61440 61440 NT_STATUS_OK
ReadX 13393 782336 4096 4096 NT_STATUS_OK
ReadX 13393 786432 61440 61440 NT_STATUS_OK
ReadX 13393 847872 4096 4096 NT_STATUS_OK
ReadX 13393 851968 61440 61440 NT_STATUS_OK
ReadX 13393 913408 4096 4096 NT_STATUS_OK
ReadX 13393 917504 61440 61440 NT_STATUS_OK
ReadX 13393 978944 4096 4096 NT_STATUS_OK
ReadX 13393 983040 61440 61440 NT_STATUS_OK
ReadX 13393 1044480 4096 4096 NT_STATUS_OK
ReadX 13393 1048576 61440 61440 NT_STATUS_OK
ReadX 13393 1110016 4096 4096 NT_STATUS_OK
ReadX 13393 1114112 61440 61440 NT_STATUS_OK
ReadX 13393 1175552 4096 4096 NT_STATUS_OK
ReadX 13393 1179648 61440 61440 NT_STATUS_OK
ReadX 13393 1241088 4096 4096 NT_STATUS_OK
ReadX 13393 1245184 61440 61440 NT_STATUS_OK
ReadX 13393 1306624 4096 4096 NT_STATUS_OK
ReadX 13393 1310720 61440 61440 NT_STATUS_OK
ReadX 13393 1372160 4096 4096 NT_STATUS_OK
ReadX 13393 1376256 61440 61440 NT_STATUS_OK
ReadX 13393 1437696 4096 4096 NT_STATUS_OK
ReadX 13393 1441792 61440 61440 NT_STATUS_OK
ReadX 13393 1503232 4096 4096 NT_STATUS_OK
ReadX 13393 1507328 61440 61440 NT_STATUS_OK
ReadX 13393 1568768 4096 4096 NT_STATUS_OK
ReadX 13393 1572864 61440 61440 NT_STATUS_OK
ReadX 13393 1634304 4096 4096 NT_STATUS_OK
ReadX 13393 1638400 61440 61440 NT_STATUS_OK
ReadX 13393 1699840 4096 4096 NT_STATUS_OK
ReadX 13393 1703936 61440 61440 NT_STATUS_OK
ReadX 13393 1765376 4096 4096 NT_STATUS_OK
ReadX 13393 1769472 61440 61440 NT_STATUS_OK
ReadX 13393 1830912 4096 4096 NT_STATUS_OK
ReadX 13393 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13395 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 1005 NT_STATUS_OK
ReadX 13395 2156 24 24 NT_STATUS_OK
ReadX 13395 2139 276 276 NT_STATUS_OK
ReadX 13395 2136 14 14 NT_STATUS_OK
ReadX 13395 2136 7 7 NT_STATUS_OK
ReadX 13395 2138 12 12 NT_STATUS_OK
ReadX 13395 2137 8 8 NT_STATUS_OK
ReadX 13395 2135 15 15 NT_STATUS_OK
ReadX 13395 0 16 16 NT_STATUS_OK
ReadX 13395 16 2048 2048 NT_STATUS_OK
ReadX 13395 2064 2048 2048 NT_STATUS_OK
ReadX 13395 257 2048 2048 NT_STATUS_OK
ReadX 13395 385 2048 2048 NT_STATUS_OK
ReadX 13395 513 2048 2048 NT_STATUS_OK
ReadX 13395 641 2048 2048 NT_STATUS_OK
ReadX 13395 769 2048 2048 NT_STATUS_OK
ReadX 13395 897 2048 2048 NT_STATUS_OK
ReadX 13395 1025 2048 2048 NT_STATUS_OK
ReadX 13395 1153 2048 2048 NT_STATUS_OK
ReadX 13395 1281 2048 2048 NT_STATUS_OK
ReadX 13395 1409 2048 2048 NT_STATUS_OK
ReadX 13395 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13397 NT_STATUS_OK
Close 13397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13400 NT_STATUS_OK
WriteX 13400 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13400 258 NT_STATUS_OK
WriteX 13400 0 10575 10575 NT_STATUS_OK
Flush 13400 NT_STATUS_OK
Close 13400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13401 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13403 NT_STATUS_OK
ReadX 13403 0 4096 4096 NT_STATUS_OK
Close 13395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13405 NT_STATUS_OK
LockX 13405 2147483538 1 NT_STATUS_OK
UnlockX 13405 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1005 NT_STATUS_OK
ReadX 13405 0 512 512 NT_STATUS_OK
ReadX 13405 512 512 512 NT_STATUS_OK
ReadX 13405 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13405 1004 NT_STATUS_OK
Close 13405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1005 NT_STATUS_OK
ReadX 13406 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13407 NT_STATUS_OK
LockX 13407 2147483538 1 NT_STATUS_OK
UnlockX 13407 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13407 1005 NT_STATUS_OK
ReadX 13407 0 512 512 NT_STATUS_OK
ReadX 13407 512 512 512 NT_STATUS_OK
ReadX 13407 1024 512 512 NT_STATUS_OK
ReadX 13407 288 20 20 NT_STATUS_OK
ReadX 13407 308 2084 2084 NT_STATUS_OK
ReadX 13407 388 2084 2084 NT_STATUS_OK
ReadX 13407 388 2084 2084 NT_STATUS_OK
ReadX 13394 2157 1386 1386 NT_STATUS_OK
ReadX 13407 2472 399 399 NT_STATUS_OK
ReadX 13407 3072 1536 1536 NT_STATUS_OK
ReadX 13407 544 149 149 NT_STATUS_OK
ReadX 13407 693 485 485 NT_STATUS_OK
Close 13407 NT_STATUS_OK
ReadX 13394 2157 4096 4096 NT_STATUS_OK
ReadX 13394 6253 4096 4096 NT_STATUS_OK
ReadX 13394 10349 4096 4096 NT_STATUS_OK
ReadX 13394 14445 4096 4096 NT_STATUS_OK
ReadX 13394 18541 4096 4096 NT_STATUS_OK
ReadX 13394 22637 256 256 NT_STATUS_OK
ReadX 13394 22893 4096 4096 NT_STATUS_OK
ReadX 13394 26989 4096 4096 NT_STATUS_OK
ReadX 13394 31085 4096 4096 NT_STATUS_OK
ReadX 13394 35181 4096 4096 NT_STATUS_OK
ReadX 13394 39277 4096 4096 NT_STATUS_OK
ReadX 13394 43373 4096 4096 NT_STATUS_OK
ReadX 13394 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13394 2157 1024 1024 NT_STATUS_OK
ReadX 13394 1667 4688 4688 NT_STATUS_OK
ReadX 13394 6355 3516 3516 NT_STATUS_OK
ReadX 13394 9871 16384 16384 NT_STATUS_OK
ReadX 13394 26255 3771 3771 NT_STATUS_OK
ReadX 13394 30026 2048 2048 NT_STATUS_OK
ReadX 13394 32074 1024 1024 NT_STATUS_OK
ReadX 13394 33098 6652 6652 NT_STATUS_OK
ReadX 13394 39750 16384 16384 NT_STATUS_OK
ReadX 13394 56134 10496 10496 NT_STATUS_OK
ReadX 13394 66630 1784 1784 NT_STATUS_OK
ReadX 13394 68414 90 90 NT_STATUS_OK
ReadX 13394 68504 273 273 NT_STATUS_OK
ReadX 13394 68777 1600 1600 NT_STATUS_OK
ReadX 13394 70377 640 640 NT_STATUS_OK
ReadX 13394 71017 1280 1280 NT_STATUS_OK
ReadX 13394 72297 8464 8464 NT_STATUS_OK
ReadX 13394 80761 158 158 NT_STATUS_OK
ReadX 13394 80919 912 912 NT_STATUS_OK
ReadX 13394 81831 1980 1980 NT_STATUS_OK
ReadX 13394 83811 2256 2256 NT_STATUS_OK
ReadX 13394 86067 400 400 NT_STATUS_OK
ReadX 13394 86467 252 252 NT_STATUS_OK
ReadX 13394 86719 42 42 NT_STATUS_OK
ReadX 13394 86761 725 725 NT_STATUS_OK
ReadX 13394 2009 512 512 NT_STATUS_OK
ReadX 13394 3895 9 9 NT_STATUS_OK
ReadX 13394 3781 46 46 NT_STATUS_OK
ReadX 13394 4059 92 92 NT_STATUS_OK
ReadX 13394 3781 92 92 NT_STATUS_OK
ReadX 13394 3986 184 184 NT_STATUS_OK
ReadX 13394 3987 16384 16384 NT_STATUS_OK
ReadX 13394 3902 16384 16384 NT_STATUS_OK
ReadX 13394 3781 10240 10240 NT_STATUS_OK
ReadX 13394 3821 16384 16384 NT_STATUS_OK
ReadX 13394 3891 935 935 NT_STATUS_OK
ReadX 13394 4060 10240 10240 NT_STATUS_OK
ReadX 13394 4059 184 184 NT_STATUS_OK
ReadX 13394 256 184 184 NT_STATUS_OK
ReadX 13394 256 1026 1026 NT_STATUS_OK
ReadX 13394 3901 326 326 NT_STATUS_OK
ReadX 13394 3899 652 652 NT_STATUS_OK
ReadX 13394 256 2 2 NT_STATUS_OK
ReadX 13394 258 4948 4948 NT_STATUS_OK
Close 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13412 NT_STATUS_OK
WriteX 13412 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13412 258 NT_STATUS_OK
WriteX 13412 0 65536 65536 NT_STATUS_OK
WriteX 13412 65536 65536 65536 NT_STATUS_OK
WriteX 13412 131072 65536 65536 NT_STATUS_OK
WriteX 13412 196608 65536 65536 NT_STATUS_OK
WriteX 13412 262144 65536 65536 NT_STATUS_OK
WriteX 13412 327680 65536 65536 NT_STATUS_OK
WriteX 13412 393216 65536 65536 NT_STATUS_OK
WriteX 13412 458752 65536 65536 NT_STATUS_OK
WriteX 13412 524288 65536 65536 NT_STATUS_OK
WriteX 13412 589824 35257 35257 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13414 NT_STATUS_OK
Close 13414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13417 NT_STATUS_OK
WriteX 13417 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13417 258 NT_STATUS_OK
WriteX 13417 0 65536 65536 NT_STATUS_OK
WriteX 13417 65536 65536 65536 NT_STATUS_OK
WriteX 13417 131072 65536 65536 NT_STATUS_OK
WriteX 13417 196608 65536 65536 NT_STATUS_OK
WriteX 13417 262144 65536 65536 NT_STATUS_OK
WriteX 13417 327680 65536 65536 NT_STATUS_OK
WriteX 13417 393216 65536 65536 NT_STATUS_OK
WriteX 13417 458752 65536 65536 NT_STATUS_OK
WriteX 13417 524288 65536 65536 NT_STATUS_OK
WriteX 13417 589824 57598 57598 NT_STATUS_OK
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13419 NT_STATUS_OK
WriteX 13419 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13419 258 NT_STATUS_OK
WriteX 13419 0 12543 12543 NT_STATUS_OK
Flush 13419 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13421 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13424 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13425 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 1005 NT_STATUS_OK
ReadX 13425 1938 24 24 NT_STATUS_OK
ReadX 13425 1920 276 276 NT_STATUS_OK
ReadX 13425 1918 14 14 NT_STATUS_OK
ReadX 13425 1918 7 7 NT_STATUS_OK
ReadX 13425 1919 12 12 NT_STATUS_OK
ReadX 13425 1919 8 8 NT_STATUS_OK
ReadX 13425 1917 15 15 NT_STATUS_OK
ReadX 13425 0 16 16 NT_STATUS_OK
ReadX 13425 16 2048 2048 NT_STATUS_OK
ReadX 13425 2064 2048 2048 NT_STATUS_OK
ReadX 13425 257 2048 2048 NT_STATUS_OK
ReadX 13425 385 2048 2048 NT_STATUS_OK
ReadX 13425 513 2048 2048 NT_STATUS_OK
ReadX 13425 641 2048 2048 NT_STATUS_OK
ReadX 13425 769 2048 2048 NT_STATUS_OK
ReadX 13425 897 2048 2048 NT_STATUS_OK
ReadX 13425 1025 2048 2048 NT_STATUS_OK
ReadX 13425 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13427 NT_STATUS_OK
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13430 NT_STATUS_OK
WriteX 13430 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13430 258 NT_STATUS_OK
WriteX 13430 0 11588 11588 NT_STATUS_OK
Flush 13430 NT_STATUS_OK
Close 13430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13431 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13433 NT_STATUS_OK
ReadX 13433 0 4096 4096 NT_STATUS_OK
Close 13425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13435 NT_STATUS_OK
WriteX 13435 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 258 NT_STATUS_OK
WriteX 13435 0 11615 11615 NT_STATUS_OK
Flush 13435 NT_STATUS_OK
Close 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13441 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13444 NT_STATUS_OK
WriteX 13444 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13444 258 NT_STATUS_OK
WriteX 13444 0 65536 65536 NT_STATUS_OK
WriteX 13444 65536 16050 16050 NT_STATUS_OK
Close 13444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13424 1939 64 64 NT_STATUS_OK
ReadX 13424 128 248 248 NT_STATUS_OK
ReadX 13424 128 568 568 NT_STATUS_OK
ReadX 13424 3872 1536 1536 NT_STATUS_OK
ReadX 13424 3456 2560 2560 NT_STATUS_OK
ReadX 13424 3136 512 512 NT_STATUS_OK
ReadX 13424 2880 4096 4096 NT_STATUS_OK
ReadX 13424 3264 3072 3072 NT_STATUS_OK
ReadX 13424 320 4096 4096 NT_STATUS_OK
ReadX 13424 1024 4096 4096 NT_STATUS_OK
ReadX 13424 3616 4096 4096 NT_STATUS_OK
ReadX 13424 1939 64 64 NT_STATUS_OK
ReadX 13424 128 248 248 NT_STATUS_OK
ReadX 13424 128 608 608 NT_STATUS_OK
ReadX 13424 2858 1024 1024 NT_STATUS_OK
ReadX 13424 2810 4096 4096 NT_STATUS_OK
ReadX 13424 2826 4096 4096 NT_STATUS_OK
ReadX 13424 2580 2048 2048 NT_STATUS_OK
ReadX 13424 2800 2560 2560 NT_STATUS_OK
ReadX 13424 2100 4096 4096 NT_STATUS_OK
ReadX 13424 2084 4096 4096 NT_STATUS_OK
ReadX 13424 868 4096 4096 NT_STATUS_OK
ReadX 13424 2324 4096 4096 NT_STATUS_OK
ReadX 13424 884 4096 4096 NT_STATUS_OK
ReadX 13424 2604 1024 1024 NT_STATUS_OK
ReadX 13424 580 4096 4096 NT_STATUS_OK
ReadX 13424 596 4096 4096 NT_STATUS_OK
ReadX 13424 2752 4096 4096 NT_STATUS_OK
ReadX 13424 2842 1024 1024 NT_STATUS_OK
ReadX 13424 660 4096 4096 NT_STATUS_OK
ReadX 13424 2720 4096 4096 NT_STATUS_OK
ReadX 13424 2736 4096 4096 NT_STATUS_OK
ReadX 13424 628 4096 4096 NT_STATUS_OK
ReadX 13424 2704 4096 4096 NT_STATUS_OK
ReadX 13424 1556 4096 4096 NT_STATUS_OK
ReadX 13424 576 4096 4096 NT_STATUS_OK
ReadX 13424 3168 1536 1536 NT_STATUS_OK
ReadX 13424 832 4096 4096 NT_STATUS_OK
ReadX 13424 1088 4096 4096 NT_STATUS_OK
ReadX 13424 1344 4096 4096 NT_STATUS_OK
ReadX 13424 1600 4096 4096 NT_STATUS_OK
ReadX 13424 1856 4096 4096 NT_STATUS_OK
ReadX 13424 2112 4096 4096 NT_STATUS_OK
ReadX 13424 1892 4096 4096 NT_STATUS_OK
ReadX 13424 820 4096 4096 NT_STATUS_OK
ReadX 13424 788 4096 4096 NT_STATUS_OK
ReadX 13424 1604 4096 4096 NT_STATUS_OK
ReadX 13424 3648 4096 4096 NT_STATUS_OK
ReadX 13424 2608 4096 4096 NT_STATUS_OK
ReadX 13424 548 4096 4096 NT_STATUS_OK
ReadX 13424 740 4096 4096 NT_STATUS_OK
ReadX 13424 1344 4096 4096 NT_STATUS_OK
ReadX 13424 3392 4096 4096 NT_STATUS_OK
ReadX 13424 3904 4096 4096 NT_STATUS_OK
ReadX 13424 644 4096 4096 NT_STATUS_OK
ReadX 13424 676 4096 4096 NT_STATUS_OK
ReadX 13424 2688 4096 4096 NT_STATUS_OK
ReadX 13424 320 4096 4096 NT_STATUS_OK
ReadX 13424 900 4096 4096 NT_STATUS_OK
ReadX 13424 1908 4096 4096 NT_STATUS_OK
ReadX 13424 852 4096 4096 NT_STATUS_OK
ReadX 13424 724 4096 4096 NT_STATUS_OK
ReadX 13424 2292 4096 4096 NT_STATUS_OK
ReadX 13424 612 4096 4096 NT_STATUS_OK
ReadX 13424 388 4096 4096 NT_STATUS_OK
ReadX 13424 2368 4096 4096 NT_STATUS_OK
ReadX 13424 2624 4096 4096 NT_STATUS_OK
ReadX 13424 500 4096 4096 NT_STATUS_OK
ReadX 13424 356 4096 4096 NT_STATUS_OK
ReadX 13424 1024 4096 4096 NT_STATUS_OK
ReadX 13424 576 4096 4096 NT_STATUS_OK
ReadX 13424 340 4096 4096 NT_STATUS_OK
ReadX 13424 420 4096 4096 NT_STATUS_OK
ReadX 13424 1600 4096 4096 NT_STATUS_OK
ReadX 13424 404 4096 4096 NT_STATUS_OK
ReadX 13424 1428 4096 4096 NT_STATUS_OK
ReadX 13424 2656 4096 4096 NT_STATUS_OK
ReadX 13424 2624 4096 4096 NT_STATUS_OK
ReadX 13424 452 4096 4096 NT_STATUS_OK
ReadX 13424 692 4096 4096 NT_STATUS_OK
ReadX 13424 564 4096 4096 NT_STATUS_OK
ReadX 13424 372 4096 4096 NT_STATUS_OK
ReadX 13424 468 4096 4096 NT_STATUS_OK
ReadX 13424 484 4096 4096 NT_STATUS_OK
ReadX 13424 1088 4096 4096 NT_STATUS_OK
ReadX 13424 1924 4096 4096 NT_STATUS_OK
ReadX 13424 2768 4096 4096 NT_STATUS_OK
ReadX 13424 832 4096 4096 NT_STATUS_OK
ReadX 13424 836 4096 4096 NT_STATUS_OK
ReadX 13424 1856 4096 4096 NT_STATUS_OK
ReadX 13424 2640 4096 4096 NT_STATUS_OK
ReadX 13424 436 4096 4096 NT_STATUS_OK
ReadX 13424 1828 4096 4096 NT_STATUS_OK
ReadX 13424 804 4096 4096 NT_STATUS_OK
ReadX 13424 1860 4096 4096 NT_STATUS_OK
ReadX 13424 1812 4096 4096 NT_STATUS_OK
ReadX 13424 756 4096 4096 NT_STATUS_OK
ReadX 13424 1636 4096 4096 NT_STATUS_OK
ReadX 13424 772 4096 4096 NT_STATUS_OK
ReadX 13424 2036 4096 4096 NT_STATUS_OK
ReadX 13424 1220 4096 4096 NT_STATUS_OK
ReadX 13424 1652 4096 4096 NT_STATUS_OK
ReadX 13424 2588 4096 4096 NT_STATUS_OK
ReadX 13424 916 4096 4096 NT_STATUS_OK
ReadX 13424 260 4096 4096 NT_STATUS_OK
ReadX 13424 932 4096 4096 NT_STATUS_OK
ReadX 13424 2624 4096 4096 NT_STATUS_OK
ReadX 13424 308 4096 4096 NT_STATUS_OK
ReadX 13424 292 4096 4096 NT_STATUS_OK
ReadX 13424 1140 4096 4096 NT_STATUS_OK
ReadX 13424 276 4096 4096 NT_STATUS_OK
ReadX 13424 2020 4096 4096 NT_STATUS_OK
ReadX 13424 2880 4096 4096 NT_STATUS_OK
ReadX 13424 516 4096 4096 NT_STATUS_OK
ReadX 13424 1844 4096 4096 NT_STATUS_OK
ReadX 13424 1124 4096 4096 NT_STATUS_OK
ReadX 13424 3136 4096 4096 NT_STATUS_OK
ReadX 13424 324 4096 4096 NT_STATUS_OK
ReadX 13424 1156 4096 4096 NT_STATUS_OK
ReadX 13424 1172 4096 4096 NT_STATUS_OK
ReadX 13424 2112 4096 4096 NT_STATUS_OK
ReadX 13424 2368 4096 4096 NT_STATUS_OK
ReadX 13424 964 4096 4096 NT_STATUS_OK
ReadX 13424 980 4096 4096 NT_STATUS_OK
ReadX 13424 1012 4096 4096 NT_STATUS_OK
ReadX 13424 532 4096 4096 NT_STATUS_OK
ReadX 13424 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13424 1620 4096 4096 NT_STATUS_OK
ReadX 13424 1604 4096 4096 NT_STATUS_OK
ReadX 13424 2116 4096 4096 NT_STATUS_OK
ReadX 13424 2132 4096 4096 NT_STATUS_OK
ReadX 13424 2148 4096 4096 NT_STATUS_OK
ReadX 13424 2276 4096 4096 NT_STATUS_OK
ReadX 13424 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13446 NT_STATUS_OK
Close 13446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13449 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1004 NT_STATUS_OK
Close 13404 NT_STATUS_OK
WriteX 13449 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13449 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
WriteX 13449 0 65536 65536 NT_STATUS_OK
WriteX 13449 65536 64850 64850 NT_STATUS_OK
Close 13449 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13451 NT_STATUS_OK
WriteX 13451 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 258 NT_STATUS_OK
ReadX 13424 2068 4096 4096 NT_STATUS_OK
ReadX 13424 1588 4096 4096 NT_STATUS_OK
ReadX 13424 1572 4096 4096 NT_STATUS_OK
WriteX 13451 0 18630 18630 NT_STATUS_OK
Flush 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13453 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13424 612 4096 4096 NT_STATUS_OK
ReadX 13424 564 4096 4096 NT_STATUS_OK
ReadX 13424 1876 4096 4096 NT_STATUS_OK
ReadX 13424 628 4096 4096 NT_STATUS_OK
ReadX 13424 740 4096 4096 NT_STATUS_OK
ReadX 13424 724 4096 4096 NT_STATUS_OK
ReadX 13424 644 4096 4096 NT_STATUS_OK
ReadX 13424 2324 4096 4096 NT_STATUS_OK
ReadX 13424 660 4096 4096 NT_STATUS_OK
ReadX 13424 852 4096 4096 NT_STATUS_OK
ReadX 13424 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13424 2368 4096 4096 NT_STATUS_OK
ReadX 13424 1024 4096 4096 NT_STATUS_OK
ReadX 13424 320 4096 4096 NT_STATUS_OK
ReadX 13424 580 4096 4096 NT_STATUS_OK
ReadX 13424 3136 512 512 NT_STATUS_OK
ReadX 13424 2880 4096 4096 NT_STATUS_OK
Close 13424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 61440 4096 4096 NT_STATUS_OK
ReadX 13456 126976 4096 4096 NT_STATUS_OK
WriteX 13456 0 65536 65536 NT_STATUS_OK
WriteX 13456 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 61440 4096 4096 NT_STATUS_OK
ReadX 13457 126976 4096 4096 NT_STATUS_OK
ReadX 13457 192512 4096 4096 NT_STATUS_OK
ReadX 13457 258048 4096 4096 NT_STATUS_OK
WriteX 13457 0 65536 65536 NT_STATUS_OK
WriteX 13457 65536 65536 65536 NT_STATUS_OK
WriteX 13457 131072 65536 65536 NT_STATUS_OK
WriteX 13457 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 61440 4096 4096 NT_STATUS_OK
ReadX 13458 126976 4096 4096 NT_STATUS_OK
ReadX 13458 192512 4096 4096 NT_STATUS_OK
ReadX 13458 258048 4096 4096 NT_STATUS_OK
ReadX 13458 323584 4096 4096 NT_STATUS_OK
ReadX 13458 389120 4096 4096 NT_STATUS_OK
ReadX 13458 454656 4096 4096 NT_STATUS_OK
ReadX 13458 520192 4096 4096 NT_STATUS_OK
WriteX 13458 0 65536 65536 NT_STATUS_OK
WriteX 13458 65536 65536 65536 NT_STATUS_OK
WriteX 13458 131072 65536 65536 NT_STATUS_OK
WriteX 13458 196608 65536 65536 NT_STATUS_OK
WriteX 13458 262144 65536 65536 NT_STATUS_OK
WriteX 13458 327680 65536 65536 NT_STATUS_OK
WriteX 13458 393216 65536 65536 NT_STATUS_OK
WriteX 13458 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13459 NT_STATUS_OK
ReadX 13459 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13460 NT_STATUS_OK
Close 13460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13461 NT_STATUS_OK
WriteX 13461 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13461 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13459 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13459 0 8192 8192 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13463 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Close 13457 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13466 NT_STATUS_OK
WriteX 13466 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13466 258 NT_STATUS_OK
WriteX 13466 0 62591 62591 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13471 NT_STATUS_OK
WriteX 13471 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13471 258 NT_STATUS_OK
WriteX 13471 0 10845 10845 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13473 NT_STATUS_OK
Close 13473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13476 NT_STATUS_OK
WriteX 13476 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13476 258 NT_STATUS_OK
WriteX 13476 0 30118 30118 NT_STATUS_OK
Close 13476 NT_STATUS_OK
WriteX 13459 0 4096 4096 NT_STATUS_OK
WriteX 13461 0 64 64 NT_STATUS_OK
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 61440 61440 NT_STATUS_OK
ReadX 13478 61440 4096 4096 NT_STATUS_OK
ReadX 13478 65536 61440 61440 NT_STATUS_OK
ReadX 13478 126976 4096 4096 NT_STATUS_OK
ReadX 13478 131072 61440 61440 NT_STATUS_OK
ReadX 13478 192512 4096 4096 NT_STATUS_OK
ReadX 13478 196608 61440 61440 NT_STATUS_OK
ReadX 13478 258048 4096 4096 NT_STATUS_OK
ReadX 13478 262144 61440 61440 NT_STATUS_OK
ReadX 13478 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 61440 61440 NT_STATUS_OK
ReadX 13479 61440 4096 4096 NT_STATUS_OK
ReadX 13479 65536 61440 61440 NT_STATUS_OK
ReadX 13479 126976 4096 4096 NT_STATUS_OK
ReadX 13479 131072 61440 61440 NT_STATUS_OK
ReadX 13479 192512 4096 4096 NT_STATUS_OK
ReadX 13479 196608 61440 61440 NT_STATUS_OK
ReadX 13479 258048 4096 4096 NT_STATUS_OK
ReadX 13479 262144 61440 61440 NT_STATUS_OK
ReadX 13479 323584 4096 4096 NT_STATUS_OK
ReadX 13479 327680 61440 61440 NT_STATUS_OK
ReadX 13479 389120 4096 4096 NT_STATUS_OK
ReadX 13479 393216 61440 61440 NT_STATUS_OK
ReadX 13479 454656 4096 4096 NT_STATUS_OK
ReadX 13479 458752 61440 61440 NT_STATUS_OK
ReadX 13479 520192 4096 4096 NT_STATUS_OK
ReadX 13479 524288 61440 61440 NT_STATUS_OK
ReadX 13479 585728 4096 4096 NT_STATUS_OK
ReadX 13479 589824 61440 61440 NT_STATUS_OK
ReadX 13479 651264 4096 4096 NT_STATUS_OK
ReadX 13479 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 61440 61440 NT_STATUS_OK
ReadX 13480 61440 4096 4096 NT_STATUS_OK
ReadX 13480 65536 61440 61440 NT_STATUS_OK
ReadX 13480 126976 4096 4096 NT_STATUS_OK
ReadX 13480 131072 61440 61440 NT_STATUS_OK
ReadX 13480 192512 4096 4096 NT_STATUS_OK
ReadX 13480 196608 61440 61440 NT_STATUS_OK
ReadX 13480 258048 4096 4096 NT_STATUS_OK
ReadX 13480 262144 61440 61440 NT_STATUS_OK
ReadX 13480 323584 4096 4096 NT_STATUS_OK
ReadX 13480 327680 61440 61440 NT_STATUS_OK
ReadX 13480 389120 4096 4096 NT_STATUS_OK
ReadX 13480 393216 61440 61440 NT_STATUS_OK
ReadX 13480 454656 4096 4096 NT_STATUS_OK
ReadX 13480 458752 61440 61440 NT_STATUS_OK
ReadX 13480 520192 4096 4096 NT_STATUS_OK
ReadX 13480 524288 61440 61440 NT_STATUS_OK
ReadX 13480 585728 4096 4096 NT_STATUS_OK
ReadX 13480 589824 61440 61440 NT_STATUS_OK
ReadX 13480 651264 4096 4096 NT_STATUS_OK
ReadX 13480 655360 61440 61440 NT_STATUS_OK
ReadX 13480 716800 4096 4096 NT_STATUS_OK
ReadX 13480 720896 61440 61440 NT_STATUS_OK
ReadX 13480 782336 4096 4096 NT_STATUS_OK
ReadX 13480 786432 61440 61440 NT_STATUS_OK
ReadX 13480 847872 4096 4096 NT_STATUS_OK
ReadX 13480 851968 61440 61440 NT_STATUS_OK
ReadX 13480 913408 4096 4096 NT_STATUS_OK
ReadX 13480 917504 61440 61440 NT_STATUS_OK
ReadX 13480 978944 4096 4096 NT_STATUS_OK
ReadX 13480 983040 61440 61440 NT_STATUS_OK
ReadX 13480 1044480 4096 4096 NT_STATUS_OK
ReadX 13480 1048576 61440 61440 NT_STATUS_OK
ReadX 13480 1110016 4096 4096 NT_STATUS_OK
ReadX 13480 1114112 61440 61440 NT_STATUS_OK
ReadX 13480 1175552 4096 4096 NT_STATUS_OK
ReadX 13480 1179648 61440 61440 NT_STATUS_OK
ReadX 13480 1241088 4096 4096 NT_STATUS_OK
ReadX 13480 1245184 61440 61440 NT_STATUS_OK
ReadX 13480 1306624 4096 4096 NT_STATUS_OK
ReadX 13480 1310720 61440 61440 NT_STATUS_OK
ReadX 13480 1372160 4096 4096 NT_STATUS_OK
ReadX 13480 1376256 61440 61440 NT_STATUS_OK
ReadX 13480 1437696 4096 4096 NT_STATUS_OK
ReadX 13480 1441792 61440 61440 NT_STATUS_OK
ReadX 13480 1503232 4096 4096 NT_STATUS_OK
ReadX 13480 1507328 61440 61440 NT_STATUS_OK
ReadX 13480 1568768 4096 4096 NT_STATUS_OK
ReadX 13480 1572864 61440 61440 NT_STATUS_OK
ReadX 13480 1634304 4096 4096 NT_STATUS_OK
ReadX 13480 1638400 61440 61440 NT_STATUS_OK
ReadX 13480 1699840 4096 4096 NT_STATUS_OK
ReadX 13480 1703936 61440 61440 NT_STATUS_OK
ReadX 13480 1765376 4096 4096 NT_STATUS_OK
ReadX 13480 1769472 61440 61440 NT_STATUS_OK
ReadX 13480 1830912 4096 4096 NT_STATUS_OK
ReadX 13480 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13480 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
ReadX 13485 4096 4096 4096 NT_STATUS_OK
ReadX 13485 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13486 NT_STATUS_OK
Close 13486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13483 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13489 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13489 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 8192 8192 NT_STATUS_OK
ReadX 13493 8192 8192 8192 NT_STATUS_OK
ReadX 13493 16384 8192 8192 NT_STATUS_OK
ReadX 13493 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13495 NT_STATUS_OK
Close 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13498 NT_STATUS_OK
WriteX 13498 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13498 258 NT_STATUS_OK
WriteX 13498 0 10438 10438 NT_STATUS_OK
Close 13498 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13499 NT_STATUS_OK
Close 13499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13500 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13501 NT_STATUS_OK
Close 13501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13502 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13503 NT_STATUS_OK
Close 13503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13504 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13506 NT_STATUS_OK
Close 13506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13507 NT_STATUS_OK
ReadX 13507 0 4096 4096 NT_STATUS_OK
ReadX 13507 4096 4096 4096 NT_STATUS_OK
ReadX 13507 8192 4096 4096 NT_STATUS_OK
ReadX 13507 12288 8192 8192 NT_STATUS_OK
ReadX 13507 20480 8192 8192 NT_STATUS_OK
ReadX 13507 28672 8192 8192 NT_STATUS_OK
ReadX 13507 36864 8192 8192 NT_STATUS_OK
ReadX 13507 45056 8192 8192 NT_STATUS_OK
ReadX 13507 53248 8192 8192 NT_STATUS_OK
ReadX 13507 61440 8192 8192 NT_STATUS_OK
ReadX 13507 69632 8192 8192 NT_STATUS_OK
ReadX 13507 77824 8192 8192 NT_STATUS_OK
ReadX 13507 86016 8192 8192 NT_STATUS_OK
ReadX 13507 94208 8192 8192 NT_STATUS_OK
ReadX 13507 102400 8192 8192 NT_STATUS_OK
ReadX 13507 110592 8192 8192 NT_STATUS_OK
ReadX 13507 118784 8192 8192 NT_STATUS_OK
ReadX 13507 126976 8192 8192 NT_STATUS_OK
ReadX 13507 135168 8192 8192 NT_STATUS_OK
ReadX 13507 143360 8192 8192 NT_STATUS_OK
ReadX 13507 151552 8192 8192 NT_STATUS_OK
ReadX 13507 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13507 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13509 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13512 NT_STATUS_OK
WriteX 13512 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13512 258 NT_STATUS_OK
WriteX 13512 0 28489 28489 NT_STATUS_OK
Close 13512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13513 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13515 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13515 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13516 NT_STATUS_OK
Close 13516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13519 NT_STATUS_OK
ReadX 13519 0 8192 8192 NT_STATUS_OK
ReadX 13519 8192 8192 8192 NT_STATUS_OK
ReadX 13519 16384 8192 8192 NT_STATUS_OK
ReadX 13519 24576 8192 8192 NT_STATUS_OK
ReadX 13519 32768 16384 16384 NT_STATUS_OK
ReadX 13519 49152 8192 8192 NT_STATUS_OK
ReadX 13519 57344 8192 8192 NT_STATUS_OK
ReadX 13519 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13521 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13524 NT_STATUS_OK
WriteX 13524 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13524 258 NT_STATUS_OK
WriteX 13524 0 29253 29253 NT_STATUS_OK
Close 13524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13525 NT_STATUS_OK
Close 13525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13526 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13528 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13531 NT_STATUS_OK
WriteX 13531 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13531 258 NT_STATUS_OK
WriteX 13531 0 30183 30183 NT_STATUS_OK
Close 13531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13532 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13534 NT_STATUS_OK
WriteX 13534 0 510 510 NT_STATUS_OK
WriteX 13534 510 512 512 NT_STATUS_OK
WriteX 13534 1022 510 510 NT_STATUS_OK
WriteX 13534 1532 510 510 NT_STATUS_OK
WriteX 13534 2042 168 168 NT_STATUS_OK
Close 13534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13535 NT_STATUS_OK
Close 13535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13537 NT_STATUS_OK
ReadX 13537 0 4096 4096 NT_STATUS_OK
WriteX 13537 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13538 NT_STATUS_OK
ReadX 13538 61440 4096 4096 NT_STATUS_OK
ReadX 13538 126976 4096 4096 NT_STATUS_OK
WriteX 13538 0 65536 65536 NT_STATUS_OK
WriteX 13538 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13539 NT_STATUS_OK
ReadX 13539 61440 4096 4096 NT_STATUS_OK
ReadX 13539 126976 4096 4096 NT_STATUS_OK
ReadX 13539 192512 4096 4096 NT_STATUS_OK
ReadX 13539 258048 4096 4096 NT_STATUS_OK
WriteX 13539 0 65536 65536 NT_STATUS_OK
WriteX 13539 65536 65536 65536 NT_STATUS_OK
WriteX 13539 131072 65536 65536 NT_STATUS_OK
WriteX 13539 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13540 NT_STATUS_OK
ReadX 13540 61440 4096 4096 NT_STATUS_OK
ReadX 13540 126976 4096 4096 NT_STATUS_OK
ReadX 13540 192512 4096 4096 NT_STATUS_OK
ReadX 13540 258048 4096 4096 NT_STATUS_OK
ReadX 13540 323584 4096 4096 NT_STATUS_OK
ReadX 13540 389120 4096 4096 NT_STATUS_OK
ReadX 13540 454656 4096 4096 NT_STATUS_OK
ReadX 13540 520192 4096 4096 NT_STATUS_OK
WriteX 13540 0 65536 65536 NT_STATUS_OK
WriteX 13540 65536 65536 65536 NT_STATUS_OK
WriteX 13540 131072 65536 65536 NT_STATUS_OK
WriteX 13540 196608 65536 65536 NT_STATUS_OK
WriteX 13540 262144 65536 65536 NT_STATUS_OK
WriteX 13540 327680 65536 65536 NT_STATUS_OK
WriteX 13540 393216 65536 65536 NT_STATUS_OK
WriteX 13540 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Close 13538 NT_STATUS_OK
Close 13539 NT_STATUS_OK
Close 13540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13543 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13547 NT_STATUS_OK
Close 13547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13559 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13565 NT_STATUS_OK
Close 13565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13570 NT_STATUS_OK
Close 13570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13575 NT_STATUS_OK
Close 13575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13580 NT_STATUS_OK
Close 13580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13585 NT_STATUS_OK
Close 13585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13590 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13595 NT_STATUS_OK
Close 13595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13600 NT_STATUS_OK
Close 13600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13606 NT_STATUS_OK
Close 13606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13609 NT_STATUS_OK
WriteX 13609 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13609 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13609 0 65536 65536 NT_STATUS_OK
WriteX 13609 65536 65536 65536 NT_STATUS_OK
WriteX 13609 131072 65536 65536 NT_STATUS_OK
WriteX 13609 196608 65536 65536 NT_STATUS_OK
WriteX 13609 262144 26634 26634 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13614 NT_STATUS_OK
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13615 NT_STATUS_OK
Close 13615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
ReadX 13617 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13625 NT_STATUS_OK
Close 13625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13627 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13634 NT_STATUS_OK
Close 13634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13636 NT_STATUS_OK
Close 13636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13640 NT_STATUS_OK
Close 13640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13645 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13650 NT_STATUS_OK
Close 13650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13655 NT_STATUS_OK
Close 13655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13660 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13665 NT_STATUS_OK
Close 13665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13679 NT_STATUS_OK
Close 13679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13684 NT_STATUS_OK
Close 13684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13694 NT_STATUS_OK
Close 13694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13695 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
Close 13696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13697 NT_STATUS_OK
ReadX 13697 0 4096 4096 NT_STATUS_OK
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13698 NT_STATUS_OK
ReadX 13698 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13710 NT_STATUS_OK
ReadX 13710 0 4096 4096 NT_STATUS_OK
Close 13710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13711 NT_STATUS_OK
ReadX 13711 0 4096 4096 NT_STATUS_OK
Close 13711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13698 NT_STATUS_OK
Close 13712 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13741 0 4096 4096 NT_STATUS_OK
Close 13741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13743 NT_STATUS_OK
ReadX 13743 0 4096 4096 NT_STATUS_OK
ReadX 13743 4096 4096 4096 NT_STATUS_OK
ReadX 13743 8192 4096 4096 NT_STATUS_OK
ReadX 13743 12288 4096 4096 NT_STATUS_OK
ReadX 13743 16384 4096 4096 NT_STATUS_OK
ReadX 13743 20480 4096 4096 NT_STATUS_OK
ReadX 13743 24576 4096 4096 NT_STATUS_OK
ReadX 13743 28672 4096 4096 NT_STATUS_OK
ReadX 13743 32768 4096 4096 NT_STATUS_OK
ReadX 13743 36864 4096 4096 NT_STATUS_OK
ReadX 13743 40960 4096 4096 NT_STATUS_OK
ReadX 13743 45056 4096 4096 NT_STATUS_OK
ReadX 13743 49152 4096 4096 NT_STATUS_OK
ReadX 13743 53248 4096 4096 NT_STATUS_OK
ReadX 13743 57344 4096 4096 NT_STATUS_OK
ReadX 13743 61440 4096 4096 NT_STATUS_OK
ReadX 13743 65536 4096 4096 NT_STATUS_OK
ReadX 13743 69632 4096 4096 NT_STATUS_OK
ReadX 13743 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13743 1004 NT_STATUS_OK
WriteX 13743 0 4096 4096 NT_STATUS_OK
Close 13743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13744 NT_STATUS_OK
SET_FILE_INFORMATION 13744 1004 NT_STATUS_OK
Close 13744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13745 NT_STATUS_OK
ReadX 13745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13746 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13749 NT_STATUS_OK
WriteX 13749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13749 258 NT_STATUS_OK
WriteX 13749 0 65536 65536 NT_STATUS_OK
WriteX 13749 65536 19979 19979 NT_STATUS_OK
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13750 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
QUERY_FILE_INFORMATION 13750 1004 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
SET_FILE_INFORMATION 13750 1004 NT_STATUS_OK
WriteX 13750 0 4096 4096 NT_STATUS_OK
Flush 13750 NT_STATUS_OK
Close 13750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 4096 4096 NT_STATUS_OK
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 4096 4096 NT_STATUS_OK
Close 13753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13754 NT_STATUS_OK
ReadX 13754 0 4096 4096 NT_STATUS_OK
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13755 NT_STATUS_OK
ReadX 13755 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13755 1004 NT_STATUS_OK
WriteX 13755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13756 NT_STATUS_OK
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13755 NT_STATUS_OK
Close 13745 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13761 NT_STATUS_OK
WriteX 13761 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13761 258 NT_STATUS_OK
WriteX 13761 0 65536 65536 NT_STATUS_OK
WriteX 13761 65536 17654 17654 NT_STATUS_OK
Close 13761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
QUERY_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
SET_FILE_INFORMATION 13762 1004 NT_STATUS_OK
WriteX 13762 0 4096 4096 NT_STATUS_OK
Flush 13762 NT_STATUS_OK
Close 13762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13763 NT_STATUS_OK
SET_FILE_INFORMATION 13763 1004 NT_STATUS_OK
Close 13763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13764 NT_STATUS_OK
ReadX 13764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13765 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13767 NT_STATUS_OK
ReadX 13767 0 4096 4096 NT_STATUS_OK
ReadX 13767 4096 4096 4096 NT_STATUS_OK
ReadX 13767 8192 4096 4096 NT_STATUS_OK
ReadX 13767 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13767 16384 4096 4096 NT_STATUS_OK
ReadX 13767 20480 4096 4096 NT_STATUS_OK
ReadX 13767 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13768 NT_STATUS_OK
ReadX 13768 0 4096 4096 NT_STATUS_OK
Close 13768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13769 NT_STATUS_OK
ReadX 13769 0 4096 4096 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13770 1004 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13770 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13776 NT_STATUS_OK
WriteX 13776 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13776 258 NT_STATUS_OK
WriteX 13776 0 65536 65536 NT_STATUS_OK
WriteX 13776 65536 19490 19490 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
QUERY_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
SET_FILE_INFORMATION 13777 1004 NT_STATUS_OK
WriteX 13777 0 4096 4096 NT_STATUS_OK
Flush 13777 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13778 NT_STATUS_OK
SET_FILE_INFORMATION 13778 1004 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13779 NT_STATUS_OK
ReadX 13779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13782 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13782 0 4096 4096 NT_STATUS_OK
Close 13782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13783 NT_STATUS_OK
ReadX 13783 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13784 NT_STATUS_OK
ReadX 13784 0 4096 4096 NT_STATUS_OK
ReadX 13784 4096 4096 4096 NT_STATUS_OK
ReadX 13784 8192 4096 4096 NT_STATUS_OK
ReadX 13784 12288 4096 4096 NT_STATUS_OK
ReadX 13784 16384 4096 4096 NT_STATUS_OK
ReadX 13784 20480 4096 4096 NT_STATUS_OK
ReadX 13784 24576 4096 4096 NT_STATUS_OK
ReadX 13784 28672 4096 4096 NT_STATUS_OK
ReadX 13784 32768 4096 4096 NT_STATUS_OK
ReadX 13784 36864 4096 4096 NT_STATUS_OK
ReadX 13784 40960 4096 4096 NT_STATUS_OK
ReadX 13784 45056 4096 4096 NT_STATUS_OK
ReadX 13784 49152 4096 4096 NT_STATUS_OK
ReadX 13784 53248 4096 4096 NT_STATUS_OK
ReadX 13784 57344 4096 4096 NT_STATUS_OK
ReadX 13784 61440 4096 4096 NT_STATUS_OK
ReadX 13784 65536 4096 4096 NT_STATUS_OK
ReadX 13784 69632 4096 4096 NT_STATUS_OK
ReadX 13784 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13784 1004 NT_STATUS_OK
WriteX 13784 0 4096 4096 NT_STATUS_OK
Close 13784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13785 NT_STATUS_OK
SET_FILE_INFORMATION 13785 1004 NT_STATUS_OK
Close 13785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13787 NT_STATUS_OK
Close 13787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13790 NT_STATUS_OK
WriteX 13790 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13790 258 NT_STATUS_OK
WriteX 13790 0 65536 65536 NT_STATUS_OK
WriteX 13790 65536 8866 8866 NT_STATUS_OK
Close 13790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
WriteX 13791 0 4096 4096 NT_STATUS_OK
Flush 13791 NT_STATUS_OK
SET_FILE_INFORMATION 13791 1004 NT_STATUS_OK
WriteX 13791 0 4096 4096 NT_STATUS_OK
Flush 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
Close 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13795 NT_STATUS_OK
ReadX 13795 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13795 1004 NT_STATUS_OK
WriteX 13795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13798 NT_STATUS_OK
Close 13798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13801 NT_STATUS_OK
WriteX 13801 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13801 258 NT_STATUS_OK
WriteX 13801 0 65536 65536 NT_STATUS_OK
WriteX 13801 65536 9298 9298 NT_STATUS_OK
Close 13801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
WriteX 13802 0 4096 4096 NT_STATUS_OK
Flush 13802 NT_STATUS_OK
SET_FILE_INFORMATION 13802 1004 NT_STATUS_OK
WriteX 13802 0 4096 4096 NT_STATUS_OK
Flush 13802 NT_STATUS_OK
Close 13802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13803 NT_STATUS_OK
SET_FILE_INFORMATION 13803 1004 NT_STATUS_OK
Close 13803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13804 NT_STATUS_OK
ReadX 13804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13808 0 4096 4096 NT_STATUS_OK
Close 13808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13809 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13809 4096 4096 4096 NT_STATUS_OK
ReadX 13809 8192 4096 4096 NT_STATUS_OK
ReadX 13809 12288 4096 4096 NT_STATUS_OK
ReadX 13809 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
Close 13811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13812 1004 NT_STATUS_OK
WriteX 13812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13813 NT_STATUS_OK
Close 13813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13815 NT_STATUS_OK
Close 13815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13818 NT_STATUS_OK
WriteX 13818 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13818 258 NT_STATUS_OK
WriteX 13818 0 65536 65536 NT_STATUS_OK
WriteX 13818 65536 11540 11540 NT_STATUS_OK
Close 13818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 4096 4096 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
Flush 13819 NT_STATUS_OK
SET_FILE_INFORMATION 13819 1004 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
Flush 13819 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13820 NT_STATUS_OK
SET_FILE_INFORMATION 13820 1004 NT_STATUS_OK
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13822 NT_STATUS_OK
Close 13822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13824 NT_STATUS_OK
ReadX 13824 61440 4096 4096 NT_STATUS_OK
ReadX 13824 126976 4096 4096 NT_STATUS_OK
WriteX 13824 0 65536 65536 NT_STATUS_OK
WriteX 13824 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13825 NT_STATUS_OK
ReadX 13825 61440 4096 4096 NT_STATUS_OK
ReadX 13825 126976 4096 4096 NT_STATUS_OK
ReadX 13825 192512 4096 4096 NT_STATUS_OK
ReadX 13825 258048 4096 4096 NT_STATUS_OK
WriteX 13825 0 65536 65536 NT_STATUS_OK
WriteX 13825 65536 65536 65536 NT_STATUS_OK
WriteX 13825 131072 65536 65536 NT_STATUS_OK
WriteX 13825 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13826 NT_STATUS_OK
ReadX 13826 61440 4096 4096 NT_STATUS_OK
ReadX 13826 126976 4096 4096 NT_STATUS_OK
ReadX 13826 192512 4096 4096 NT_STATUS_OK
ReadX 13826 258048 4096 4096 NT_STATUS_OK
ReadX 13826 323584 4096 4096 NT_STATUS_OK
ReadX 13826 389120 4096 4096 NT_STATUS_OK
ReadX 13826 454656 4096 4096 NT_STATUS_OK
ReadX 13826 520192 4096 4096 NT_STATUS_OK
WriteX 13826 0 65536 65536 NT_STATUS_OK
WriteX 13826 65536 65536 65536 NT_STATUS_OK
WriteX 13826 131072 65536 65536 NT_STATUS_OK
WriteX 13826 196608 65536 65536 NT_STATUS_OK
WriteX 13826 262144 65536 65536 NT_STATUS_OK
WriteX 13826 327680 65536 65536 NT_STATUS_OK
WriteX 13826 393216 65536 65536 NT_STATUS_OK
WriteX 13826 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 4096 4096 NT_STATUS_OK
ReadX 13827 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13828 NT_STATUS_OK
WriteX 13828 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13828 258 NT_STATUS_OK
WriteX 13828 0 53 53 NT_STATUS_OK
Close 13828 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13829 NT_STATUS_OK
Close 13829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13821 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Close 13824 NT_STATUS_OK
Close 13825 NT_STATUS_OK
Close 13826 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13827 8192 4096 4096 NT_STATUS_OK
ReadX 13827 12288 4096 4096 NT_STATUS_OK
WriteX 13831 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13831 258 NT_STATUS_OK
ReadX 13827 16384 4096 4096 NT_STATUS_OK
ReadX 13827 20480 4096 4096 NT_STATUS_OK
WriteX 13831 0 15360 15360 NT_STATUS_OK
Close 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13832 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13832 1004 NT_STATUS_OK
WriteX 13832 0 4096 4096 NT_STATUS_OK
Close 13832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13833 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13835 NT_STATUS_OK
ReadX 13835 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13836 NT_STATUS_OK
Close 13836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13835 4096 4096 4096 NT_STATUS_OK
ReadX 13835 8192 4096 4096 NT_STATUS_OK
ReadX 13835 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
ReadX 13838 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
ReadX 13839 4096 4096 4096 NT_STATUS_OK
ReadX 13839 8192 4096 4096 NT_STATUS_OK
Close 13838 NT_STATUS_OK
Close 13839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13840 NT_STATUS_OK
WriteX 13840 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 258 NT_STATUS_OK
WriteX 13840 0 15360 15360 NT_STATUS_OK
Close 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13842 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13845 NT_STATUS_OK
SET_FILE_INFORMATION 13845 1004 NT_STATUS_OK
Close 13845 NT_STATUS_OK
WriteX 13841 0 4096 4096 NT_STATUS_OK
Close 13841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13846 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
ReadX 13848 4096 4096 4096 NT_STATUS_OK
ReadX 13848 8192 4096 4096 NT_STATUS_OK
ReadX 13848 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13848 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13848 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13849 NT_STATUS_OK
ReadX 13849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13850 NT_STATUS_OK
WriteX 13850 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13850 258 NT_STATUS_OK
WriteX 13850 0 53 53 NT_STATUS_OK
Close 13850 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13849 4096 4096 4096 NT_STATUS_OK
ReadX 13849 8192 4096 4096 NT_STATUS_OK
ReadX 13849 12288 4096 4096 NT_STATUS_OK
WriteX 13853 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13853 258 NT_STATUS_OK
WriteX 13853 0 12006 12006 NT_STATUS_OK
Close 13853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13854 NT_STATUS_OK
ReadX 13854 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13854 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13854 1004 NT_STATUS_OK
WriteX 13854 0 4096 4096 NT_STATUS_OK
Close 13854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13858 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13857 4096 4096 4096 NT_STATUS_OK
ReadX 13857 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13860 NT_STATUS_OK
WriteX 13860 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13860 258 NT_STATUS_OK
WriteX 13860 0 11991 11991 NT_STATUS_OK
Close 13860 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13861 NT_STATUS_OK
ReadX 13861 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13861 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13861 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13865 NT_STATUS_OK
SET_FILE_INFORMATION 13865 1004 NT_STATUS_OK
Close 13865 NT_STATUS_OK
WriteX 13861 0 4096 4096 NT_STATUS_OK
Close 13861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13869 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13868 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
ReadX 13868 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
WriteX 13868 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13868 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13868 1004 NT_STATUS_OK
Close 13844 NT_STATUS_OK
WriteX 13848 0 19054 19054 NT_STATUS_OK
WriteX 13868 0 12288 12288 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13875 NT_STATUS_OK
ReadX 13875 0 61440 61440 NT_STATUS_OK
ReadX 13875 61440 4096 4096 NT_STATUS_OK
ReadX 13875 65536 61440 61440 NT_STATUS_OK
ReadX 13875 126976 4096 4096 NT_STATUS_OK
ReadX 13875 131072 61440 61440 NT_STATUS_OK
ReadX 13875 192512 4096 4096 NT_STATUS_OK
ReadX 13875 196608 61440 61440 NT_STATUS_OK
ReadX 13875 258048 4096 4096 NT_STATUS_OK
ReadX 13875 262144 61440 61440 NT_STATUS_OK
ReadX 13875 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13876 NT_STATUS_OK
ReadX 13876 0 61440 61440 NT_STATUS_OK
ReadX 13876 61440 4096 4096 NT_STATUS_OK
ReadX 13876 65536 61440 61440 NT_STATUS_OK
ReadX 13876 126976 4096 4096 NT_STATUS_OK
ReadX 13876 131072 61440 61440 NT_STATUS_OK
ReadX 13876 192512 4096 4096 NT_STATUS_OK
ReadX 13876 196608 61440 61440 NT_STATUS_OK
ReadX 13876 258048 4096 4096 NT_STATUS_OK
ReadX 13876 262144 61440 61440 NT_STATUS_OK
ReadX 13876 323584 4096 4096 NT_STATUS_OK
ReadX 13876 327680 61440 61440 NT_STATUS_OK
ReadX 13876 389120 4096 4096 NT_STATUS_OK
ReadX 13876 393216 61440 61440 NT_STATUS_OK
ReadX 13876 454656 4096 4096 NT_STATUS_OK
ReadX 13876 458752 61440 61440 NT_STATUS_OK
ReadX 13876 520192 4096 4096 NT_STATUS_OK
ReadX 13876 524288 61440 61440 NT_STATUS_OK
ReadX 13876 585728 4096 4096 NT_STATUS_OK
ReadX 13876 589824 61440 61440 NT_STATUS_OK
ReadX 13876 651264 4096 4096 NT_STATUS_OK
ReadX 13876 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 61440 61440 NT_STATUS_OK
ReadX 13877 61440 4096 4096 NT_STATUS_OK
ReadX 13877 65536 61440 61440 NT_STATUS_OK
ReadX 13877 126976 4096 4096 NT_STATUS_OK
ReadX 13877 131072 61440 61440 NT_STATUS_OK
ReadX 13877 192512 4096 4096 NT_STATUS_OK
ReadX 13877 196608 61440 61440 NT_STATUS_OK
ReadX 13877 258048 4096 4096 NT_STATUS_OK
ReadX 13877 262144 61440 61440 NT_STATUS_OK
ReadX 13877 323584 4096 4096 NT_STATUS_OK
ReadX 13877 327680 61440 61440 NT_STATUS_OK
ReadX 13877 389120 4096 4096 NT_STATUS_OK
ReadX 13877 393216 61440 61440 NT_STATUS_OK
ReadX 13877 454656 4096 4096 NT_STATUS_OK
ReadX 13877 458752 61440 61440 NT_STATUS_OK
ReadX 13877 520192 4096 4096 NT_STATUS_OK
ReadX 13877 524288 61440 61440 NT_STATUS_OK
ReadX 13877 585728 4096 4096 NT_STATUS_OK
ReadX 13877 589824 61440 61440 NT_STATUS_OK
ReadX 13877 651264 4096 4096 NT_STATUS_OK
ReadX 13877 655360 61440 61440 NT_STATUS_OK
ReadX 13877 716800 4096 4096 NT_STATUS_OK
ReadX 13877 720896 61440 61440 NT_STATUS_OK
ReadX 13877 782336 4096 4096 NT_STATUS_OK
ReadX 13877 786432 61440 61440 NT_STATUS_OK
ReadX 13877 847872 4096 4096 NT_STATUS_OK
ReadX 13877 851968 61440 61440 NT_STATUS_OK
ReadX 13877 913408 4096 4096 NT_STATUS_OK
ReadX 13877 917504 61440 61440 NT_STATUS_OK
ReadX 13877 978944 4096 4096 NT_STATUS_OK
ReadX 13877 983040 61440 61440 NT_STATUS_OK
ReadX 13877 1044480 4096 4096 NT_STATUS_OK
ReadX 13877 1048576 61440 61440 NT_STATUS_OK
ReadX 13877 1110016 4096 4096 NT_STATUS_OK
ReadX 13877 1114112 61440 61440 NT_STATUS_OK
ReadX 13877 1175552 4096 4096 NT_STATUS_OK
ReadX 13877 1179648 61440 61440 NT_STATUS_OK
ReadX 13877 1241088 4096 4096 NT_STATUS_OK
ReadX 13877 1245184 61440 61440 NT_STATUS_OK
ReadX 13877 1306624 4096 4096 NT_STATUS_OK
ReadX 13877 1310720 61440 61440 NT_STATUS_OK
ReadX 13877 1372160 4096 4096 NT_STATUS_OK
ReadX 13877 1376256 61440 61440 NT_STATUS_OK
ReadX 13877 1437696 4096 4096 NT_STATUS_OK
ReadX 13877 1441792 61440 61440 NT_STATUS_OK
ReadX 13877 1503232 4096 4096 NT_STATUS_OK
ReadX 13877 1507328 61440 61440 NT_STATUS_OK
ReadX 13877 1568768 4096 4096 NT_STATUS_OK
ReadX 13877 1572864 61440 61440 NT_STATUS_OK
ReadX 13877 1634304 4096 4096 NT_STATUS_OK
ReadX 13877 1638400 61440 61440 NT_STATUS_OK
ReadX 13877 1699840 4096 4096 NT_STATUS_OK
ReadX 13877 1703936 61440 61440 NT_STATUS_OK
ReadX 13877 1765376 4096 4096 NT_STATUS_OK
ReadX 13877 1769472 61440 61440 NT_STATUS_OK
ReadX 13877 1830912 4096 4096 NT_STATUS_OK
ReadX 13877 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13884 NT_STATUS_OK
QUERY_FILE_INFORMATION 13884 1004 NT_STATUS_OK
WriteX 13884 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13884 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13885 NT_STATUS_OK
Close 13885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13886 NT_STATUS_OK
WriteX 13886 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13886 258 NT_STATUS_OK
WriteX 13886 0 491 491 NT_STATUS_OK
Close 13886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13887 NT_STATUS_OK
ReadX 13887 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13884 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13889 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13890 NT_STATUS_OK
WriteX 13890 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13890 258 NT_STATUS_OK
WriteX 13890 0 543 543 NT_STATUS_OK
Close 13890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Close 13891 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Close 13882 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13897 NT_STATUS_OK
ReadX 13897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13898 NT_STATUS_OK
ReadX 13898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13899 NT_STATUS_OK
ReadX 13899 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13904 NT_STATUS_OK
QUERY_FILE_INFORMATION 13904 1004 NT_STATUS_OK
WriteX 13904 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13904 258 NT_STATUS_OK
WriteX 13904 0 2048 2048 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
Flush 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13910 NT_STATUS_OK
WriteX 13910 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13910 258 NT_STATUS_OK
WriteX 13910 0 2048 2048 NT_STATUS_OK
Close 13910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13915 NT_STATUS_OK
Close 13915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13916 NT_STATUS_OK
WriteX 13916 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13916 258 NT_STATUS_OK
WriteX 13916 0 2048 2048 NT_STATUS_OK
Close 13916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13917 NT_STATUS_OK
ReadX 13917 0 2048 2048 NT_STATUS_OK
ReadX 13895 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13911 0 4096 4096 NT_STATUS_OK
WriteX 13895 0 8192 8192 NT_STATUS_OK
WriteX 13896 0 4096 4096 NT_STATUS_OK
WriteX 13897 0 4096 4096 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13921 NT_STATUS_OK
QUERY_FILE_INFORMATION 13921 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Close 13896 NT_STATUS_OK
Close 13897 NT_STATUS_OK
Close 13898 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Close 13895 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13923 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13924 NT_STATUS_OK
ReadX 13924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13925 NT_STATUS_OK
ReadX 13925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13928 NT_STATUS_OK
ReadX 13928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13929 NT_STATUS_OK
ReadX 13929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13930 NT_STATUS_OK
ReadX 13930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13931 NT_STATUS_OK
ReadX 13931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13940 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13941 NT_STATUS_OK
QUERY_FILE_INFORMATION 13941 1004 NT_STATUS_OK
WriteX 13941 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13941 258 NT_STATUS_OK
WriteX 13941 0 2048 2048 NT_STATUS_OK
Close 13941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13948 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13949 NT_STATUS_OK
QUERY_FILE_INFORMATION 13949 1004 NT_STATUS_OK
WriteX 13949 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13949 258 NT_STATUS_OK
WriteX 13949 0 2048 2048 NT_STATUS_OK
Close 13949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13942 0 4096 4096 NT_STATUS_OK
Flush 13942 NT_STATUS_OK
WriteX 13950 0 4096 4096 NT_STATUS_OK
Flush 13950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13942 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13950 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13944 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13952 NT_STATUS_OK
WriteX 13952 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13952 258 NT_STATUS_OK
WriteX 13952 0 4096 4096 NT_STATUS_OK
Close 13952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13954 NT_STATUS_OK
Close 13954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13955 NT_STATUS_OK
WriteX 13955 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13955 258 NT_STATUS_OK
WriteX 13955 0 4096 4096 NT_STATUS_OK
Close 13955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13956 NT_STATUS_OK
ReadX 13956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13956 0 4096 4096 NT_STATUS_OK
Close 13953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13930 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Close 13934 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Close 13931 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Close 13925 NT_STATUS_OK
Close 13928 NT_STATUS_OK
Close 13929 NT_STATUS_OK
Close 13926 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13959 NT_STATUS_OK
Close 13959 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13961 NT_STATUS_OK
ReadX 13961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13962 NT_STATUS_OK
Close 13962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13963 NT_STATUS_OK
WriteX 13963 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13963 258 NT_STATUS_OK
WriteX 13963 0 2048 2048 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13964 NT_STATUS_OK
ReadX 13964 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13965 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13966 NT_STATUS_OK
ReadX 13966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13967 NT_STATUS_OK
ReadX 13967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13968 NT_STATUS_OK
ReadX 13968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13974 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13978 NT_STATUS_OK
QUERY_FILE_INFORMATION 13978 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13961 NT_STATUS_OK
Close 13964 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13972 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Close 13965 NT_STATUS_OK
Close 13966 NT_STATUS_OK
Close 13969 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Close 13968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13980 NT_STATUS_OK
QUERY_FILE_INFORMATION 13980 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13986 NT_STATUS_OK
ReadX 13986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13987 NT_STATUS_OK
ReadX 13987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13988 NT_STATUS_OK
ReadX 13988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13994 NT_STATUS_OK
ReadX 13994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14000 NT_STATUS_OK
QUERY_FILE_INFORMATION 14000 1004 NT_STATUS_OK
WriteX 14000 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14000 258 NT_STATUS_OK
WriteX 14000 0 2048 2048 NT_STATUS_OK
Close 14000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14004 NT_STATUS_OK
ReadX 14004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14006 NT_STATUS_OK
ReadX 14006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14007 NT_STATUS_OK
ReadX 14007 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14012 NT_STATUS_OK
QUERY_FILE_INFORMATION 14012 1004 NT_STATUS_OK
WriteX 14012 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14012 258 NT_STATUS_OK
WriteX 14012 0 2048 2048 NT_STATUS_OK
Close 14012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 14019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14020 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 1004 NT_STATUS_OK
WriteX 14020 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 258 NT_STATUS_OK
WriteX 14020 0 2048 2048 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14021 NT_STATUS_OK
ReadX 14021 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14001 0 4096 4096 NT_STATUS_OK
Flush 14001 NT_STATUS_OK
WriteX 14013 0 4096 4096 NT_STATUS_OK
Flush 14013 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
Flush 14021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14001 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14013 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14021 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14003 4096 16384 16384 NT_STATUS_OK
ReadX 13983 4096 16384 16384 NT_STATUS_OK
ReadX 14015 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 2048 2048 NT_STATUS_OK
WriteX 14023 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14024 NT_STATUS_OK
QUERY_FILE_INFORMATION 14024 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 14023 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Close 13995 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 14004 NT_STATUS_OK
Close 14005 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Close 13994 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Close 13991 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13984 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Close 13986 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14026 NT_STATUS_OK
QUERY_FILE_INFORMATION 14026 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14028 NT_STATUS_OK
QUERY_FILE_INFORMATION 14028 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14033 NT_STATUS_OK
ReadX 14033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14031 4096 16384 16384 NT_STATUS_OK
WriteX 14031 0 4096 4096 NT_STATUS_OK
WriteX 14032 0 4096 4096 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
WriteX 14034 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14038 NT_STATUS_OK
ReadX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14045 NT_STATUS_OK
ReadX 14045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 8192 8192 NT_STATUS_OK
ReadX 14037 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14051 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14051 0 4096 4096 NT_STATUS_OK
ReadX 14051 4096 4096 4096 NT_STATUS_OK
ReadX 14051 8192 4096 4096 NT_STATUS_OK
WriteX 14037 0 4096 4096 NT_STATUS_OK
WriteX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 14052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
ReadX 14052 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 14031 0 4096 4096 NT_STATUS_OK
WriteX 14032 0 4096 4096 NT_STATUS_OK
WriteX 14033 0 4096 4096 NT_STATUS_OK
WriteX 14034 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 14056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14057 NT_STATUS_OK
QUERY_FILE_INFORMATION 14057 1004 NT_STATUS_OK
WriteX 14057 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14057 258 NT_STATUS_OK
WriteX 14057 0 2048 2048 NT_STATUS_OK
Close 14057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14058 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14058 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 4096 4096 NT_STATUS_OK
ReadX 14060 4096 4096 4096 NT_STATUS_OK
WriteX 14060 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14058 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14060 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14062 NT_STATUS_OK
ReadX 14062 0 4096 4096 NT_STATUS_OK
ReadX 14062 4096 4096 4096 NT_STATUS_OK
WriteX 14062 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14063 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14035 NT_STATUS_OK
Close 14031 NT_STATUS_OK
Close 14032 NT_STATUS_OK
Close 14033 NT_STATUS_OK
Close 14034 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14045 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Close 14038 NT_STATUS_OK
Close 14041 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 14062 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14065 0 4096 4096 NT_STATUS_OK
ReadX 14065 4096 4096 4096 NT_STATUS_OK
ReadX 14065 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14066 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14074 NT_STATUS_OK
ReadX 14074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14078 NT_STATUS_OK
ReadX 14078 0 4096 4096 NT_STATUS_OK
ReadX 14066 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 14082 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14083 NT_STATUS_OK
QUERY_FILE_INFORMATION 14083 1004 NT_STATUS_OK
WriteX 14083 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14083 258 NT_STATUS_OK
WriteX 14083 0 2048 2048 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 14084 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14089 NT_STATUS_OK
QUERY_FILE_INFORMATION 14089 1004 NT_STATUS_OK
WriteX 14089 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14089 258 NT_STATUS_OK
WriteX 14089 0 2048 2048 NT_STATUS_OK
Close 14089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14090 NT_STATUS_OK
ReadX 14090 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 14090 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14073 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14091 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 14077 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Close 14066 NT_STATUS_OK
Close 14067 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14073 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Close 14075 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14065 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 14093 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14095 NT_STATUS_OK
ReadX 14095 61440 4096 4096 NT_STATUS_OK
ReadX 14095 126976 4096 4096 NT_STATUS_OK
WriteX 14095 0 65536 65536 NT_STATUS_OK
WriteX 14095 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9780 NT_STATUS_OK
ReadX 9780 61440 4096 4096 NT_STATUS_OK
ReadX 9780 126976 4096 4096 NT_STATUS_OK
ReadX 9780 192512 4096 4096 NT_STATUS_OK
ReadX 9780 258048 4096 4096 NT_STATUS_OK
WriteX 9780 0 65536 65536 NT_STATUS_OK
WriteX 9780 65536 65536 65536 NT_STATUS_OK
WriteX 9780 131072 65536 65536 NT_STATUS_OK
WriteX 9780 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9781 NT_STATUS_OK
ReadX 9781 61440 4096 4096 NT_STATUS_OK
ReadX 9781 126976 4096 4096 NT_STATUS_OK
ReadX 9781 192512 4096 4096 NT_STATUS_OK
ReadX 9781 258048 4096 4096 NT_STATUS_OK
ReadX 9781 323584 4096 4096 NT_STATUS_OK
ReadX 9781 389120 4096 4096 NT_STATUS_OK
ReadX 9781 454656 4096 4096 NT_STATUS_OK
ReadX 9781 520192 4096 4096 NT_STATUS_OK
WriteX 9781 0 65536 65536 NT_STATUS_OK
WriteX 9781 65536 65536 65536 NT_STATUS_OK
WriteX 9781 131072 65536 65536 NT_STATUS_OK
WriteX 9781 196608 65536 65536 NT_STATUS_OK
WriteX 9781 262144 65536 65536 NT_STATUS_OK
WriteX 9781 327680 65536 65536 NT_STATUS_OK
WriteX 9781 393216 65536 65536 NT_STATUS_OK
WriteX 9781 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9782 NT_STATUS_OK
ReadX 9782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9782 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9782 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9782 8192 4096 4096 NT_STATUS_OK
ReadX 9782 12288 4096 4096 NT_STATUS_OK
ReadX 9782 16384 4096 4096 NT_STATUS_OK
ReadX 9782 20480 4096 4096 NT_STATUS_OK
ReadX 9782 24576 4096 4096 NT_STATUS_OK
ReadX 9782 28672 4096 4096 NT_STATUS_OK
ReadX 9782 32768 4096 4096 NT_STATUS_OK
ReadX 9782 36864 4096 4096 NT_STATUS_OK
ReadX 9782 40960 4096 4096 NT_STATUS_OK
ReadX 9782 45056 4096 4096 NT_STATUS_OK
ReadX 9782 49152 4096 4096 NT_STATUS_OK
ReadX 9782 53248 4096 4096 NT_STATUS_OK
ReadX 9782 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9782 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9783 NT_STATUS_OK
Close 9783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 14095 NT_STATUS_OK
Close 9780 NT_STATUS_OK
Close 9781 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9785 NT_STATUS_OK
WriteX 9785 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9785 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9785 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 57088 57088 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Flush 9785 NT_STATUS_OK
Close 9782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9786 NT_STATUS_OK
SET_FILE_INFORMATION 9786 1004 NT_STATUS_OK
Close 9786 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Close 9785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9787 NT_STATUS_OK
Close 9787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9789 NT_STATUS_OK
ReadX 9789 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9789 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9790 NT_STATUS_OK
WriteX 9790 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9790 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9790 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9790 1004 NT_STATUS_OK
WriteX 9790 0 51456 51456 NT_STATUS_OK
WriteX 9790 0 4096 4096 NT_STATUS_OK
Flush 9790 NT_STATUS_OK
SET_FILE_INFORMATION 9790 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9790 1004 NT_STATUS_OK
WriteX 9790 0 4096 4096 NT_STATUS_OK
Close 9790 NT_STATUS_OK
Close 9789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9792 NT_STATUS_OK
Close 9792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9794 NT_STATUS_OK
ReadX 9794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9794 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9796 NT_STATUS_OK
Close 9796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9799 NT_STATUS_OK
WriteX 9799 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9799 258 NT_STATUS_OK
WriteX 9799 0 53077 53077 NT_STATUS_OK
Close 9799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9800 NT_STATUS_OK
WriteX 9800 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9800 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 65536 65536 NT_STATUS_OK
WriteX 9800 65536 1856 1856 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Flush 9800 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Close 9800 NT_STATUS_OK
Close 9794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9802 NT_STATUS_OK
Close 9802 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9804 NT_STATUS_OK
ReadX 9804 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9806 NT_STATUS_OK
Close 9806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9809 NT_STATUS_OK
WriteX 9809 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9809 258 NT_STATUS_OK
WriteX 9809 0 7983 7983 NT_STATUS_OK
Close 9809 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9811 NT_STATUS_OK
Close 9811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9814 NT_STATUS_OK
WriteX 9814 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9814 258 NT_STATUS_OK
WriteX 9814 0 65536 65536 NT_STATUS_OK
WriteX 9814 65536 65536 65536 NT_STATUS_OK
WriteX 9814 131072 65536 65536 NT_STATUS_OK
WriteX 9814 196608 65536 65536 NT_STATUS_OK
WriteX 9814 262144 65536 65536 NT_STATUS_OK
WriteX 9814 327680 65536 65536 NT_STATUS_OK
WriteX 9814 393216 65536 65536 NT_STATUS_OK
WriteX 9814 458752 46731 46731 NT_STATUS_OK
Close 9814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9815 NT_STATUS_OK
WriteX 9815 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9815 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9804 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9815 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9815 1004 NT_STATUS_OK
WriteX 9815 0 65536 65536 NT_STATUS_OK
WriteX 9815 65536 22848 22848 NT_STATUS_OK
WriteX 9815 0 4096 4096 NT_STATUS_OK
Flush 9815 NT_STATUS_OK
SET_FILE_INFORMATION 9815 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9815 1004 NT_STATUS_OK
WriteX 9815 0 4096 4096 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Close 9804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9817 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9819 NT_STATUS_OK
ReadX 9819 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9819 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9820 NT_STATUS_OK
ReadX 9820 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9820 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9820 1004 NT_STATUS_OK
ReadX 9820 8192 4096 4096 NT_STATUS_OK
ReadX 9820 12288 4096 4096 NT_STATUS_OK
ReadX 9820 16384 4096 4096 NT_STATUS_OK
ReadX 9820 20480 4096 4096 NT_STATUS_OK
ReadX 9820 24576 4096 4096 NT_STATUS_OK
ReadX 9820 28672 4096 4096 NT_STATUS_OK
ReadX 9820 32768 4096 4096 NT_STATUS_OK
ReadX 9820 36864 4096 4096 NT_STATUS_OK
ReadX 9820 40960 4096 4096 NT_STATUS_OK
ReadX 9820 45056 4096 4096 NT_STATUS_OK
ReadX 9820 49152 4096 4096 NT_STATUS_OK
ReadX 9820 53248 4096 4096 NT_STATUS_OK
ReadX 9820 57344 4096 4096 NT_STATUS_OK
ReadX 9820 61440 4096 4096 NT_STATUS_OK
ReadX 9820 65536 4096 4096 NT_STATUS_OK
ReadX 9820 69632 4096 4096 NT_STATUS_OK
ReadX 9820 73728 4096 4096 NT_STATUS_OK
ReadX 9820 77824 4096 4096 NT_STATUS_OK
ReadX 9820 81920 4096 4096 NT_STATUS_OK
ReadX 9820 86016 4096 4096 NT_STATUS_OK
ReadX 9820 90112 4096 4096 NT_STATUS_OK
ReadX 9820 94208 4096 4096 NT_STATUS_OK
ReadX 9820 98304 4096 4096 NT_STATUS_OK
ReadX 9820 102400 4096 4096 NT_STATUS_OK
ReadX 9820 106496 4096 4096 NT_STATUS_OK
ReadX 9820 110592 4096 4096 NT_STATUS_OK
ReadX 9820 114688 4096 4096 NT_STATUS_OK
ReadX 9820 118784 4096 4096 NT_STATUS_OK
ReadX 9820 122880 4096 4096 NT_STATUS_OK
ReadX 9820 126976 4096 4096 NT_STATUS_OK
ReadX 9820 131072 4096 4096 NT_STATUS_OK
ReadX 9820 135168 4096 4096 NT_STATUS_OK
ReadX 9820 139264 4096 4096 NT_STATUS_OK
ReadX 9820 143360 4096 4096 NT_STATUS_OK
ReadX 9820 147456 4096 4096 NT_STATUS_OK
ReadX 9820 151552 4096 4096 NT_STATUS_OK
ReadX 9820 155648 4096 4096 NT_STATUS_OK
ReadX 9820 159744 4096 4096 NT_STATUS_OK
ReadX 9820 163840 4096 4096 NT_STATUS_OK
ReadX 9820 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9820 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9821 NT_STATUS_OK
Close 9821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9823 NT_STATUS_OK
WriteX 9823 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9823 258 NT_STATUS_OK
Close 9820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9824 NT_STATUS_OK
SET_FILE_INFORMATION 9824 1004 NT_STATUS_OK
Close 9824 NT_STATUS_OK
WriteX 9823 0 42388 42388 NT_STATUS_OK
Close 9823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9825 NT_STATUS_OK
Close 9825 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9827 NT_STATUS_OK
ReadX 9827 0 4096 4096 NT_STATUS_OK
ReadX 9827 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9828 NT_STATUS_OK
WriteX 9828 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9828 258 NT_STATUS_OK
SET_FILE_INFORMATION 9828 1004 NT_STATUS_OK
WriteX 9828 0 42652 42652 NT_STATUS_OK
Close 9828 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9830 NT_STATUS_OK
Close 9830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9832 NT_STATUS_OK
ReadX 9832 0 4096 4096 NT_STATUS_OK
ReadX 9832 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9834 NT_STATUS_OK
Close 9834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9837 NT_STATUS_OK
WriteX 9837 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 258 NT_STATUS_OK
WriteX 9837 0 65536 65536 NT_STATUS_OK
WriteX 9837 65536 49 49 NT_STATUS_OK
Close 9837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9838 NT_STATUS_OK
ReadX 9838 0 61440 61440 NT_STATUS_OK
ReadX 9838 61440 4096 4096 NT_STATUS_OK
ReadX 9838 65536 61440 61440 NT_STATUS_OK
ReadX 9838 126976 4096 4096 NT_STATUS_OK
ReadX 9838 131072 61440 61440 NT_STATUS_OK
ReadX 9838 192512 4096 4096 NT_STATUS_OK
ReadX 9838 196608 61440 61440 NT_STATUS_OK
ReadX 9838 258048 4096 4096 NT_STATUS_OK
ReadX 9838 262144 61440 61440 NT_STATUS_OK
ReadX 9838 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 61440 61440 NT_STATUS_OK
ReadX 9839 61440 4096 4096 NT_STATUS_OK
ReadX 9839 65536 61440 61440 NT_STATUS_OK
ReadX 9839 126976 4096 4096 NT_STATUS_OK
ReadX 9839 131072 61440 61440 NT_STATUS_OK
ReadX 9839 192512 4096 4096 NT_STATUS_OK
ReadX 9839 196608 61440 61440 NT_STATUS_OK
ReadX 9839 258048 4096 4096 NT_STATUS_OK
ReadX 9839 262144 61440 61440 NT_STATUS_OK
ReadX 9839 323584 4096 4096 NT_STATUS_OK
ReadX 9839 327680 61440 61440 NT_STATUS_OK
ReadX 9839 389120 4096 4096 NT_STATUS_OK
ReadX 9839 393216 61440 61440 NT_STATUS_OK
ReadX 9839 454656 4096 4096 NT_STATUS_OK
ReadX 9839 458752 61440 61440 NT_STATUS_OK
ReadX 9839 520192 4096 4096 NT_STATUS_OK
ReadX 9839 524288 61440 61440 NT_STATUS_OK
ReadX 9839 585728 4096 4096 NT_STATUS_OK
ReadX 9839 589824 61440 61440 NT_STATUS_OK
ReadX 9839 651264 4096 4096 NT_STATUS_OK
ReadX 9839 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9840 NT_STATUS_OK
ReadX 9840 0 61440 61440 NT_STATUS_OK
ReadX 9840 61440 4096 4096 NT_STATUS_OK
ReadX 9840 65536 61440 61440 NT_STATUS_OK
ReadX 9840 126976 4096 4096 NT_STATUS_OK
ReadX 9840 131072 61440 61440 NT_STATUS_OK
ReadX 9840 192512 4096 4096 NT_STATUS_OK
ReadX 9840 196608 61440 61440 NT_STATUS_OK
ReadX 9840 258048 4096 4096 NT_STATUS_OK
ReadX 9840 262144 61440 61440 NT_STATUS_OK
ReadX 9840 323584 4096 4096 NT_STATUS_OK
ReadX 9840 327680 61440 61440 NT_STATUS_OK
ReadX 9840 389120 4096 4096 NT_STATUS_OK
ReadX 9840 393216 61440 61440 NT_STATUS_OK
ReadX 9840 454656 4096 4096 NT_STATUS_OK
ReadX 9840 458752 61440 61440 NT_STATUS_OK
ReadX 9840 520192 4096 4096 NT_STATUS_OK
ReadX 9840 524288 61440 61440 NT_STATUS_OK
ReadX 9840 585728 4096 4096 NT_STATUS_OK
ReadX 9840 589824 61440 61440 NT_STATUS_OK
ReadX 9840 651264 4096 4096 NT_STATUS_OK
ReadX 9840 655360 61440 61440 NT_STATUS_OK
ReadX 9840 716800 4096 4096 NT_STATUS_OK
ReadX 9840 720896 61440 61440 NT_STATUS_OK
ReadX 9840 782336 4096 4096 NT_STATUS_OK
ReadX 9840 786432 61440 61440 NT_STATUS_OK
ReadX 9840 847872 4096 4096 NT_STATUS_OK
ReadX 9840 851968 61440 61440 NT_STATUS_OK
ReadX 9840 913408 4096 4096 NT_STATUS_OK
ReadX 9840 917504 61440 61440 NT_STATUS_OK
ReadX 9840 978944 4096 4096 NT_STATUS_OK
ReadX 9840 983040 61440 61440 NT_STATUS_OK
ReadX 9840 1044480 4096 4096 NT_STATUS_OK
ReadX 9840 1048576 61440 61440 NT_STATUS_OK
ReadX 9840 1110016 4096 4096 NT_STATUS_OK
ReadX 9840 1114112 61440 61440 NT_STATUS_OK
ReadX 9840 1175552 4096 4096 NT_STATUS_OK
ReadX 9840 1179648 61440 61440 NT_STATUS_OK
ReadX 9840 1241088 4096 4096 NT_STATUS_OK
ReadX 9840 1245184 61440 61440 NT_STATUS_OK
ReadX 9840 1306624 4096 4096 NT_STATUS_OK
ReadX 9840 1310720 61440 61440 NT_STATUS_OK
ReadX 9840 1372160 4096 4096 NT_STATUS_OK
ReadX 9840 1376256 61440 61440 NT_STATUS_OK
ReadX 9840 1437696 4096 4096 NT_STATUS_OK
ReadX 9840 1441792 61440 61440 NT_STATUS_OK
ReadX 9840 1503232 4096 4096 NT_STATUS_OK
ReadX 9840 1507328 61440 61440 NT_STATUS_OK
ReadX 9840 1568768 4096 4096 NT_STATUS_OK
ReadX 9840 1572864 61440 61440 NT_STATUS_OK
ReadX 9840 1634304 4096 4096 NT_STATUS_OK
ReadX 9840 1638400 61440 61440 NT_STATUS_OK
ReadX 9840 1699840 4096 4096 NT_STATUS_OK
ReadX 9840 1703936 61440 61440 NT_STATUS_OK
ReadX 9840 1765376 4096 4096 NT_STATUS_OK
ReadX 9840 1769472 61440 61440 NT_STATUS_OK
ReadX 9840 1830912 4096 4096 NT_STATUS_OK
ReadX 9840 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9842 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9842 1005 NT_STATUS_OK
ReadX 9842 2156 24 24 NT_STATUS_OK
ReadX 9842 2139 276 276 NT_STATUS_OK
ReadX 9842 2136 14 14 NT_STATUS_OK
ReadX 9842 2136 7 7 NT_STATUS_OK
ReadX 9842 2138 12 12 NT_STATUS_OK
ReadX 9842 2137 8 8 NT_STATUS_OK
ReadX 9842 2135 15 15 NT_STATUS_OK
ReadX 9842 0 16 16 NT_STATUS_OK
ReadX 9842 16 2048 2048 NT_STATUS_OK
ReadX 9842 2064 2048 2048 NT_STATUS_OK
ReadX 9842 257 2048 2048 NT_STATUS_OK
ReadX 9842 385 2048 2048 NT_STATUS_OK
ReadX 9842 513 2048 2048 NT_STATUS_OK
ReadX 9842 641 2048 2048 NT_STATUS_OK
ReadX 9842 769 2048 2048 NT_STATUS_OK
ReadX 9842 897 2048 2048 NT_STATUS_OK
ReadX 9842 1025 2048 2048 NT_STATUS_OK
ReadX 9842 1153 2048 2048 NT_STATUS_OK
ReadX 9842 1281 2048 2048 NT_STATUS_OK
ReadX 9842 1409 2048 2048 NT_STATUS_OK
ReadX 9842 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9844 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9838 NT_STATUS_OK
Close 9839 NT_STATUS_OK
Close 9840 NT_STATUS_OK
Close 9832 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9847 NT_STATUS_OK
WriteX 9847 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9847 258 NT_STATUS_OK
WriteX 9847 0 10575 10575 NT_STATUS_OK
Flush 9847 NT_STATUS_OK
Close 9847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9848 NT_STATUS_OK
Close 9848 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9850 NT_STATUS_OK
ReadX 9850 0 4096 4096 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9852 NT_STATUS_OK
LockX 9852 2147483538 1 NT_STATUS_OK
UnlockX 9852 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1005 NT_STATUS_OK
ReadX 9852 0 512 512 NT_STATUS_OK
ReadX 9852 512 512 512 NT_STATUS_OK
ReadX 9852 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9852 1004 NT_STATUS_OK
Close 9852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9853 NT_STATUS_OK
QUERY_FILE_INFORMATION 9853 1005 NT_STATUS_OK
ReadX 9853 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9854 NT_STATUS_OK
LockX 9854 2147483538 1 NT_STATUS_OK
UnlockX 9854 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9854 1005 NT_STATUS_OK
ReadX 9854 0 512 512 NT_STATUS_OK
ReadX 9854 512 512 512 NT_STATUS_OK
ReadX 9854 1024 512 512 NT_STATUS_OK
ReadX 9854 288 20 20 NT_STATUS_OK
ReadX 9854 308 2084 2084 NT_STATUS_OK
ReadX 9854 388 2084 2084 NT_STATUS_OK
ReadX 9854 388 2084 2084 NT_STATUS_OK
ReadX 9841 2157 1386 1386 NT_STATUS_OK
ReadX 9854 2472 399 399 NT_STATUS_OK
ReadX 9854 3072 1536 1536 NT_STATUS_OK
ReadX 9854 544 149 149 NT_STATUS_OK
ReadX 9854 693 485 485 NT_STATUS_OK
Close 9854 NT_STATUS_OK
ReadX 9841 2157 4096 4096 NT_STATUS_OK
ReadX 9841 6253 4096 4096 NT_STATUS_OK
ReadX 9841 10349 4096 4096 NT_STATUS_OK
ReadX 9841 14445 4096 4096 NT_STATUS_OK
ReadX 9841 18541 4096 4096 NT_STATUS_OK
ReadX 9841 22637 256 256 NT_STATUS_OK
ReadX 9841 22893 4096 4096 NT_STATUS_OK
ReadX 9841 26989 4096 4096 NT_STATUS_OK
ReadX 9841 31085 4096 4096 NT_STATUS_OK
ReadX 9841 35181 4096 4096 NT_STATUS_OK
ReadX 9841 39277 4096 4096 NT_STATUS_OK
ReadX 9841 43373 4096 4096 NT_STATUS_OK
ReadX 9841 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9841 2157 1024 1024 NT_STATUS_OK
ReadX 9841 1667 4688 4688 NT_STATUS_OK
ReadX 9841 6355 3516 3516 NT_STATUS_OK
ReadX 9841 9871 16384 16384 NT_STATUS_OK
ReadX 9841 26255 3771 3771 NT_STATUS_OK
ReadX 9841 30026 2048 2048 NT_STATUS_OK
ReadX 9841 32074 1024 1024 NT_STATUS_OK
ReadX 9841 33098 6652 6652 NT_STATUS_OK
ReadX 9841 39750 16384 16384 NT_STATUS_OK
ReadX 9841 56134 10496 10496 NT_STATUS_OK
ReadX 9841 66630 1784 1784 NT_STATUS_OK
ReadX 9841 68414 90 90 NT_STATUS_OK
ReadX 9841 68504 273 273 NT_STATUS_OK
ReadX 9841 68777 1600 1600 NT_STATUS_OK
ReadX 9841 70377 640 640 NT_STATUS_OK
ReadX 9841 71017 1280 1280 NT_STATUS_OK
ReadX 9841 72297 8464 8464 NT_STATUS_OK
ReadX 9841 80761 158 158 NT_STATUS_OK
ReadX 9841 80919 912 912 NT_STATUS_OK
ReadX 9841 81831 1980 1980 NT_STATUS_OK
ReadX 9841 83811 2256 2256 NT_STATUS_OK
ReadX 9841 86067 400 400 NT_STATUS_OK
ReadX 9841 86467 252 252 NT_STATUS_OK
ReadX 9841 86719 42 42 NT_STATUS_OK
ReadX 9841 86761 725 725 NT_STATUS_OK
ReadX 9841 2009 512 512 NT_STATUS_OK
ReadX 9841 3895 9 9 NT_STATUS_OK
ReadX 9841 3781 46 46 NT_STATUS_OK
ReadX 9841 4059 92 92 NT_STATUS_OK
ReadX 9841 3781 92 92 NT_STATUS_OK
ReadX 9841 3986 184 184 NT_STATUS_OK
ReadX 9841 3987 16384 16384 NT_STATUS_OK
ReadX 9841 3902 16384 16384 NT_STATUS_OK
ReadX 9841 3781 10240 10240 NT_STATUS_OK
ReadX 9841 3821 16384 16384 NT_STATUS_OK
ReadX 9841 3891 935 935 NT_STATUS_OK
ReadX 9841 4060 10240 10240 NT_STATUS_OK
ReadX 9841 4059 184 184 NT_STATUS_OK
ReadX 9841 256 184 184 NT_STATUS_OK
ReadX 9841 256 1026 1026 NT_STATUS_OK
ReadX 9841 3901 326 326 NT_STATUS_OK
ReadX 9841 3899 652 652 NT_STATUS_OK
ReadX 9841 256 2 2 NT_STATUS_OK
ReadX 9841 258 4948 4948 NT_STATUS_OK
Close 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9856 NT_STATUS_OK
Close 9856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9859 NT_STATUS_OK
WriteX 9859 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9859 258 NT_STATUS_OK
WriteX 9859 0 65536 65536 NT_STATUS_OK
WriteX 9859 65536 65536 65536 NT_STATUS_OK
WriteX 9859 131072 65536 65536 NT_STATUS_OK
WriteX 9859 196608 65536 65536 NT_STATUS_OK
WriteX 9859 262144 65536 65536 NT_STATUS_OK
WriteX 9859 327680 65536 65536 NT_STATUS_OK
WriteX 9859 393216 65536 65536 NT_STATUS_OK
WriteX 9859 458752 65536 65536 NT_STATUS_OK
WriteX 9859 524288 65536 65536 NT_STATUS_OK
WriteX 9859 589824 35257 35257 NT_STATUS_OK
Close 9859 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9861 NT_STATUS_OK
Close 9861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9864 NT_STATUS_OK
WriteX 9864 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9864 258 NT_STATUS_OK
WriteX 9864 0 65536 65536 NT_STATUS_OK
WriteX 9864 65536 65536 65536 NT_STATUS_OK
WriteX 9864 131072 65536 65536 NT_STATUS_OK
WriteX 9864 196608 65536 65536 NT_STATUS_OK
WriteX 9864 262144 65536 65536 NT_STATUS_OK
WriteX 9864 327680 65536 65536 NT_STATUS_OK
WriteX 9864 393216 65536 65536 NT_STATUS_OK
WriteX 9864 458752 65536 65536 NT_STATUS_OK
WriteX 9864 524288 65536 65536 NT_STATUS_OK
WriteX 9864 589824 57598 57598 NT_STATUS_OK
Close 9864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9866 NT_STATUS_OK
WriteX 9866 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9866 258 NT_STATUS_OK
WriteX 9866 0 12543 12543 NT_STATUS_OK
Flush 9866 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9868 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9870 NT_STATUS_OK
ReadX 9870 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9872 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9872 1005 NT_STATUS_OK
ReadX 9872 1938 24 24 NT_STATUS_OK
ReadX 9872 1920 276 276 NT_STATUS_OK
ReadX 9872 1918 14 14 NT_STATUS_OK
ReadX 9872 1918 7 7 NT_STATUS_OK
ReadX 9872 1919 12 12 NT_STATUS_OK
ReadX 9872 1919 8 8 NT_STATUS_OK
ReadX 9872 1917 15 15 NT_STATUS_OK
ReadX 9872 0 16 16 NT_STATUS_OK
ReadX 9872 16 2048 2048 NT_STATUS_OK
ReadX 9872 2064 2048 2048 NT_STATUS_OK
ReadX 9872 257 2048 2048 NT_STATUS_OK
ReadX 9872 385 2048 2048 NT_STATUS_OK
ReadX 9872 513 2048 2048 NT_STATUS_OK
ReadX 9872 641 2048 2048 NT_STATUS_OK
ReadX 9872 769 2048 2048 NT_STATUS_OK
ReadX 9872 897 2048 2048 NT_STATUS_OK
ReadX 9872 1025 2048 2048 NT_STATUS_OK
ReadX 9872 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9874 NT_STATUS_OK
Close 9874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9877 NT_STATUS_OK
WriteX 9877 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9877 258 NT_STATUS_OK
WriteX 9877 0 11588 11588 NT_STATUS_OK
Flush 9877 NT_STATUS_OK
Close 9877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9878 NT_STATUS_OK
Close 9878 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9880 NT_STATUS_OK
ReadX 9880 0 4096 4096 NT_STATUS_OK
Close 9872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9882 NT_STATUS_OK
WriteX 9882 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9882 258 NT_STATUS_OK
WriteX 9882 0 11615 11615 NT_STATUS_OK
Flush 9882 NT_STATUS_OK
Close 9882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9884 NT_STATUS_OK
Close 9884 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9888 NT_STATUS_OK
Close 9888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9891 NT_STATUS_OK
WriteX 9891 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9891 258 NT_STATUS_OK
WriteX 9891 0 65536 65536 NT_STATUS_OK
WriteX 9891 65536 16050 16050 NT_STATUS_OK
Close 9891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9871 1939 64 64 NT_STATUS_OK
ReadX 9871 128 248 248 NT_STATUS_OK
ReadX 9871 128 568 568 NT_STATUS_OK
ReadX 9871 3872 1536 1536 NT_STATUS_OK
ReadX 9871 3456 2560 2560 NT_STATUS_OK
ReadX 9871 3136 512 512 NT_STATUS_OK
ReadX 9871 2880 4096 4096 NT_STATUS_OK
ReadX 9871 3264 3072 3072 NT_STATUS_OK
ReadX 9871 320 4096 4096 NT_STATUS_OK
ReadX 9871 1024 4096 4096 NT_STATUS_OK
ReadX 9871 3616 4096 4096 NT_STATUS_OK
ReadX 9871 1939 64 64 NT_STATUS_OK
ReadX 9871 128 248 248 NT_STATUS_OK
ReadX 9871 128 608 608 NT_STATUS_OK
ReadX 9871 2858 1024 1024 NT_STATUS_OK
ReadX 9871 2810 4096 4096 NT_STATUS_OK
ReadX 9871 2826 4096 4096 NT_STATUS_OK
ReadX 9871 2580 2048 2048 NT_STATUS_OK
ReadX 9871 2800 2560 2560 NT_STATUS_OK
ReadX 9871 2100 4096 4096 NT_STATUS_OK
ReadX 9871 2084 4096 4096 NT_STATUS_OK
ReadX 9871 868 4096 4096 NT_STATUS_OK
ReadX 9871 2324 4096 4096 NT_STATUS_OK
ReadX 9871 884 4096 4096 NT_STATUS_OK
ReadX 9871 2604 1024 1024 NT_STATUS_OK
ReadX 9871 580 4096 4096 NT_STATUS_OK
ReadX 9871 596 4096 4096 NT_STATUS_OK
ReadX 9871 2752 4096 4096 NT_STATUS_OK
ReadX 9871 2842 1024 1024 NT_STATUS_OK
ReadX 9871 660 4096 4096 NT_STATUS_OK
ReadX 9871 2720 4096 4096 NT_STATUS_OK
ReadX 9871 2736 4096 4096 NT_STATUS_OK
ReadX 9871 628 4096 4096 NT_STATUS_OK
ReadX 9871 2704 4096 4096 NT_STATUS_OK
ReadX 9871 1556 4096 4096 NT_STATUS_OK
ReadX 9871 576 4096 4096 NT_STATUS_OK
ReadX 9871 3168 1536 1536 NT_STATUS_OK
ReadX 9871 832 4096 4096 NT_STATUS_OK
ReadX 9871 1088 4096 4096 NT_STATUS_OK
ReadX 9871 1344 4096 4096 NT_STATUS_OK
ReadX 9871 1600 4096 4096 NT_STATUS_OK
ReadX 9871 1856 4096 4096 NT_STATUS_OK
ReadX 9871 2112 4096 4096 NT_STATUS_OK
ReadX 9871 1892 4096 4096 NT_STATUS_OK
ReadX 9871 820 4096 4096 NT_STATUS_OK
ReadX 9871 788 4096 4096 NT_STATUS_OK
ReadX 9871 1604 4096 4096 NT_STATUS_OK
ReadX 9871 3648 4096 4096 NT_STATUS_OK
ReadX 9871 2608 4096 4096 NT_STATUS_OK
ReadX 9871 548 4096 4096 NT_STATUS_OK
ReadX 9871 740 4096 4096 NT_STATUS_OK
ReadX 9871 1344 4096 4096 NT_STATUS_OK
ReadX 9871 3392 4096 4096 NT_STATUS_OK
ReadX 9871 3904 4096 4096 NT_STATUS_OK
ReadX 9871 644 4096 4096 NT_STATUS_OK
ReadX 9871 676 4096 4096 NT_STATUS_OK
ReadX 9871 2688 4096 4096 NT_STATUS_OK
ReadX 9871 320 4096 4096 NT_STATUS_OK
ReadX 9871 900 4096 4096 NT_STATUS_OK
ReadX 9871 1908 4096 4096 NT_STATUS_OK
ReadX 9871 852 4096 4096 NT_STATUS_OK
ReadX 9871 724 4096 4096 NT_STATUS_OK
ReadX 9871 2292 4096 4096 NT_STATUS_OK
ReadX 9871 612 4096 4096 NT_STATUS_OK
ReadX 9871 388 4096 4096 NT_STATUS_OK
ReadX 9871 2368 4096 4096 NT_STATUS_OK
ReadX 9871 2624 4096 4096 NT_STATUS_OK
ReadX 9871 500 4096 4096 NT_STATUS_OK
ReadX 9871 356 4096 4096 NT_STATUS_OK
ReadX 9871 1024 4096 4096 NT_STATUS_OK
ReadX 9871 576 4096 4096 NT_STATUS_OK
ReadX 9871 340 4096 4096 NT_STATUS_OK
ReadX 9871 420 4096 4096 NT_STATUS_OK
ReadX 9871 1600 4096 4096 NT_STATUS_OK
ReadX 9871 404 4096 4096 NT_STATUS_OK
ReadX 9871 1428 4096 4096 NT_STATUS_OK
ReadX 9871 2656 4096 4096 NT_STATUS_OK
ReadX 9871 2624 4096 4096 NT_STATUS_OK
ReadX 9871 452 4096 4096 NT_STATUS_OK
ReadX 9871 692 4096 4096 NT_STATUS_OK
ReadX 9871 564 4096 4096 NT_STATUS_OK
ReadX 9871 372 4096 4096 NT_STATUS_OK
ReadX 9871 468 4096 4096 NT_STATUS_OK
ReadX 9871 484 4096 4096 NT_STATUS_OK
ReadX 9871 1088 4096 4096 NT_STATUS_OK
ReadX 9871 1924 4096 4096 NT_STATUS_OK
ReadX 9871 2768 4096 4096 NT_STATUS_OK
ReadX 9871 832 4096 4096 NT_STATUS_OK
ReadX 9871 836 4096 4096 NT_STATUS_OK
ReadX 9871 1856 4096 4096 NT_STATUS_OK
ReadX 9871 2640 4096 4096 NT_STATUS_OK
ReadX 9871 436 4096 4096 NT_STATUS_OK
ReadX 9871 1828 4096 4096 NT_STATUS_OK
ReadX 9871 804 4096 4096 NT_STATUS_OK
ReadX 9871 1860 4096 4096 NT_STATUS_OK
ReadX 9871 1812 4096 4096 NT_STATUS_OK
ReadX 9871 756 4096 4096 NT_STATUS_OK
ReadX 9871 1636 4096 4096 NT_STATUS_OK
ReadX 9871 772 4096 4096 NT_STATUS_OK
ReadX 9871 2036 4096 4096 NT_STATUS_OK
ReadX 9871 1220 4096 4096 NT_STATUS_OK
ReadX 9871 1652 4096 4096 NT_STATUS_OK
ReadX 9871 2588 4096 4096 NT_STATUS_OK
ReadX 9871 916 4096 4096 NT_STATUS_OK
ReadX 9871 260 4096 4096 NT_STATUS_OK
ReadX 9871 932 4096 4096 NT_STATUS_OK
ReadX 9871 2624 4096 4096 NT_STATUS_OK
ReadX 9871 308 4096 4096 NT_STATUS_OK
ReadX 9871 292 4096 4096 NT_STATUS_OK
ReadX 9871 1140 4096 4096 NT_STATUS_OK
ReadX 9871 276 4096 4096 NT_STATUS_OK
ReadX 9871 2020 4096 4096 NT_STATUS_OK
ReadX 9871 2880 4096 4096 NT_STATUS_OK
ReadX 9871 516 4096 4096 NT_STATUS_OK
ReadX 9871 1844 4096 4096 NT_STATUS_OK
ReadX 9871 1124 4096 4096 NT_STATUS_OK
ReadX 9871 3136 4096 4096 NT_STATUS_OK
ReadX 9871 324 4096 4096 NT_STATUS_OK
ReadX 9871 1156 4096 4096 NT_STATUS_OK
ReadX 9871 1172 4096 4096 NT_STATUS_OK
ReadX 9871 2112 4096 4096 NT_STATUS_OK
ReadX 9871 2368 4096 4096 NT_STATUS_OK
ReadX 9871 964 4096 4096 NT_STATUS_OK
ReadX 9871 980 4096 4096 NT_STATUS_OK
ReadX 9871 1012 4096 4096 NT_STATUS_OK
ReadX 9871 532 4096 4096 NT_STATUS_OK
ReadX 9871 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9871 1620 4096 4096 NT_STATUS_OK
ReadX 9871 1604 4096 4096 NT_STATUS_OK
ReadX 9871 2116 4096 4096 NT_STATUS_OK
ReadX 9871 2132 4096 4096 NT_STATUS_OK
ReadX 9871 2148 4096 4096 NT_STATUS_OK
ReadX 9871 2276 4096 4096 NT_STATUS_OK
ReadX 9871 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9893 NT_STATUS_OK
Close 9893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9896 NT_STATUS_OK
QUERY_FILE_INFORMATION 9851 1004 NT_STATUS_OK
Close 9851 NT_STATUS_OK
WriteX 9896 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9896 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9853 1004 NT_STATUS_OK
Close 9853 NT_STATUS_OK
WriteX 9896 0 65536 65536 NT_STATUS_OK
WriteX 9896 65536 64850 64850 NT_STATUS_OK
Close 9896 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9898 NT_STATUS_OK
WriteX 9898 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9898 258 NT_STATUS_OK
ReadX 9871 2068 4096 4096 NT_STATUS_OK
ReadX 9871 1588 4096 4096 NT_STATUS_OK
ReadX 9871 1572 4096 4096 NT_STATUS_OK
WriteX 9898 0 18630 18630 NT_STATUS_OK
Flush 9898 NT_STATUS_OK
Close 9898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9900 NT_STATUS_OK
Close 9900 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9871 612 4096 4096 NT_STATUS_OK
ReadX 9871 564 4096 4096 NT_STATUS_OK
ReadX 9871 1876 4096 4096 NT_STATUS_OK
ReadX 9871 628 4096 4096 NT_STATUS_OK
ReadX 9871 740 4096 4096 NT_STATUS_OK
ReadX 9871 724 4096 4096 NT_STATUS_OK
ReadX 9871 644 4096 4096 NT_STATUS_OK
ReadX 9871 2324 4096 4096 NT_STATUS_OK
ReadX 9871 660 4096 4096 NT_STATUS_OK
ReadX 9871 852 4096 4096 NT_STATUS_OK
ReadX 9871 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9871 2368 4096 4096 NT_STATUS_OK
ReadX 9871 1024 4096 4096 NT_STATUS_OK
ReadX 9871 320 4096 4096 NT_STATUS_OK
ReadX 9871 580 4096 4096 NT_STATUS_OK
ReadX 9871 3136 512 512 NT_STATUS_OK
ReadX 9871 2880 4096 4096 NT_STATUS_OK
Close 9871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9903 NT_STATUS_OK
ReadX 9903 61440 4096 4096 NT_STATUS_OK
ReadX 9903 126976 4096 4096 NT_STATUS_OK
WriteX 9903 0 65536 65536 NT_STATUS_OK
WriteX 9903 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9904 NT_STATUS_OK
ReadX 9904 61440 4096 4096 NT_STATUS_OK
ReadX 9904 126976 4096 4096 NT_STATUS_OK
ReadX 9904 192512 4096 4096 NT_STATUS_OK
ReadX 9904 258048 4096 4096 NT_STATUS_OK
WriteX 9904 0 65536 65536 NT_STATUS_OK
WriteX 9904 65536 65536 65536 NT_STATUS_OK
WriteX 9904 131072 65536 65536 NT_STATUS_OK
WriteX 9904 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 61440 4096 4096 NT_STATUS_OK
ReadX 9905 126976 4096 4096 NT_STATUS_OK
ReadX 9905 192512 4096 4096 NT_STATUS_OK
ReadX 9905 258048 4096 4096 NT_STATUS_OK
ReadX 9905 323584 4096 4096 NT_STATUS_OK
ReadX 9905 389120 4096 4096 NT_STATUS_OK
ReadX 9905 454656 4096 4096 NT_STATUS_OK
ReadX 9905 520192 4096 4096 NT_STATUS_OK
WriteX 9905 0 65536 65536 NT_STATUS_OK
WriteX 9905 65536 65536 65536 NT_STATUS_OK
WriteX 9905 131072 65536 65536 NT_STATUS_OK
WriteX 9905 196608 65536 65536 NT_STATUS_OK
WriteX 9905 262144 65536 65536 NT_STATUS_OK
WriteX 9905 327680 65536 65536 NT_STATUS_OK
WriteX 9905 393216 65536 65536 NT_STATUS_OK
WriteX 9905 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9907 NT_STATUS_OK
Close 9907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9908 NT_STATUS_OK
WriteX 9908 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9908 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9906 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9906 0 8192 8192 NT_STATUS_OK
Flush 9906 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9910 NT_STATUS_OK
Close 9910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9870 NT_STATUS_OK
Close 9903 NT_STATUS_OK
Close 9904 NT_STATUS_OK
Close 9905 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9913 NT_STATUS_OK
WriteX 9913 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9913 258 NT_STATUS_OK
WriteX 9913 0 62591 62591 NT_STATUS_OK
Close 9913 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9915 NT_STATUS_OK
Close 9915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9918 NT_STATUS_OK
WriteX 9918 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9918 258 NT_STATUS_OK
WriteX 9918 0 10845 10845 NT_STATUS_OK
Close 9918 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9920 NT_STATUS_OK
Close 9920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9923 NT_STATUS_OK
WriteX 9923 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9923 258 NT_STATUS_OK
WriteX 9923 0 30118 30118 NT_STATUS_OK
Close 9923 NT_STATUS_OK
WriteX 9906 0 4096 4096 NT_STATUS_OK
WriteX 9908 0 64 64 NT_STATUS_OK
Close 9908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9925 NT_STATUS_OK
ReadX 9925 0 61440 61440 NT_STATUS_OK
ReadX 9925 61440 4096 4096 NT_STATUS_OK
ReadX 9925 65536 61440 61440 NT_STATUS_OK
ReadX 9925 126976 4096 4096 NT_STATUS_OK
ReadX 9925 131072 61440 61440 NT_STATUS_OK
ReadX 9925 192512 4096 4096 NT_STATUS_OK
ReadX 9925 196608 61440 61440 NT_STATUS_OK
ReadX 9925 258048 4096 4096 NT_STATUS_OK
ReadX 9925 262144 61440 61440 NT_STATUS_OK
ReadX 9925 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 0 61440 61440 NT_STATUS_OK
ReadX 9926 61440 4096 4096 NT_STATUS_OK
ReadX 9926 65536 61440 61440 NT_STATUS_OK
ReadX 9926 126976 4096 4096 NT_STATUS_OK
ReadX 9926 131072 61440 61440 NT_STATUS_OK
ReadX 9926 192512 4096 4096 NT_STATUS_OK
ReadX 9926 196608 61440 61440 NT_STATUS_OK
ReadX 9926 258048 4096 4096 NT_STATUS_OK
ReadX 9926 262144 61440 61440 NT_STATUS_OK
ReadX 9926 323584 4096 4096 NT_STATUS_OK
ReadX 9926 327680 61440 61440 NT_STATUS_OK
ReadX 9926 389120 4096 4096 NT_STATUS_OK
ReadX 9926 393216 61440 61440 NT_STATUS_OK
ReadX 9926 454656 4096 4096 NT_STATUS_OK
ReadX 9926 458752 61440 61440 NT_STATUS_OK
ReadX 9926 520192 4096 4096 NT_STATUS_OK
ReadX 9926 524288 61440 61440 NT_STATUS_OK
ReadX 9926 585728 4096 4096 NT_STATUS_OK
ReadX 9926 589824 61440 61440 NT_STATUS_OK
ReadX 9926 651264 4096 4096 NT_STATUS_OK
ReadX 9926 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 61440 61440 NT_STATUS_OK
ReadX 9927 61440 4096 4096 NT_STATUS_OK
ReadX 9927 65536 61440 61440 NT_STATUS_OK
ReadX 9927 126976 4096 4096 NT_STATUS_OK
ReadX 9927 131072 61440 61440 NT_STATUS_OK
ReadX 9927 192512 4096 4096 NT_STATUS_OK
ReadX 9927 196608 61440 61440 NT_STATUS_OK
ReadX 9927 258048 4096 4096 NT_STATUS_OK
ReadX 9927 262144 61440 61440 NT_STATUS_OK
ReadX 9927 323584 4096 4096 NT_STATUS_OK
ReadX 9927 327680 61440 61440 NT_STATUS_OK
ReadX 9927 389120 4096 4096 NT_STATUS_OK
ReadX 9927 393216 61440 61440 NT_STATUS_OK
ReadX 9927 454656 4096 4096 NT_STATUS_OK
ReadX 9927 458752 61440 61440 NT_STATUS_OK
ReadX 9927 520192 4096 4096 NT_STATUS_OK
ReadX 9927 524288 61440 61440 NT_STATUS_OK
ReadX 9927 585728 4096 4096 NT_STATUS_OK
ReadX 9927 589824 61440 61440 NT_STATUS_OK
ReadX 9927 651264 4096 4096 NT_STATUS_OK
ReadX 9927 655360 61440 61440 NT_STATUS_OK
ReadX 9927 716800 4096 4096 NT_STATUS_OK
ReadX 9927 720896 61440 61440 NT_STATUS_OK
ReadX 9927 782336 4096 4096 NT_STATUS_OK
ReadX 9927 786432 61440 61440 NT_STATUS_OK
ReadX 9927 847872 4096 4096 NT_STATUS_OK
ReadX 9927 851968 61440 61440 NT_STATUS_OK
ReadX 9927 913408 4096 4096 NT_STATUS_OK
ReadX 9927 917504 61440 61440 NT_STATUS_OK
ReadX 9927 978944 4096 4096 NT_STATUS_OK
ReadX 9927 983040 61440 61440 NT_STATUS_OK
ReadX 9927 1044480 4096 4096 NT_STATUS_OK
ReadX 9927 1048576 61440 61440 NT_STATUS_OK
ReadX 9927 1110016 4096 4096 NT_STATUS_OK
ReadX 9927 1114112 61440 61440 NT_STATUS_OK
ReadX 9927 1175552 4096 4096 NT_STATUS_OK
ReadX 9927 1179648 61440 61440 NT_STATUS_OK
ReadX 9927 1241088 4096 4096 NT_STATUS_OK
ReadX 9927 1245184 61440 61440 NT_STATUS_OK
ReadX 9927 1306624 4096 4096 NT_STATUS_OK
ReadX 9927 1310720 61440 61440 NT_STATUS_OK
ReadX 9927 1372160 4096 4096 NT_STATUS_OK
ReadX 9927 1376256 61440 61440 NT_STATUS_OK
ReadX 9927 1437696 4096 4096 NT_STATUS_OK
ReadX 9927 1441792 61440 61440 NT_STATUS_OK
ReadX 9927 1503232 4096 4096 NT_STATUS_OK
ReadX 9927 1507328 61440 61440 NT_STATUS_OK
ReadX 9927 1568768 4096 4096 NT_STATUS_OK
ReadX 9927 1572864 61440 61440 NT_STATUS_OK
ReadX 9927 1634304 4096 4096 NT_STATUS_OK
ReadX 9927 1638400 61440 61440 NT_STATUS_OK
ReadX 9927 1699840 4096 4096 NT_STATUS_OK
ReadX 9927 1703936 61440 61440 NT_STATUS_OK
ReadX 9927 1765376 4096 4096 NT_STATUS_OK
ReadX 9927 1769472 61440 61440 NT_STATUS_OK
ReadX 9927 1830912 4096 4096 NT_STATUS_OK
ReadX 9927 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9928 NT_STATUS_OK
Close 9928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9930 NT_STATUS_OK
ReadX 9930 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9931 NT_STATUS_OK
ReadX 9931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9932 NT_STATUS_OK
ReadX 9932 0 4096 4096 NT_STATUS_OK
ReadX 9932 4096 4096 4096 NT_STATUS_OK
ReadX 9932 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9933 NT_STATUS_OK
Close 9933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9930 NT_STATUS_OK
Close 9931 NT_STATUS_OK
Close 9932 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9935 NT_STATUS_OK
ReadX 9935 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9936 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9936 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9937 NT_STATUS_OK
Close 9937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9935 NT_STATUS_OK
Close 9936 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9940 NT_STATUS_OK
ReadX 9940 0 8192 8192 NT_STATUS_OK
ReadX 9940 8192 8192 8192 NT_STATUS_OK
ReadX 9940 16384 8192 8192 NT_STATUS_OK
ReadX 9940 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9942 NT_STATUS_OK
Close 9942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9940 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9945 NT_STATUS_OK
WriteX 9945 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9945 258 NT_STATUS_OK
WriteX 9945 0 10438 10438 NT_STATUS_OK
Close 9945 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9946 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9948 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9949 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9951 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9954 NT_STATUS_OK
ReadX 9954 0 4096 4096 NT_STATUS_OK
ReadX 9954 4096 4096 4096 NT_STATUS_OK
ReadX 9954 8192 4096 4096 NT_STATUS_OK
ReadX 9954 12288 8192 8192 NT_STATUS_OK
ReadX 9954 20480 8192 8192 NT_STATUS_OK
ReadX 9954 28672 8192 8192 NT_STATUS_OK
ReadX 9954 36864 8192 8192 NT_STATUS_OK
ReadX 9954 45056 8192 8192 NT_STATUS_OK
ReadX 9954 53248 8192 8192 NT_STATUS_OK
ReadX 9954 61440 8192 8192 NT_STATUS_OK
ReadX 9954 69632 8192 8192 NT_STATUS_OK
ReadX 9954 77824 8192 8192 NT_STATUS_OK
ReadX 9954 86016 8192 8192 NT_STATUS_OK
ReadX 9954 94208 8192 8192 NT_STATUS_OK
ReadX 9954 102400 8192 8192 NT_STATUS_OK
ReadX 9954 110592 8192 8192 NT_STATUS_OK
ReadX 9954 118784 8192 8192 NT_STATUS_OK
ReadX 9954 126976 8192 8192 NT_STATUS_OK
ReadX 9954 135168 8192 8192 NT_STATUS_OK
ReadX 9954 143360 8192 8192 NT_STATUS_OK
ReadX 9954 151552 8192 8192 NT_STATUS_OK
ReadX 9954 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9954 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Close 9949 NT_STATUS_OK
Close 9951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9959 NT_STATUS_OK
WriteX 9959 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9959 258 NT_STATUS_OK
WriteX 9959 0 28489 28489 NT_STATUS_OK
Close 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9960 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9962 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9963 NT_STATUS_OK
Close 9963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9962 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9965 NT_STATUS_OK
ReadX 9965 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 8192 8192 NT_STATUS_OK
ReadX 9966 8192 8192 8192 NT_STATUS_OK
ReadX 9966 16384 8192 8192 NT_STATUS_OK
ReadX 9966 24576 8192 8192 NT_STATUS_OK
ReadX 9966 32768 16384 16384 NT_STATUS_OK
ReadX 9966 49152 8192 8192 NT_STATUS_OK
ReadX 9966 57344 8192 8192 NT_STATUS_OK
ReadX 9966 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9968 NT_STATUS_OK
Close 9968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Close 9965 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9971 NT_STATUS_OK
WriteX 9971 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 258 NT_STATUS_OK
WriteX 9971 0 29253 29253 NT_STATUS_OK
Close 9971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9972 NT_STATUS_OK
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9975 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9978 NT_STATUS_OK
WriteX 9978 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9978 258 NT_STATUS_OK
WriteX 9978 0 30183 30183 NT_STATUS_OK
Close 9978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9979 NT_STATUS_OK
Close 9979 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9981 NT_STATUS_OK
WriteX 9981 0 510 510 NT_STATUS_OK
WriteX 9981 510 512 512 NT_STATUS_OK
WriteX 9981 1022 510 510 NT_STATUS_OK
WriteX 9981 1532 510 510 NT_STATUS_OK
WriteX 9981 2042 168 168 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9982 NT_STATUS_OK
Close 9982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9984 NT_STATUS_OK
ReadX 9984 0 4096 4096 NT_STATUS_OK
WriteX 9984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 61440 4096 4096 NT_STATUS_OK
ReadX 9985 126976 4096 4096 NT_STATUS_OK
WriteX 9985 0 65536 65536 NT_STATUS_OK
WriteX 9985 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 61440 4096 4096 NT_STATUS_OK
ReadX 9986 126976 4096 4096 NT_STATUS_OK
ReadX 9986 192512 4096 4096 NT_STATUS_OK
ReadX 9986 258048 4096 4096 NT_STATUS_OK
WriteX 9986 0 65536 65536 NT_STATUS_OK
WriteX 9986 65536 65536 65536 NT_STATUS_OK
WriteX 9986 131072 65536 65536 NT_STATUS_OK
WriteX 9986 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 61440 4096 4096 NT_STATUS_OK
ReadX 9987 126976 4096 4096 NT_STATUS_OK
ReadX 9987 192512 4096 4096 NT_STATUS_OK
ReadX 9987 258048 4096 4096 NT_STATUS_OK
ReadX 9987 323584 4096 4096 NT_STATUS_OK
ReadX 9987 389120 4096 4096 NT_STATUS_OK
ReadX 9987 454656 4096 4096 NT_STATUS_OK
ReadX 9987 520192 4096 4096 NT_STATUS_OK
WriteX 9987 0 65536 65536 NT_STATUS_OK
WriteX 9987 65536 65536 65536 NT_STATUS_OK
WriteX 9987 131072 65536 65536 NT_STATUS_OK
WriteX 9987 196608 65536 65536 NT_STATUS_OK
WriteX 9987 262144 65536 65536 NT_STATUS_OK
WriteX 9987 327680 65536 65536 NT_STATUS_OK
WriteX 9987 393216 65536 65536 NT_STATUS_OK
WriteX 9987 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9988 NT_STATUS_OK
Close 9988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9984 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Close 9987 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9994 NT_STATUS_OK
Close 9994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9997 NT_STATUS_OK
Close 9997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9999 NT_STATUS_OK
Close 9999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10003 NT_STATUS_OK
Close 10003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10006 NT_STATUS_OK
Close 10006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10008 NT_STATUS_OK
Close 10008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10012 NT_STATUS_OK
Close 10012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10017 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10022 NT_STATUS_OK
Close 10022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10032 NT_STATUS_OK
Close 10032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10037 NT_STATUS_OK
Close 10037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10042 NT_STATUS_OK
Close 10042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10050 NT_STATUS_OK
Close 10050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10053 NT_STATUS_OK
Close 10053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10056 NT_STATUS_OK
WriteX 10056 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10056 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10056 0 65536 65536 NT_STATUS_OK
WriteX 10056 65536 65536 65536 NT_STATUS_OK
WriteX 10056 131072 65536 65536 NT_STATUS_OK
WriteX 10056 196608 65536 65536 NT_STATUS_OK
WriteX 10056 262144 26634 26634 NT_STATUS_OK
Close 10056 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10061 NT_STATUS_OK
Close 10061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10062 NT_STATUS_OK
Close 10062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10063 NT_STATUS_OK
ReadX 10063 0 4096 4096 NT_STATUS_OK
Close 10063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
ReadX 10064 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10065 NT_STATUS_OK
Close 10065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10069 NT_STATUS_OK
Close 10069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10072 NT_STATUS_OK
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10074 NT_STATUS_OK
Close 10074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10078 NT_STATUS_OK
Close 10078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10081 NT_STATUS_OK
Close 10081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10087 NT_STATUS_OK
Close 10087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10092 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10102 NT_STATUS_OK
Close 10102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10107 NT_STATUS_OK
Close 10107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10112 NT_STATUS_OK
Close 10112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10116 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10121 NT_STATUS_OK
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10129 NT_STATUS_OK
Close 10129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10131 NT_STATUS_OK
Close 10131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10141 NT_STATUS_OK
Close 10141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10143 NT_STATUS_OK
ReadX 10143 0 4096 4096 NT_STATUS_OK
Close 10143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
Close 10144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10145 NT_STATUS_OK
ReadX 10145 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10156 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
Close 10157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
Close 10158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10145 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10188 0 4096 4096 NT_STATUS_OK
Close 10188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
ReadX 10190 4096 4096 4096 NT_STATUS_OK
ReadX 10190 8192 4096 4096 NT_STATUS_OK
ReadX 10190 12288 4096 4096 NT_STATUS_OK
ReadX 10190 16384 4096 4096 NT_STATUS_OK
ReadX 10190 20480 4096 4096 NT_STATUS_OK
ReadX 10190 24576 4096 4096 NT_STATUS_OK
ReadX 10190 28672 4096 4096 NT_STATUS_OK
ReadX 10190 32768 4096 4096 NT_STATUS_OK
ReadX 10190 36864 4096 4096 NT_STATUS_OK
ReadX 10190 40960 4096 4096 NT_STATUS_OK
ReadX 10190 45056 4096 4096 NT_STATUS_OK
ReadX 10190 49152 4096 4096 NT_STATUS_OK
ReadX 10190 53248 4096 4096 NT_STATUS_OK
ReadX 10190 57344 4096 4096 NT_STATUS_OK
ReadX 10190 61440 4096 4096 NT_STATUS_OK
ReadX 10190 65536 4096 4096 NT_STATUS_OK
ReadX 10190 69632 4096 4096 NT_STATUS_OK
ReadX 10190 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10190 1004 NT_STATUS_OK
WriteX 10190 0 4096 4096 NT_STATUS_OK
Close 10190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10191 NT_STATUS_OK
SET_FILE_INFORMATION 10191 1004 NT_STATUS_OK
Close 10191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10192 NT_STATUS_OK
ReadX 10192 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10193 NT_STATUS_OK
Close 10193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10196 NT_STATUS_OK
WriteX 10196 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10196 258 NT_STATUS_OK
WriteX 10196 0 65536 65536 NT_STATUS_OK
WriteX 10196 65536 19979 19979 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
QUERY_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
SET_FILE_INFORMATION 10197 1004 NT_STATUS_OK
WriteX 10197 0 4096 4096 NT_STATUS_OK
Flush 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
Close 10198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
Close 10200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 4096 4096 NT_STATUS_OK
Close 10201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10202 1004 NT_STATUS_OK
WriteX 10202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10203 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10202 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10208 NT_STATUS_OK
WriteX 10208 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10208 258 NT_STATUS_OK
WriteX 10208 0 65536 65536 NT_STATUS_OK
WriteX 10208 65536 17654 17654 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
QUERY_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
SET_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10210 NT_STATUS_OK
SET_FILE_INFORMATION 10210 1004 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10214 NT_STATUS_OK
ReadX 10214 0 4096 4096 NT_STATUS_OK
ReadX 10214 4096 4096 4096 NT_STATUS_OK
ReadX 10214 8192 4096 4096 NT_STATUS_OK
ReadX 10214 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10214 16384 4096 4096 NT_STATUS_OK
ReadX 10214 20480 4096 4096 NT_STATUS_OK
ReadX 10214 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10217 1004 NT_STATUS_OK
WriteX 10217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10218 NT_STATUS_OK
Close 10218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10220 NT_STATUS_OK
Close 10220 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10223 NT_STATUS_OK
WriteX 10223 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10223 258 NT_STATUS_OK
WriteX 10223 0 65536 65536 NT_STATUS_OK
WriteX 10223 65536 19490 19490 NT_STATUS_OK
Close 10223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
QUERY_FILE_INFORMATION 10224 1004 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
SET_FILE_INFORMATION 10224 1004 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
Flush 10224 NT_STATUS_OK
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10225 NT_STATUS_OK
SET_FILE_INFORMATION 10225 1004 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10227 NT_STATUS_OK
Close 10227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10229 0 4096 4096 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
ReadX 10231 4096 4096 4096 NT_STATUS_OK
ReadX 10231 8192 4096 4096 NT_STATUS_OK
ReadX 10231 12288 4096 4096 NT_STATUS_OK
ReadX 10231 16384 4096 4096 NT_STATUS_OK
ReadX 10231 20480 4096 4096 NT_STATUS_OK
ReadX 10231 24576 4096 4096 NT_STATUS_OK
ReadX 10231 28672 4096 4096 NT_STATUS_OK
ReadX 10231 32768 4096 4096 NT_STATUS_OK
ReadX 10231 36864 4096 4096 NT_STATUS_OK
ReadX 10231 40960 4096 4096 NT_STATUS_OK
ReadX 10231 45056 4096 4096 NT_STATUS_OK
ReadX 10231 49152 4096 4096 NT_STATUS_OK
ReadX 10231 53248 4096 4096 NT_STATUS_OK
ReadX 10231 57344 4096 4096 NT_STATUS_OK
ReadX 10231 61440 4096 4096 NT_STATUS_OK
ReadX 10231 65536 4096 4096 NT_STATUS_OK
ReadX 10231 69632 4096 4096 NT_STATUS_OK
ReadX 10231 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10231 1004 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
Close 10231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10232 NT_STATUS_OK
SET_FILE_INFORMATION 10232 1004 NT_STATUS_OK
Close 10232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10237 NT_STATUS_OK
WriteX 10237 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10237 258 NT_STATUS_OK
WriteX 10237 0 65536 65536 NT_STATUS_OK
WriteX 10237 65536 8866 8866 NT_STATUS_OK
Close 10237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
WriteX 10238 0 4096 4096 NT_STATUS_OK
Flush 10238 NT_STATUS_OK
SET_FILE_INFORMATION 10238 1004 NT_STATUS_OK
WriteX 10238 0 4096 4096 NT_STATUS_OK
Flush 10238 NT_STATUS_OK
Close 10238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10240 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
Close 10240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
Close 10241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10242 1004 NT_STATUS_OK
WriteX 10242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10243 NT_STATUS_OK
Close 10243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10245 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10248 NT_STATUS_OK
WriteX 10248 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10248 258 NT_STATUS_OK
WriteX 10248 0 65536 65536 NT_STATUS_OK
WriteX 10248 65536 9298 9298 NT_STATUS_OK
Close 10248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10249 NT_STATUS_OK
ReadX 10249 0 4096 4096 NT_STATUS_OK
WriteX 10249 0 4096 4096 NT_STATUS_OK
Flush 10249 NT_STATUS_OK
SET_FILE_INFORMATION 10249 1004 NT_STATUS_OK
WriteX 10249 0 4096 4096 NT_STATUS_OK
Flush 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10250 NT_STATUS_OK
SET_FILE_INFORMATION 10250 1004 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10252 NT_STATUS_OK
Close 10252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10255 0 4096 4096 NT_STATUS_OK
Close 10255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10256 4096 4096 4096 NT_STATUS_OK
ReadX 10256 8192 4096 4096 NT_STATUS_OK
ReadX 10256 12288 4096 4096 NT_STATUS_OK
ReadX 10256 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
Close 10257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 0 4096 4096 NT_STATUS_OK
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10259 1004 NT_STATUS_OK
WriteX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10260 NT_STATUS_OK
Close 10260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10262 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10265 NT_STATUS_OK
WriteX 10265 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10265 258 NT_STATUS_OK
WriteX 10265 0 65536 65536 NT_STATUS_OK
WriteX 10265 65536 11540 11540 NT_STATUS_OK
Close 10265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Flush 10266 NT_STATUS_OK
SET_FILE_INFORMATION 10266 1004 NT_STATUS_OK
WriteX 10266 0 4096 4096 NT_STATUS_OK
Flush 10266 NT_STATUS_OK
Close 10266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10267 NT_STATUS_OK
SET_FILE_INFORMATION 10267 1004 NT_STATUS_OK
Close 10267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10269 NT_STATUS_OK
Close 10269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 61440 4096 4096 NT_STATUS_OK
ReadX 10271 126976 4096 4096 NT_STATUS_OK
WriteX 10271 0 65536 65536 NT_STATUS_OK
WriteX 10271 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 61440 4096 4096 NT_STATUS_OK
ReadX 10272 126976 4096 4096 NT_STATUS_OK
ReadX 10272 192512 4096 4096 NT_STATUS_OK
ReadX 10272 258048 4096 4096 NT_STATUS_OK
WriteX 10272 0 65536 65536 NT_STATUS_OK
WriteX 10272 65536 65536 65536 NT_STATUS_OK
WriteX 10272 131072 65536 65536 NT_STATUS_OK
WriteX 10272 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 61440 4096 4096 NT_STATUS_OK
ReadX 10273 126976 4096 4096 NT_STATUS_OK
ReadX 10273 192512 4096 4096 NT_STATUS_OK
ReadX 10273 258048 4096 4096 NT_STATUS_OK
ReadX 10273 323584 4096 4096 NT_STATUS_OK
ReadX 10273 389120 4096 4096 NT_STATUS_OK
ReadX 10273 454656 4096 4096 NT_STATUS_OK
ReadX 10273 520192 4096 4096 NT_STATUS_OK
WriteX 10273 0 65536 65536 NT_STATUS_OK
WriteX 10273 65536 65536 65536 NT_STATUS_OK
WriteX 10273 131072 65536 65536 NT_STATUS_OK
WriteX 10273 196608 65536 65536 NT_STATUS_OK
WriteX 10273 262144 65536 65536 NT_STATUS_OK
WriteX 10273 327680 65536 65536 NT_STATUS_OK
WriteX 10273 393216 65536 65536 NT_STATUS_OK
WriteX 10273 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10274 NT_STATUS_OK
ReadX 10274 0 4096 4096 NT_STATUS_OK
ReadX 10274 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10275 NT_STATUS_OK
WriteX 10275 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10275 258 NT_STATUS_OK
WriteX 10275 0 53 53 NT_STATUS_OK
Close 10275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10276 NT_STATUS_OK
Close 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10214 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10274 8192 4096 4096 NT_STATUS_OK
ReadX 10274 12288 4096 4096 NT_STATUS_OK
WriteX 10278 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 258 NT_STATUS_OK
ReadX 10274 16384 4096 4096 NT_STATUS_OK
ReadX 10274 20480 4096 4096 NT_STATUS_OK
WriteX 10278 0 15360 15360 NT_STATUS_OK
Close 10278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10279 NT_STATUS_OK
ReadX 10279 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10279 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10279 1004 NT_STATUS_OK
WriteX 10279 0 4096 4096 NT_STATUS_OK
Close 10279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10280 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10283 NT_STATUS_OK
Close 10283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10282 4096 4096 4096 NT_STATUS_OK
ReadX 10282 8192 4096 4096 NT_STATUS_OK
ReadX 10282 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10285 NT_STATUS_OK
ReadX 10285 0 4096 4096 NT_STATUS_OK
ReadX 10285 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
ReadX 10286 4096 4096 4096 NT_STATUS_OK
ReadX 10286 8192 4096 4096 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10287 NT_STATUS_OK
WriteX 10287 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10287 258 NT_STATUS_OK
WriteX 10287 0 15360 15360 NT_STATUS_OK
Close 10287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10288 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10288 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10289 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10292 NT_STATUS_OK
SET_FILE_INFORMATION 10292 1004 NT_STATUS_OK
Close 10292 NT_STATUS_OK
WriteX 10288 0 4096 4096 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10293 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
ReadX 10295 4096 4096 4096 NT_STATUS_OK
ReadX 10295 8192 4096 4096 NT_STATUS_OK
ReadX 10295 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10297 NT_STATUS_OK
WriteX 10297 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10297 258 NT_STATUS_OK
WriteX 10297 0 53 53 NT_STATUS_OK
Close 10297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10298 NT_STATUS_OK
Close 10298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10296 4096 4096 4096 NT_STATUS_OK
ReadX 10296 8192 4096 4096 NT_STATUS_OK
ReadX 10296 12288 4096 4096 NT_STATUS_OK
WriteX 10300 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 258 NT_STATUS_OK
WriteX 10300 0 12006 12006 NT_STATUS_OK
Close 10300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10301 1004 NT_STATUS_OK
WriteX 10301 0 4096 4096 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10302 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10305 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10304 4096 4096 4096 NT_STATUS_OK
ReadX 10304 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10307 NT_STATUS_OK
WriteX 10307 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10307 258 NT_STATUS_OK
WriteX 10307 0 11991 11991 NT_STATUS_OK
Close 10307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10308 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10309 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10312 NT_STATUS_OK
SET_FILE_INFORMATION 10312 1004 NT_STATUS_OK
Close 10312 NT_STATUS_OK
WriteX 10308 0 4096 4096 NT_STATUS_OK
Close 10308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10313 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10315 NT_STATUS_OK
ReadX 10315 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10316 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10315 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
ReadX 10315 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
WriteX 10315 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10315 1004 NT_STATUS_OK
Close 10291 NT_STATUS_OK
WriteX 10295 0 19054 19054 NT_STATUS_OK
WriteX 10315 0 12288 12288 NT_STATUS_OK
Close 10311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10318 NT_STATUS_OK
Close 10318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Close 10315 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10320 NT_STATUS_OK
Close 10320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10322 NT_STATUS_OK
ReadX 10322 0 61440 61440 NT_STATUS_OK
ReadX 10322 61440 4096 4096 NT_STATUS_OK
ReadX 10322 65536 61440 61440 NT_STATUS_OK
ReadX 10322 126976 4096 4096 NT_STATUS_OK
ReadX 10322 131072 61440 61440 NT_STATUS_OK
ReadX 10322 192512 4096 4096 NT_STATUS_OK
ReadX 10322 196608 61440 61440 NT_STATUS_OK
ReadX 10322 258048 4096 4096 NT_STATUS_OK
ReadX 10322 262144 61440 61440 NT_STATUS_OK
ReadX 10322 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10323 NT_STATUS_OK
ReadX 10323 0 61440 61440 NT_STATUS_OK
ReadX 10323 61440 4096 4096 NT_STATUS_OK
ReadX 10323 65536 61440 61440 NT_STATUS_OK
ReadX 10323 126976 4096 4096 NT_STATUS_OK
ReadX 10323 131072 61440 61440 NT_STATUS_OK
ReadX 10323 192512 4096 4096 NT_STATUS_OK
ReadX 10323 196608 61440 61440 NT_STATUS_OK
ReadX 10323 258048 4096 4096 NT_STATUS_OK
ReadX 10323 262144 61440 61440 NT_STATUS_OK
ReadX 10323 323584 4096 4096 NT_STATUS_OK
ReadX 10323 327680 61440 61440 NT_STATUS_OK
ReadX 10323 389120 4096 4096 NT_STATUS_OK
ReadX 10323 393216 61440 61440 NT_STATUS_OK
ReadX 10323 454656 4096 4096 NT_STATUS_OK
ReadX 10323 458752 61440 61440 NT_STATUS_OK
ReadX 10323 520192 4096 4096 NT_STATUS_OK
ReadX 10323 524288 61440 61440 NT_STATUS_OK
ReadX 10323 585728 4096 4096 NT_STATUS_OK
ReadX 10323 589824 61440 61440 NT_STATUS_OK
ReadX 10323 651264 4096 4096 NT_STATUS_OK
ReadX 10323 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10324 NT_STATUS_OK
ReadX 10324 0 61440 61440 NT_STATUS_OK
ReadX 10324 61440 4096 4096 NT_STATUS_OK
ReadX 10324 65536 61440 61440 NT_STATUS_OK
ReadX 10324 126976 4096 4096 NT_STATUS_OK
ReadX 10324 131072 61440 61440 NT_STATUS_OK
ReadX 10324 192512 4096 4096 NT_STATUS_OK
ReadX 10324 196608 61440 61440 NT_STATUS_OK
ReadX 10324 258048 4096 4096 NT_STATUS_OK
ReadX 10324 262144 61440 61440 NT_STATUS_OK
ReadX 10324 323584 4096 4096 NT_STATUS_OK
ReadX 10324 327680 61440 61440 NT_STATUS_OK
ReadX 10324 389120 4096 4096 NT_STATUS_OK
ReadX 10324 393216 61440 61440 NT_STATUS_OK
ReadX 10324 454656 4096 4096 NT_STATUS_OK
ReadX 10324 458752 61440 61440 NT_STATUS_OK
ReadX 10324 520192 4096 4096 NT_STATUS_OK
ReadX 10324 524288 61440 61440 NT_STATUS_OK
ReadX 10324 585728 4096 4096 NT_STATUS_OK
ReadX 10324 589824 61440 61440 NT_STATUS_OK
ReadX 10324 651264 4096 4096 NT_STATUS_OK
ReadX 10324 655360 61440 61440 NT_STATUS_OK
ReadX 10324 716800 4096 4096 NT_STATUS_OK
ReadX 10324 720896 61440 61440 NT_STATUS_OK
ReadX 10324 782336 4096 4096 NT_STATUS_OK
ReadX 10324 786432 61440 61440 NT_STATUS_OK
ReadX 10324 847872 4096 4096 NT_STATUS_OK
ReadX 10324 851968 61440 61440 NT_STATUS_OK
ReadX 10324 913408 4096 4096 NT_STATUS_OK
ReadX 10324 917504 61440 61440 NT_STATUS_OK
ReadX 10324 978944 4096 4096 NT_STATUS_OK
ReadX 10324 983040 61440 61440 NT_STATUS_OK
ReadX 10324 1044480 4096 4096 NT_STATUS_OK
ReadX 10324 1048576 61440 61440 NT_STATUS_OK
ReadX 10324 1110016 4096 4096 NT_STATUS_OK
ReadX 10324 1114112 61440 61440 NT_STATUS_OK
ReadX 10324 1175552 4096 4096 NT_STATUS_OK
ReadX 10324 1179648 61440 61440 NT_STATUS_OK
ReadX 10324 1241088 4096 4096 NT_STATUS_OK
ReadX 10324 1245184 61440 61440 NT_STATUS_OK
ReadX 10324 1306624 4096 4096 NT_STATUS_OK
ReadX 10324 1310720 61440 61440 NT_STATUS_OK
ReadX 10324 1372160 4096 4096 NT_STATUS_OK
ReadX 10324 1376256 61440 61440 NT_STATUS_OK
ReadX 10324 1437696 4096 4096 NT_STATUS_OK
ReadX 10324 1441792 61440 61440 NT_STATUS_OK
ReadX 10324 1503232 4096 4096 NT_STATUS_OK
ReadX 10324 1507328 61440 61440 NT_STATUS_OK
ReadX 10324 1568768 4096 4096 NT_STATUS_OK
ReadX 10324 1572864 61440 61440 NT_STATUS_OK
ReadX 10324 1634304 4096 4096 NT_STATUS_OK
ReadX 10324 1638400 61440 61440 NT_STATUS_OK
ReadX 10324 1699840 4096 4096 NT_STATUS_OK
ReadX 10324 1703936 61440 61440 NT_STATUS_OK
ReadX 10324 1765376 4096 4096 NT_STATUS_OK
ReadX 10324 1769472 61440 61440 NT_STATUS_OK
ReadX 10324 1830912 4096 4096 NT_STATUS_OK
ReadX 10324 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10330 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10331 NT_STATUS_OK
QUERY_FILE_INFORMATION 10331 1004 NT_STATUS_OK
WriteX 10331 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10331 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10332 NT_STATUS_OK
Close 10332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10333 NT_STATUS_OK
WriteX 10333 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10333 258 NT_STATUS_OK
WriteX 10333 0 491 491 NT_STATUS_OK
Close 10333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10334 NT_STATUS_OK
ReadX 10334 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10331 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10336 NT_STATUS_OK
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10337 NT_STATUS_OK
WriteX 10337 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10337 258 NT_STATUS_OK
WriteX 10337 0 543 543 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10338 NT_STATUS_OK
ReadX 10338 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10322 NT_STATUS_OK
Close 10323 NT_STATUS_OK
Close 10324 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10342 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10343 NT_STATUS_OK
ReadX 10343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10344 NT_STATUS_OK
ReadX 10344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10345 NT_STATUS_OK
ReadX 10345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10346 NT_STATUS_OK
ReadX 10346 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10351 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1004 NT_STATUS_OK
WriteX 10351 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 258 NT_STATUS_OK
WriteX 10351 0 2048 2048 NT_STATUS_OK
Close 10351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
Flush 10352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10352 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10357 NT_STATUS_OK
WriteX 10357 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10357 258 NT_STATUS_OK
WriteX 10357 0 2048 2048 NT_STATUS_OK
Close 10357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10362 NT_STATUS_OK
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10363 NT_STATUS_OK
WriteX 10363 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
WriteX 10363 0 2048 2048 NT_STATUS_OK
Close 10363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 2048 2048 NT_STATUS_OK
ReadX 10342 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10346 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10358 0 4096 4096 NT_STATUS_OK
WriteX 10342 0 8192 8192 NT_STATUS_OK
WriteX 10343 0 4096 4096 NT_STATUS_OK
WriteX 10344 0 4096 4096 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10368 NT_STATUS_OK
QUERY_FILE_INFORMATION 10368 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10343 NT_STATUS_OK
Close 10344 NT_STATUS_OK
Close 10345 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10370 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10375 NT_STATUS_OK
ReadX 10375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10377 NT_STATUS_OK
ReadX 10377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10378 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10379 NT_STATUS_OK
ReadX 10379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10381 NT_STATUS_OK
ReadX 10381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10383 NT_STATUS_OK
ReadX 10383 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10388 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 1004 NT_STATUS_OK
WriteX 10388 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10388 258 NT_STATUS_OK
WriteX 10388 0 2048 2048 NT_STATUS_OK
Close 10388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10390 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10391 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10395 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10396 NT_STATUS_OK
QUERY_FILE_INFORMATION 10396 1004 NT_STATUS_OK
WriteX 10396 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10396 258 NT_STATUS_OK
WriteX 10396 0 2048 2048 NT_STATUS_OK
Close 10396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10389 0 4096 4096 NT_STATUS_OK
Flush 10389 NT_STATUS_OK
WriteX 10397 0 4096 4096 NT_STATUS_OK
Flush 10397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10389 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10397 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10391 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10399 NT_STATUS_OK
WriteX 10399 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10399 258 NT_STATUS_OK
WriteX 10399 0 4096 4096 NT_STATUS_OK
Close 10399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10401 NT_STATUS_OK
Close 10401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10402 NT_STATUS_OK
WriteX 10402 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10402 258 NT_STATUS_OK
WriteX 10402 0 4096 4096 NT_STATUS_OK
Close 10402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10403 0 4096 4096 NT_STATUS_OK
Close 10400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10383 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Close 10381 NT_STATUS_OK
Close 10382 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Close 10374 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10406 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10408 NT_STATUS_OK
ReadX 10408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10410 NT_STATUS_OK
WriteX 10410 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10410 258 NT_STATUS_OK
WriteX 10410 0 2048 2048 NT_STATUS_OK
Close 10410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10411 NT_STATUS_OK
ReadX 10411 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10412 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10414 NT_STATUS_OK
ReadX 10414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10420 NT_STATUS_OK
ReadX 10420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10422 NT_STATUS_OK
ReadX 10422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10424 NT_STATUS_OK
ReadX 10424 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10425 NT_STATUS_OK
QUERY_FILE_INFORMATION 10425 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10408 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Close 10423 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Close 10420 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Close 10422 NT_STATUS_OK
Close 10424 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10414 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10427 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10430 NT_STATUS_OK
ReadX 10430 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10432 NT_STATUS_OK
ReadX 10432 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10434 NT_STATUS_OK
ReadX 10434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10447 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 1004 NT_STATUS_OK
WriteX 10447 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10447 258 NT_STATUS_OK
WriteX 10447 0 2048 2048 NT_STATUS_OK
Close 10447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10453 NT_STATUS_OK
ReadX 10453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10454 NT_STATUS_OK
ReadX 10454 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10459 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 1004 NT_STATUS_OK
WriteX 10459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10459 258 NT_STATUS_OK
WriteX 10459 0 2048 2048 NT_STATUS_OK
Close 10459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10460 NT_STATUS_OK
ReadX 10460 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10466 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10467 NT_STATUS_OK
QUERY_FILE_INFORMATION 10467 1004 NT_STATUS_OK
WriteX 10467 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10467 258 NT_STATUS_OK
WriteX 10467 0 2048 2048 NT_STATUS_OK
Close 10467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10468 NT_STATUS_OK
ReadX 10468 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
Flush 10448 NT_STATUS_OK
WriteX 10460 0 4096 4096 NT_STATUS_OK
Flush 10460 NT_STATUS_OK
WriteX 10468 0 4096 4096 NT_STATUS_OK
WriteX 10448 0 4096 4096 NT_STATUS_OK
WriteX 10460 0 4096 4096 NT_STATUS_OK
Flush 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10468 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10450 4096 16384 16384 NT_STATUS_OK
ReadX 10430 4096 16384 16384 NT_STATUS_OK
ReadX 10462 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10469 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 2048 2048 NT_STATUS_OK
WriteX 10470 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10471 NT_STATUS_OK
QUERY_FILE_INFORMATION 10471 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10454 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10451 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10453 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10462 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Close 10438 NT_STATUS_OK
Close 10430 NT_STATUS_OK
Close 10431 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10433 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10473 NT_STATUS_OK
QUERY_FILE_INFORMATION 10473 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10475 NT_STATUS_OK
QUERY_FILE_INFORMATION 10475 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10478 NT_STATUS_OK
ReadX 10478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10479 NT_STATUS_OK
ReadX 10479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10478 4096 16384 16384 NT_STATUS_OK
WriteX 10478 0 4096 4096 NT_STATUS_OK
WriteX 10479 0 4096 4096 NT_STATUS_OK
WriteX 10480 0 4096 4096 NT_STATUS_OK
WriteX 10481 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10484 NT_STATUS_OK
ReadX 10484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10485 NT_STATUS_OK
ReadX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10486 NT_STATUS_OK
ReadX 10486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10487 NT_STATUS_OK
ReadX 10487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10488 NT_STATUS_OK
ReadX 10488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10489 NT_STATUS_OK
ReadX 10489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10491 NT_STATUS_OK
ReadX 10491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10495 NT_STATUS_OK
ReadX 10495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 0 8192 8192 NT_STATUS_OK
ReadX 10484 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10498 0 4096 4096 NT_STATUS_OK
ReadX 10498 4096 4096 4096 NT_STATUS_OK
ReadX 10498 8192 4096 4096 NT_STATUS_OK
WriteX 10484 0 4096 4096 NT_STATUS_OK
WriteX 10485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
ReadX 10499 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10478 0 4096 4096 NT_STATUS_OK
WriteX 10479 0 4096 4096 NT_STATUS_OK
WriteX 10480 0 4096 4096 NT_STATUS_OK
WriteX 10481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10503 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10504 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 258 NT_STATUS_OK
WriteX 10504 0 2048 2048 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10506 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
ReadX 10507 4096 4096 4096 NT_STATUS_OK
WriteX 10507 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10508 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
ReadX 10509 4096 4096 4096 NT_STATUS_OK
WriteX 10509 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10510 NT_STATUS_OK
QUERY_FILE_INFORMATION 10510 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10497 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Close 10495 NT_STATUS_OK
Close 10491 NT_STATUS_OK
Close 10492 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Close 10486 NT_STATUS_OK
Close 10487 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10498 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10512 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10512 0 4096 4096 NT_STATUS_OK
ReadX 10512 4096 4096 4096 NT_STATUS_OK
ReadX 10512 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10514 NT_STATUS_OK
ReadX 10514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10515 NT_STATUS_OK
ReadX 10515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10517 NT_STATUS_OK
ReadX 10517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10519 NT_STATUS_OK
ReadX 10519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10520 NT_STATUS_OK
ReadX 10520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10525 NT_STATUS_OK
ReadX 10525 0 4096 4096 NT_STATUS_OK
ReadX 10513 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10530 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 1004 NT_STATUS_OK
WriteX 10530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 258 NT_STATUS_OK
WriteX 10530 0 2048 2048 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10535 NT_STATUS_OK
Close 10535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10536 NT_STATUS_OK
QUERY_FILE_INFORMATION 10536 1004 NT_STATUS_OK
WriteX 10536 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10536 258 NT_STATUS_OK
WriteX 10536 0 2048 2048 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10537 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10520 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10538 NT_STATUS_OK
QUERY_FILE_INFORMATION 10538 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Close 10519 NT_STATUS_OK
Close 10525 NT_STATUS_OK
Close 10513 NT_STATUS_OK
Close 10514 NT_STATUS_OK
Close 10517 NT_STATUS_OK
Close 10518 NT_STATUS_OK
Close 10515 NT_STATUS_OK
Close 10516 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Close 10522 NT_STATUS_OK
Close 10523 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10540 NT_STATUS_OK
QUERY_FILE_INFORMATION 10540 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 61440 4096 4096 NT_STATUS_OK
ReadX 10542 126976 4096 4096 NT_STATUS_OK
WriteX 10542 0 65536 65536 NT_STATUS_OK
WriteX 10542 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10543 NT_STATUS_OK
ReadX 10543 61440 4096 4096 NT_STATUS_OK
ReadX 10543 126976 4096 4096 NT_STATUS_OK
ReadX 10543 192512 4096 4096 NT_STATUS_OK
ReadX 10543 258048 4096 4096 NT_STATUS_OK
WriteX 10543 0 65536 65536 NT_STATUS_OK
WriteX 10543 65536 65536 65536 NT_STATUS_OK
WriteX 10543 131072 65536 65536 NT_STATUS_OK
WriteX 10543 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 61440 4096 4096 NT_STATUS_OK
ReadX 10544 126976 4096 4096 NT_STATUS_OK
ReadX 10544 192512 4096 4096 NT_STATUS_OK
ReadX 10544 258048 4096 4096 NT_STATUS_OK
ReadX 10544 323584 4096 4096 NT_STATUS_OK
ReadX 10544 389120 4096 4096 NT_STATUS_OK
ReadX 10544 454656 4096 4096 NT_STATUS_OK
ReadX 10544 520192 4096 4096 NT_STATUS_OK
WriteX 10544 0 65536 65536 NT_STATUS_OK
WriteX 10544 65536 65536 65536 NT_STATUS_OK
WriteX 10544 131072 65536 65536 NT_STATUS_OK
WriteX 10544 196608 65536 65536 NT_STATUS_OK
WriteX 10544 262144 65536 65536 NT_STATUS_OK
WriteX 10544 327680 65536 65536 NT_STATUS_OK
WriteX 10544 393216 65536 65536 NT_STATUS_OK
WriteX 10544 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10545 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10545 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10545 8192 4096 4096 NT_STATUS_OK
ReadX 10545 12288 4096 4096 NT_STATUS_OK
ReadX 10545 16384 4096 4096 NT_STATUS_OK
ReadX 10545 20480 4096 4096 NT_STATUS_OK
ReadX 10545 24576 4096 4096 NT_STATUS_OK
ReadX 10545 28672 4096 4096 NT_STATUS_OK
ReadX 10545 32768 4096 4096 NT_STATUS_OK
ReadX 10545 36864 4096 4096 NT_STATUS_OK
ReadX 10545 40960 4096 4096 NT_STATUS_OK
ReadX 10545 45056 4096 4096 NT_STATUS_OK
ReadX 10545 49152 4096 4096 NT_STATUS_OK
ReadX 10545 53248 4096 4096 NT_STATUS_OK
ReadX 10545 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10545 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10546 NT_STATUS_OK
Close 10546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Close 10543 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10548 NT_STATUS_OK
WriteX 10548 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10548 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10548 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 57088 57088 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
Close 10545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10549 NT_STATUS_OK
SET_FILE_INFORMATION 10549 1004 NT_STATUS_OK
Close 10549 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Close 10548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10552 NT_STATUS_OK
ReadX 10552 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10552 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10553 NT_STATUS_OK
WriteX 10553 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10553 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10553 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
WriteX 10553 0 51456 51456 NT_STATUS_OK
WriteX 10553 0 4096 4096 NT_STATUS_OK
Flush 10553 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10553 1004 NT_STATUS_OK
WriteX 10553 0 4096 4096 NT_STATUS_OK
Close 10553 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10555 NT_STATUS_OK
Close 10555 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10557 NT_STATUS_OK
ReadX 10557 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10557 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10562 NT_STATUS_OK
WriteX 10562 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10562 258 NT_STATUS_OK
WriteX 10562 0 53077 53077 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10563 NT_STATUS_OK
WriteX 10563 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10563 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 65536 65536 NT_STATUS_OK
WriteX 10563 65536 1856 1856 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Flush 10563 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10565 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10569 NT_STATUS_OK
Close 10569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10572 NT_STATUS_OK
WriteX 10572 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10572 258 NT_STATUS_OK
WriteX 10572 0 7983 7983 NT_STATUS_OK
Close 10572 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10574 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10577 NT_STATUS_OK
WriteX 10577 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10577 258 NT_STATUS_OK
WriteX 10577 0 65536 65536 NT_STATUS_OK
WriteX 10577 65536 65536 65536 NT_STATUS_OK
WriteX 10577 131072 65536 65536 NT_STATUS_OK
WriteX 10577 196608 65536 65536 NT_STATUS_OK
WriteX 10577 262144 65536 65536 NT_STATUS_OK
WriteX 10577 327680 65536 65536 NT_STATUS_OK
WriteX 10577 393216 65536 65536 NT_STATUS_OK
WriteX 10577 458752 46731 46731 NT_STATUS_OK
Close 10577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10578 NT_STATUS_OK
WriteX 10578 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10578 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10567 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10578 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10578 1004 NT_STATUS_OK
WriteX 10578 0 65536 65536 NT_STATUS_OK
WriteX 10578 65536 22848 22848 NT_STATUS_OK
WriteX 10578 0 4096 4096 NT_STATUS_OK
Flush 10578 NT_STATUS_OK
SET_FILE_INFORMATION 10578 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10578 1004 NT_STATUS_OK
WriteX 10578 0 4096 4096 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10580 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10582 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10583 NT_STATUS_OK
ReadX 10583 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10583 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10583 1004 NT_STATUS_OK
ReadX 10583 8192 4096 4096 NT_STATUS_OK
ReadX 10583 12288 4096 4096 NT_STATUS_OK
ReadX 10583 16384 4096 4096 NT_STATUS_OK
ReadX 10583 20480 4096 4096 NT_STATUS_OK
ReadX 10583 24576 4096 4096 NT_STATUS_OK
ReadX 10583 28672 4096 4096 NT_STATUS_OK
ReadX 10583 32768 4096 4096 NT_STATUS_OK
ReadX 10583 36864 4096 4096 NT_STATUS_OK
ReadX 10583 40960 4096 4096 NT_STATUS_OK
ReadX 10583 45056 4096 4096 NT_STATUS_OK
ReadX 10583 49152 4096 4096 NT_STATUS_OK
ReadX 10583 53248 4096 4096 NT_STATUS_OK
ReadX 10583 57344 4096 4096 NT_STATUS_OK
ReadX 10583 61440 4096 4096 NT_STATUS_OK
ReadX 10583 65536 4096 4096 NT_STATUS_OK
ReadX 10583 69632 4096 4096 NT_STATUS_OK
ReadX 10583 73728 4096 4096 NT_STATUS_OK
ReadX 10583 77824 4096 4096 NT_STATUS_OK
ReadX 10583 81920 4096 4096 NT_STATUS_OK
ReadX 10583 86016 4096 4096 NT_STATUS_OK
ReadX 10583 90112 4096 4096 NT_STATUS_OK
ReadX 10583 94208 4096 4096 NT_STATUS_OK
ReadX 10583 98304 4096 4096 NT_STATUS_OK
ReadX 10583 102400 4096 4096 NT_STATUS_OK
ReadX 10583 106496 4096 4096 NT_STATUS_OK
ReadX 10583 110592 4096 4096 NT_STATUS_OK
ReadX 10583 114688 4096 4096 NT_STATUS_OK
ReadX 10583 118784 4096 4096 NT_STATUS_OK
ReadX 10583 122880 4096 4096 NT_STATUS_OK
ReadX 10583 126976 4096 4096 NT_STATUS_OK
ReadX 10583 131072 4096 4096 NT_STATUS_OK
ReadX 10583 135168 4096 4096 NT_STATUS_OK
ReadX 10583 139264 4096 4096 NT_STATUS_OK
ReadX 10583 143360 4096 4096 NT_STATUS_OK
ReadX 10583 147456 4096 4096 NT_STATUS_OK
ReadX 10583 151552 4096 4096 NT_STATUS_OK
ReadX 10583 155648 4096 4096 NT_STATUS_OK
ReadX 10583 159744 4096 4096 NT_STATUS_OK
ReadX 10583 163840 4096 4096 NT_STATUS_OK
ReadX 10583 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10583 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10586 NT_STATUS_OK
WriteX 10586 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10586 258 NT_STATUS_OK
Close 10583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10587 NT_STATUS_OK
SET_FILE_INFORMATION 10587 1004 NT_STATUS_OK
Close 10587 NT_STATUS_OK
WriteX 10586 0 42388 42388 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10590 NT_STATUS_OK
ReadX 10590 0 4096 4096 NT_STATUS_OK
ReadX 10590 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10591 NT_STATUS_OK
WriteX 10591 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10591 258 NT_STATUS_OK
SET_FILE_INFORMATION 10591 1004 NT_STATUS_OK
WriteX 10591 0 42652 42652 NT_STATUS_OK
Close 10591 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
ReadX 10595 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10597 NT_STATUS_OK
Close 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10600 NT_STATUS_OK
WriteX 10600 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 258 NT_STATUS_OK
WriteX 10600 0 65536 65536 NT_STATUS_OK
WriteX 10600 65536 49 49 NT_STATUS_OK
Close 10600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10601 NT_STATUS_OK
ReadX 10601 0 61440 61440 NT_STATUS_OK
ReadX 10601 61440 4096 4096 NT_STATUS_OK
ReadX 10601 65536 61440 61440 NT_STATUS_OK
ReadX 10601 126976 4096 4096 NT_STATUS_OK
ReadX 10601 131072 61440 61440 NT_STATUS_OK
ReadX 10601 192512 4096 4096 NT_STATUS_OK
ReadX 10601 196608 61440 61440 NT_STATUS_OK
ReadX 10601 258048 4096 4096 NT_STATUS_OK
ReadX 10601 262144 61440 61440 NT_STATUS_OK
ReadX 10601 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 61440 61440 NT_STATUS_OK
ReadX 10602 61440 4096 4096 NT_STATUS_OK
ReadX 10602 65536 61440 61440 NT_STATUS_OK
ReadX 10602 126976 4096 4096 NT_STATUS_OK
ReadX 10602 131072 61440 61440 NT_STATUS_OK
ReadX 10602 192512 4096 4096 NT_STATUS_OK
ReadX 10602 196608 61440 61440 NT_STATUS_OK
ReadX 10602 258048 4096 4096 NT_STATUS_OK
ReadX 10602 262144 61440 61440 NT_STATUS_OK
ReadX 10602 323584 4096 4096 NT_STATUS_OK
ReadX 10602 327680 61440 61440 NT_STATUS_OK
ReadX 10602 389120 4096 4096 NT_STATUS_OK
ReadX 10602 393216 61440 61440 NT_STATUS_OK
ReadX 10602 454656 4096 4096 NT_STATUS_OK
ReadX 10602 458752 61440 61440 NT_STATUS_OK
ReadX 10602 520192 4096 4096 NT_STATUS_OK
ReadX 10602 524288 61440 61440 NT_STATUS_OK
ReadX 10602 585728 4096 4096 NT_STATUS_OK
ReadX 10602 589824 61440 61440 NT_STATUS_OK
ReadX 10602 651264 4096 4096 NT_STATUS_OK
ReadX 10602 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 61440 61440 NT_STATUS_OK
ReadX 10603 61440 4096 4096 NT_STATUS_OK
ReadX 10603 65536 61440 61440 NT_STATUS_OK
ReadX 10603 126976 4096 4096 NT_STATUS_OK
ReadX 10603 131072 61440 61440 NT_STATUS_OK
ReadX 10603 192512 4096 4096 NT_STATUS_OK
ReadX 10603 196608 61440 61440 NT_STATUS_OK
ReadX 10603 258048 4096 4096 NT_STATUS_OK
ReadX 10603 262144 61440 61440 NT_STATUS_OK
ReadX 10603 323584 4096 4096 NT_STATUS_OK
ReadX 10603 327680 61440 61440 NT_STATUS_OK
ReadX 10603 389120 4096 4096 NT_STATUS_OK
ReadX 10603 393216 61440 61440 NT_STATUS_OK
ReadX 10603 454656 4096 4096 NT_STATUS_OK
ReadX 10603 458752 61440 61440 NT_STATUS_OK
ReadX 10603 520192 4096 4096 NT_STATUS_OK
ReadX 10603 524288 61440 61440 NT_STATUS_OK
ReadX 10603 585728 4096 4096 NT_STATUS_OK
ReadX 10603 589824 61440 61440 NT_STATUS_OK
ReadX 10603 651264 4096 4096 NT_STATUS_OK
ReadX 10603 655360 61440 61440 NT_STATUS_OK
ReadX 10603 716800 4096 4096 NT_STATUS_OK
ReadX 10603 720896 61440 61440 NT_STATUS_OK
ReadX 10603 782336 4096 4096 NT_STATUS_OK
ReadX 10603 786432 61440 61440 NT_STATUS_OK
ReadX 10603 847872 4096 4096 NT_STATUS_OK
ReadX 10603 851968 61440 61440 NT_STATUS_OK
ReadX 10603 913408 4096 4096 NT_STATUS_OK
ReadX 10603 917504 61440 61440 NT_STATUS_OK
ReadX 10603 978944 4096 4096 NT_STATUS_OK
ReadX 10603 983040 61440 61440 NT_STATUS_OK
ReadX 10603 1044480 4096 4096 NT_STATUS_OK
ReadX 10603 1048576 61440 61440 NT_STATUS_OK
ReadX 10603 1110016 4096 4096 NT_STATUS_OK
ReadX 10603 1114112 61440 61440 NT_STATUS_OK
ReadX 10603 1175552 4096 4096 NT_STATUS_OK
ReadX 10603 1179648 61440 61440 NT_STATUS_OK
ReadX 10603 1241088 4096 4096 NT_STATUS_OK
ReadX 10603 1245184 61440 61440 NT_STATUS_OK
ReadX 10603 1306624 4096 4096 NT_STATUS_OK
ReadX 10603 1310720 61440 61440 NT_STATUS_OK
ReadX 10603 1372160 4096 4096 NT_STATUS_OK
ReadX 10603 1376256 61440 61440 NT_STATUS_OK
ReadX 10603 1437696 4096 4096 NT_STATUS_OK
ReadX 10603 1441792 61440 61440 NT_STATUS_OK
ReadX 10603 1503232 4096 4096 NT_STATUS_OK
ReadX 10603 1507328 61440 61440 NT_STATUS_OK
ReadX 10603 1568768 4096 4096 NT_STATUS_OK
ReadX 10603 1572864 61440 61440 NT_STATUS_OK
ReadX 10603 1634304 4096 4096 NT_STATUS_OK
ReadX 10603 1638400 61440 61440 NT_STATUS_OK
ReadX 10603 1699840 4096 4096 NT_STATUS_OK
ReadX 10603 1703936 61440 61440 NT_STATUS_OK
ReadX 10603 1765376 4096 4096 NT_STATUS_OK
ReadX 10603 1769472 61440 61440 NT_STATUS_OK
ReadX 10603 1830912 4096 4096 NT_STATUS_OK
ReadX 10603 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10605 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10605 1005 NT_STATUS_OK
ReadX 10605 2156 24 24 NT_STATUS_OK
ReadX 10605 2139 276 276 NT_STATUS_OK
ReadX 10605 2136 14 14 NT_STATUS_OK
ReadX 10605 2136 7 7 NT_STATUS_OK
ReadX 10605 2138 12 12 NT_STATUS_OK
ReadX 10605 2137 8 8 NT_STATUS_OK
ReadX 10605 2135 15 15 NT_STATUS_OK
ReadX 10605 0 16 16 NT_STATUS_OK
ReadX 10605 16 2048 2048 NT_STATUS_OK
ReadX 10605 2064 2048 2048 NT_STATUS_OK
ReadX 10605 257 2048 2048 NT_STATUS_OK
ReadX 10605 385 2048 2048 NT_STATUS_OK
ReadX 10605 513 2048 2048 NT_STATUS_OK
ReadX 10605 641 2048 2048 NT_STATUS_OK
ReadX 10605 769 2048 2048 NT_STATUS_OK
ReadX 10605 897 2048 2048 NT_STATUS_OK
ReadX 10605 1025 2048 2048 NT_STATUS_OK
ReadX 10605 1153 2048 2048 NT_STATUS_OK
ReadX 10605 1281 2048 2048 NT_STATUS_OK
ReadX 10605 1409 2048 2048 NT_STATUS_OK
ReadX 10605 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10607 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10601 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10603 NT_STATUS_OK
Close 10595 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10610 NT_STATUS_OK
WriteX 10610 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10610 258 NT_STATUS_OK
WriteX 10610 0 10575 10575 NT_STATUS_OK
Flush 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10611 NT_STATUS_OK
Close 10611 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10613 NT_STATUS_OK
ReadX 10613 0 4096 4096 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10615 NT_STATUS_OK
LockX 10615 2147483538 1 NT_STATUS_OK
UnlockX 10615 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1005 NT_STATUS_OK
ReadX 10615 0 512 512 NT_STATUS_OK
ReadX 10615 512 512 512 NT_STATUS_OK
ReadX 10615 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10615 1004 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10616 NT_STATUS_OK
QUERY_FILE_INFORMATION 10616 1005 NT_STATUS_OK
ReadX 10616 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10617 NT_STATUS_OK
LockX 10617 2147483538 1 NT_STATUS_OK
UnlockX 10617 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10617 1005 NT_STATUS_OK
ReadX 10617 0 512 512 NT_STATUS_OK
ReadX 10617 512 512 512 NT_STATUS_OK
ReadX 10617 1024 512 512 NT_STATUS_OK
ReadX 10617 288 20 20 NT_STATUS_OK
ReadX 10617 308 2084 2084 NT_STATUS_OK
ReadX 10617 388 2084 2084 NT_STATUS_OK
ReadX 10617 388 2084 2084 NT_STATUS_OK
ReadX 10604 2157 1386 1386 NT_STATUS_OK
ReadX 10617 2472 399 399 NT_STATUS_OK
ReadX 10617 3072 1536 1536 NT_STATUS_OK
ReadX 10617 544 149 149 NT_STATUS_OK
ReadX 10617 693 485 485 NT_STATUS_OK
Close 10617 NT_STATUS_OK
ReadX 10604 2157 4096 4096 NT_STATUS_OK
ReadX 10604 6253 4096 4096 NT_STATUS_OK
ReadX 10604 10349 4096 4096 NT_STATUS_OK
ReadX 10604 14445 4096 4096 NT_STATUS_OK
ReadX 10604 18541 4096 4096 NT_STATUS_OK
ReadX 10604 22637 256 256 NT_STATUS_OK
ReadX 10604 22893 4096 4096 NT_STATUS_OK
ReadX 10604 26989 4096 4096 NT_STATUS_OK
ReadX 10604 31085 4096 4096 NT_STATUS_OK
ReadX 10604 35181 4096 4096 NT_STATUS_OK
ReadX 10604 39277 4096 4096 NT_STATUS_OK
ReadX 10604 43373 4096 4096 NT_STATUS_OK
ReadX 10604 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10604 2157 1024 1024 NT_STATUS_OK
ReadX 10604 1667 4688 4688 NT_STATUS_OK
ReadX 10604 6355 3516 3516 NT_STATUS_OK
ReadX 10604 9871 16384 16384 NT_STATUS_OK
ReadX 10604 26255 3771 3771 NT_STATUS_OK
ReadX 10604 30026 2048 2048 NT_STATUS_OK
ReadX 10604 32074 1024 1024 NT_STATUS_OK
ReadX 10604 33098 6652 6652 NT_STATUS_OK
ReadX 10604 39750 16384 16384 NT_STATUS_OK
ReadX 10604 56134 10496 10496 NT_STATUS_OK
ReadX 10604 66630 1784 1784 NT_STATUS_OK
ReadX 10604 68414 90 90 NT_STATUS_OK
ReadX 10604 68504 273 273 NT_STATUS_OK
ReadX 10604 68777 1600 1600 NT_STATUS_OK
ReadX 10604 70377 640 640 NT_STATUS_OK
ReadX 10604 71017 1280 1280 NT_STATUS_OK
ReadX 10604 72297 8464 8464 NT_STATUS_OK
ReadX 10604 80761 158 158 NT_STATUS_OK
ReadX 10604 80919 912 912 NT_STATUS_OK
ReadX 10604 81831 1980 1980 NT_STATUS_OK
ReadX 10604 83811 2256 2256 NT_STATUS_OK
ReadX 10604 86067 400 400 NT_STATUS_OK
ReadX 10604 86467 252 252 NT_STATUS_OK
ReadX 10604 86719 42 42 NT_STATUS_OK
ReadX 10604 86761 725 725 NT_STATUS_OK
ReadX 10604 2009 512 512 NT_STATUS_OK
ReadX 10604 3895 9 9 NT_STATUS_OK
ReadX 10604 3781 46 46 NT_STATUS_OK
ReadX 10604 4059 92 92 NT_STATUS_OK
ReadX 10604 3781 92 92 NT_STATUS_OK
ReadX 10604 3986 184 184 NT_STATUS_OK
ReadX 10604 3987 16384 16384 NT_STATUS_OK
ReadX 10604 3902 16384 16384 NT_STATUS_OK
ReadX 10604 3781 10240 10240 NT_STATUS_OK
ReadX 10604 3821 16384 16384 NT_STATUS_OK
ReadX 10604 3891 935 935 NT_STATUS_OK
ReadX 10604 4060 10240 10240 NT_STATUS_OK
ReadX 10604 4059 184 184 NT_STATUS_OK
ReadX 10604 256 184 184 NT_STATUS_OK
ReadX 10604 256 1026 1026 NT_STATUS_OK
ReadX 10604 3901 326 326 NT_STATUS_OK
ReadX 10604 3899 652 652 NT_STATUS_OK
ReadX 10604 256 2 2 NT_STATUS_OK
ReadX 10604 258 4948 4948 NT_STATUS_OK
Close 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10619 NT_STATUS_OK
Close 10619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10622 NT_STATUS_OK
WriteX 10622 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 258 NT_STATUS_OK
WriteX 10622 0 65536 65536 NT_STATUS_OK
WriteX 10622 65536 65536 65536 NT_STATUS_OK
WriteX 10622 131072 65536 65536 NT_STATUS_OK
WriteX 10622 196608 65536 65536 NT_STATUS_OK
WriteX 10622 262144 65536 65536 NT_STATUS_OK
WriteX 10622 327680 65536 65536 NT_STATUS_OK
WriteX 10622 393216 65536 65536 NT_STATUS_OK
WriteX 10622 458752 65536 65536 NT_STATUS_OK
WriteX 10622 524288 65536 65536 NT_STATUS_OK
WriteX 10622 589824 35257 35257 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10624 NT_STATUS_OK
Close 10624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10627 NT_STATUS_OK
WriteX 10627 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10627 258 NT_STATUS_OK
WriteX 10627 0 65536 65536 NT_STATUS_OK
WriteX 10627 65536 65536 65536 NT_STATUS_OK
WriteX 10627 131072 65536 65536 NT_STATUS_OK
WriteX 10627 196608 65536 65536 NT_STATUS_OK
WriteX 10627 262144 65536 65536 NT_STATUS_OK
WriteX 10627 327680 65536 65536 NT_STATUS_OK
WriteX 10627 393216 65536 65536 NT_STATUS_OK
WriteX 10627 458752 65536 65536 NT_STATUS_OK
WriteX 10627 524288 65536 65536 NT_STATUS_OK
WriteX 10627 589824 57598 57598 NT_STATUS_OK
Close 10627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10629 NT_STATUS_OK
WriteX 10629 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10629 258 NT_STATUS_OK
WriteX 10629 0 12543 12543 NT_STATUS_OK
Flush 10629 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10633 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10635 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10635 1005 NT_STATUS_OK
ReadX 10635 1938 24 24 NT_STATUS_OK
ReadX 10635 1920 276 276 NT_STATUS_OK
ReadX 10635 1918 14 14 NT_STATUS_OK
ReadX 10635 1918 7 7 NT_STATUS_OK
ReadX 10635 1919 12 12 NT_STATUS_OK
ReadX 10635 1919 8 8 NT_STATUS_OK
ReadX 10635 1917 15 15 NT_STATUS_OK
ReadX 10635 0 16 16 NT_STATUS_OK
ReadX 10635 16 2048 2048 NT_STATUS_OK
ReadX 10635 2064 2048 2048 NT_STATUS_OK
ReadX 10635 257 2048 2048 NT_STATUS_OK
ReadX 10635 385 2048 2048 NT_STATUS_OK
ReadX 10635 513 2048 2048 NT_STATUS_OK
ReadX 10635 641 2048 2048 NT_STATUS_OK
ReadX 10635 769 2048 2048 NT_STATUS_OK
ReadX 10635 897 2048 2048 NT_STATUS_OK
ReadX 10635 1025 2048 2048 NT_STATUS_OK
ReadX 10635 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10637 NT_STATUS_OK
Close 10637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10640 NT_STATUS_OK
WriteX 10640 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10640 258 NT_STATUS_OK
WriteX 10640 0 11588 11588 NT_STATUS_OK
Flush 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10643 NT_STATUS_OK
ReadX 10643 0 4096 4096 NT_STATUS_OK
Close 10635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10645 NT_STATUS_OK
WriteX 10645 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10645 258 NT_STATUS_OK
WriteX 10645 0 11615 11615 NT_STATUS_OK
Flush 10645 NT_STATUS_OK
Close 10645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10647 NT_STATUS_OK
Close 10647 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10651 NT_STATUS_OK
Close 10651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10654 NT_STATUS_OK
WriteX 10654 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10654 258 NT_STATUS_OK
WriteX 10654 0 65536 65536 NT_STATUS_OK
WriteX 10654 65536 16050 16050 NT_STATUS_OK
Close 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10634 1939 64 64 NT_STATUS_OK
ReadX 10634 128 248 248 NT_STATUS_OK
ReadX 10634 128 568 568 NT_STATUS_OK
ReadX 10634 3872 1536 1536 NT_STATUS_OK
ReadX 10634 3456 2560 2560 NT_STATUS_OK
ReadX 10634 3136 512 512 NT_STATUS_OK
ReadX 10634 2880 4096 4096 NT_STATUS_OK
ReadX 10634 3264 3072 3072 NT_STATUS_OK
ReadX 10634 320 4096 4096 NT_STATUS_OK
ReadX 10634 1024 4096 4096 NT_STATUS_OK
ReadX 10634 3616 4096 4096 NT_STATUS_OK
ReadX 10634 1939 64 64 NT_STATUS_OK
ReadX 10634 128 248 248 NT_STATUS_OK
ReadX 10634 128 608 608 NT_STATUS_OK
ReadX 10634 2858 1024 1024 NT_STATUS_OK
ReadX 10634 2810 4096 4096 NT_STATUS_OK
ReadX 10634 2826 4096 4096 NT_STATUS_OK
ReadX 10634 2580 2048 2048 NT_STATUS_OK
ReadX 10634 2800 2560 2560 NT_STATUS_OK
ReadX 10634 2100 4096 4096 NT_STATUS_OK
ReadX 10634 2084 4096 4096 NT_STATUS_OK
ReadX 10634 868 4096 4096 NT_STATUS_OK
ReadX 10634 2324 4096 4096 NT_STATUS_OK
ReadX 10634 884 4096 4096 NT_STATUS_OK
ReadX 10634 2604 1024 1024 NT_STATUS_OK
ReadX 10634 580 4096 4096 NT_STATUS_OK
ReadX 10634 596 4096 4096 NT_STATUS_OK
ReadX 10634 2752 4096 4096 NT_STATUS_OK
ReadX 10634 2842 1024 1024 NT_STATUS_OK
ReadX 10634 660 4096 4096 NT_STATUS_OK
ReadX 10634 2720 4096 4096 NT_STATUS_OK
ReadX 10634 2736 4096 4096 NT_STATUS_OK
ReadX 10634 628 4096 4096 NT_STATUS_OK
ReadX 10634 2704 4096 4096 NT_STATUS_OK
ReadX 10634 1556 4096 4096 NT_STATUS_OK
ReadX 10634 576 4096 4096 NT_STATUS_OK
ReadX 10634 3168 1536 1536 NT_STATUS_OK
ReadX 10634 832 4096 4096 NT_STATUS_OK
ReadX 10634 1088 4096 4096 NT_STATUS_OK
ReadX 10634 1344 4096 4096 NT_STATUS_OK
ReadX 10634 1600 4096 4096 NT_STATUS_OK
ReadX 10634 1856 4096 4096 NT_STATUS_OK
ReadX 10634 2112 4096 4096 NT_STATUS_OK
ReadX 10634 1892 4096 4096 NT_STATUS_OK
ReadX 10634 820 4096 4096 NT_STATUS_OK
ReadX 10634 788 4096 4096 NT_STATUS_OK
ReadX 10634 1604 4096 4096 NT_STATUS_OK
ReadX 10634 3648 4096 4096 NT_STATUS_OK
ReadX 10634 2608 4096 4096 NT_STATUS_OK
ReadX 10634 548 4096 4096 NT_STATUS_OK
ReadX 10634 740 4096 4096 NT_STATUS_OK
ReadX 10634 1344 4096 4096 NT_STATUS_OK
ReadX 10634 3392 4096 4096 NT_STATUS_OK
ReadX 10634 3904 4096 4096 NT_STATUS_OK
ReadX 10634 644 4096 4096 NT_STATUS_OK
ReadX 10634 676 4096 4096 NT_STATUS_OK
ReadX 10634 2688 4096 4096 NT_STATUS_OK
ReadX 10634 320 4096 4096 NT_STATUS_OK
ReadX 10634 900 4096 4096 NT_STATUS_OK
ReadX 10634 1908 4096 4096 NT_STATUS_OK
ReadX 10634 852 4096 4096 NT_STATUS_OK
ReadX 10634 724 4096 4096 NT_STATUS_OK
ReadX 10634 2292 4096 4096 NT_STATUS_OK
ReadX 10634 612 4096 4096 NT_STATUS_OK
ReadX 10634 388 4096 4096 NT_STATUS_OK
ReadX 10634 2368 4096 4096 NT_STATUS_OK
ReadX 10634 2624 4096 4096 NT_STATUS_OK
ReadX 10634 500 4096 4096 NT_STATUS_OK
ReadX 10634 356 4096 4096 NT_STATUS_OK
ReadX 10634 1024 4096 4096 NT_STATUS_OK
ReadX 10634 576 4096 4096 NT_STATUS_OK
ReadX 10634 340 4096 4096 NT_STATUS_OK
ReadX 10634 420 4096 4096 NT_STATUS_OK
ReadX 10634 1600 4096 4096 NT_STATUS_OK
ReadX 10634 404 4096 4096 NT_STATUS_OK
ReadX 10634 1428 4096 4096 NT_STATUS_OK
ReadX 10634 2656 4096 4096 NT_STATUS_OK
ReadX 10634 2624 4096 4096 NT_STATUS_OK
ReadX 10634 452 4096 4096 NT_STATUS_OK
ReadX 10634 692 4096 4096 NT_STATUS_OK
ReadX 10634 564 4096 4096 NT_STATUS_OK
ReadX 10634 372 4096 4096 NT_STATUS_OK
ReadX 10634 468 4096 4096 NT_STATUS_OK
ReadX 10634 484 4096 4096 NT_STATUS_OK
ReadX 10634 1088 4096 4096 NT_STATUS_OK
ReadX 10634 1924 4096 4096 NT_STATUS_OK
ReadX 10634 2768 4096 4096 NT_STATUS_OK
ReadX 10634 832 4096 4096 NT_STATUS_OK
ReadX 10634 836 4096 4096 NT_STATUS_OK
ReadX 10634 1856 4096 4096 NT_STATUS_OK
ReadX 10634 2640 4096 4096 NT_STATUS_OK
ReadX 10634 436 4096 4096 NT_STATUS_OK
ReadX 10634 1828 4096 4096 NT_STATUS_OK
ReadX 10634 804 4096 4096 NT_STATUS_OK
ReadX 10634 1860 4096 4096 NT_STATUS_OK
ReadX 10634 1812 4096 4096 NT_STATUS_OK
ReadX 10634 756 4096 4096 NT_STATUS_OK
ReadX 10634 1636 4096 4096 NT_STATUS_OK
ReadX 10634 772 4096 4096 NT_STATUS_OK
ReadX 10634 2036 4096 4096 NT_STATUS_OK
ReadX 10634 1220 4096 4096 NT_STATUS_OK
ReadX 10634 1652 4096 4096 NT_STATUS_OK
ReadX 10634 2588 4096 4096 NT_STATUS_OK
ReadX 10634 916 4096 4096 NT_STATUS_OK
ReadX 10634 260 4096 4096 NT_STATUS_OK
ReadX 10634 932 4096 4096 NT_STATUS_OK
ReadX 10634 2624 4096 4096 NT_STATUS_OK
ReadX 10634 308 4096 4096 NT_STATUS_OK
ReadX 10634 292 4096 4096 NT_STATUS_OK
ReadX 10634 1140 4096 4096 NT_STATUS_OK
ReadX 10634 276 4096 4096 NT_STATUS_OK
ReadX 10634 2020 4096 4096 NT_STATUS_OK
ReadX 10634 2880 4096 4096 NT_STATUS_OK
ReadX 10634 516 4096 4096 NT_STATUS_OK
ReadX 10634 1844 4096 4096 NT_STATUS_OK
ReadX 10634 1124 4096 4096 NT_STATUS_OK
ReadX 10634 3136 4096 4096 NT_STATUS_OK
ReadX 10634 324 4096 4096 NT_STATUS_OK
ReadX 10634 1156 4096 4096 NT_STATUS_OK
ReadX 10634 1172 4096 4096 NT_STATUS_OK
ReadX 10634 2112 4096 4096 NT_STATUS_OK
ReadX 10634 2368 4096 4096 NT_STATUS_OK
ReadX 10634 964 4096 4096 NT_STATUS_OK
ReadX 10634 980 4096 4096 NT_STATUS_OK
ReadX 10634 1012 4096 4096 NT_STATUS_OK
ReadX 10634 532 4096 4096 NT_STATUS_OK
ReadX 10634 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10634 1620 4096 4096 NT_STATUS_OK
ReadX 10634 1604 4096 4096 NT_STATUS_OK
ReadX 10634 2116 4096 4096 NT_STATUS_OK
ReadX 10634 2132 4096 4096 NT_STATUS_OK
ReadX 10634 2148 4096 4096 NT_STATUS_OK
ReadX 10634 2276 4096 4096 NT_STATUS_OK
ReadX 10634 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10656 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10659 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 1004 NT_STATUS_OK
Close 10614 NT_STATUS_OK
WriteX 10659 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10659 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10616 1004 NT_STATUS_OK
Close 10616 NT_STATUS_OK
WriteX 10659 0 65536 65536 NT_STATUS_OK
WriteX 10659 65536 64850 64850 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10661 NT_STATUS_OK
WriteX 10661 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10661 258 NT_STATUS_OK
ReadX 10634 2068 4096 4096 NT_STATUS_OK
ReadX 10634 1588 4096 4096 NT_STATUS_OK
ReadX 10634 1572 4096 4096 NT_STATUS_OK
WriteX 10661 0 18630 18630 NT_STATUS_OK
Flush 10661 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10663 NT_STATUS_OK
Close 10663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10634 612 4096 4096 NT_STATUS_OK
ReadX 10634 564 4096 4096 NT_STATUS_OK
ReadX 10634 1876 4096 4096 NT_STATUS_OK
ReadX 10634 628 4096 4096 NT_STATUS_OK
ReadX 10634 740 4096 4096 NT_STATUS_OK
ReadX 10634 724 4096 4096 NT_STATUS_OK
ReadX 10634 644 4096 4096 NT_STATUS_OK
ReadX 10634 2324 4096 4096 NT_STATUS_OK
ReadX 10634 660 4096 4096 NT_STATUS_OK
ReadX 10634 852 4096 4096 NT_STATUS_OK
ReadX 10634 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10634 2368 4096 4096 NT_STATUS_OK
ReadX 10634 1024 4096 4096 NT_STATUS_OK
ReadX 10634 320 4096 4096 NT_STATUS_OK
ReadX 10634 580 4096 4096 NT_STATUS_OK
ReadX 10634 3136 512 512 NT_STATUS_OK
ReadX 10634 2880 4096 4096 NT_STATUS_OK
Close 10634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 61440 4096 4096 NT_STATUS_OK
ReadX 10666 126976 4096 4096 NT_STATUS_OK
WriteX 10666 0 65536 65536 NT_STATUS_OK
WriteX 10666 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 61440 4096 4096 NT_STATUS_OK
ReadX 10667 126976 4096 4096 NT_STATUS_OK
ReadX 10667 192512 4096 4096 NT_STATUS_OK
ReadX 10667 258048 4096 4096 NT_STATUS_OK
WriteX 10667 0 65536 65536 NT_STATUS_OK
WriteX 10667 65536 65536 65536 NT_STATUS_OK
WriteX 10667 131072 65536 65536 NT_STATUS_OK
WriteX 10667 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 61440 4096 4096 NT_STATUS_OK
ReadX 10668 126976 4096 4096 NT_STATUS_OK
ReadX 10668 192512 4096 4096 NT_STATUS_OK
ReadX 10668 258048 4096 4096 NT_STATUS_OK
ReadX 10668 323584 4096 4096 NT_STATUS_OK
ReadX 10668 389120 4096 4096 NT_STATUS_OK
ReadX 10668 454656 4096 4096 NT_STATUS_OK
ReadX 10668 520192 4096 4096 NT_STATUS_OK
WriteX 10668 0 65536 65536 NT_STATUS_OK
WriteX 10668 65536 65536 65536 NT_STATUS_OK
WriteX 10668 131072 65536 65536 NT_STATUS_OK
WriteX 10668 196608 65536 65536 NT_STATUS_OK
WriteX 10668 262144 65536 65536 NT_STATUS_OK
WriteX 10668 327680 65536 65536 NT_STATUS_OK
WriteX 10668 393216 65536 65536 NT_STATUS_OK
WriteX 10668 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10670 NT_STATUS_OK
Close 10670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10671 NT_STATUS_OK
WriteX 10671 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10671 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10669 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10669 0 8192 8192 NT_STATUS_OK
Flush 10669 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10673 NT_STATUS_OK
Close 10673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10666 NT_STATUS_OK
Close 10667 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10676 NT_STATUS_OK
WriteX 10676 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10676 258 NT_STATUS_OK
WriteX 10676 0 62591 62591 NT_STATUS_OK
Close 10676 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10678 NT_STATUS_OK
Close 10678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10681 NT_STATUS_OK
WriteX 10681 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10681 258 NT_STATUS_OK
WriteX 10681 0 10845 10845 NT_STATUS_OK
Close 10681 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10683 NT_STATUS_OK
Close 10683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10686 NT_STATUS_OK
WriteX 10686 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10686 258 NT_STATUS_OK
WriteX 10686 0 30118 30118 NT_STATUS_OK
Close 10686 NT_STATUS_OK
WriteX 10669 0 4096 4096 NT_STATUS_OK
WriteX 10671 0 64 64 NT_STATUS_OK
Close 10671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 61440 61440 NT_STATUS_OK
ReadX 10688 61440 4096 4096 NT_STATUS_OK
ReadX 10688 65536 61440 61440 NT_STATUS_OK
ReadX 10688 126976 4096 4096 NT_STATUS_OK
ReadX 10688 131072 61440 61440 NT_STATUS_OK
ReadX 10688 192512 4096 4096 NT_STATUS_OK
ReadX 10688 196608 61440 61440 NT_STATUS_OK
ReadX 10688 258048 4096 4096 NT_STATUS_OK
ReadX 10688 262144 61440 61440 NT_STATUS_OK
ReadX 10688 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 0 61440 61440 NT_STATUS_OK
ReadX 10689 61440 4096 4096 NT_STATUS_OK
ReadX 10689 65536 61440 61440 NT_STATUS_OK
ReadX 10689 126976 4096 4096 NT_STATUS_OK
ReadX 10689 131072 61440 61440 NT_STATUS_OK
ReadX 10689 192512 4096 4096 NT_STATUS_OK
ReadX 10689 196608 61440 61440 NT_STATUS_OK
ReadX 10689 258048 4096 4096 NT_STATUS_OK
ReadX 10689 262144 61440 61440 NT_STATUS_OK
ReadX 10689 323584 4096 4096 NT_STATUS_OK
ReadX 10689 327680 61440 61440 NT_STATUS_OK
ReadX 10689 389120 4096 4096 NT_STATUS_OK
ReadX 10689 393216 61440 61440 NT_STATUS_OK
ReadX 10689 454656 4096 4096 NT_STATUS_OK
ReadX 10689 458752 61440 61440 NT_STATUS_OK
ReadX 10689 520192 4096 4096 NT_STATUS_OK
ReadX 10689 524288 61440 61440 NT_STATUS_OK
ReadX 10689 585728 4096 4096 NT_STATUS_OK
ReadX 10689 589824 61440 61440 NT_STATUS_OK
ReadX 10689 651264 4096 4096 NT_STATUS_OK
ReadX 10689 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 61440 61440 NT_STATUS_OK
ReadX 10690 61440 4096 4096 NT_STATUS_OK
ReadX 10690 65536 61440 61440 NT_STATUS_OK
ReadX 10690 126976 4096 4096 NT_STATUS_OK
ReadX 10690 131072 61440 61440 NT_STATUS_OK
ReadX 10690 192512 4096 4096 NT_STATUS_OK
ReadX 10690 196608 61440 61440 NT_STATUS_OK
ReadX 10690 258048 4096 4096 NT_STATUS_OK
ReadX 10690 262144 61440 61440 NT_STATUS_OK
ReadX 10690 323584 4096 4096 NT_STATUS_OK
ReadX 10690 327680 61440 61440 NT_STATUS_OK
ReadX 10690 389120 4096 4096 NT_STATUS_OK
ReadX 10690 393216 61440 61440 NT_STATUS_OK
ReadX 10690 454656 4096 4096 NT_STATUS_OK
ReadX 10690 458752 61440 61440 NT_STATUS_OK
ReadX 10690 520192 4096 4096 NT_STATUS_OK
ReadX 10690 524288 61440 61440 NT_STATUS_OK
ReadX 10690 585728 4096 4096 NT_STATUS_OK
ReadX 10690 589824 61440 61440 NT_STATUS_OK
ReadX 10690 651264 4096 4096 NT_STATUS_OK
ReadX 10690 655360 61440 61440 NT_STATUS_OK
ReadX 10690 716800 4096 4096 NT_STATUS_OK
ReadX 10690 720896 61440 61440 NT_STATUS_OK
ReadX 10690 782336 4096 4096 NT_STATUS_OK
ReadX 10690 786432 61440 61440 NT_STATUS_OK
ReadX 10690 847872 4096 4096 NT_STATUS_OK
ReadX 10690 851968 61440 61440 NT_STATUS_OK
ReadX 10690 913408 4096 4096 NT_STATUS_OK
ReadX 10690 917504 61440 61440 NT_STATUS_OK
ReadX 10690 978944 4096 4096 NT_STATUS_OK
ReadX 10690 983040 61440 61440 NT_STATUS_OK
ReadX 10690 1044480 4096 4096 NT_STATUS_OK
ReadX 10690 1048576 61440 61440 NT_STATUS_OK
ReadX 10690 1110016 4096 4096 NT_STATUS_OK
ReadX 10690 1114112 61440 61440 NT_STATUS_OK
ReadX 10690 1175552 4096 4096 NT_STATUS_OK
ReadX 10690 1179648 61440 61440 NT_STATUS_OK
ReadX 10690 1241088 4096 4096 NT_STATUS_OK
ReadX 10690 1245184 61440 61440 NT_STATUS_OK
ReadX 10690 1306624 4096 4096 NT_STATUS_OK
ReadX 10690 1310720 61440 61440 NT_STATUS_OK
ReadX 10690 1372160 4096 4096 NT_STATUS_OK
ReadX 10690 1376256 61440 61440 NT_STATUS_OK
ReadX 10690 1437696 4096 4096 NT_STATUS_OK
ReadX 10690 1441792 61440 61440 NT_STATUS_OK
ReadX 10690 1503232 4096 4096 NT_STATUS_OK
ReadX 10690 1507328 61440 61440 NT_STATUS_OK
ReadX 10690 1568768 4096 4096 NT_STATUS_OK
ReadX 10690 1572864 61440 61440 NT_STATUS_OK
ReadX 10690 1634304 4096 4096 NT_STATUS_OK
ReadX 10690 1638400 61440 61440 NT_STATUS_OK
ReadX 10690 1699840 4096 4096 NT_STATUS_OK
ReadX 10690 1703936 61440 61440 NT_STATUS_OK
ReadX 10690 1765376 4096 4096 NT_STATUS_OK
ReadX 10690 1769472 61440 61440 NT_STATUS_OK
ReadX 10690 1830912 4096 4096 NT_STATUS_OK
ReadX 10690 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10691 NT_STATUS_OK
Close 10691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10693 NT_STATUS_OK
ReadX 10693 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10694 NT_STATUS_OK
ReadX 10694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10695 NT_STATUS_OK
ReadX 10695 0 4096 4096 NT_STATUS_OK
ReadX 10695 4096 4096 4096 NT_STATUS_OK
ReadX 10695 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10696 NT_STATUS_OK
Close 10696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10693 NT_STATUS_OK
Close 10694 NT_STATUS_OK
Close 10695 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10699 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10699 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10700 NT_STATUS_OK
Close 10700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10698 NT_STATUS_OK
Close 10699 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10703 NT_STATUS_OK
ReadX 10703 0 8192 8192 NT_STATUS_OK
ReadX 10703 8192 8192 8192 NT_STATUS_OK
ReadX 10703 16384 8192 8192 NT_STATUS_OK
ReadX 10703 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10705 NT_STATUS_OK
Close 10705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10703 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10708 NT_STATUS_OK
WriteX 10708 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10708 258 NT_STATUS_OK
WriteX 10708 0 10438 10438 NT_STATUS_OK
Close 10708 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10709 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10712 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10714 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10715 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10717 NT_STATUS_OK
ReadX 10717 0 4096 4096 NT_STATUS_OK
ReadX 10717 4096 4096 4096 NT_STATUS_OK
ReadX 10717 8192 4096 4096 NT_STATUS_OK
ReadX 10717 12288 8192 8192 NT_STATUS_OK
ReadX 10717 20480 8192 8192 NT_STATUS_OK
ReadX 10717 28672 8192 8192 NT_STATUS_OK
ReadX 10717 36864 8192 8192 NT_STATUS_OK
ReadX 10717 45056 8192 8192 NT_STATUS_OK
ReadX 10717 53248 8192 8192 NT_STATUS_OK
ReadX 10717 61440 8192 8192 NT_STATUS_OK
ReadX 10717 69632 8192 8192 NT_STATUS_OK
ReadX 10717 77824 8192 8192 NT_STATUS_OK
ReadX 10717 86016 8192 8192 NT_STATUS_OK
ReadX 10717 94208 8192 8192 NT_STATUS_OK
ReadX 10717 102400 8192 8192 NT_STATUS_OK
ReadX 10717 110592 8192 8192 NT_STATUS_OK
ReadX 10717 118784 8192 8192 NT_STATUS_OK
ReadX 10717 126976 8192 8192 NT_STATUS_OK
ReadX 10717 135168 8192 8192 NT_STATUS_OK
ReadX 10717 143360 8192 8192 NT_STATUS_OK
ReadX 10717 151552 8192 8192 NT_STATUS_OK
ReadX 10717 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10717 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Close 10714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10722 NT_STATUS_OK
WriteX 10722 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10722 258 NT_STATUS_OK
WriteX 10722 0 28489 28489 NT_STATUS_OK
Close 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10723 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10725 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10726 NT_STATUS_OK
Close 10726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10725 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 8192 8192 NT_STATUS_OK
ReadX 10729 8192 8192 8192 NT_STATUS_OK
ReadX 10729 16384 8192 8192 NT_STATUS_OK
ReadX 10729 24576 8192 8192 NT_STATUS_OK
ReadX 10729 32768 16384 16384 NT_STATUS_OK
ReadX 10729 49152 8192 8192 NT_STATUS_OK
ReadX 10729 57344 8192 8192 NT_STATUS_OK
ReadX 10729 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10731 NT_STATUS_OK
Close 10731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10734 NT_STATUS_OK
WriteX 10734 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10734 258 NT_STATUS_OK
WriteX 10734 0 29253 29253 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10735 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10738 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10741 NT_STATUS_OK
WriteX 10741 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10741 258 NT_STATUS_OK
WriteX 10741 0 30183 30183 NT_STATUS_OK
Close 10741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10742 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10744 NT_STATUS_OK
WriteX 10744 0 510 510 NT_STATUS_OK
WriteX 10744 510 512 512 NT_STATUS_OK
WriteX 10744 1022 510 510 NT_STATUS_OK
WriteX 10744 1532 510 510 NT_STATUS_OK
WriteX 10744 2042 168 168 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10745 NT_STATUS_OK
Close 10745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
WriteX 10747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 61440 4096 4096 NT_STATUS_OK
ReadX 10748 126976 4096 4096 NT_STATUS_OK
WriteX 10748 0 65536 65536 NT_STATUS_OK
WriteX 10748 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 61440 4096 4096 NT_STATUS_OK
ReadX 10749 126976 4096 4096 NT_STATUS_OK
ReadX 10749 192512 4096 4096 NT_STATUS_OK
ReadX 10749 258048 4096 4096 NT_STATUS_OK
WriteX 10749 0 65536 65536 NT_STATUS_OK
WriteX 10749 65536 65536 65536 NT_STATUS_OK
WriteX 10749 131072 65536 65536 NT_STATUS_OK
WriteX 10749 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 61440 4096 4096 NT_STATUS_OK
ReadX 10750 126976 4096 4096 NT_STATUS_OK
ReadX 10750 192512 4096 4096 NT_STATUS_OK
ReadX 10750 258048 4096 4096 NT_STATUS_OK
ReadX 10750 323584 4096 4096 NT_STATUS_OK
ReadX 10750 389120 4096 4096 NT_STATUS_OK
ReadX 10750 454656 4096 4096 NT_STATUS_OK
ReadX 10750 520192 4096 4096 NT_STATUS_OK
WriteX 10750 0 65536 65536 NT_STATUS_OK
WriteX 10750 65536 65536 65536 NT_STATUS_OK
WriteX 10750 131072 65536 65536 NT_STATUS_OK
WriteX 10750 196608 65536 65536 NT_STATUS_OK
WriteX 10750 262144 65536 65536 NT_STATUS_OK
WriteX 10750 327680 65536 65536 NT_STATUS_OK
WriteX 10750 393216 65536 65536 NT_STATUS_OK
WriteX 10750 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10751 NT_STATUS_OK
Close 10751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10747 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10750 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10757 NT_STATUS_OK
Close 10757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10760 NT_STATUS_OK
Close 10760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10762 NT_STATUS_OK
Close 10762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10766 NT_STATUS_OK
Close 10766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10769 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10780 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10785 NT_STATUS_OK
Close 10785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10795 NT_STATUS_OK
Close 10795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10800 NT_STATUS_OK
Close 10800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10805 NT_STATUS_OK
Close 10805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10816 NT_STATUS_OK
Close 10816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10819 NT_STATUS_OK
WriteX 10819 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10819 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10819 0 65536 65536 NT_STATUS_OK
WriteX 10819 65536 65536 65536 NT_STATUS_OK
WriteX 10819 131072 65536 65536 NT_STATUS_OK
WriteX 10819 196608 65536 65536 NT_STATUS_OK
WriteX 10819 262144 26634 26634 NT_STATUS_OK
Close 10819 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10824 NT_STATUS_OK
Close 10824 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10825 NT_STATUS_OK
Close 10825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
Close 10826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
ReadX 10827 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10828 NT_STATUS_OK
Close 10828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10832 NT_STATUS_OK
Close 10832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10837 NT_STATUS_OK
Close 10837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10841 NT_STATUS_OK
Close 10841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10844 NT_STATUS_OK
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10850 NT_STATUS_OK
Close 10850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10855 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10865 NT_STATUS_OK
Close 10865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10870 NT_STATUS_OK
Close 10870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10875 NT_STATUS_OK
Close 10875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10879 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10884 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10892 NT_STATUS_OK
Close 10892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10894 NT_STATUS_OK
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 4096 4096 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10919 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
Close 10920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
Close 10921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10908 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10951 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10951 0 4096 4096 NT_STATUS_OK
Close 10951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
ReadX 10953 4096 4096 4096 NT_STATUS_OK
ReadX 10953 8192 4096 4096 NT_STATUS_OK
ReadX 10953 12288 4096 4096 NT_STATUS_OK
ReadX 10953 16384 4096 4096 NT_STATUS_OK
ReadX 10953 20480 4096 4096 NT_STATUS_OK
ReadX 10953 24576 4096 4096 NT_STATUS_OK
ReadX 10953 28672 4096 4096 NT_STATUS_OK
ReadX 10953 32768 4096 4096 NT_STATUS_OK
ReadX 10953 36864 4096 4096 NT_STATUS_OK
ReadX 10953 40960 4096 4096 NT_STATUS_OK
ReadX 10953 45056 4096 4096 NT_STATUS_OK
ReadX 10953 49152 4096 4096 NT_STATUS_OK
ReadX 10953 53248 4096 4096 NT_STATUS_OK
ReadX 10953 57344 4096 4096 NT_STATUS_OK
ReadX 10953 61440 4096 4096 NT_STATUS_OK
ReadX 10953 65536 4096 4096 NT_STATUS_OK
ReadX 10953 69632 4096 4096 NT_STATUS_OK
ReadX 10953 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10953 1004 NT_STATUS_OK
WriteX 10953 0 4096 4096 NT_STATUS_OK
Close 10953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10954 NT_STATUS_OK
SET_FILE_INFORMATION 10954 1004 NT_STATUS_OK
Close 10954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10955 NT_STATUS_OK
ReadX 10955 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10956 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10959 NT_STATUS_OK
WriteX 10959 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10959 258 NT_STATUS_OK
WriteX 10959 0 65536 65536 NT_STATUS_OK
WriteX 10959 65536 19979 19979 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
QUERY_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
SET_FILE_INFORMATION 10960 1004 NT_STATUS_OK
WriteX 10960 0 4096 4096 NT_STATUS_OK
Flush 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
Close 10961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
Close 10963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 4096 4096 NT_STATUS_OK
Close 10964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10965 1004 NT_STATUS_OK
WriteX 10965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10966 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 10965 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10971 NT_STATUS_OK
WriteX 10971 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10971 258 NT_STATUS_OK
WriteX 10971 0 65536 65536 NT_STATUS_OK
WriteX 10971 65536 17654 17654 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
QUERY_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
SET_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10973 NT_STATUS_OK
SET_FILE_INFORMATION 10973 1004 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10977 NT_STATUS_OK
ReadX 10977 0 4096 4096 NT_STATUS_OK
ReadX 10977 4096 4096 4096 NT_STATUS_OK
ReadX 10977 8192 4096 4096 NT_STATUS_OK
ReadX 10977 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10977 16384 4096 4096 NT_STATUS_OK
ReadX 10977 20480 4096 4096 NT_STATUS_OK
ReadX 10977 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10980 1004 NT_STATUS_OK
WriteX 10980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10981 NT_STATUS_OK
Close 10981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10983 NT_STATUS_OK
Close 10983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10986 NT_STATUS_OK
WriteX 10986 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10986 258 NT_STATUS_OK
WriteX 10986 0 65536 65536 NT_STATUS_OK
WriteX 10986 65536 19490 19490 NT_STATUS_OK
Close 10986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
QUERY_FILE_INFORMATION 10987 1004 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
SET_FILE_INFORMATION 10987 1004 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
Flush 10987 NT_STATUS_OK
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10988 NT_STATUS_OK
SET_FILE_INFORMATION 10988 1004 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10990 NT_STATUS_OK
Close 10990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10992 0 4096 4096 NT_STATUS_OK
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
ReadX 10994 4096 4096 4096 NT_STATUS_OK
ReadX 10994 8192 4096 4096 NT_STATUS_OK
ReadX 10994 12288 4096 4096 NT_STATUS_OK
ReadX 10994 16384 4096 4096 NT_STATUS_OK
ReadX 10994 20480 4096 4096 NT_STATUS_OK
ReadX 10994 24576 4096 4096 NT_STATUS_OK
ReadX 10994 28672 4096 4096 NT_STATUS_OK
ReadX 10994 32768 4096 4096 NT_STATUS_OK
ReadX 10994 36864 4096 4096 NT_STATUS_OK
ReadX 10994 40960 4096 4096 NT_STATUS_OK
ReadX 10994 45056 4096 4096 NT_STATUS_OK
ReadX 10994 49152 4096 4096 NT_STATUS_OK
ReadX 10994 53248 4096 4096 NT_STATUS_OK
ReadX 10994 57344 4096 4096 NT_STATUS_OK
ReadX 10994 61440 4096 4096 NT_STATUS_OK
ReadX 10994 65536 4096 4096 NT_STATUS_OK
ReadX 10994 69632 4096 4096 NT_STATUS_OK
ReadX 10994 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10994 1004 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
Close 10994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10995 NT_STATUS_OK
SET_FILE_INFORMATION 10995 1004 NT_STATUS_OK
Close 10995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11000 NT_STATUS_OK
WriteX 11000 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11000 258 NT_STATUS_OK
WriteX 11000 0 65536 65536 NT_STATUS_OK
WriteX 11000 65536 8866 8866 NT_STATUS_OK
Close 11000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
WriteX 11001 0 4096 4096 NT_STATUS_OK
Flush 11001 NT_STATUS_OK
SET_FILE_INFORMATION 11001 1004 NT_STATUS_OK
WriteX 11001 0 4096 4096 NT_STATUS_OK
Flush 11001 NT_STATUS_OK
Close 11001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11003 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
Close 11003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
Close 11004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11005 1004 NT_STATUS_OK
WriteX 11005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11006 NT_STATUS_OK
Close 11006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11008 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11011 NT_STATUS_OK
WriteX 11011 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11011 258 NT_STATUS_OK
WriteX 11011 0 65536 65536 NT_STATUS_OK
WriteX 11011 65536 9298 9298 NT_STATUS_OK
Close 11011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11012 NT_STATUS_OK
ReadX 11012 0 4096 4096 NT_STATUS_OK
WriteX 11012 0 4096 4096 NT_STATUS_OK
Flush 11012 NT_STATUS_OK
SET_FILE_INFORMATION 11012 1004 NT_STATUS_OK
WriteX 11012 0 4096 4096 NT_STATUS_OK
Flush 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11013 NT_STATUS_OK
SET_FILE_INFORMATION 11013 1004 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11015 NT_STATUS_OK
Close 11015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11018 0 4096 4096 NT_STATUS_OK
Close 11018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11019 4096 4096 4096 NT_STATUS_OK
ReadX 11019 8192 4096 4096 NT_STATUS_OK
ReadX 11019 12288 4096 4096 NT_STATUS_OK
ReadX 11019 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
Close 11020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 0 4096 4096 NT_STATUS_OK
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11022 1004 NT_STATUS_OK
WriteX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11023 NT_STATUS_OK
Close 11023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11025 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11028 NT_STATUS_OK
WriteX 11028 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11028 258 NT_STATUS_OK
WriteX 11028 0 65536 65536 NT_STATUS_OK
WriteX 11028 65536 11540 11540 NT_STATUS_OK
Close 11028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Flush 11029 NT_STATUS_OK
SET_FILE_INFORMATION 11029 1004 NT_STATUS_OK
WriteX 11029 0 4096 4096 NT_STATUS_OK
Flush 11029 NT_STATUS_OK
Close 11029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11030 NT_STATUS_OK
SET_FILE_INFORMATION 11030 1004 NT_STATUS_OK
Close 11030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11032 NT_STATUS_OK
Close 11032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 61440 4096 4096 NT_STATUS_OK
ReadX 11034 126976 4096 4096 NT_STATUS_OK
WriteX 11034 0 65536 65536 NT_STATUS_OK
WriteX 11034 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 61440 4096 4096 NT_STATUS_OK
ReadX 11035 126976 4096 4096 NT_STATUS_OK
ReadX 11035 192512 4096 4096 NT_STATUS_OK
ReadX 11035 258048 4096 4096 NT_STATUS_OK
WriteX 11035 0 65536 65536 NT_STATUS_OK
WriteX 11035 65536 65536 65536 NT_STATUS_OK
WriteX 11035 131072 65536 65536 NT_STATUS_OK
WriteX 11035 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 61440 4096 4096 NT_STATUS_OK
ReadX 11036 126976 4096 4096 NT_STATUS_OK
ReadX 11036 192512 4096 4096 NT_STATUS_OK
ReadX 11036 258048 4096 4096 NT_STATUS_OK
ReadX 11036 323584 4096 4096 NT_STATUS_OK
ReadX 11036 389120 4096 4096 NT_STATUS_OK
ReadX 11036 454656 4096 4096 NT_STATUS_OK
ReadX 11036 520192 4096 4096 NT_STATUS_OK
WriteX 11036 0 65536 65536 NT_STATUS_OK
WriteX 11036 65536 65536 65536 NT_STATUS_OK
WriteX 11036 131072 65536 65536 NT_STATUS_OK
WriteX 11036 196608 65536 65536 NT_STATUS_OK
WriteX 11036 262144 65536 65536 NT_STATUS_OK
WriteX 11036 327680 65536 65536 NT_STATUS_OK
WriteX 11036 393216 65536 65536 NT_STATUS_OK
WriteX 11036 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11037 NT_STATUS_OK
ReadX 11037 0 4096 4096 NT_STATUS_OK
ReadX 11037 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11038 NT_STATUS_OK
WriteX 11038 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11038 258 NT_STATUS_OK
WriteX 11038 0 53 53 NT_STATUS_OK
Close 11038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11039 NT_STATUS_OK
Close 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 10977 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11037 8192 4096 4096 NT_STATUS_OK
ReadX 11037 12288 4096 4096 NT_STATUS_OK
WriteX 11041 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 258 NT_STATUS_OK
ReadX 11037 16384 4096 4096 NT_STATUS_OK
ReadX 11037 20480 4096 4096 NT_STATUS_OK
WriteX 11041 0 15360 15360 NT_STATUS_OK
Close 11041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11042 NT_STATUS_OK
ReadX 11042 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11042 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11042 1004 NT_STATUS_OK
WriteX 11042 0 4096 4096 NT_STATUS_OK
Close 11042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11043 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11046 NT_STATUS_OK
Close 11046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11045 4096 4096 4096 NT_STATUS_OK
ReadX 11045 8192 4096 4096 NT_STATUS_OK
ReadX 11045 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11048 NT_STATUS_OK
ReadX 11048 0 4096 4096 NT_STATUS_OK
ReadX 11048 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
ReadX 11049 4096 4096 4096 NT_STATUS_OK
ReadX 11049 8192 4096 4096 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11050 NT_STATUS_OK
WriteX 11050 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11050 258 NT_STATUS_OK
WriteX 11050 0 15360 15360 NT_STATUS_OK
Close 11050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11051 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11051 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11052 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11055 NT_STATUS_OK
SET_FILE_INFORMATION 11055 1004 NT_STATUS_OK
Close 11055 NT_STATUS_OK
WriteX 11051 0 4096 4096 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11056 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
ReadX 11058 4096 4096 4096 NT_STATUS_OK
ReadX 11058 8192 4096 4096 NT_STATUS_OK
ReadX 11058 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11060 NT_STATUS_OK
WriteX 11060 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11060 258 NT_STATUS_OK
WriteX 11060 0 53 53 NT_STATUS_OK
Close 11060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11061 NT_STATUS_OK
Close 11061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11059 4096 4096 4096 NT_STATUS_OK
ReadX 11059 8192 4096 4096 NT_STATUS_OK
ReadX 11059 12288 4096 4096 NT_STATUS_OK
WriteX 11063 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 258 NT_STATUS_OK
WriteX 11063 0 12006 12006 NT_STATUS_OK
Close 11063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11064 1004 NT_STATUS_OK
WriteX 11064 0 4096 4096 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11065 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11068 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11067 4096 4096 4096 NT_STATUS_OK
ReadX 11067 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11070 NT_STATUS_OK
WriteX 11070 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11070 258 NT_STATUS_OK
WriteX 11070 0 11991 11991 NT_STATUS_OK
Close 11070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11071 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11071 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11072 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11075 NT_STATUS_OK
SET_FILE_INFORMATION 11075 1004 NT_STATUS_OK
Close 11075 NT_STATUS_OK
WriteX 11071 0 4096 4096 NT_STATUS_OK
Close 11071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11076 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11078 NT_STATUS_OK
ReadX 11078 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11079 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11078 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
ReadX 11078 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
WriteX 11078 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11078 1004 NT_STATUS_OK
Close 11054 NT_STATUS_OK
WriteX 11058 0 19054 19054 NT_STATUS_OK
WriteX 11078 0 12288 12288 NT_STATUS_OK
Close 11074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11081 NT_STATUS_OK
Close 11081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Close 11078 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11083 NT_STATUS_OK
Close 11083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11085 NT_STATUS_OK
ReadX 11085 0 61440 61440 NT_STATUS_OK
ReadX 11085 61440 4096 4096 NT_STATUS_OK
ReadX 11085 65536 61440 61440 NT_STATUS_OK
ReadX 11085 126976 4096 4096 NT_STATUS_OK
ReadX 11085 131072 61440 61440 NT_STATUS_OK
ReadX 11085 192512 4096 4096 NT_STATUS_OK
ReadX 11085 196608 61440 61440 NT_STATUS_OK
ReadX 11085 258048 4096 4096 NT_STATUS_OK
ReadX 11085 262144 61440 61440 NT_STATUS_OK
ReadX 11085 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11086 NT_STATUS_OK
ReadX 11086 0 61440 61440 NT_STATUS_OK
ReadX 11086 61440 4096 4096 NT_STATUS_OK
ReadX 11086 65536 61440 61440 NT_STATUS_OK
ReadX 11086 126976 4096 4096 NT_STATUS_OK
ReadX 11086 131072 61440 61440 NT_STATUS_OK
ReadX 11086 192512 4096 4096 NT_STATUS_OK
ReadX 11086 196608 61440 61440 NT_STATUS_OK
ReadX 11086 258048 4096 4096 NT_STATUS_OK
ReadX 11086 262144 61440 61440 NT_STATUS_OK
ReadX 11086 323584 4096 4096 NT_STATUS_OK
ReadX 11086 327680 61440 61440 NT_STATUS_OK
ReadX 11086 389120 4096 4096 NT_STATUS_OK
ReadX 11086 393216 61440 61440 NT_STATUS_OK
ReadX 11086 454656 4096 4096 NT_STATUS_OK
ReadX 11086 458752 61440 61440 NT_STATUS_OK
ReadX 11086 520192 4096 4096 NT_STATUS_OK
ReadX 11086 524288 61440 61440 NT_STATUS_OK
ReadX 11086 585728 4096 4096 NT_STATUS_OK
ReadX 11086 589824 61440 61440 NT_STATUS_OK
ReadX 11086 651264 4096 4096 NT_STATUS_OK
ReadX 11086 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11087 NT_STATUS_OK
ReadX 11087 0 61440 61440 NT_STATUS_OK
ReadX 11087 61440 4096 4096 NT_STATUS_OK
ReadX 11087 65536 61440 61440 NT_STATUS_OK
ReadX 11087 126976 4096 4096 NT_STATUS_OK
ReadX 11087 131072 61440 61440 NT_STATUS_OK
ReadX 11087 192512 4096 4096 NT_STATUS_OK
ReadX 11087 196608 61440 61440 NT_STATUS_OK
ReadX 11087 258048 4096 4096 NT_STATUS_OK
ReadX 11087 262144 61440 61440 NT_STATUS_OK
ReadX 11087 323584 4096 4096 NT_STATUS_OK
ReadX 11087 327680 61440 61440 NT_STATUS_OK
ReadX 11087 389120 4096 4096 NT_STATUS_OK
ReadX 11087 393216 61440 61440 NT_STATUS_OK
ReadX 11087 454656 4096 4096 NT_STATUS_OK
ReadX 11087 458752 61440 61440 NT_STATUS_OK
ReadX 11087 520192 4096 4096 NT_STATUS_OK
ReadX 11087 524288 61440 61440 NT_STATUS_OK
ReadX 11087 585728 4096 4096 NT_STATUS_OK
ReadX 11087 589824 61440 61440 NT_STATUS_OK
ReadX 11087 651264 4096 4096 NT_STATUS_OK
ReadX 11087 655360 61440 61440 NT_STATUS_OK
ReadX 11087 716800 4096 4096 NT_STATUS_OK
ReadX 11087 720896 61440 61440 NT_STATUS_OK
ReadX 11087 782336 4096 4096 NT_STATUS_OK
ReadX 11087 786432 61440 61440 NT_STATUS_OK
ReadX 11087 847872 4096 4096 NT_STATUS_OK
ReadX 11087 851968 61440 61440 NT_STATUS_OK
ReadX 11087 913408 4096 4096 NT_STATUS_OK
ReadX 11087 917504 61440 61440 NT_STATUS_OK
ReadX 11087 978944 4096 4096 NT_STATUS_OK
ReadX 11087 983040 61440 61440 NT_STATUS_OK
ReadX 11087 1044480 4096 4096 NT_STATUS_OK
ReadX 11087 1048576 61440 61440 NT_STATUS_OK
ReadX 11087 1110016 4096 4096 NT_STATUS_OK
ReadX 11087 1114112 61440 61440 NT_STATUS_OK
ReadX 11087 1175552 4096 4096 NT_STATUS_OK
ReadX 11087 1179648 61440 61440 NT_STATUS_OK
ReadX 11087 1241088 4096 4096 NT_STATUS_OK
ReadX 11087 1245184 61440 61440 NT_STATUS_OK
ReadX 11087 1306624 4096 4096 NT_STATUS_OK
ReadX 11087 1310720 61440 61440 NT_STATUS_OK
ReadX 11087 1372160 4096 4096 NT_STATUS_OK
ReadX 11087 1376256 61440 61440 NT_STATUS_OK
ReadX 11087 1437696 4096 4096 NT_STATUS_OK
ReadX 11087 1441792 61440 61440 NT_STATUS_OK
ReadX 11087 1503232 4096 4096 NT_STATUS_OK
ReadX 11087 1507328 61440 61440 NT_STATUS_OK
ReadX 11087 1568768 4096 4096 NT_STATUS_OK
ReadX 11087 1572864 61440 61440 NT_STATUS_OK
ReadX 11087 1634304 4096 4096 NT_STATUS_OK
ReadX 11087 1638400 61440 61440 NT_STATUS_OK
ReadX 11087 1699840 4096 4096 NT_STATUS_OK
ReadX 11087 1703936 61440 61440 NT_STATUS_OK
ReadX 11087 1765376 4096 4096 NT_STATUS_OK
ReadX 11087 1769472 61440 61440 NT_STATUS_OK
ReadX 11087 1830912 4096 4096 NT_STATUS_OK
ReadX 11087 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11093 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11094 NT_STATUS_OK
QUERY_FILE_INFORMATION 11094 1004 NT_STATUS_OK
WriteX 11094 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11094 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11095 NT_STATUS_OK
Close 11095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11096 NT_STATUS_OK
WriteX 11096 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11096 258 NT_STATUS_OK
WriteX 11096 0 491 491 NT_STATUS_OK
Close 11096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11097 NT_STATUS_OK
ReadX 11097 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11094 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11099 NT_STATUS_OK
Close 11099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11100 NT_STATUS_OK
WriteX 11100 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11100 258 NT_STATUS_OK
WriteX 11100 0 543 543 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11085 NT_STATUS_OK
Close 11086 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11106 NT_STATUS_OK
ReadX 11106 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11108 NT_STATUS_OK
ReadX 11108 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11109 NT_STATUS_OK
ReadX 11109 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11113 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11114 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1004 NT_STATUS_OK
WriteX 11114 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 258 NT_STATUS_OK
WriteX 11114 0 2048 2048 NT_STATUS_OK
Close 11114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11115 NT_STATUS_OK
ReadX 11115 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11115 0 4096 4096 NT_STATUS_OK
Flush 11115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11115 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11120 NT_STATUS_OK
WriteX 11120 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11120 258 NT_STATUS_OK
WriteX 11120 0 2048 2048 NT_STATUS_OK
Close 11120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11125 NT_STATUS_OK
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11126 NT_STATUS_OK
WriteX 11126 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 258 NT_STATUS_OK
WriteX 11126 0 2048 2048 NT_STATUS_OK
Close 11126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 2048 2048 NT_STATUS_OK
ReadX 11105 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11109 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11121 0 4096 4096 NT_STATUS_OK
WriteX 11105 0 8192 8192 NT_STATUS_OK
WriteX 11106 0 4096 4096 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11131 NT_STATUS_OK
QUERY_FILE_INFORMATION 11131 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11106 NT_STATUS_OK
Close 11107 NT_STATUS_OK
Close 11108 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11133 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11137 NT_STATUS_OK
ReadX 11137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11138 NT_STATUS_OK
ReadX 11138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11140 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11141 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11144 NT_STATUS_OK
ReadX 11144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11145 NT_STATUS_OK
ReadX 11145 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11151 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 1004 NT_STATUS_OK
WriteX 11151 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 258 NT_STATUS_OK
WriteX 11151 0 2048 2048 NT_STATUS_OK
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11153 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11154 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11159 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 1004 NT_STATUS_OK
WriteX 11159 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 258 NT_STATUS_OK
WriteX 11159 0 2048 2048 NT_STATUS_OK
Close 11159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11152 0 4096 4096 NT_STATUS_OK
Flush 11152 NT_STATUS_OK
WriteX 11160 0 4096 4096 NT_STATUS_OK
Flush 11160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11152 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11160 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11154 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11162 NT_STATUS_OK
WriteX 11162 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11162 258 NT_STATUS_OK
WriteX 11162 0 4096 4096 NT_STATUS_OK
Close 11162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11164 NT_STATUS_OK
Close 11164 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11165 NT_STATUS_OK
WriteX 11165 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11165 258 NT_STATUS_OK
WriteX 11165 0 4096 4096 NT_STATUS_OK
Close 11165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11166 0 4096 4096 NT_STATUS_OK
Close 11163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11146 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Close 11154 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Close 11144 NT_STATUS_OK
Close 11145 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Close 11138 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Close 11137 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11169 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11171 NT_STATUS_OK
ReadX 11171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11173 NT_STATUS_OK
WriteX 11173 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11173 258 NT_STATUS_OK
WriteX 11173 0 2048 2048 NT_STATUS_OK
Close 11173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11174 NT_STATUS_OK
ReadX 11174 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11175 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11185 NT_STATUS_OK
ReadX 11185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11187 NT_STATUS_OK
ReadX 11187 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11152 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11188 NT_STATUS_OK
QUERY_FILE_INFORMATION 11188 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11186 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Close 11184 NT_STATUS_OK
Close 11185 NT_STATUS_OK
Close 11187 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11190 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11193 NT_STATUS_OK
ReadX 11193 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11195 NT_STATUS_OK
ReadX 11195 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11196 NT_STATUS_OK
ReadX 11196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11197 NT_STATUS_OK
ReadX 11197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11210 NT_STATUS_OK
QUERY_FILE_INFORMATION 11210 1004 NT_STATUS_OK
WriteX 11210 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11210 258 NT_STATUS_OK
WriteX 11210 0 2048 2048 NT_STATUS_OK
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11216 NT_STATUS_OK
ReadX 11216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11217 NT_STATUS_OK
ReadX 11217 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11221 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11222 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 1004 NT_STATUS_OK
WriteX 11222 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 258 NT_STATUS_OK
WriteX 11222 0 2048 2048 NT_STATUS_OK
Close 11222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11223 NT_STATUS_OK
ReadX 11223 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11225 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11230 NT_STATUS_OK
QUERY_FILE_INFORMATION 11230 1004 NT_STATUS_OK
WriteX 11230 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11230 258 NT_STATUS_OK
WriteX 11230 0 2048 2048 NT_STATUS_OK
Close 11230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11231 NT_STATUS_OK
ReadX 11231 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
Flush 11211 NT_STATUS_OK
WriteX 11223 0 4096 4096 NT_STATUS_OK
Flush 11223 NT_STATUS_OK
WriteX 11231 0 4096 4096 NT_STATUS_OK
Flush 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11223 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11231 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11213 4096 16384 16384 NT_STATUS_OK
ReadX 11193 4096 16384 16384 NT_STATUS_OK
ReadX 11225 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 2048 2048 NT_STATUS_OK
WriteX 11233 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11234 NT_STATUS_OK
QUERY_FILE_INFORMATION 11234 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11217 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Close 11197 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11214 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11216 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11225 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Close 11201 NT_STATUS_OK
Close 11193 NT_STATUS_OK
Close 11194 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11196 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11236 NT_STATUS_OK
QUERY_FILE_INFORMATION 11236 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11238 NT_STATUS_OK
QUERY_FILE_INFORMATION 11238 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11241 NT_STATUS_OK
ReadX 11241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11241 4096 16384 16384 NT_STATUS_OK
WriteX 11241 0 4096 4096 NT_STATUS_OK
WriteX 11242 0 4096 4096 NT_STATUS_OK
WriteX 11243 0 4096 4096 NT_STATUS_OK
WriteX 11244 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11247 NT_STATUS_OK
ReadX 11247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11248 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11249 NT_STATUS_OK
ReadX 11249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11250 NT_STATUS_OK
ReadX 11250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11251 NT_STATUS_OK
ReadX 11251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11252 NT_STATUS_OK
ReadX 11252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11253 NT_STATUS_OK
ReadX 11253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11255 NT_STATUS_OK
ReadX 11255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 0 8192 8192 NT_STATUS_OK
ReadX 11247 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11261 0 4096 4096 NT_STATUS_OK
ReadX 11261 4096 4096 4096 NT_STATUS_OK
ReadX 11261 8192 4096 4096 NT_STATUS_OK
WriteX 11247 0 4096 4096 NT_STATUS_OK
WriteX 11248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
ReadX 11262 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11241 0 4096 4096 NT_STATUS_OK
WriteX 11242 0 4096 4096 NT_STATUS_OK
WriteX 11243 0 4096 4096 NT_STATUS_OK
WriteX 11244 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11267 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 258 NT_STATUS_OK
WriteX 11267 0 2048 2048 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
ReadX 11270 4096 4096 4096 NT_STATUS_OK
WriteX 11270 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11271 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
ReadX 11272 4096 4096 4096 NT_STATUS_OK
WriteX 11272 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11273 NT_STATUS_OK
QUERY_FILE_INFORMATION 11273 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11260 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11254 NT_STATUS_OK
Close 11255 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Close 11257 NT_STATUS_OK
Close 11259 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Close 11251 NT_STATUS_OK
Close 11252 NT_STATUS_OK
Close 11249 NT_STATUS_OK
Close 11250 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11261 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11275 0 4096 4096 NT_STATUS_OK
ReadX 11275 4096 4096 4096 NT_STATUS_OK
ReadX 11275 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11277 NT_STATUS_OK
ReadX 11277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11278 NT_STATUS_OK
ReadX 11278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11282 NT_STATUS_OK
ReadX 11282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11283 NT_STATUS_OK
ReadX 11283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11288 NT_STATUS_OK
ReadX 11288 0 4096 4096 NT_STATUS_OK
ReadX 11276 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11293 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 1004 NT_STATUS_OK
WriteX 11293 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 258 NT_STATUS_OK
WriteX 11293 0 2048 2048 NT_STATUS_OK
Close 11293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11298 NT_STATUS_OK
Close 11298 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11299 NT_STATUS_OK
QUERY_FILE_INFORMATION 11299 1004 NT_STATUS_OK
WriteX 11299 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11299 258 NT_STATUS_OK
WriteX 11299 0 2048 2048 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11300 NT_STATUS_OK
ReadX 11300 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11300 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11283 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11301 NT_STATUS_OK
QUERY_FILE_INFORMATION 11301 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Close 11282 NT_STATUS_OK
Close 11288 NT_STATUS_OK
Close 11276 NT_STATUS_OK
Close 11277 NT_STATUS_OK
Close 11280 NT_STATUS_OK
Close 11281 NT_STATUS_OK
Close 11278 NT_STATUS_OK
Close 11279 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Close 11285 NT_STATUS_OK
Close 11286 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11303 NT_STATUS_OK
QUERY_FILE_INFORMATION 11303 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11305 NT_STATUS_OK
ReadX 11305 61440 4096 4096 NT_STATUS_OK
ReadX 11305 126976 4096 4096 NT_STATUS_OK
WriteX 11305 0 65536 65536 NT_STATUS_OK
WriteX 11305 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 61440 4096 4096 NT_STATUS_OK
ReadX 11306 126976 4096 4096 NT_STATUS_OK
ReadX 11306 192512 4096 4096 NT_STATUS_OK
ReadX 11306 258048 4096 4096 NT_STATUS_OK
WriteX 11306 0 65536 65536 NT_STATUS_OK
WriteX 11306 65536 65536 65536 NT_STATUS_OK
WriteX 11306 131072 65536 65536 NT_STATUS_OK
WriteX 11306 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 61440 4096 4096 NT_STATUS_OK
ReadX 11307 126976 4096 4096 NT_STATUS_OK
ReadX 11307 192512 4096 4096 NT_STATUS_OK
ReadX 11307 258048 4096 4096 NT_STATUS_OK
ReadX 11307 323584 4096 4096 NT_STATUS_OK
ReadX 11307 389120 4096 4096 NT_STATUS_OK
ReadX 11307 454656 4096 4096 NT_STATUS_OK
ReadX 11307 520192 4096 4096 NT_STATUS_OK
WriteX 11307 0 65536 65536 NT_STATUS_OK
WriteX 11307 65536 65536 65536 NT_STATUS_OK
WriteX 11307 131072 65536 65536 NT_STATUS_OK
WriteX 11307 196608 65536 65536 NT_STATUS_OK
WriteX 11307 262144 65536 65536 NT_STATUS_OK
WriteX 11307 327680 65536 65536 NT_STATUS_OK
WriteX 11307 393216 65536 65536 NT_STATUS_OK
WriteX 11307 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11308 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11308 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11308 8192 4096 4096 NT_STATUS_OK
ReadX 11308 12288 4096 4096 NT_STATUS_OK
ReadX 11308 16384 4096 4096 NT_STATUS_OK
ReadX 11308 20480 4096 4096 NT_STATUS_OK
ReadX 11308 24576 4096 4096 NT_STATUS_OK
ReadX 11308 28672 4096 4096 NT_STATUS_OK
ReadX 11308 32768 4096 4096 NT_STATUS_OK
ReadX 11308 36864 4096 4096 NT_STATUS_OK
ReadX 11308 40960 4096 4096 NT_STATUS_OK
ReadX 11308 45056 4096 4096 NT_STATUS_OK
ReadX 11308 49152 4096 4096 NT_STATUS_OK
ReadX 11308 53248 4096 4096 NT_STATUS_OK
ReadX 11308 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11308 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11309 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Close 11306 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11311 NT_STATUS_OK
WriteX 11311 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11311 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11311 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11311 1004 NT_STATUS_OK
WriteX 11311 0 57088 57088 NT_STATUS_OK
WriteX 11311 0 4096 4096 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
Close 11308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11312 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
Close 11312 NT_STATUS_OK
SET_FILE_INFORMATION 11311 1004 NT_STATUS_OK
WriteX 11311 0 4096 4096 NT_STATUS_OK
Close 11311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11313 NT_STATUS_OK
Close 11313 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11315 NT_STATUS_OK
ReadX 11315 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11315 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11316 NT_STATUS_OK
WriteX 11316 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11316 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
WriteX 11316 0 51456 51456 NT_STATUS_OK
WriteX 11316 0 4096 4096 NT_STATUS_OK
Flush 11316 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11316 1004 NT_STATUS_OK
WriteX 11316 0 4096 4096 NT_STATUS_OK
Close 11316 NT_STATUS_OK
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11318 NT_STATUS_OK
Close 11318 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11320 NT_STATUS_OK
ReadX 11320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11320 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11322 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11325 NT_STATUS_OK
WriteX 11325 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11325 258 NT_STATUS_OK
WriteX 11325 0 53077 53077 NT_STATUS_OK
Close 11325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11326 NT_STATUS_OK
WriteX 11326 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11326 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11326 1004 NT_STATUS_OK
WriteX 11326 0 65536 65536 NT_STATUS_OK
WriteX 11326 65536 1856 1856 NT_STATUS_OK
WriteX 11326 0 4096 4096 NT_STATUS_OK
Flush 11326 NT_STATUS_OK
SET_FILE_INFORMATION 11326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11326 1004 NT_STATUS_OK
WriteX 11326 0 4096 4096 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11328 NT_STATUS_OK
Close 11328 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11332 NT_STATUS_OK
Close 11332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11335 NT_STATUS_OK
WriteX 11335 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 258 NT_STATUS_OK
WriteX 11335 0 7983 7983 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11337 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11340 NT_STATUS_OK
WriteX 11340 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11340 258 NT_STATUS_OK
WriteX 11340 0 65536 65536 NT_STATUS_OK
WriteX 11340 65536 65536 65536 NT_STATUS_OK
WriteX 11340 131072 65536 65536 NT_STATUS_OK
WriteX 11340 196608 65536 65536 NT_STATUS_OK
WriteX 11340 262144 65536 65536 NT_STATUS_OK
WriteX 11340 327680 65536 65536 NT_STATUS_OK
WriteX 11340 393216 65536 65536 NT_STATUS_OK
WriteX 11340 458752 46731 46731 NT_STATUS_OK
Close 11340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11341 NT_STATUS_OK
WriteX 11341 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11341 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11330 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11341 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11341 1004 NT_STATUS_OK
WriteX 11341 0 65536 65536 NT_STATUS_OK
WriteX 11341 65536 22848 22848 NT_STATUS_OK
WriteX 11341 0 4096 4096 NT_STATUS_OK
Flush 11341 NT_STATUS_OK
SET_FILE_INFORMATION 11341 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11341 1004 NT_STATUS_OK
WriteX 11341 0 4096 4096 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11343 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11345 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11346 NT_STATUS_OK
ReadX 11346 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11346 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11346 1004 NT_STATUS_OK
ReadX 11346 8192 4096 4096 NT_STATUS_OK
ReadX 11346 12288 4096 4096 NT_STATUS_OK
ReadX 11346 16384 4096 4096 NT_STATUS_OK
ReadX 11346 20480 4096 4096 NT_STATUS_OK
ReadX 11346 24576 4096 4096 NT_STATUS_OK
ReadX 11346 28672 4096 4096 NT_STATUS_OK
ReadX 11346 32768 4096 4096 NT_STATUS_OK
ReadX 11346 36864 4096 4096 NT_STATUS_OK
ReadX 11346 40960 4096 4096 NT_STATUS_OK
ReadX 11346 45056 4096 4096 NT_STATUS_OK
ReadX 11346 49152 4096 4096 NT_STATUS_OK
ReadX 11346 53248 4096 4096 NT_STATUS_OK
ReadX 11346 57344 4096 4096 NT_STATUS_OK
ReadX 11346 61440 4096 4096 NT_STATUS_OK
ReadX 11346 65536 4096 4096 NT_STATUS_OK
ReadX 11346 69632 4096 4096 NT_STATUS_OK
ReadX 11346 73728 4096 4096 NT_STATUS_OK
ReadX 11346 77824 4096 4096 NT_STATUS_OK
ReadX 11346 81920 4096 4096 NT_STATUS_OK
ReadX 11346 86016 4096 4096 NT_STATUS_OK
ReadX 11346 90112 4096 4096 NT_STATUS_OK
ReadX 11346 94208 4096 4096 NT_STATUS_OK
ReadX 11346 98304 4096 4096 NT_STATUS_OK
ReadX 11346 102400 4096 4096 NT_STATUS_OK
ReadX 11346 106496 4096 4096 NT_STATUS_OK
ReadX 11346 110592 4096 4096 NT_STATUS_OK
ReadX 11346 114688 4096 4096 NT_STATUS_OK
ReadX 11346 118784 4096 4096 NT_STATUS_OK
ReadX 11346 122880 4096 4096 NT_STATUS_OK
ReadX 11346 126976 4096 4096 NT_STATUS_OK
ReadX 11346 131072 4096 4096 NT_STATUS_OK
ReadX 11346 135168 4096 4096 NT_STATUS_OK
ReadX 11346 139264 4096 4096 NT_STATUS_OK
ReadX 11346 143360 4096 4096 NT_STATUS_OK
ReadX 11346 147456 4096 4096 NT_STATUS_OK
ReadX 11346 151552 4096 4096 NT_STATUS_OK
ReadX 11346 155648 4096 4096 NT_STATUS_OK
ReadX 11346 159744 4096 4096 NT_STATUS_OK
ReadX 11346 163840 4096 4096 NT_STATUS_OK
ReadX 11346 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11346 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11349 NT_STATUS_OK
WriteX 11349 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 258 NT_STATUS_OK
Close 11346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11350 NT_STATUS_OK
SET_FILE_INFORMATION 11350 1004 NT_STATUS_OK
Close 11350 NT_STATUS_OK
WriteX 11349 0 42388 42388 NT_STATUS_OK
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11353 NT_STATUS_OK
ReadX 11353 0 4096 4096 NT_STATUS_OK
ReadX 11353 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11354 NT_STATUS_OK
WriteX 11354 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 258 NT_STATUS_OK
SET_FILE_INFORMATION 11354 1004 NT_STATUS_OK
WriteX 11354 0 42652 42652 NT_STATUS_OK
Close 11354 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
ReadX 11358 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11360 NT_STATUS_OK
Close 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11363 NT_STATUS_OK
WriteX 11363 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11363 258 NT_STATUS_OK
WriteX 11363 0 65536 65536 NT_STATUS_OK
WriteX 11363 65536 49 49 NT_STATUS_OK
Close 11363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11364 NT_STATUS_OK
ReadX 11364 0 61440 61440 NT_STATUS_OK
ReadX 11364 61440 4096 4096 NT_STATUS_OK
ReadX 11364 65536 61440 61440 NT_STATUS_OK
ReadX 11364 126976 4096 4096 NT_STATUS_OK
ReadX 11364 131072 61440 61440 NT_STATUS_OK
ReadX 11364 192512 4096 4096 NT_STATUS_OK
ReadX 11364 196608 61440 61440 NT_STATUS_OK
ReadX 11364 258048 4096 4096 NT_STATUS_OK
ReadX 11364 262144 61440 61440 NT_STATUS_OK
ReadX 11364 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 61440 61440 NT_STATUS_OK
ReadX 11365 61440 4096 4096 NT_STATUS_OK
ReadX 11365 65536 61440 61440 NT_STATUS_OK
ReadX 11365 126976 4096 4096 NT_STATUS_OK
ReadX 11365 131072 61440 61440 NT_STATUS_OK
ReadX 11365 192512 4096 4096 NT_STATUS_OK
ReadX 11365 196608 61440 61440 NT_STATUS_OK
ReadX 11365 258048 4096 4096 NT_STATUS_OK
ReadX 11365 262144 61440 61440 NT_STATUS_OK
ReadX 11365 323584 4096 4096 NT_STATUS_OK
ReadX 11365 327680 61440 61440 NT_STATUS_OK
ReadX 11365 389120 4096 4096 NT_STATUS_OK
ReadX 11365 393216 61440 61440 NT_STATUS_OK
ReadX 11365 454656 4096 4096 NT_STATUS_OK
ReadX 11365 458752 61440 61440 NT_STATUS_OK
ReadX 11365 520192 4096 4096 NT_STATUS_OK
ReadX 11365 524288 61440 61440 NT_STATUS_OK
ReadX 11365 585728 4096 4096 NT_STATUS_OK
ReadX 11365 589824 61440 61440 NT_STATUS_OK
ReadX 11365 651264 4096 4096 NT_STATUS_OK
ReadX 11365 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 61440 61440 NT_STATUS_OK
ReadX 11366 61440 4096 4096 NT_STATUS_OK
ReadX 11366 65536 61440 61440 NT_STATUS_OK
ReadX 11366 126976 4096 4096 NT_STATUS_OK
ReadX 11366 131072 61440 61440 NT_STATUS_OK
ReadX 11366 192512 4096 4096 NT_STATUS_OK
ReadX 11366 196608 61440 61440 NT_STATUS_OK
ReadX 11366 258048 4096 4096 NT_STATUS_OK
ReadX 11366 262144 61440 61440 NT_STATUS_OK
ReadX 11366 323584 4096 4096 NT_STATUS_OK
ReadX 11366 327680 61440 61440 NT_STATUS_OK
ReadX 11366 389120 4096 4096 NT_STATUS_OK
ReadX 11366 393216 61440 61440 NT_STATUS_OK
ReadX 11366 454656 4096 4096 NT_STATUS_OK
ReadX 11366 458752 61440 61440 NT_STATUS_OK
ReadX 11366 520192 4096 4096 NT_STATUS_OK
ReadX 11366 524288 61440 61440 NT_STATUS_OK
ReadX 11366 585728 4096 4096 NT_STATUS_OK
ReadX 11366 589824 61440 61440 NT_STATUS_OK
ReadX 11366 651264 4096 4096 NT_STATUS_OK
ReadX 11366 655360 61440 61440 NT_STATUS_OK
ReadX 11366 716800 4096 4096 NT_STATUS_OK
ReadX 11366 720896 61440 61440 NT_STATUS_OK
ReadX 11366 782336 4096 4096 NT_STATUS_OK
ReadX 11366 786432 61440 61440 NT_STATUS_OK
ReadX 11366 847872 4096 4096 NT_STATUS_OK
ReadX 11366 851968 61440 61440 NT_STATUS_OK
ReadX 11366 913408 4096 4096 NT_STATUS_OK
ReadX 11366 917504 61440 61440 NT_STATUS_OK
ReadX 11366 978944 4096 4096 NT_STATUS_OK
ReadX 11366 983040 61440 61440 NT_STATUS_OK
ReadX 11366 1044480 4096 4096 NT_STATUS_OK
ReadX 11366 1048576 61440 61440 NT_STATUS_OK
ReadX 11366 1110016 4096 4096 NT_STATUS_OK
ReadX 11366 1114112 61440 61440 NT_STATUS_OK
ReadX 11366 1175552 4096 4096 NT_STATUS_OK
ReadX 11366 1179648 61440 61440 NT_STATUS_OK
ReadX 11366 1241088 4096 4096 NT_STATUS_OK
ReadX 11366 1245184 61440 61440 NT_STATUS_OK
ReadX 11366 1306624 4096 4096 NT_STATUS_OK
ReadX 11366 1310720 61440 61440 NT_STATUS_OK
ReadX 11366 1372160 4096 4096 NT_STATUS_OK
ReadX 11366 1376256 61440 61440 NT_STATUS_OK
ReadX 11366 1437696 4096 4096 NT_STATUS_OK
ReadX 11366 1441792 61440 61440 NT_STATUS_OK
ReadX 11366 1503232 4096 4096 NT_STATUS_OK
ReadX 11366 1507328 61440 61440 NT_STATUS_OK
ReadX 11366 1568768 4096 4096 NT_STATUS_OK
ReadX 11366 1572864 61440 61440 NT_STATUS_OK
ReadX 11366 1634304 4096 4096 NT_STATUS_OK
ReadX 11366 1638400 61440 61440 NT_STATUS_OK
ReadX 11366 1699840 4096 4096 NT_STATUS_OK
ReadX 11366 1703936 61440 61440 NT_STATUS_OK
ReadX 11366 1765376 4096 4096 NT_STATUS_OK
ReadX 11366 1769472 61440 61440 NT_STATUS_OK
ReadX 11366 1830912 4096 4096 NT_STATUS_OK
ReadX 11366 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11368 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11368 1005 NT_STATUS_OK
ReadX 11368 2156 24 24 NT_STATUS_OK
ReadX 11368 2139 276 276 NT_STATUS_OK
ReadX 11368 2136 14 14 NT_STATUS_OK
ReadX 11368 2136 7 7 NT_STATUS_OK
ReadX 11368 2138 12 12 NT_STATUS_OK
ReadX 11368 2137 8 8 NT_STATUS_OK
ReadX 11368 2135 15 15 NT_STATUS_OK
ReadX 11368 0 16 16 NT_STATUS_OK
ReadX 11368 16 2048 2048 NT_STATUS_OK
ReadX 11368 2064 2048 2048 NT_STATUS_OK
ReadX 11368 257 2048 2048 NT_STATUS_OK
ReadX 11368 385 2048 2048 NT_STATUS_OK
ReadX 11368 513 2048 2048 NT_STATUS_OK
ReadX 11368 641 2048 2048 NT_STATUS_OK
ReadX 11368 769 2048 2048 NT_STATUS_OK
ReadX 11368 897 2048 2048 NT_STATUS_OK
ReadX 11368 1025 2048 2048 NT_STATUS_OK
ReadX 11368 1153 2048 2048 NT_STATUS_OK
ReadX 11368 1281 2048 2048 NT_STATUS_OK
ReadX 11368 1409 2048 2048 NT_STATUS_OK
ReadX 11368 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11370 NT_STATUS_OK
Close 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11364 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11366 NT_STATUS_OK
Close 11358 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11373 NT_STATUS_OK
WriteX 11373 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11373 258 NT_STATUS_OK
WriteX 11373 0 10575 10575 NT_STATUS_OK
Flush 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11374 NT_STATUS_OK
Close 11374 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11376 NT_STATUS_OK
ReadX 11376 0 4096 4096 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11378 NT_STATUS_OK
LockX 11378 2147483538 1 NT_STATUS_OK
UnlockX 11378 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1005 NT_STATUS_OK
ReadX 11378 0 512 512 NT_STATUS_OK
ReadX 11378 512 512 512 NT_STATUS_OK
ReadX 11378 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 1004 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11379 NT_STATUS_OK
QUERY_FILE_INFORMATION 11379 1005 NT_STATUS_OK
ReadX 11379 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11380 NT_STATUS_OK
LockX 11380 2147483538 1 NT_STATUS_OK
UnlockX 11380 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11380 1005 NT_STATUS_OK
ReadX 11380 0 512 512 NT_STATUS_OK
ReadX 11380 512 512 512 NT_STATUS_OK
ReadX 11380 1024 512 512 NT_STATUS_OK
ReadX 11380 288 20 20 NT_STATUS_OK
ReadX 11380 308 2084 2084 NT_STATUS_OK
ReadX 11380 388 2084 2084 NT_STATUS_OK
ReadX 11380 388 2084 2084 NT_STATUS_OK
ReadX 11367 2157 1386 1386 NT_STATUS_OK
ReadX 11380 2472 399 399 NT_STATUS_OK
ReadX 11380 3072 1536 1536 NT_STATUS_OK
ReadX 11380 544 149 149 NT_STATUS_OK
ReadX 11380 693 485 485 NT_STATUS_OK
Close 11380 NT_STATUS_OK
ReadX 11367 2157 4096 4096 NT_STATUS_OK
ReadX 11367 6253 4096 4096 NT_STATUS_OK
ReadX 11367 10349 4096 4096 NT_STATUS_OK
ReadX 11367 14445 4096 4096 NT_STATUS_OK
ReadX 11367 18541 4096 4096 NT_STATUS_OK
ReadX 11367 22637 256 256 NT_STATUS_OK
ReadX 11367 22893 4096 4096 NT_STATUS_OK
ReadX 11367 26989 4096 4096 NT_STATUS_OK
ReadX 11367 31085 4096 4096 NT_STATUS_OK
ReadX 11367 35181 4096 4096 NT_STATUS_OK
ReadX 11367 39277 4096 4096 NT_STATUS_OK
ReadX 11367 43373 4096 4096 NT_STATUS_OK
ReadX 11367 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11367 2157 1024 1024 NT_STATUS_OK
ReadX 11367 1667 4688 4688 NT_STATUS_OK
ReadX 11367 6355 3516 3516 NT_STATUS_OK
ReadX 11367 9871 16384 16384 NT_STATUS_OK
ReadX 11367 26255 3771 3771 NT_STATUS_OK
ReadX 11367 30026 2048 2048 NT_STATUS_OK
ReadX 11367 32074 1024 1024 NT_STATUS_OK
ReadX 11367 33098 6652 6652 NT_STATUS_OK
ReadX 11367 39750 16384 16384 NT_STATUS_OK
ReadX 11367 56134 10496 10496 NT_STATUS_OK
ReadX 11367 66630 1784 1784 NT_STATUS_OK
ReadX 11367 68414 90 90 NT_STATUS_OK
ReadX 11367 68504 273 273 NT_STATUS_OK
ReadX 11367 68777 1600 1600 NT_STATUS_OK
ReadX 11367 70377 640 640 NT_STATUS_OK
ReadX 11367 71017 1280 1280 NT_STATUS_OK
ReadX 11367 72297 8464 8464 NT_STATUS_OK
ReadX 11367 80761 158 158 NT_STATUS_OK
ReadX 11367 80919 912 912 NT_STATUS_OK
ReadX 11367 81831 1980 1980 NT_STATUS_OK
ReadX 11367 83811 2256 2256 NT_STATUS_OK
ReadX 11367 86067 400 400 NT_STATUS_OK
ReadX 11367 86467 252 252 NT_STATUS_OK
ReadX 11367 86719 42 42 NT_STATUS_OK
ReadX 11367 86761 725 725 NT_STATUS_OK
ReadX 11367 2009 512 512 NT_STATUS_OK
ReadX 11367 3895 9 9 NT_STATUS_OK
ReadX 11367 3781 46 46 NT_STATUS_OK
ReadX 11367 4059 92 92 NT_STATUS_OK
ReadX 11367 3781 92 92 NT_STATUS_OK
ReadX 11367 3986 184 184 NT_STATUS_OK
ReadX 11367 3987 16384 16384 NT_STATUS_OK
ReadX 11367 3902 16384 16384 NT_STATUS_OK
ReadX 11367 3781 10240 10240 NT_STATUS_OK
ReadX 11367 3821 16384 16384 NT_STATUS_OK
ReadX 11367 3891 935 935 NT_STATUS_OK
ReadX 11367 4060 10240 10240 NT_STATUS_OK
ReadX 11367 4059 184 184 NT_STATUS_OK
ReadX 11367 256 184 184 NT_STATUS_OK
ReadX 11367 256 1026 1026 NT_STATUS_OK
ReadX 11367 3901 326 326 NT_STATUS_OK
ReadX 11367 3899 652 652 NT_STATUS_OK
ReadX 11367 256 2 2 NT_STATUS_OK
ReadX 11367 258 4948 4948 NT_STATUS_OK
Close 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11382 NT_STATUS_OK
Close 11382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11385 NT_STATUS_OK
WriteX 11385 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 258 NT_STATUS_OK
WriteX 11385 0 65536 65536 NT_STATUS_OK
WriteX 11385 65536 65536 65536 NT_STATUS_OK
WriteX 11385 131072 65536 65536 NT_STATUS_OK
WriteX 11385 196608 65536 65536 NT_STATUS_OK
WriteX 11385 262144 65536 65536 NT_STATUS_OK
WriteX 11385 327680 65536 65536 NT_STATUS_OK
WriteX 11385 393216 65536 65536 NT_STATUS_OK
WriteX 11385 458752 65536 65536 NT_STATUS_OK
WriteX 11385 524288 65536 65536 NT_STATUS_OK
WriteX 11385 589824 35257 35257 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11387 NT_STATUS_OK
Close 11387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11390 NT_STATUS_OK
WriteX 11390 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11390 258 NT_STATUS_OK
WriteX 11390 0 65536 65536 NT_STATUS_OK
WriteX 11390 65536 65536 65536 NT_STATUS_OK
WriteX 11390 131072 65536 65536 NT_STATUS_OK
WriteX 11390 196608 65536 65536 NT_STATUS_OK
WriteX 11390 262144 65536 65536 NT_STATUS_OK
WriteX 11390 327680 65536 65536 NT_STATUS_OK
WriteX 11390 393216 65536 65536 NT_STATUS_OK
WriteX 11390 458752 65536 65536 NT_STATUS_OK
WriteX 11390 524288 65536 65536 NT_STATUS_OK
WriteX 11390 589824 57598 57598 NT_STATUS_OK
Close 11390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11392 NT_STATUS_OK
WriteX 11392 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11392 258 NT_STATUS_OK
WriteX 11392 0 12543 12543 NT_STATUS_OK
Flush 11392 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11396 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11398 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11398 1005 NT_STATUS_OK
ReadX 11398 1938 24 24 NT_STATUS_OK
ReadX 11398 1920 276 276 NT_STATUS_OK
ReadX 11398 1918 14 14 NT_STATUS_OK
ReadX 11398 1918 7 7 NT_STATUS_OK
ReadX 11398 1919 12 12 NT_STATUS_OK
ReadX 11398 1919 8 8 NT_STATUS_OK
ReadX 11398 1917 15 15 NT_STATUS_OK
ReadX 11398 0 16 16 NT_STATUS_OK
ReadX 11398 16 2048 2048 NT_STATUS_OK
ReadX 11398 2064 2048 2048 NT_STATUS_OK
ReadX 11398 257 2048 2048 NT_STATUS_OK
ReadX 11398 385 2048 2048 NT_STATUS_OK
ReadX 11398 513 2048 2048 NT_STATUS_OK
ReadX 11398 641 2048 2048 NT_STATUS_OK
ReadX 11398 769 2048 2048 NT_STATUS_OK
ReadX 11398 897 2048 2048 NT_STATUS_OK
ReadX 11398 1025 2048 2048 NT_STATUS_OK
ReadX 11398 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11400 NT_STATUS_OK
Close 11400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11403 NT_STATUS_OK
WriteX 11403 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11403 258 NT_STATUS_OK
WriteX 11403 0 11588 11588 NT_STATUS_OK
Flush 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11404 NT_STATUS_OK
Close 11404 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11406 NT_STATUS_OK
ReadX 11406 0 4096 4096 NT_STATUS_OK
Close 11398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11408 NT_STATUS_OK
WriteX 11408 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11408 258 NT_STATUS_OK
WriteX 11408 0 11615 11615 NT_STATUS_OK
Flush 11408 NT_STATUS_OK
Close 11408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11414 NT_STATUS_OK
Close 11414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11417 NT_STATUS_OK
WriteX 11417 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11417 258 NT_STATUS_OK
WriteX 11417 0 65536 65536 NT_STATUS_OK
WriteX 11417 65536 16050 16050 NT_STATUS_OK
Close 11417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11397 1939 64 64 NT_STATUS_OK
ReadX 11397 128 248 248 NT_STATUS_OK
ReadX 11397 128 568 568 NT_STATUS_OK
ReadX 11397 3872 1536 1536 NT_STATUS_OK
ReadX 11397 3456 2560 2560 NT_STATUS_OK
ReadX 11397 3136 512 512 NT_STATUS_OK
ReadX 11397 2880 4096 4096 NT_STATUS_OK
ReadX 11397 3264 3072 3072 NT_STATUS_OK
ReadX 11397 320 4096 4096 NT_STATUS_OK
ReadX 11397 1024 4096 4096 NT_STATUS_OK
ReadX 11397 3616 4096 4096 NT_STATUS_OK
ReadX 11397 1939 64 64 NT_STATUS_OK
ReadX 11397 128 248 248 NT_STATUS_OK
ReadX 11397 128 608 608 NT_STATUS_OK
ReadX 11397 2858 1024 1024 NT_STATUS_OK
ReadX 11397 2810 4096 4096 NT_STATUS_OK
ReadX 11397 2826 4096 4096 NT_STATUS_OK
ReadX 11397 2580 2048 2048 NT_STATUS_OK
ReadX 11397 2800 2560 2560 NT_STATUS_OK
ReadX 11397 2100 4096 4096 NT_STATUS_OK
ReadX 11397 2084 4096 4096 NT_STATUS_OK
ReadX 11397 868 4096 4096 NT_STATUS_OK
ReadX 11397 2324 4096 4096 NT_STATUS_OK
ReadX 11397 884 4096 4096 NT_STATUS_OK
ReadX 11397 2604 1024 1024 NT_STATUS_OK
ReadX 11397 580 4096 4096 NT_STATUS_OK
ReadX 11397 596 4096 4096 NT_STATUS_OK
ReadX 11397 2752 4096 4096 NT_STATUS_OK
ReadX 11397 2842 1024 1024 NT_STATUS_OK
ReadX 11397 660 4096 4096 NT_STATUS_OK
ReadX 11397 2720 4096 4096 NT_STATUS_OK
ReadX 11397 2736 4096 4096 NT_STATUS_OK
ReadX 11397 628 4096 4096 NT_STATUS_OK
ReadX 11397 2704 4096 4096 NT_STATUS_OK
ReadX 11397 1556 4096 4096 NT_STATUS_OK
ReadX 11397 576 4096 4096 NT_STATUS_OK
ReadX 11397 3168 1536 1536 NT_STATUS_OK
ReadX 11397 832 4096 4096 NT_STATUS_OK
ReadX 11397 1088 4096 4096 NT_STATUS_OK
ReadX 11397 1344 4096 4096 NT_STATUS_OK
ReadX 11397 1600 4096 4096 NT_STATUS_OK
ReadX 11397 1856 4096 4096 NT_STATUS_OK
ReadX 11397 2112 4096 4096 NT_STATUS_OK
ReadX 11397 1892 4096 4096 NT_STATUS_OK
ReadX 11397 820 4096 4096 NT_STATUS_OK
ReadX 11397 788 4096 4096 NT_STATUS_OK
ReadX 11397 1604 4096 4096 NT_STATUS_OK
ReadX 11397 3648 4096 4096 NT_STATUS_OK
ReadX 11397 2608 4096 4096 NT_STATUS_OK
ReadX 11397 548 4096 4096 NT_STATUS_OK
ReadX 11397 740 4096 4096 NT_STATUS_OK
ReadX 11397 1344 4096 4096 NT_STATUS_OK
ReadX 11397 3392 4096 4096 NT_STATUS_OK
ReadX 11397 3904 4096 4096 NT_STATUS_OK
ReadX 11397 644 4096 4096 NT_STATUS_OK
ReadX 11397 676 4096 4096 NT_STATUS_OK
ReadX 11397 2688 4096 4096 NT_STATUS_OK
ReadX 11397 320 4096 4096 NT_STATUS_OK
ReadX 11397 900 4096 4096 NT_STATUS_OK
ReadX 11397 1908 4096 4096 NT_STATUS_OK
ReadX 11397 852 4096 4096 NT_STATUS_OK
ReadX 11397 724 4096 4096 NT_STATUS_OK
ReadX 11397 2292 4096 4096 NT_STATUS_OK
ReadX 11397 612 4096 4096 NT_STATUS_OK
ReadX 11397 388 4096 4096 NT_STATUS_OK
ReadX 11397 2368 4096 4096 NT_STATUS_OK
ReadX 11397 2624 4096 4096 NT_STATUS_OK
ReadX 11397 500 4096 4096 NT_STATUS_OK
ReadX 11397 356 4096 4096 NT_STATUS_OK
ReadX 11397 1024 4096 4096 NT_STATUS_OK
ReadX 11397 576 4096 4096 NT_STATUS_OK
ReadX 11397 340 4096 4096 NT_STATUS_OK
ReadX 11397 420 4096 4096 NT_STATUS_OK
ReadX 11397 1600 4096 4096 NT_STATUS_OK
ReadX 11397 404 4096 4096 NT_STATUS_OK
ReadX 11397 1428 4096 4096 NT_STATUS_OK
ReadX 11397 2656 4096 4096 NT_STATUS_OK
ReadX 11397 2624 4096 4096 NT_STATUS_OK
ReadX 11397 452 4096 4096 NT_STATUS_OK
ReadX 11397 692 4096 4096 NT_STATUS_OK
ReadX 11397 564 4096 4096 NT_STATUS_OK
ReadX 11397 372 4096 4096 NT_STATUS_OK
ReadX 11397 468 4096 4096 NT_STATUS_OK
ReadX 11397 484 4096 4096 NT_STATUS_OK
ReadX 11397 1088 4096 4096 NT_STATUS_OK
ReadX 11397 1924 4096 4096 NT_STATUS_OK
ReadX 11397 2768 4096 4096 NT_STATUS_OK
ReadX 11397 832 4096 4096 NT_STATUS_OK
ReadX 11397 836 4096 4096 NT_STATUS_OK
ReadX 11397 1856 4096 4096 NT_STATUS_OK
ReadX 11397 2640 4096 4096 NT_STATUS_OK
ReadX 11397 436 4096 4096 NT_STATUS_OK
ReadX 11397 1828 4096 4096 NT_STATUS_OK
ReadX 11397 804 4096 4096 NT_STATUS_OK
ReadX 11397 1860 4096 4096 NT_STATUS_OK
ReadX 11397 1812 4096 4096 NT_STATUS_OK
ReadX 11397 756 4096 4096 NT_STATUS_OK
ReadX 11397 1636 4096 4096 NT_STATUS_OK
ReadX 11397 772 4096 4096 NT_STATUS_OK
ReadX 11397 2036 4096 4096 NT_STATUS_OK
ReadX 11397 1220 4096 4096 NT_STATUS_OK
ReadX 11397 1652 4096 4096 NT_STATUS_OK
ReadX 11397 2588 4096 4096 NT_STATUS_OK
ReadX 11397 916 4096 4096 NT_STATUS_OK
ReadX 11397 260 4096 4096 NT_STATUS_OK
ReadX 11397 932 4096 4096 NT_STATUS_OK
ReadX 11397 2624 4096 4096 NT_STATUS_OK
ReadX 11397 308 4096 4096 NT_STATUS_OK
ReadX 11397 292 4096 4096 NT_STATUS_OK
ReadX 11397 1140 4096 4096 NT_STATUS_OK
ReadX 11397 276 4096 4096 NT_STATUS_OK
ReadX 11397 2020 4096 4096 NT_STATUS_OK
ReadX 11397 2880 4096 4096 NT_STATUS_OK
ReadX 11397 516 4096 4096 NT_STATUS_OK
ReadX 11397 1844 4096 4096 NT_STATUS_OK
ReadX 11397 1124 4096 4096 NT_STATUS_OK
ReadX 11397 3136 4096 4096 NT_STATUS_OK
ReadX 11397 324 4096 4096 NT_STATUS_OK
ReadX 11397 1156 4096 4096 NT_STATUS_OK
ReadX 11397 1172 4096 4096 NT_STATUS_OK
ReadX 11397 2112 4096 4096 NT_STATUS_OK
ReadX 11397 2368 4096 4096 NT_STATUS_OK
ReadX 11397 964 4096 4096 NT_STATUS_OK
ReadX 11397 980 4096 4096 NT_STATUS_OK
ReadX 11397 1012 4096 4096 NT_STATUS_OK
ReadX 11397 532 4096 4096 NT_STATUS_OK
ReadX 11397 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11397 1620 4096 4096 NT_STATUS_OK
ReadX 11397 1604 4096 4096 NT_STATUS_OK
ReadX 11397 2116 4096 4096 NT_STATUS_OK
ReadX 11397 2132 4096 4096 NT_STATUS_OK
ReadX 11397 2148 4096 4096 NT_STATUS_OK
ReadX 11397 2276 4096 4096 NT_STATUS_OK
ReadX 11397 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11422 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 1004 NT_STATUS_OK
Close 11377 NT_STATUS_OK
WriteX 11422 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11422 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11379 1004 NT_STATUS_OK
Close 11379 NT_STATUS_OK
WriteX 11422 0 65536 65536 NT_STATUS_OK
WriteX 11422 65536 64850 64850 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11424 NT_STATUS_OK
WriteX 11424 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11424 258 NT_STATUS_OK
ReadX 11397 2068 4096 4096 NT_STATUS_OK
ReadX 11397 1588 4096 4096 NT_STATUS_OK
ReadX 11397 1572 4096 4096 NT_STATUS_OK
WriteX 11424 0 18630 18630 NT_STATUS_OK
Flush 11424 NT_STATUS_OK
Close 11424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11426 NT_STATUS_OK
Close 11426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11397 612 4096 4096 NT_STATUS_OK
ReadX 11397 564 4096 4096 NT_STATUS_OK
ReadX 11397 1876 4096 4096 NT_STATUS_OK
ReadX 11397 628 4096 4096 NT_STATUS_OK
ReadX 11397 740 4096 4096 NT_STATUS_OK
ReadX 11397 724 4096 4096 NT_STATUS_OK
ReadX 11397 644 4096 4096 NT_STATUS_OK
ReadX 11397 2324 4096 4096 NT_STATUS_OK
ReadX 11397 660 4096 4096 NT_STATUS_OK
ReadX 11397 852 4096 4096 NT_STATUS_OK
ReadX 11397 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11397 2368 4096 4096 NT_STATUS_OK
ReadX 11397 1024 4096 4096 NT_STATUS_OK
ReadX 11397 320 4096 4096 NT_STATUS_OK
ReadX 11397 580 4096 4096 NT_STATUS_OK
ReadX 11397 3136 512 512 NT_STATUS_OK
ReadX 11397 2880 4096 4096 NT_STATUS_OK
Close 11397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 61440 4096 4096 NT_STATUS_OK
ReadX 11429 126976 4096 4096 NT_STATUS_OK
WriteX 11429 0 65536 65536 NT_STATUS_OK
WriteX 11429 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 61440 4096 4096 NT_STATUS_OK
ReadX 11430 126976 4096 4096 NT_STATUS_OK
ReadX 11430 192512 4096 4096 NT_STATUS_OK
ReadX 11430 258048 4096 4096 NT_STATUS_OK
WriteX 11430 0 65536 65536 NT_STATUS_OK
WriteX 11430 65536 65536 65536 NT_STATUS_OK
WriteX 11430 131072 65536 65536 NT_STATUS_OK
WriteX 11430 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 61440 4096 4096 NT_STATUS_OK
ReadX 11431 126976 4096 4096 NT_STATUS_OK
ReadX 11431 192512 4096 4096 NT_STATUS_OK
ReadX 11431 258048 4096 4096 NT_STATUS_OK
ReadX 11431 323584 4096 4096 NT_STATUS_OK
ReadX 11431 389120 4096 4096 NT_STATUS_OK
ReadX 11431 454656 4096 4096 NT_STATUS_OK
ReadX 11431 520192 4096 4096 NT_STATUS_OK
WriteX 11431 0 65536 65536 NT_STATUS_OK
WriteX 11431 65536 65536 65536 NT_STATUS_OK
WriteX 11431 131072 65536 65536 NT_STATUS_OK
WriteX 11431 196608 65536 65536 NT_STATUS_OK
WriteX 11431 262144 65536 65536 NT_STATUS_OK
WriteX 11431 327680 65536 65536 NT_STATUS_OK
WriteX 11431 393216 65536 65536 NT_STATUS_OK
WriteX 11431 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11433 NT_STATUS_OK
Close 11433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11434 NT_STATUS_OK
WriteX 11434 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11434 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11432 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11432 0 8192 8192 NT_STATUS_OK
Flush 11432 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11436 NT_STATUS_OK
Close 11436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11429 NT_STATUS_OK
Close 11430 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11439 NT_STATUS_OK
WriteX 11439 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11439 258 NT_STATUS_OK
WriteX 11439 0 62591 62591 NT_STATUS_OK
Close 11439 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11441 NT_STATUS_OK
Close 11441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11444 NT_STATUS_OK
WriteX 11444 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11444 258 NT_STATUS_OK
WriteX 11444 0 10845 10845 NT_STATUS_OK
Close 11444 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11446 NT_STATUS_OK
Close 11446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11449 NT_STATUS_OK
WriteX 11449 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11449 258 NT_STATUS_OK
WriteX 11449 0 30118 30118 NT_STATUS_OK
Close 11449 NT_STATUS_OK
WriteX 11432 0 4096 4096 NT_STATUS_OK
WriteX 11434 0 64 64 NT_STATUS_OK
Close 11434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 61440 61440 NT_STATUS_OK
ReadX 11451 61440 4096 4096 NT_STATUS_OK
ReadX 11451 65536 61440 61440 NT_STATUS_OK
ReadX 11451 126976 4096 4096 NT_STATUS_OK
ReadX 11451 131072 61440 61440 NT_STATUS_OK
ReadX 11451 192512 4096 4096 NT_STATUS_OK
ReadX 11451 196608 61440 61440 NT_STATUS_OK
ReadX 11451 258048 4096 4096 NT_STATUS_OK
ReadX 11451 262144 61440 61440 NT_STATUS_OK
ReadX 11451 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 61440 61440 NT_STATUS_OK
ReadX 11452 61440 4096 4096 NT_STATUS_OK
ReadX 11452 65536 61440 61440 NT_STATUS_OK
ReadX 11452 126976 4096 4096 NT_STATUS_OK
ReadX 11452 131072 61440 61440 NT_STATUS_OK
ReadX 11452 192512 4096 4096 NT_STATUS_OK
ReadX 11452 196608 61440 61440 NT_STATUS_OK
ReadX 11452 258048 4096 4096 NT_STATUS_OK
ReadX 11452 262144 61440 61440 NT_STATUS_OK
ReadX 11452 323584 4096 4096 NT_STATUS_OK
ReadX 11452 327680 61440 61440 NT_STATUS_OK
ReadX 11452 389120 4096 4096 NT_STATUS_OK
ReadX 11452 393216 61440 61440 NT_STATUS_OK
ReadX 11452 454656 4096 4096 NT_STATUS_OK
ReadX 11452 458752 61440 61440 NT_STATUS_OK
ReadX 11452 520192 4096 4096 NT_STATUS_OK
ReadX 11452 524288 61440 61440 NT_STATUS_OK
ReadX 11452 585728 4096 4096 NT_STATUS_OK
ReadX 11452 589824 61440 61440 NT_STATUS_OK
ReadX 11452 651264 4096 4096 NT_STATUS_OK
ReadX 11452 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 61440 61440 NT_STATUS_OK
ReadX 11453 61440 4096 4096 NT_STATUS_OK
ReadX 11453 65536 61440 61440 NT_STATUS_OK
ReadX 11453 126976 4096 4096 NT_STATUS_OK
ReadX 11453 131072 61440 61440 NT_STATUS_OK
ReadX 11453 192512 4096 4096 NT_STATUS_OK
ReadX 11453 196608 61440 61440 NT_STATUS_OK
ReadX 11453 258048 4096 4096 NT_STATUS_OK
ReadX 11453 262144 61440 61440 NT_STATUS_OK
ReadX 11453 323584 4096 4096 NT_STATUS_OK
ReadX 11453 327680 61440 61440 NT_STATUS_OK
ReadX 11453 389120 4096 4096 NT_STATUS_OK
ReadX 11453 393216 61440 61440 NT_STATUS_OK
ReadX 11453 454656 4096 4096 NT_STATUS_OK
ReadX 11453 458752 61440 61440 NT_STATUS_OK
ReadX 11453 520192 4096 4096 NT_STATUS_OK
ReadX 11453 524288 61440 61440 NT_STATUS_OK
ReadX 11453 585728 4096 4096 NT_STATUS_OK
ReadX 11453 589824 61440 61440 NT_STATUS_OK
ReadX 11453 651264 4096 4096 NT_STATUS_OK
ReadX 11453 655360 61440 61440 NT_STATUS_OK
ReadX 11453 716800 4096 4096 NT_STATUS_OK
ReadX 11453 720896 61440 61440 NT_STATUS_OK
ReadX 11453 782336 4096 4096 NT_STATUS_OK
ReadX 11453 786432 61440 61440 NT_STATUS_OK
ReadX 11453 847872 4096 4096 NT_STATUS_OK
ReadX 11453 851968 61440 61440 NT_STATUS_OK
ReadX 11453 913408 4096 4096 NT_STATUS_OK
ReadX 11453 917504 61440 61440 NT_STATUS_OK
ReadX 11453 978944 4096 4096 NT_STATUS_OK
ReadX 11453 983040 61440 61440 NT_STATUS_OK
ReadX 11453 1044480 4096 4096 NT_STATUS_OK
ReadX 11453 1048576 61440 61440 NT_STATUS_OK
ReadX 11453 1110016 4096 4096 NT_STATUS_OK
ReadX 11453 1114112 61440 61440 NT_STATUS_OK
ReadX 11453 1175552 4096 4096 NT_STATUS_OK
ReadX 11453 1179648 61440 61440 NT_STATUS_OK
ReadX 11453 1241088 4096 4096 NT_STATUS_OK
ReadX 11453 1245184 61440 61440 NT_STATUS_OK
ReadX 11453 1306624 4096 4096 NT_STATUS_OK
ReadX 11453 1310720 61440 61440 NT_STATUS_OK
ReadX 11453 1372160 4096 4096 NT_STATUS_OK
ReadX 11453 1376256 61440 61440 NT_STATUS_OK
ReadX 11453 1437696 4096 4096 NT_STATUS_OK
ReadX 11453 1441792 61440 61440 NT_STATUS_OK
ReadX 11453 1503232 4096 4096 NT_STATUS_OK
ReadX 11453 1507328 61440 61440 NT_STATUS_OK
ReadX 11453 1568768 4096 4096 NT_STATUS_OK
ReadX 11453 1572864 61440 61440 NT_STATUS_OK
ReadX 11453 1634304 4096 4096 NT_STATUS_OK
ReadX 11453 1638400 61440 61440 NT_STATUS_OK
ReadX 11453 1699840 4096 4096 NT_STATUS_OK
ReadX 11453 1703936 61440 61440 NT_STATUS_OK
ReadX 11453 1765376 4096 4096 NT_STATUS_OK
ReadX 11453 1769472 61440 61440 NT_STATUS_OK
ReadX 11453 1830912 4096 4096 NT_STATUS_OK
ReadX 11453 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11454 NT_STATUS_OK
Close 11454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11456 NT_STATUS_OK
ReadX 11456 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11457 NT_STATUS_OK
ReadX 11457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11458 NT_STATUS_OK
ReadX 11458 0 4096 4096 NT_STATUS_OK
ReadX 11458 4096 4096 4096 NT_STATUS_OK
ReadX 11458 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11459 NT_STATUS_OK
Close 11459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11456 NT_STATUS_OK
Close 11457 NT_STATUS_OK
Close 11458 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11462 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11463 NT_STATUS_OK
Close 11463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11462 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 8192 8192 NT_STATUS_OK
ReadX 11466 8192 8192 8192 NT_STATUS_OK
ReadX 11466 16384 8192 8192 NT_STATUS_OK
ReadX 11466 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11468 NT_STATUS_OK
Close 11468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11471 NT_STATUS_OK
WriteX 11471 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11471 258 NT_STATUS_OK
WriteX 11471 0 10438 10438 NT_STATUS_OK
Close 11471 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11472 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11473 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11475 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11477 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11478 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11480 NT_STATUS_OK
ReadX 11480 0 4096 4096 NT_STATUS_OK
ReadX 11480 4096 4096 4096 NT_STATUS_OK
ReadX 11480 8192 4096 4096 NT_STATUS_OK
ReadX 11480 12288 8192 8192 NT_STATUS_OK
ReadX 11480 20480 8192 8192 NT_STATUS_OK
ReadX 11480 28672 8192 8192 NT_STATUS_OK
ReadX 11480 36864 8192 8192 NT_STATUS_OK
ReadX 11480 45056 8192 8192 NT_STATUS_OK
ReadX 11480 53248 8192 8192 NT_STATUS_OK
ReadX 11480 61440 8192 8192 NT_STATUS_OK
ReadX 11480 69632 8192 8192 NT_STATUS_OK
ReadX 11480 77824 8192 8192 NT_STATUS_OK
ReadX 11480 86016 8192 8192 NT_STATUS_OK
ReadX 11480 94208 8192 8192 NT_STATUS_OK
ReadX 11480 102400 8192 8192 NT_STATUS_OK
ReadX 11480 110592 8192 8192 NT_STATUS_OK
ReadX 11480 118784 8192 8192 NT_STATUS_OK
ReadX 11480 126976 8192 8192 NT_STATUS_OK
ReadX 11480 135168 8192 8192 NT_STATUS_OK
ReadX 11480 143360 8192 8192 NT_STATUS_OK
ReadX 11480 151552 8192 8192 NT_STATUS_OK
ReadX 11480 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11480 NT_STATUS_OK
Close 11473 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Close 11477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11485 NT_STATUS_OK
WriteX 11485 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11485 258 NT_STATUS_OK
WriteX 11485 0 28489 28489 NT_STATUS_OK
WriteX 11485 0 12288 12288 NT_STATUS_OK
Close 11485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11486 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11488 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11489 NT_STATUS_OK
Close 11489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11488 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 8192 8192 NT_STATUS_OK
ReadX 11492 8192 8192 8192 NT_STATUS_OK
ReadX 11492 16384 8192 8192 NT_STATUS_OK
ReadX 11492 24576 8192 8192 NT_STATUS_OK
ReadX 11492 32768 16384 16384 NT_STATUS_OK
ReadX 11492 49152 8192 8192 NT_STATUS_OK
ReadX 11492 57344 8192 8192 NT_STATUS_OK
ReadX 11492 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11497 NT_STATUS_OK
WriteX 11497 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11497 258 NT_STATUS_OK
WriteX 11497 0 29253 29253 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11498 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11501 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11504 NT_STATUS_OK
WriteX 11504 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11504 258 NT_STATUS_OK
WriteX 11504 0 30183 30183 NT_STATUS_OK
Close 11504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11505 NT_STATUS_OK
Close 11505 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11507 NT_STATUS_OK
WriteX 11507 0 510 510 NT_STATUS_OK
WriteX 11507 510 512 512 NT_STATUS_OK
WriteX 11507 1022 510 510 NT_STATUS_OK
WriteX 11507 1532 510 510 NT_STATUS_OK
WriteX 11507 2042 168 168 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11508 NT_STATUS_OK
Close 11508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
WriteX 11510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 61440 4096 4096 NT_STATUS_OK
ReadX 11511 126976 4096 4096 NT_STATUS_OK
WriteX 11511 0 65536 65536 NT_STATUS_OK
WriteX 11511 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 61440 4096 4096 NT_STATUS_OK
ReadX 11512 126976 4096 4096 NT_STATUS_OK
ReadX 11512 192512 4096 4096 NT_STATUS_OK
ReadX 11512 258048 4096 4096 NT_STATUS_OK
WriteX 11512 0 65536 65536 NT_STATUS_OK
WriteX 11512 65536 65536 65536 NT_STATUS_OK
WriteX 11512 131072 65536 65536 NT_STATUS_OK
WriteX 11512 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 61440 4096 4096 NT_STATUS_OK
ReadX 11513 126976 4096 4096 NT_STATUS_OK
ReadX 11513 192512 4096 4096 NT_STATUS_OK
ReadX 11513 258048 4096 4096 NT_STATUS_OK
ReadX 11513 323584 4096 4096 NT_STATUS_OK
ReadX 11513 389120 4096 4096 NT_STATUS_OK
ReadX 11513 454656 4096 4096 NT_STATUS_OK
ReadX 11513 520192 4096 4096 NT_STATUS_OK
WriteX 11513 0 65536 65536 NT_STATUS_OK
WriteX 11513 65536 65536 65536 NT_STATUS_OK
WriteX 11513 131072 65536 65536 NT_STATUS_OK
WriteX 11513 196608 65536 65536 NT_STATUS_OK
WriteX 11513 262144 65536 65536 NT_STATUS_OK
WriteX 11513 327680 65536 65536 NT_STATUS_OK
WriteX 11513 393216 65536 65536 NT_STATUS_OK
WriteX 11513 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11514 NT_STATUS_OK
Close 11514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11510 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Close 11513 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11520 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11523 NT_STATUS_OK
Close 11523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11525 NT_STATUS_OK
Close 11525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11532 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11543 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11548 NT_STATUS_OK
Close 11548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11558 NT_STATUS_OK
Close 11558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11563 NT_STATUS_OK
Close 11563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11568 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11576 NT_STATUS_OK
Close 11576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11579 NT_STATUS_OK
Close 11579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11582 NT_STATUS_OK
WriteX 11582 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11582 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11582 0 65536 65536 NT_STATUS_OK
WriteX 11582 65536 65536 65536 NT_STATUS_OK
WriteX 11582 131072 65536 65536 NT_STATUS_OK
WriteX 11582 196608 65536 65536 NT_STATUS_OK
WriteX 11582 262144 26634 26634 NT_STATUS_OK
Close 11582 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11587 NT_STATUS_OK
Close 11587 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11588 NT_STATUS_OK
Close 11588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
Close 11589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
ReadX 11590 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11591 NT_STATUS_OK
Close 11591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11595 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11598 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11600 NT_STATUS_OK
Close 11600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11604 NT_STATUS_OK
Close 11604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11607 NT_STATUS_OK
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11613 NT_STATUS_OK
Close 11613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11618 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11638 NT_STATUS_OK
Close 11638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11642 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11647 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11652 NT_STATUS_OK
Close 11652 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11655 NT_STATUS_OK
Close 11655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11657 NT_STATUS_OK
Close 11657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 4096 4096 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11682 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
Close 11683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
Close 11684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11671 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11714 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11714 0 4096 4096 NT_STATUS_OK
Close 11714 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
ReadX 11716 4096 4096 4096 NT_STATUS_OK
ReadX 11716 8192 4096 4096 NT_STATUS_OK
ReadX 11716 12288 4096 4096 NT_STATUS_OK
ReadX 11716 16384 4096 4096 NT_STATUS_OK
ReadX 11716 20480 4096 4096 NT_STATUS_OK
ReadX 11716 24576 4096 4096 NT_STATUS_OK
ReadX 11716 28672 4096 4096 NT_STATUS_OK
ReadX 11716 32768 4096 4096 NT_STATUS_OK
ReadX 11716 36864 4096 4096 NT_STATUS_OK
ReadX 11716 40960 4096 4096 NT_STATUS_OK
ReadX 11716 45056 4096 4096 NT_STATUS_OK
ReadX 11716 49152 4096 4096 NT_STATUS_OK
ReadX 11716 53248 4096 4096 NT_STATUS_OK
ReadX 11716 57344 4096 4096 NT_STATUS_OK
ReadX 11716 61440 4096 4096 NT_STATUS_OK
ReadX 11716 65536 4096 4096 NT_STATUS_OK
ReadX 11716 69632 4096 4096 NT_STATUS_OK
ReadX 11716 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11716 1004 NT_STATUS_OK
WriteX 11716 0 4096 4096 NT_STATUS_OK
Close 11716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11717 NT_STATUS_OK
SET_FILE_INFORMATION 11717 1004 NT_STATUS_OK
Close 11717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11718 NT_STATUS_OK
ReadX 11718 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11719 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11722 NT_STATUS_OK
WriteX 11722 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11722 258 NT_STATUS_OK
WriteX 11722 0 65536 65536 NT_STATUS_OK
WriteX 11722 65536 19979 19979 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
QUERY_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
SET_FILE_INFORMATION 11723 1004 NT_STATUS_OK
WriteX 11723 0 4096 4096 NT_STATUS_OK
Flush 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11725 NT_STATUS_OK
ReadX 11725 0 4096 4096 NT_STATUS_OK
Close 11724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
Close 11726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 4096 4096 NT_STATUS_OK
Close 11727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11728 1004 NT_STATUS_OK
WriteX 11728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11729 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11725 NT_STATUS_OK
Close 11728 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11731 NT_STATUS_OK
Close 11731 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11734 NT_STATUS_OK
WriteX 11734 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11734 258 NT_STATUS_OK
WriteX 11734 0 65536 65536 NT_STATUS_OK
WriteX 11734 65536 17654 17654 NT_STATUS_OK
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11735 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
QUERY_FILE_INFORMATION 11735 1004 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
SET_FILE_INFORMATION 11735 1004 NT_STATUS_OK
WriteX 11735 0 4096 4096 NT_STATUS_OK
Flush 11735 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11736 NT_STATUS_OK
SET_FILE_INFORMATION 11736 1004 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11738 NT_STATUS_OK
Close 11738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11740 NT_STATUS_OK
ReadX 11740 0 4096 4096 NT_STATUS_OK
ReadX 11740 4096 4096 4096 NT_STATUS_OK
ReadX 11740 8192 4096 4096 NT_STATUS_OK
ReadX 11740 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11740 16384 4096 4096 NT_STATUS_OK
ReadX 11740 20480 4096 4096 NT_STATUS_OK
ReadX 11740 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 4096 4096 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11743 1004 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11744 NT_STATUS_OK
Close 11744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11746 NT_STATUS_OK
Close 11746 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11749 NT_STATUS_OK
WriteX 11749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11749 258 NT_STATUS_OK
WriteX 11749 0 65536 65536 NT_STATUS_OK
WriteX 11749 65536 19490 19490 NT_STATUS_OK
Close 11749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
QUERY_FILE_INFORMATION 11750 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
SET_FILE_INFORMATION 11750 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11751 NT_STATUS_OK
SET_FILE_INFORMATION 11751 1004 NT_STATUS_OK
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11753 NT_STATUS_OK
Close 11753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11755 0 4096 4096 NT_STATUS_OK
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
ReadX 11757 4096 4096 4096 NT_STATUS_OK
ReadX 11757 8192 4096 4096 NT_STATUS_OK
ReadX 11757 12288 4096 4096 NT_STATUS_OK
ReadX 11757 16384 4096 4096 NT_STATUS_OK
ReadX 11757 20480 4096 4096 NT_STATUS_OK
ReadX 11757 24576 4096 4096 NT_STATUS_OK
ReadX 11757 28672 4096 4096 NT_STATUS_OK
ReadX 11757 32768 4096 4096 NT_STATUS_OK
ReadX 11757 36864 4096 4096 NT_STATUS_OK
ReadX 11757 40960 4096 4096 NT_STATUS_OK
ReadX 11757 45056 4096 4096 NT_STATUS_OK
ReadX 11757 49152 4096 4096 NT_STATUS_OK
ReadX 11757 53248 4096 4096 NT_STATUS_OK
ReadX 11757 57344 4096 4096 NT_STATUS_OK
ReadX 11757 61440 4096 4096 NT_STATUS_OK
ReadX 11757 65536 4096 4096 NT_STATUS_OK
ReadX 11757 69632 4096 4096 NT_STATUS_OK
ReadX 11757 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11757 1004 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
Close 11757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11758 NT_STATUS_OK
SET_FILE_INFORMATION 11758 1004 NT_STATUS_OK
Close 11758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11760 NT_STATUS_OK
Close 11760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11763 NT_STATUS_OK
WriteX 11763 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11763 258 NT_STATUS_OK
WriteX 11763 0 65536 65536 NT_STATUS_OK
WriteX 11763 65536 8866 8866 NT_STATUS_OK
Close 11763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
WriteX 11764 0 4096 4096 NT_STATUS_OK
Flush 11764 NT_STATUS_OK
SET_FILE_INFORMATION 11764 1004 NT_STATUS_OK
WriteX 11764 0 4096 4096 NT_STATUS_OK
Flush 11764 NT_STATUS_OK
Close 11764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11766 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
Close 11766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11767 NT_STATUS_OK
ReadX 11767 0 4096 4096 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11768 1004 NT_STATUS_OK
WriteX 11768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11769 NT_STATUS_OK
Close 11769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11771 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11774 NT_STATUS_OK
WriteX 11774 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11774 258 NT_STATUS_OK
WriteX 11774 0 65536 65536 NT_STATUS_OK
WriteX 11774 65536 9298 9298 NT_STATUS_OK
Close 11774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11775 NT_STATUS_OK
ReadX 11775 0 4096 4096 NT_STATUS_OK
WriteX 11775 0 4096 4096 NT_STATUS_OK
Flush 11775 NT_STATUS_OK
SET_FILE_INFORMATION 11775 1004 NT_STATUS_OK
WriteX 11775 0 4096 4096 NT_STATUS_OK
Flush 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11776 NT_STATUS_OK
SET_FILE_INFORMATION 11776 1004 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11781 0 4096 4096 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11782 4096 4096 4096 NT_STATUS_OK
ReadX 11782 8192 4096 4096 NT_STATUS_OK
ReadX 11782 12288 4096 4096 NT_STATUS_OK
ReadX 11782 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
Close 11783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11785 1004 NT_STATUS_OK
WriteX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11786 NT_STATUS_OK
Close 11786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11791 NT_STATUS_OK
WriteX 11791 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11791 258 NT_STATUS_OK
WriteX 11791 0 65536 65536 NT_STATUS_OK
WriteX 11791 65536 11540 11540 NT_STATUS_OK
Close 11791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Flush 11792 NT_STATUS_OK
SET_FILE_INFORMATION 11792 1004 NT_STATUS_OK
WriteX 11792 0 4096 4096 NT_STATUS_OK
Flush 11792 NT_STATUS_OK
Close 11792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11793 NT_STATUS_OK
SET_FILE_INFORMATION 11793 1004 NT_STATUS_OK
Close 11793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11795 NT_STATUS_OK
Close 11795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 61440 4096 4096 NT_STATUS_OK
ReadX 11797 126976 4096 4096 NT_STATUS_OK
WriteX 11797 0 65536 65536 NT_STATUS_OK
WriteX 11797 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 61440 4096 4096 NT_STATUS_OK
ReadX 11798 126976 4096 4096 NT_STATUS_OK
ReadX 11798 192512 4096 4096 NT_STATUS_OK
ReadX 11798 258048 4096 4096 NT_STATUS_OK
WriteX 11798 0 65536 65536 NT_STATUS_OK
WriteX 11798 65536 65536 65536 NT_STATUS_OK
WriteX 11798 131072 65536 65536 NT_STATUS_OK
WriteX 11798 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11799 NT_STATUS_OK
ReadX 11799 61440 4096 4096 NT_STATUS_OK
ReadX 11799 126976 4096 4096 NT_STATUS_OK
ReadX 11799 192512 4096 4096 NT_STATUS_OK
ReadX 11799 258048 4096 4096 NT_STATUS_OK
ReadX 11799 323584 4096 4096 NT_STATUS_OK
ReadX 11799 389120 4096 4096 NT_STATUS_OK
ReadX 11799 454656 4096 4096 NT_STATUS_OK
ReadX 11799 520192 4096 4096 NT_STATUS_OK
WriteX 11799 0 65536 65536 NT_STATUS_OK
WriteX 11799 65536 65536 65536 NT_STATUS_OK
WriteX 11799 131072 65536 65536 NT_STATUS_OK
WriteX 11799 196608 65536 65536 NT_STATUS_OK
WriteX 11799 262144 65536 65536 NT_STATUS_OK
WriteX 11799 327680 65536 65536 NT_STATUS_OK
WriteX 11799 393216 65536 65536 NT_STATUS_OK
WriteX 11799 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11800 NT_STATUS_OK
ReadX 11800 0 4096 4096 NT_STATUS_OK
ReadX 11800 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11801 NT_STATUS_OK
WriteX 11801 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11801 258 NT_STATUS_OK
WriteX 11801 0 53 53 NT_STATUS_OK
Close 11801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11802 NT_STATUS_OK
Close 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11740 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Close 11799 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11800 8192 4096 4096 NT_STATUS_OK
ReadX 11800 12288 4096 4096 NT_STATUS_OK
WriteX 11804 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 258 NT_STATUS_OK
ReadX 11800 16384 4096 4096 NT_STATUS_OK
ReadX 11800 20480 4096 4096 NT_STATUS_OK
WriteX 11804 0 15360 15360 NT_STATUS_OK
Close 11804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11805 NT_STATUS_OK
ReadX 11805 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11805 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11805 1004 NT_STATUS_OK
WriteX 11805 0 4096 4096 NT_STATUS_OK
Close 11805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11806 NT_STATUS_OK
Close 11806 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11809 NT_STATUS_OK
Close 11809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11808 4096 4096 4096 NT_STATUS_OK
ReadX 11808 8192 4096 4096 NT_STATUS_OK
ReadX 11808 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11811 NT_STATUS_OK
ReadX 11811 0 4096 4096 NT_STATUS_OK
ReadX 11811 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11812 NT_STATUS_OK
ReadX 11812 0 4096 4096 NT_STATUS_OK
ReadX 11812 4096 4096 4096 NT_STATUS_OK
ReadX 11812 8192 4096 4096 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11813 NT_STATUS_OK
WriteX 11813 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11813 258 NT_STATUS_OK
WriteX 11813 0 15360 15360 NT_STATUS_OK
Close 11813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11814 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11814 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11815 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11818 NT_STATUS_OK
SET_FILE_INFORMATION 11818 1004 NT_STATUS_OK
Close 11818 NT_STATUS_OK
WriteX 11814 0 4096 4096 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11819 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
ReadX 11821 4096 4096 4096 NT_STATUS_OK
ReadX 11821 8192 4096 4096 NT_STATUS_OK
ReadX 11821 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11822 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11823 NT_STATUS_OK
WriteX 11823 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11823 258 NT_STATUS_OK
WriteX 11823 0 53 53 NT_STATUS_OK
Close 11823 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11824 NT_STATUS_OK
Close 11824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11822 4096 4096 4096 NT_STATUS_OK
ReadX 11822 8192 4096 4096 NT_STATUS_OK
ReadX 11822 12288 4096 4096 NT_STATUS_OK
WriteX 11826 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11826 258 NT_STATUS_OK
WriteX 11826 0 12006 12006 NT_STATUS_OK
Close 11826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 4096 4096 NT_STATUS_OK
Close 11827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11831 NT_STATUS_OK
Close 11831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11830 4096 4096 4096 NT_STATUS_OK
ReadX 11830 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11833 NT_STATUS_OK
WriteX 11833 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11833 258 NT_STATUS_OK
WriteX 11833 0 11991 11991 NT_STATUS_OK
Close 11833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11834 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11834 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11822 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11835 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11838 NT_STATUS_OK
SET_FILE_INFORMATION 11838 1004 NT_STATUS_OK
Close 11838 NT_STATUS_OK
WriteX 11834 0 4096 4096 NT_STATUS_OK
Close 11834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11839 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11841 NT_STATUS_OK
ReadX 11841 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11842 NT_STATUS_OK
Close 11842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11841 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
ReadX 11841 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
WriteX 11841 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11841 1004 NT_STATUS_OK
Close 11817 NT_STATUS_OK
WriteX 11821 0 19054 19054 NT_STATUS_OK
WriteX 11841 0 12288 12288 NT_STATUS_OK
Close 11837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Close 11841 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11846 NT_STATUS_OK
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11848 NT_STATUS_OK
ReadX 11848 0 61440 61440 NT_STATUS_OK
ReadX 11848 61440 4096 4096 NT_STATUS_OK
ReadX 11848 65536 61440 61440 NT_STATUS_OK
ReadX 11848 126976 4096 4096 NT_STATUS_OK
ReadX 11848 131072 61440 61440 NT_STATUS_OK
ReadX 11848 192512 4096 4096 NT_STATUS_OK
ReadX 11848 196608 61440 61440 NT_STATUS_OK
ReadX 11848 258048 4096 4096 NT_STATUS_OK
ReadX 11848 262144 61440 61440 NT_STATUS_OK
ReadX 11848 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11849 NT_STATUS_OK
ReadX 11849 0 61440 61440 NT_STATUS_OK
ReadX 11849 61440 4096 4096 NT_STATUS_OK
ReadX 11849 65536 61440 61440 NT_STATUS_OK
ReadX 11849 126976 4096 4096 NT_STATUS_OK
ReadX 11849 131072 61440 61440 NT_STATUS_OK
ReadX 11849 192512 4096 4096 NT_STATUS_OK
ReadX 11849 196608 61440 61440 NT_STATUS_OK
ReadX 11849 258048 4096 4096 NT_STATUS_OK
ReadX 11849 262144 61440 61440 NT_STATUS_OK
ReadX 11849 323584 4096 4096 NT_STATUS_OK
ReadX 11849 327680 61440 61440 NT_STATUS_OK
ReadX 11849 389120 4096 4096 NT_STATUS_OK
ReadX 11849 393216 61440 61440 NT_STATUS_OK
ReadX 11849 454656 4096 4096 NT_STATUS_OK
ReadX 11849 458752 61440 61440 NT_STATUS_OK
ReadX 11849 520192 4096 4096 NT_STATUS_OK
ReadX 11849 524288 61440 61440 NT_STATUS_OK
ReadX 11849 585728 4096 4096 NT_STATUS_OK
ReadX 11849 589824 61440 61440 NT_STATUS_OK
ReadX 11849 651264 4096 4096 NT_STATUS_OK
ReadX 11849 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 61440 61440 NT_STATUS_OK
ReadX 11850 61440 4096 4096 NT_STATUS_OK
ReadX 11850 65536 61440 61440 NT_STATUS_OK
ReadX 11850 126976 4096 4096 NT_STATUS_OK
ReadX 11850 131072 61440 61440 NT_STATUS_OK
ReadX 11850 192512 4096 4096 NT_STATUS_OK
ReadX 11850 196608 61440 61440 NT_STATUS_OK
ReadX 11850 258048 4096 4096 NT_STATUS_OK
ReadX 11850 262144 61440 61440 NT_STATUS_OK
ReadX 11850 323584 4096 4096 NT_STATUS_OK
ReadX 11850 327680 61440 61440 NT_STATUS_OK
ReadX 11850 389120 4096 4096 NT_STATUS_OK
ReadX 11850 393216 61440 61440 NT_STATUS_OK
ReadX 11850 454656 4096 4096 NT_STATUS_OK
ReadX 11850 458752 61440 61440 NT_STATUS_OK
ReadX 11850 520192 4096 4096 NT_STATUS_OK
ReadX 11850 524288 61440 61440 NT_STATUS_OK
ReadX 11850 585728 4096 4096 NT_STATUS_OK
ReadX 11850 589824 61440 61440 NT_STATUS_OK
ReadX 11850 651264 4096 4096 NT_STATUS_OK
ReadX 11850 655360 61440 61440 NT_STATUS_OK
ReadX 11850 716800 4096 4096 NT_STATUS_OK
ReadX 11850 720896 61440 61440 NT_STATUS_OK
ReadX 11850 782336 4096 4096 NT_STATUS_OK
ReadX 11850 786432 61440 61440 NT_STATUS_OK
ReadX 11850 847872 4096 4096 NT_STATUS_OK
ReadX 11850 851968 61440 61440 NT_STATUS_OK
ReadX 11850 913408 4096 4096 NT_STATUS_OK
ReadX 11850 917504 61440 61440 NT_STATUS_OK
ReadX 11850 978944 4096 4096 NT_STATUS_OK
ReadX 11850 983040 61440 61440 NT_STATUS_OK
ReadX 11850 1044480 4096 4096 NT_STATUS_OK
ReadX 11850 1048576 61440 61440 NT_STATUS_OK
ReadX 11850 1110016 4096 4096 NT_STATUS_OK
ReadX 11850 1114112 61440 61440 NT_STATUS_OK
ReadX 11850 1175552 4096 4096 NT_STATUS_OK
ReadX 11850 1179648 61440 61440 NT_STATUS_OK
ReadX 11850 1241088 4096 4096 NT_STATUS_OK
ReadX 11850 1245184 61440 61440 NT_STATUS_OK
ReadX 11850 1306624 4096 4096 NT_STATUS_OK
ReadX 11850 1310720 61440 61440 NT_STATUS_OK
ReadX 11850 1372160 4096 4096 NT_STATUS_OK
ReadX 11850 1376256 61440 61440 NT_STATUS_OK
ReadX 11850 1437696 4096 4096 NT_STATUS_OK
ReadX 11850 1441792 61440 61440 NT_STATUS_OK
ReadX 11850 1503232 4096 4096 NT_STATUS_OK
ReadX 11850 1507328 61440 61440 NT_STATUS_OK
ReadX 11850 1568768 4096 4096 NT_STATUS_OK
ReadX 11850 1572864 61440 61440 NT_STATUS_OK
ReadX 11850 1634304 4096 4096 NT_STATUS_OK
ReadX 11850 1638400 61440 61440 NT_STATUS_OK
ReadX 11850 1699840 4096 4096 NT_STATUS_OK
ReadX 11850 1703936 61440 61440 NT_STATUS_OK
ReadX 11850 1765376 4096 4096 NT_STATUS_OK
ReadX 11850 1769472 61440 61440 NT_STATUS_OK
ReadX 11850 1830912 4096 4096 NT_STATUS_OK
ReadX 11850 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11852 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11853 NT_STATUS_OK
ReadX 11853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11857 NT_STATUS_OK
QUERY_FILE_INFORMATION 11857 1004 NT_STATUS_OK
WriteX 11857 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11857 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11858 NT_STATUS_OK
Close 11858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11859 NT_STATUS_OK
WriteX 11859 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11859 258 NT_STATUS_OK
WriteX 11859 0 491 491 NT_STATUS_OK
Close 11859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11860 NT_STATUS_OK
ReadX 11860 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11857 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11862 NT_STATUS_OK
Close 11862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11863 NT_STATUS_OK
WriteX 11863 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11863 258 NT_STATUS_OK
WriteX 11863 0 543 543 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11848 NT_STATUS_OK
Close 11849 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11869 NT_STATUS_OK
ReadX 11869 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11871 NT_STATUS_OK
ReadX 11871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11872 NT_STATUS_OK
ReadX 11872 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11877 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1004 NT_STATUS_OK
WriteX 11877 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 258 NT_STATUS_OK
WriteX 11877 0 2048 2048 NT_STATUS_OK
Close 11877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11878 NT_STATUS_OK
ReadX 11878 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11878 0 4096 4096 NT_STATUS_OK
Flush 11878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11878 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11883 NT_STATUS_OK
WriteX 11883 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11883 258 NT_STATUS_OK
WriteX 11883 0 2048 2048 NT_STATUS_OK
Close 11883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11888 NT_STATUS_OK
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11889 NT_STATUS_OK
WriteX 11889 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
WriteX 11889 0 2048 2048 NT_STATUS_OK
Close 11889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 2048 2048 NT_STATUS_OK
ReadX 11868 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11872 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11884 0 4096 4096 NT_STATUS_OK
WriteX 11868 0 8192 8192 NT_STATUS_OK
WriteX 11869 0 4096 4096 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11894 NT_STATUS_OK
QUERY_FILE_INFORMATION 11894 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11869 NT_STATUS_OK
Close 11870 NT_STATUS_OK
Close 11871 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11900 NT_STATUS_OK
ReadX 11900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11901 NT_STATUS_OK
ReadX 11901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11903 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11904 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11907 NT_STATUS_OK
ReadX 11907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11908 NT_STATUS_OK
ReadX 11908 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11914 NT_STATUS_OK
QUERY_FILE_INFORMATION 11914 1004 NT_STATUS_OK
WriteX 11914 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11914 258 NT_STATUS_OK
WriteX 11914 0 2048 2048 NT_STATUS_OK
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11916 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11917 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11922 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 1004 NT_STATUS_OK
WriteX 11922 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 258 NT_STATUS_OK
WriteX 11922 0 2048 2048 NT_STATUS_OK
Close 11922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11915 0 4096 4096 NT_STATUS_OK
Flush 11915 NT_STATUS_OK
WriteX 11923 0 4096 4096 NT_STATUS_OK
Flush 11923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11915 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11923 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11917 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11925 NT_STATUS_OK
WriteX 11925 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11925 258 NT_STATUS_OK
WriteX 11925 0 4096 4096 NT_STATUS_OK
Close 11925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11927 NT_STATUS_OK
Close 11927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11928 NT_STATUS_OK
WriteX 11928 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11928 258 NT_STATUS_OK
WriteX 11928 0 4096 4096 NT_STATUS_OK
Close 11928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11929 0 4096 4096 NT_STATUS_OK
Close 11926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11909 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Close 11917 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Close 11907 NT_STATUS_OK
Close 11908 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Close 11901 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Close 11900 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11932 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11934 NT_STATUS_OK
ReadX 11934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11936 NT_STATUS_OK
WriteX 11936 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11936 258 NT_STATUS_OK
WriteX 11936 0 2048 2048 NT_STATUS_OK
Close 11936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11937 NT_STATUS_OK
ReadX 11937 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11938 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11948 NT_STATUS_OK
ReadX 11948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11950 NT_STATUS_OK
ReadX 11950 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11951 NT_STATUS_OK
QUERY_FILE_INFORMATION 11951 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11934 NT_STATUS_OK
Close 11937 NT_STATUS_OK
Close 11949 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Close 11947 NT_STATUS_OK
Close 11948 NT_STATUS_OK
Close 11950 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11953 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11955 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11956 NT_STATUS_OK
ReadX 11956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11958 NT_STATUS_OK
ReadX 11958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11959 NT_STATUS_OK
ReadX 11959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11973 NT_STATUS_OK
QUERY_FILE_INFORMATION 11973 1004 NT_STATUS_OK
WriteX 11973 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11973 258 NT_STATUS_OK
WriteX 11973 0 2048 2048 NT_STATUS_OK
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11979 NT_STATUS_OK
ReadX 11979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11980 NT_STATUS_OK
ReadX 11980 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11984 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11985 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 1004 NT_STATUS_OK
WriteX 11985 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 258 NT_STATUS_OK
WriteX 11985 0 2048 2048 NT_STATUS_OK
Close 11985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11986 NT_STATUS_OK
ReadX 11986 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11993 NT_STATUS_OK
QUERY_FILE_INFORMATION 11993 1004 NT_STATUS_OK
WriteX 11993 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11993 258 NT_STATUS_OK
WriteX 11993 0 2048 2048 NT_STATUS_OK
Close 11993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11994 NT_STATUS_OK
ReadX 11994 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
Flush 11974 NT_STATUS_OK
WriteX 11986 0 4096 4096 NT_STATUS_OK
Flush 11986 NT_STATUS_OK
WriteX 11994 0 4096 4096 NT_STATUS_OK
Flush 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11974 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11986 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11994 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11976 4096 16384 16384 NT_STATUS_OK
ReadX 11956 4096 16384 16384 NT_STATUS_OK
ReadX 11988 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 2048 2048 NT_STATUS_OK
WriteX 11996 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11997 NT_STATUS_OK
QUERY_FILE_INFORMATION 11997 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11980 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11977 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11979 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11988 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Close 11964 NT_STATUS_OK
Close 11956 NT_STATUS_OK
Close 11957 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11999 NT_STATUS_OK
QUERY_FILE_INFORMATION 11999 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12001 NT_STATUS_OK
QUERY_FILE_INFORMATION 12001 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12004 NT_STATUS_OK
ReadX 12004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12004 4096 16384 16384 NT_STATUS_OK
WriteX 12004 0 4096 4096 NT_STATUS_OK
WriteX 12005 0 4096 4096 NT_STATUS_OK
WriteX 12006 0 4096 4096 NT_STATUS_OK
WriteX 12007 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12010 NT_STATUS_OK
ReadX 12010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12011 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12012 NT_STATUS_OK
ReadX 12012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12013 NT_STATUS_OK
ReadX 12013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12014 NT_STATUS_OK
ReadX 12014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12015 NT_STATUS_OK
ReadX 12015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12016 NT_STATUS_OK
ReadX 12016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12018 NT_STATUS_OK
ReadX 12018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 0 8192 8192 NT_STATUS_OK
ReadX 12010 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12024 0 4096 4096 NT_STATUS_OK
ReadX 12024 4096 4096 4096 NT_STATUS_OK
ReadX 12024 8192 4096 4096 NT_STATUS_OK
WriteX 12010 0 4096 4096 NT_STATUS_OK
WriteX 12011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
ReadX 12025 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12004 0 4096 4096 NT_STATUS_OK
WriteX 12005 0 4096 4096 NT_STATUS_OK
WriteX 12006 0 4096 4096 NT_STATUS_OK
WriteX 12007 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12030 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 258 NT_STATUS_OK
WriteX 12030 0 2048 2048 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
ReadX 12033 4096 4096 4096 NT_STATUS_OK
WriteX 12033 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12034 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
ReadX 12035 4096 4096 4096 NT_STATUS_OK
WriteX 12035 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12036 NT_STATUS_OK
QUERY_FILE_INFORMATION 12036 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12023 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12017 NT_STATUS_OK
Close 12018 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Close 12020 NT_STATUS_OK
Close 12022 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Close 12015 NT_STATUS_OK
Close 12012 NT_STATUS_OK
Close 12013 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12024 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12038 0 4096 4096 NT_STATUS_OK
ReadX 12038 4096 4096 4096 NT_STATUS_OK
ReadX 12038 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12040 NT_STATUS_OK
ReadX 12040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12041 NT_STATUS_OK
ReadX 12041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12045 NT_STATUS_OK
ReadX 12045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12046 NT_STATUS_OK
ReadX 12046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12051 NT_STATUS_OK
ReadX 12051 0 4096 4096 NT_STATUS_OK
ReadX 12039 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12056 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 1004 NT_STATUS_OK
WriteX 12056 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 258 NT_STATUS_OK
WriteX 12056 0 2048 2048 NT_STATUS_OK
Close 12056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12061 NT_STATUS_OK
Close 12061 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12062 NT_STATUS_OK
QUERY_FILE_INFORMATION 12062 1004 NT_STATUS_OK
WriteX 12062 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12062 258 NT_STATUS_OK
WriteX 12062 0 2048 2048 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12063 NT_STATUS_OK
ReadX 12063 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12063 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12046 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12064 NT_STATUS_OK
QUERY_FILE_INFORMATION 12064 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Close 12045 NT_STATUS_OK
Close 12051 NT_STATUS_OK
Close 12039 NT_STATUS_OK
Close 12040 NT_STATUS_OK
Close 12043 NT_STATUS_OK
Close 12044 NT_STATUS_OK
Close 12041 NT_STATUS_OK
Close 12042 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Close 12048 NT_STATUS_OK
Close 12049 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12066 NT_STATUS_OK
QUERY_FILE_INFORMATION 12066 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12068 NT_STATUS_OK
ReadX 12068 61440 4096 4096 NT_STATUS_OK
ReadX 12068 126976 4096 4096 NT_STATUS_OK
WriteX 12068 0 65536 65536 NT_STATUS_OK
WriteX 12068 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 61440 4096 4096 NT_STATUS_OK
ReadX 12069 126976 4096 4096 NT_STATUS_OK
ReadX 12069 192512 4096 4096 NT_STATUS_OK
ReadX 12069 258048 4096 4096 NT_STATUS_OK
WriteX 12069 0 65536 65536 NT_STATUS_OK
WriteX 12069 65536 65536 65536 NT_STATUS_OK
WriteX 12069 131072 65536 65536 NT_STATUS_OK
WriteX 12069 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 61440 4096 4096 NT_STATUS_OK
ReadX 12070 126976 4096 4096 NT_STATUS_OK
ReadX 12070 192512 4096 4096 NT_STATUS_OK
ReadX 12070 258048 4096 4096 NT_STATUS_OK
ReadX 12070 323584 4096 4096 NT_STATUS_OK
ReadX 12070 389120 4096 4096 NT_STATUS_OK
ReadX 12070 454656 4096 4096 NT_STATUS_OK
ReadX 12070 520192 4096 4096 NT_STATUS_OK
WriteX 12070 0 65536 65536 NT_STATUS_OK
WriteX 12070 65536 65536 65536 NT_STATUS_OK
WriteX 12070 131072 65536 65536 NT_STATUS_OK
WriteX 12070 196608 65536 65536 NT_STATUS_OK
WriteX 12070 262144 65536 65536 NT_STATUS_OK
WriteX 12070 327680 65536 65536 NT_STATUS_OK
WriteX 12070 393216 65536 65536 NT_STATUS_OK
WriteX 12070 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12071 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12071 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12071 8192 4096 4096 NT_STATUS_OK
ReadX 12071 12288 4096 4096 NT_STATUS_OK
ReadX 12071 16384 4096 4096 NT_STATUS_OK
ReadX 12071 20480 4096 4096 NT_STATUS_OK
ReadX 12071 24576 4096 4096 NT_STATUS_OK
ReadX 12071 28672 4096 4096 NT_STATUS_OK
ReadX 12071 32768 4096 4096 NT_STATUS_OK
ReadX 12071 36864 4096 4096 NT_STATUS_OK
ReadX 12071 40960 4096 4096 NT_STATUS_OK
ReadX 12071 45056 4096 4096 NT_STATUS_OK
ReadX 12071 49152 4096 4096 NT_STATUS_OK
ReadX 12071 53248 4096 4096 NT_STATUS_OK
ReadX 12071 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12071 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12072 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Close 12069 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12074 NT_STATUS_OK
WriteX 12074 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12074 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12074 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12074 1004 NT_STATUS_OK
WriteX 12074 0 57088 57088 NT_STATUS_OK
WriteX 12074 0 4096 4096 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
Close 12071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12075 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
Close 12075 NT_STATUS_OK
SET_FILE_INFORMATION 12074 1004 NT_STATUS_OK
WriteX 12074 0 4096 4096 NT_STATUS_OK
Close 12074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12076 NT_STATUS_OK
Close 12076 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12078 NT_STATUS_OK
ReadX 12078 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12078 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12079 NT_STATUS_OK
WriteX 12079 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12079 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
WriteX 12079 0 51456 51456 NT_STATUS_OK
WriteX 12079 0 4096 4096 NT_STATUS_OK
Flush 12079 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12079 1004 NT_STATUS_OK
WriteX 12079 0 4096 4096 NT_STATUS_OK
Close 12079 NT_STATUS_OK
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12081 NT_STATUS_OK
Close 12081 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12083 NT_STATUS_OK
ReadX 12083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12083 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12085 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12088 NT_STATUS_OK
WriteX 12088 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12088 258 NT_STATUS_OK
WriteX 12088 0 53077 53077 NT_STATUS_OK
Close 12088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12089 NT_STATUS_OK
WriteX 12089 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12089 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12089 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12089 1004 NT_STATUS_OK
WriteX 12089 0 65536 65536 NT_STATUS_OK
WriteX 12089 65536 1856 1856 NT_STATUS_OK
WriteX 12089 0 4096 4096 NT_STATUS_OK
Flush 12089 NT_STATUS_OK
SET_FILE_INFORMATION 12089 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12089 1004 NT_STATUS_OK
WriteX 12089 0 4096 4096 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12091 NT_STATUS_OK
Close 12091 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12095 NT_STATUS_OK
Close 12095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12098 NT_STATUS_OK
WriteX 12098 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 258 NT_STATUS_OK
WriteX 12098 0 7983 7983 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12100 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12103 NT_STATUS_OK
WriteX 12103 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12103 258 NT_STATUS_OK
WriteX 12103 0 65536 65536 NT_STATUS_OK
WriteX 12103 65536 65536 65536 NT_STATUS_OK
WriteX 12103 131072 65536 65536 NT_STATUS_OK
WriteX 12103 196608 65536 65536 NT_STATUS_OK
WriteX 12103 262144 65536 65536 NT_STATUS_OK
WriteX 12103 327680 65536 65536 NT_STATUS_OK
WriteX 12103 393216 65536 65536 NT_STATUS_OK
WriteX 12103 458752 46731 46731 NT_STATUS_OK
Close 12103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12104 NT_STATUS_OK
WriteX 12104 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12104 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12093 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12104 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12104 1004 NT_STATUS_OK
WriteX 12104 0 65536 65536 NT_STATUS_OK
WriteX 12104 65536 22848 22848 NT_STATUS_OK
WriteX 12104 0 4096 4096 NT_STATUS_OK
Flush 12104 NT_STATUS_OK
SET_FILE_INFORMATION 12104 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12104 1004 NT_STATUS_OK
WriteX 12104 0 4096 4096 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12106 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12108 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12109 NT_STATUS_OK
ReadX 12109 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12109 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12109 1004 NT_STATUS_OK
ReadX 12109 8192 4096 4096 NT_STATUS_OK
ReadX 12109 12288 4096 4096 NT_STATUS_OK
ReadX 12109 16384 4096 4096 NT_STATUS_OK
ReadX 12109 20480 4096 4096 NT_STATUS_OK
ReadX 12109 24576 4096 4096 NT_STATUS_OK
ReadX 12109 28672 4096 4096 NT_STATUS_OK
ReadX 12109 32768 4096 4096 NT_STATUS_OK
ReadX 12109 36864 4096 4096 NT_STATUS_OK
ReadX 12109 40960 4096 4096 NT_STATUS_OK
ReadX 12109 45056 4096 4096 NT_STATUS_OK
ReadX 12109 49152 4096 4096 NT_STATUS_OK
ReadX 12109 53248 4096 4096 NT_STATUS_OK
ReadX 12109 57344 4096 4096 NT_STATUS_OK
ReadX 12109 61440 4096 4096 NT_STATUS_OK
ReadX 12109 65536 4096 4096 NT_STATUS_OK
ReadX 12109 69632 4096 4096 NT_STATUS_OK
ReadX 12109 73728 4096 4096 NT_STATUS_OK
ReadX 12109 77824 4096 4096 NT_STATUS_OK
ReadX 12109 81920 4096 4096 NT_STATUS_OK
ReadX 12109 86016 4096 4096 NT_STATUS_OK
ReadX 12109 90112 4096 4096 NT_STATUS_OK
ReadX 12109 94208 4096 4096 NT_STATUS_OK
ReadX 12109 98304 4096 4096 NT_STATUS_OK
ReadX 12109 102400 4096 4096 NT_STATUS_OK
ReadX 12109 106496 4096 4096 NT_STATUS_OK
ReadX 12109 110592 4096 4096 NT_STATUS_OK
ReadX 12109 114688 4096 4096 NT_STATUS_OK
ReadX 12109 118784 4096 4096 NT_STATUS_OK
ReadX 12109 122880 4096 4096 NT_STATUS_OK
ReadX 12109 126976 4096 4096 NT_STATUS_OK
ReadX 12109 131072 4096 4096 NT_STATUS_OK
ReadX 12109 135168 4096 4096 NT_STATUS_OK
ReadX 12109 139264 4096 4096 NT_STATUS_OK
ReadX 12109 143360 4096 4096 NT_STATUS_OK
ReadX 12109 147456 4096 4096 NT_STATUS_OK
ReadX 12109 151552 4096 4096 NT_STATUS_OK
ReadX 12109 155648 4096 4096 NT_STATUS_OK
ReadX 12109 159744 4096 4096 NT_STATUS_OK
ReadX 12109 163840 4096 4096 NT_STATUS_OK
ReadX 12109 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12109 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12112 NT_STATUS_OK
WriteX 12112 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 258 NT_STATUS_OK
Close 12109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12113 NT_STATUS_OK
SET_FILE_INFORMATION 12113 1004 NT_STATUS_OK
Close 12113 NT_STATUS_OK
WriteX 12112 0 42388 42388 NT_STATUS_OK
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12116 NT_STATUS_OK
ReadX 12116 0 4096 4096 NT_STATUS_OK
ReadX 12116 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12117 NT_STATUS_OK
WriteX 12117 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 258 NT_STATUS_OK
SET_FILE_INFORMATION 12117 1004 NT_STATUS_OK
WriteX 12117 0 42652 42652 NT_STATUS_OK
Close 12117 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
ReadX 12121 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12123 NT_STATUS_OK
Close 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12126 NT_STATUS_OK
WriteX 12126 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12126 258 NT_STATUS_OK
WriteX 12126 0 65536 65536 NT_STATUS_OK
WriteX 12126 65536 49 49 NT_STATUS_OK
Close 12126 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12127 NT_STATUS_OK
ReadX 12127 0 61440 61440 NT_STATUS_OK
ReadX 12127 61440 4096 4096 NT_STATUS_OK
ReadX 12127 65536 61440 61440 NT_STATUS_OK
ReadX 12127 126976 4096 4096 NT_STATUS_OK
ReadX 12127 131072 61440 61440 NT_STATUS_OK
ReadX 12127 192512 4096 4096 NT_STATUS_OK
ReadX 12127 196608 61440 61440 NT_STATUS_OK
ReadX 12127 258048 4096 4096 NT_STATUS_OK
ReadX 12127 262144 61440 61440 NT_STATUS_OK
ReadX 12127 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 61440 61440 NT_STATUS_OK
ReadX 12128 61440 4096 4096 NT_STATUS_OK
ReadX 12128 65536 61440 61440 NT_STATUS_OK
ReadX 12128 126976 4096 4096 NT_STATUS_OK
ReadX 12128 131072 61440 61440 NT_STATUS_OK
ReadX 12128 192512 4096 4096 NT_STATUS_OK
ReadX 12128 196608 61440 61440 NT_STATUS_OK
ReadX 12128 258048 4096 4096 NT_STATUS_OK
ReadX 12128 262144 61440 61440 NT_STATUS_OK
ReadX 12128 323584 4096 4096 NT_STATUS_OK
ReadX 12128 327680 61440 61440 NT_STATUS_OK
ReadX 12128 389120 4096 4096 NT_STATUS_OK
ReadX 12128 393216 61440 61440 NT_STATUS_OK
ReadX 12128 454656 4096 4096 NT_STATUS_OK
ReadX 12128 458752 61440 61440 NT_STATUS_OK
ReadX 12128 520192 4096 4096 NT_STATUS_OK
ReadX 12128 524288 61440 61440 NT_STATUS_OK
ReadX 12128 585728 4096 4096 NT_STATUS_OK
ReadX 12128 589824 61440 61440 NT_STATUS_OK
ReadX 12128 651264 4096 4096 NT_STATUS_OK
ReadX 12128 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 61440 61440 NT_STATUS_OK
ReadX 12129 61440 4096 4096 NT_STATUS_OK
ReadX 12129 65536 61440 61440 NT_STATUS_OK
ReadX 12129 126976 4096 4096 NT_STATUS_OK
ReadX 12129 131072 61440 61440 NT_STATUS_OK
ReadX 12129 192512 4096 4096 NT_STATUS_OK
ReadX 12129 196608 61440 61440 NT_STATUS_OK
ReadX 12129 258048 4096 4096 NT_STATUS_OK
ReadX 12129 262144 61440 61440 NT_STATUS_OK
ReadX 12129 323584 4096 4096 NT_STATUS_OK
ReadX 12129 327680 61440 61440 NT_STATUS_OK
ReadX 12129 389120 4096 4096 NT_STATUS_OK
ReadX 12129 393216 61440 61440 NT_STATUS_OK
ReadX 12129 454656 4096 4096 NT_STATUS_OK
ReadX 12129 458752 61440 61440 NT_STATUS_OK
ReadX 12129 520192 4096 4096 NT_STATUS_OK
ReadX 12129 524288 61440 61440 NT_STATUS_OK
ReadX 12129 585728 4096 4096 NT_STATUS_OK
ReadX 12129 589824 61440 61440 NT_STATUS_OK
ReadX 12129 651264 4096 4096 NT_STATUS_OK
ReadX 12129 655360 61440 61440 NT_STATUS_OK
ReadX 12129 716800 4096 4096 NT_STATUS_OK
ReadX 12129 720896 61440 61440 NT_STATUS_OK
ReadX 12129 782336 4096 4096 NT_STATUS_OK
ReadX 12129 786432 61440 61440 NT_STATUS_OK
ReadX 12129 847872 4096 4096 NT_STATUS_OK
ReadX 12129 851968 61440 61440 NT_STATUS_OK
ReadX 12129 913408 4096 4096 NT_STATUS_OK
ReadX 12129 917504 61440 61440 NT_STATUS_OK
ReadX 12129 978944 4096 4096 NT_STATUS_OK
ReadX 12129 983040 61440 61440 NT_STATUS_OK
ReadX 12129 1044480 4096 4096 NT_STATUS_OK
ReadX 12129 1048576 61440 61440 NT_STATUS_OK
ReadX 12129 1110016 4096 4096 NT_STATUS_OK
ReadX 12129 1114112 61440 61440 NT_STATUS_OK
ReadX 12129 1175552 4096 4096 NT_STATUS_OK
ReadX 12129 1179648 61440 61440 NT_STATUS_OK
ReadX 12129 1241088 4096 4096 NT_STATUS_OK
ReadX 12129 1245184 61440 61440 NT_STATUS_OK
ReadX 12129 1306624 4096 4096 NT_STATUS_OK
ReadX 12129 1310720 61440 61440 NT_STATUS_OK
ReadX 12129 1372160 4096 4096 NT_STATUS_OK
ReadX 12129 1376256 61440 61440 NT_STATUS_OK
ReadX 12129 1437696 4096 4096 NT_STATUS_OK
ReadX 12129 1441792 61440 61440 NT_STATUS_OK
ReadX 12129 1503232 4096 4096 NT_STATUS_OK
ReadX 12129 1507328 61440 61440 NT_STATUS_OK
ReadX 12129 1568768 4096 4096 NT_STATUS_OK
ReadX 12129 1572864 61440 61440 NT_STATUS_OK
ReadX 12129 1634304 4096 4096 NT_STATUS_OK
ReadX 12129 1638400 61440 61440 NT_STATUS_OK
ReadX 12129 1699840 4096 4096 NT_STATUS_OK
ReadX 12129 1703936 61440 61440 NT_STATUS_OK
ReadX 12129 1765376 4096 4096 NT_STATUS_OK
ReadX 12129 1769472 61440 61440 NT_STATUS_OK
ReadX 12129 1830912 4096 4096 NT_STATUS_OK
ReadX 12129 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12131 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12131 1005 NT_STATUS_OK
ReadX 12131 2156 24 24 NT_STATUS_OK
ReadX 12131 2139 276 276 NT_STATUS_OK
ReadX 12131 2136 14 14 NT_STATUS_OK
ReadX 12131 2136 7 7 NT_STATUS_OK
ReadX 12131 2138 12 12 NT_STATUS_OK
ReadX 12131 2137 8 8 NT_STATUS_OK
ReadX 12131 2135 15 15 NT_STATUS_OK
ReadX 12131 0 16 16 NT_STATUS_OK
ReadX 12131 16 2048 2048 NT_STATUS_OK
ReadX 12131 2064 2048 2048 NT_STATUS_OK
ReadX 12131 257 2048 2048 NT_STATUS_OK
ReadX 12131 385 2048 2048 NT_STATUS_OK
ReadX 12131 513 2048 2048 NT_STATUS_OK
ReadX 12131 641 2048 2048 NT_STATUS_OK
ReadX 12131 769 2048 2048 NT_STATUS_OK
ReadX 12131 897 2048 2048 NT_STATUS_OK
ReadX 12131 1025 2048 2048 NT_STATUS_OK
ReadX 12131 1153 2048 2048 NT_STATUS_OK
ReadX 12131 1281 2048 2048 NT_STATUS_OK
ReadX 12131 1409 2048 2048 NT_STATUS_OK
ReadX 12131 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12133 NT_STATUS_OK
Close 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12127 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12129 NT_STATUS_OK
Close 12121 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12136 NT_STATUS_OK
WriteX 12136 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12136 258 NT_STATUS_OK
WriteX 12136 0 10575 10575 NT_STATUS_OK
Flush 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12137 NT_STATUS_OK
Close 12137 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12139 NT_STATUS_OK
ReadX 12139 0 4096 4096 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12141 NT_STATUS_OK
LockX 12141 2147483538 1 NT_STATUS_OK
UnlockX 12141 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1005 NT_STATUS_OK
ReadX 12141 0 512 512 NT_STATUS_OK
ReadX 12141 512 512 512 NT_STATUS_OK
ReadX 12141 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 1004 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12142 NT_STATUS_OK
QUERY_FILE_INFORMATION 12142 1005 NT_STATUS_OK
ReadX 12142 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12143 NT_STATUS_OK
LockX 12143 2147483538 1 NT_STATUS_OK
UnlockX 12143 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12143 1005 NT_STATUS_OK
ReadX 12143 0 512 512 NT_STATUS_OK
ReadX 12143 512 512 512 NT_STATUS_OK
ReadX 12143 1024 512 512 NT_STATUS_OK
ReadX 12143 288 20 20 NT_STATUS_OK
ReadX 12143 308 2084 2084 NT_STATUS_OK
ReadX 12143 388 2084 2084 NT_STATUS_OK
ReadX 12143 388 2084 2084 NT_STATUS_OK
ReadX 12130 2157 1386 1386 NT_STATUS_OK
ReadX 12143 2472 399 399 NT_STATUS_OK
ReadX 12143 3072 1536 1536 NT_STATUS_OK
ReadX 12143 544 149 149 NT_STATUS_OK
ReadX 12143 693 485 485 NT_STATUS_OK
Close 12143 NT_STATUS_OK
ReadX 12130 2157 4096 4096 NT_STATUS_OK
ReadX 12130 6253 4096 4096 NT_STATUS_OK
ReadX 12130 10349 4096 4096 NT_STATUS_OK
ReadX 12130 14445 4096 4096 NT_STATUS_OK
ReadX 12130 18541 4096 4096 NT_STATUS_OK
ReadX 12130 22637 256 256 NT_STATUS_OK
ReadX 12130 22893 4096 4096 NT_STATUS_OK
ReadX 12130 26989 4096 4096 NT_STATUS_OK
ReadX 12130 31085 4096 4096 NT_STATUS_OK
ReadX 12130 35181 4096 4096 NT_STATUS_OK
ReadX 12130 39277 4096 4096 NT_STATUS_OK
ReadX 12130 43373 4096 4096 NT_STATUS_OK
ReadX 12130 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12130 2157 1024 1024 NT_STATUS_OK
ReadX 12130 1667 4688 4688 NT_STATUS_OK
ReadX 12130 6355 3516 3516 NT_STATUS_OK
ReadX 12130 9871 16384 16384 NT_STATUS_OK
ReadX 12130 26255 3771 3771 NT_STATUS_OK
ReadX 12130 30026 2048 2048 NT_STATUS_OK
ReadX 12130 32074 1024 1024 NT_STATUS_OK
ReadX 12130 33098 6652 6652 NT_STATUS_OK
ReadX 12130 39750 16384 16384 NT_STATUS_OK
ReadX 12130 56134 10496 10496 NT_STATUS_OK
ReadX 12130 66630 1784 1784 NT_STATUS_OK
ReadX 12130 68414 90 90 NT_STATUS_OK
ReadX 12130 68504 273 273 NT_STATUS_OK
ReadX 12130 68777 1600 1600 NT_STATUS_OK
ReadX 12130 70377 640 640 NT_STATUS_OK
ReadX 12130 71017 1280 1280 NT_STATUS_OK
ReadX 12130 72297 8464 8464 NT_STATUS_OK
ReadX 12130 80761 158 158 NT_STATUS_OK
ReadX 12130 80919 912 912 NT_STATUS_OK
ReadX 12130 81831 1980 1980 NT_STATUS_OK
ReadX 12130 83811 2256 2256 NT_STATUS_OK
ReadX 12130 86067 400 400 NT_STATUS_OK
ReadX 12130 86467 252 252 NT_STATUS_OK
ReadX 12130 86719 42 42 NT_STATUS_OK
ReadX 12130 86761 725 725 NT_STATUS_OK
ReadX 12130 2009 512 512 NT_STATUS_OK
ReadX 12130 3895 9 9 NT_STATUS_OK
ReadX 12130 3781 46 46 NT_STATUS_OK
ReadX 12130 4059 92 92 NT_STATUS_OK
ReadX 12130 3781 92 92 NT_STATUS_OK
ReadX 12130 3986 184 184 NT_STATUS_OK
ReadX 12130 3987 16384 16384 NT_STATUS_OK
ReadX 12130 3902 16384 16384 NT_STATUS_OK
ReadX 12130 3781 10240 10240 NT_STATUS_OK
ReadX 12130 3821 16384 16384 NT_STATUS_OK
ReadX 12130 3891 935 935 NT_STATUS_OK
ReadX 12130 4060 10240 10240 NT_STATUS_OK
ReadX 12130 4059 184 184 NT_STATUS_OK
ReadX 12130 256 184 184 NT_STATUS_OK
ReadX 12130 256 1026 1026 NT_STATUS_OK
ReadX 12130 3901 326 326 NT_STATUS_OK
ReadX 12130 3899 652 652 NT_STATUS_OK
ReadX 12130 256 2 2 NT_STATUS_OK
ReadX 12130 258 4948 4948 NT_STATUS_OK
Close 12130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12145 NT_STATUS_OK
Close 12145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12148 NT_STATUS_OK
WriteX 12148 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 258 NT_STATUS_OK
WriteX 12148 0 65536 65536 NT_STATUS_OK
WriteX 12148 65536 65536 65536 NT_STATUS_OK
WriteX 12148 131072 65536 65536 NT_STATUS_OK
WriteX 12148 196608 65536 65536 NT_STATUS_OK
WriteX 12148 262144 65536 65536 NT_STATUS_OK
WriteX 12148 327680 65536 65536 NT_STATUS_OK
WriteX 12148 393216 65536 65536 NT_STATUS_OK
WriteX 12148 458752 65536 65536 NT_STATUS_OK
WriteX 12148 524288 65536 65536 NT_STATUS_OK
WriteX 12148 589824 35257 35257 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12150 NT_STATUS_OK
Close 12150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12153 NT_STATUS_OK
WriteX 12153 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12153 258 NT_STATUS_OK
WriteX 12153 0 65536 65536 NT_STATUS_OK
WriteX 12153 65536 65536 65536 NT_STATUS_OK
WriteX 12153 131072 65536 65536 NT_STATUS_OK
WriteX 12153 196608 65536 65536 NT_STATUS_OK
WriteX 12153 262144 65536 65536 NT_STATUS_OK
WriteX 12153 327680 65536 65536 NT_STATUS_OK
WriteX 12153 393216 65536 65536 NT_STATUS_OK
WriteX 12153 458752 65536 65536 NT_STATUS_OK
WriteX 12153 524288 65536 65536 NT_STATUS_OK
WriteX 12153 589824 57598 57598 NT_STATUS_OK
Close 12153 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12155 NT_STATUS_OK
WriteX 12155 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12155 258 NT_STATUS_OK
WriteX 12155 0 12543 12543 NT_STATUS_OK
Flush 12155 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12159 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12161 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12161 1005 NT_STATUS_OK
ReadX 12161 1938 24 24 NT_STATUS_OK
ReadX 12161 1920 276 276 NT_STATUS_OK
ReadX 12161 1918 14 14 NT_STATUS_OK
ReadX 12161 1918 7 7 NT_STATUS_OK
ReadX 12161 1919 12 12 NT_STATUS_OK
ReadX 12161 1919 8 8 NT_STATUS_OK
ReadX 12161 1917 15 15 NT_STATUS_OK
ReadX 12161 0 16 16 NT_STATUS_OK
ReadX 12161 16 2048 2048 NT_STATUS_OK
ReadX 12161 2064 2048 2048 NT_STATUS_OK
ReadX 12161 257 2048 2048 NT_STATUS_OK
ReadX 12161 385 2048 2048 NT_STATUS_OK
ReadX 12161 513 2048 2048 NT_STATUS_OK
ReadX 12161 641 2048 2048 NT_STATUS_OK
ReadX 12161 769 2048 2048 NT_STATUS_OK
ReadX 12161 897 2048 2048 NT_STATUS_OK
ReadX 12161 1025 2048 2048 NT_STATUS_OK
ReadX 12161 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12163 NT_STATUS_OK
Close 12163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12166 NT_STATUS_OK
WriteX 12166 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12166 258 NT_STATUS_OK
WriteX 12166 0 11588 11588 NT_STATUS_OK
Flush 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12167 NT_STATUS_OK
Close 12167 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12169 NT_STATUS_OK
ReadX 12169 0 4096 4096 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12171 NT_STATUS_OK
WriteX 12171 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12171 258 NT_STATUS_OK
WriteX 12171 0 11615 11615 NT_STATUS_OK
Flush 12171 NT_STATUS_OK
Close 12171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12177 NT_STATUS_OK
Close 12177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12180 NT_STATUS_OK
WriteX 12180 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12180 258 NT_STATUS_OK
WriteX 12180 0 65536 65536 NT_STATUS_OK
WriteX 12180 65536 16050 16050 NT_STATUS_OK
Close 12180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12160 1939 64 64 NT_STATUS_OK
ReadX 12160 128 248 248 NT_STATUS_OK
ReadX 12160 128 568 568 NT_STATUS_OK
ReadX 12160 3872 1536 1536 NT_STATUS_OK
ReadX 12160 3456 2560 2560 NT_STATUS_OK
ReadX 12160 3136 512 512 NT_STATUS_OK
ReadX 12160 2880 4096 4096 NT_STATUS_OK
ReadX 12160 3264 3072 3072 NT_STATUS_OK
ReadX 12160 320 4096 4096 NT_STATUS_OK
ReadX 12160 1024 4096 4096 NT_STATUS_OK
ReadX 12160 3616 4096 4096 NT_STATUS_OK
ReadX 12160 1939 64 64 NT_STATUS_OK
ReadX 12160 128 248 248 NT_STATUS_OK
ReadX 12160 128 608 608 NT_STATUS_OK
ReadX 12160 2858 1024 1024 NT_STATUS_OK
ReadX 12160 2810 4096 4096 NT_STATUS_OK
ReadX 12160 2826 4096 4096 NT_STATUS_OK
ReadX 12160 2580 2048 2048 NT_STATUS_OK
ReadX 12160 2800 2560 2560 NT_STATUS_OK
ReadX 12160 2100 4096 4096 NT_STATUS_OK
ReadX 12160 2084 4096 4096 NT_STATUS_OK
ReadX 12160 868 4096 4096 NT_STATUS_OK
ReadX 12160 2324 4096 4096 NT_STATUS_OK
ReadX 12160 884 4096 4096 NT_STATUS_OK
ReadX 12160 2604 1024 1024 NT_STATUS_OK
ReadX 12160 580 4096 4096 NT_STATUS_OK
ReadX 12160 596 4096 4096 NT_STATUS_OK
ReadX 12160 2752 4096 4096 NT_STATUS_OK
ReadX 12160 2842 1024 1024 NT_STATUS_OK
ReadX 12160 660 4096 4096 NT_STATUS_OK
ReadX 12160 2720 4096 4096 NT_STATUS_OK
ReadX 12160 2736 4096 4096 NT_STATUS_OK
ReadX 12160 628 4096 4096 NT_STATUS_OK
ReadX 12160 2704 4096 4096 NT_STATUS_OK
ReadX 12160 1556 4096 4096 NT_STATUS_OK
ReadX 12160 576 4096 4096 NT_STATUS_OK
ReadX 12160 3168 1536 1536 NT_STATUS_OK
ReadX 12160 832 4096 4096 NT_STATUS_OK
ReadX 12160 1088 4096 4096 NT_STATUS_OK
ReadX 12160 1344 4096 4096 NT_STATUS_OK
ReadX 12160 1600 4096 4096 NT_STATUS_OK
ReadX 12160 1856 4096 4096 NT_STATUS_OK
ReadX 12160 2112 4096 4096 NT_STATUS_OK
ReadX 12160 1892 4096 4096 NT_STATUS_OK
ReadX 12160 820 4096 4096 NT_STATUS_OK
ReadX 12160 788 4096 4096 NT_STATUS_OK
ReadX 12160 1604 4096 4096 NT_STATUS_OK
ReadX 12160 3648 4096 4096 NT_STATUS_OK
ReadX 12160 2608 4096 4096 NT_STATUS_OK
ReadX 12160 548 4096 4096 NT_STATUS_OK
ReadX 12160 740 4096 4096 NT_STATUS_OK
ReadX 12160 1344 4096 4096 NT_STATUS_OK
ReadX 12160 3392 4096 4096 NT_STATUS_OK
ReadX 12160 3904 4096 4096 NT_STATUS_OK
ReadX 12160 644 4096 4096 NT_STATUS_OK
ReadX 12160 676 4096 4096 NT_STATUS_OK
ReadX 12160 2688 4096 4096 NT_STATUS_OK
ReadX 12160 320 4096 4096 NT_STATUS_OK
ReadX 12160 900 4096 4096 NT_STATUS_OK
ReadX 12160 1908 4096 4096 NT_STATUS_OK
ReadX 12160 852 4096 4096 NT_STATUS_OK
ReadX 12160 724 4096 4096 NT_STATUS_OK
ReadX 12160 2292 4096 4096 NT_STATUS_OK
ReadX 12160 612 4096 4096 NT_STATUS_OK
ReadX 12160 388 4096 4096 NT_STATUS_OK
ReadX 12160 2368 4096 4096 NT_STATUS_OK
ReadX 12160 2624 4096 4096 NT_STATUS_OK
ReadX 12160 500 4096 4096 NT_STATUS_OK
ReadX 12160 356 4096 4096 NT_STATUS_OK
ReadX 12160 1024 4096 4096 NT_STATUS_OK
ReadX 12160 576 4096 4096 NT_STATUS_OK
ReadX 12160 340 4096 4096 NT_STATUS_OK
ReadX 12160 420 4096 4096 NT_STATUS_OK
ReadX 12160 1600 4096 4096 NT_STATUS_OK
ReadX 12160 404 4096 4096 NT_STATUS_OK
ReadX 12160 1428 4096 4096 NT_STATUS_OK
ReadX 12160 2656 4096 4096 NT_STATUS_OK
ReadX 12160 2624 4096 4096 NT_STATUS_OK
ReadX 12160 452 4096 4096 NT_STATUS_OK
ReadX 12160 692 4096 4096 NT_STATUS_OK
ReadX 12160 564 4096 4096 NT_STATUS_OK
ReadX 12160 372 4096 4096 NT_STATUS_OK
ReadX 12160 468 4096 4096 NT_STATUS_OK
ReadX 12160 484 4096 4096 NT_STATUS_OK
ReadX 12160 1088 4096 4096 NT_STATUS_OK
ReadX 12160 1924 4096 4096 NT_STATUS_OK
ReadX 12160 2768 4096 4096 NT_STATUS_OK
ReadX 12160 832 4096 4096 NT_STATUS_OK
ReadX 12160 836 4096 4096 NT_STATUS_OK
ReadX 12160 1856 4096 4096 NT_STATUS_OK
ReadX 12160 2640 4096 4096 NT_STATUS_OK
ReadX 12160 436 4096 4096 NT_STATUS_OK
ReadX 12160 1828 4096 4096 NT_STATUS_OK
ReadX 12160 804 4096 4096 NT_STATUS_OK
ReadX 12160 1860 4096 4096 NT_STATUS_OK
ReadX 12160 1812 4096 4096 NT_STATUS_OK
ReadX 12160 756 4096 4096 NT_STATUS_OK
ReadX 12160 1636 4096 4096 NT_STATUS_OK
ReadX 12160 772 4096 4096 NT_STATUS_OK
ReadX 12160 2036 4096 4096 NT_STATUS_OK
ReadX 12160 1220 4096 4096 NT_STATUS_OK
ReadX 12160 1652 4096 4096 NT_STATUS_OK
ReadX 12160 2588 4096 4096 NT_STATUS_OK
ReadX 12160 916 4096 4096 NT_STATUS_OK
ReadX 12160 260 4096 4096 NT_STATUS_OK
ReadX 12160 932 4096 4096 NT_STATUS_OK
ReadX 12160 2624 4096 4096 NT_STATUS_OK
ReadX 12160 308 4096 4096 NT_STATUS_OK
ReadX 12160 292 4096 4096 NT_STATUS_OK
ReadX 12160 1140 4096 4096 NT_STATUS_OK
ReadX 12160 276 4096 4096 NT_STATUS_OK
ReadX 12160 2020 4096 4096 NT_STATUS_OK
ReadX 12160 2880 4096 4096 NT_STATUS_OK
ReadX 12160 516 4096 4096 NT_STATUS_OK
ReadX 12160 1844 4096 4096 NT_STATUS_OK
ReadX 12160 1124 4096 4096 NT_STATUS_OK
ReadX 12160 3136 4096 4096 NT_STATUS_OK
ReadX 12160 324 4096 4096 NT_STATUS_OK
ReadX 12160 1156 4096 4096 NT_STATUS_OK
ReadX 12160 1172 4096 4096 NT_STATUS_OK
ReadX 12160 2112 4096 4096 NT_STATUS_OK
ReadX 12160 2368 4096 4096 NT_STATUS_OK
ReadX 12160 964 4096 4096 NT_STATUS_OK
ReadX 12160 980 4096 4096 NT_STATUS_OK
ReadX 12160 1012 4096 4096 NT_STATUS_OK
ReadX 12160 532 4096 4096 NT_STATUS_OK
ReadX 12160 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12160 1620 4096 4096 NT_STATUS_OK
ReadX 12160 1604 4096 4096 NT_STATUS_OK
ReadX 12160 2116 4096 4096 NT_STATUS_OK
ReadX 12160 2132 4096 4096 NT_STATUS_OK
ReadX 12160 2148 4096 4096 NT_STATUS_OK
ReadX 12160 2276 4096 4096 NT_STATUS_OK
ReadX 12160 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12185 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 1004 NT_STATUS_OK
Close 12140 NT_STATUS_OK
WriteX 12185 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12185 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12142 1004 NT_STATUS_OK
Close 12142 NT_STATUS_OK
WriteX 12185 0 65536 65536 NT_STATUS_OK
WriteX 12185 65536 64850 64850 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12187 NT_STATUS_OK
WriteX 12187 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12187 258 NT_STATUS_OK
ReadX 12160 2068 4096 4096 NT_STATUS_OK
ReadX 12160 1588 4096 4096 NT_STATUS_OK
ReadX 12160 1572 4096 4096 NT_STATUS_OK
WriteX 12187 0 18630 18630 NT_STATUS_OK
Flush 12187 NT_STATUS_OK
Close 12187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12189 NT_STATUS_OK
Close 12189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12160 612 4096 4096 NT_STATUS_OK
ReadX 12160 564 4096 4096 NT_STATUS_OK
ReadX 12160 1876 4096 4096 NT_STATUS_OK
ReadX 12160 628 4096 4096 NT_STATUS_OK
ReadX 12160 740 4096 4096 NT_STATUS_OK
ReadX 12160 724 4096 4096 NT_STATUS_OK
ReadX 12160 644 4096 4096 NT_STATUS_OK
ReadX 12160 2324 4096 4096 NT_STATUS_OK
ReadX 12160 660 4096 4096 NT_STATUS_OK
ReadX 12160 852 4096 4096 NT_STATUS_OK
ReadX 12160 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12160 2368 4096 4096 NT_STATUS_OK
ReadX 12160 1024 4096 4096 NT_STATUS_OK
ReadX 12160 320 4096 4096 NT_STATUS_OK
ReadX 12160 580 4096 4096 NT_STATUS_OK
ReadX 12160 3136 512 512 NT_STATUS_OK
ReadX 12160 2880 4096 4096 NT_STATUS_OK
Close 12160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 61440 4096 4096 NT_STATUS_OK
ReadX 12192 126976 4096 4096 NT_STATUS_OK
WriteX 12192 0 65536 65536 NT_STATUS_OK
WriteX 12192 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 61440 4096 4096 NT_STATUS_OK
ReadX 12193 126976 4096 4096 NT_STATUS_OK
ReadX 12193 192512 4096 4096 NT_STATUS_OK
ReadX 12193 258048 4096 4096 NT_STATUS_OK
WriteX 12193 0 65536 65536 NT_STATUS_OK
WriteX 12193 65536 65536 65536 NT_STATUS_OK
WriteX 12193 131072 65536 65536 NT_STATUS_OK
WriteX 12193 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 61440 4096 4096 NT_STATUS_OK
ReadX 12194 126976 4096 4096 NT_STATUS_OK
ReadX 12194 192512 4096 4096 NT_STATUS_OK
ReadX 12194 258048 4096 4096 NT_STATUS_OK
ReadX 12194 323584 4096 4096 NT_STATUS_OK
ReadX 12194 389120 4096 4096 NT_STATUS_OK
ReadX 12194 454656 4096 4096 NT_STATUS_OK
ReadX 12194 520192 4096 4096 NT_STATUS_OK
WriteX 12194 0 65536 65536 NT_STATUS_OK
WriteX 12194 65536 65536 65536 NT_STATUS_OK
WriteX 12194 131072 65536 65536 NT_STATUS_OK
WriteX 12194 196608 65536 65536 NT_STATUS_OK
WriteX 12194 262144 65536 65536 NT_STATUS_OK
WriteX 12194 327680 65536 65536 NT_STATUS_OK
WriteX 12194 393216 65536 65536 NT_STATUS_OK
WriteX 12194 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12196 NT_STATUS_OK
Close 12196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12197 NT_STATUS_OK
WriteX 12197 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12197 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12195 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12195 0 8192 8192 NT_STATUS_OK
Flush 12195 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12199 NT_STATUS_OK
Close 12199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12192 NT_STATUS_OK
Close 12193 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12202 NT_STATUS_OK
WriteX 12202 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12202 258 NT_STATUS_OK
WriteX 12202 0 62591 62591 NT_STATUS_OK
Close 12202 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12204 NT_STATUS_OK
Close 12204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12207 NT_STATUS_OK
WriteX 12207 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12207 258 NT_STATUS_OK
WriteX 12207 0 10845 10845 NT_STATUS_OK
Close 12207 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12209 NT_STATUS_OK
Close 12209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12212 NT_STATUS_OK
WriteX 12212 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12212 258 NT_STATUS_OK
WriteX 12212 0 30118 30118 NT_STATUS_OK
Close 12212 NT_STATUS_OK
WriteX 12195 0 4096 4096 NT_STATUS_OK
WriteX 12197 0 64 64 NT_STATUS_OK
Close 12197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 61440 61440 NT_STATUS_OK
ReadX 12214 61440 4096 4096 NT_STATUS_OK
ReadX 12214 65536 61440 61440 NT_STATUS_OK
ReadX 12214 126976 4096 4096 NT_STATUS_OK
ReadX 12214 131072 61440 61440 NT_STATUS_OK
ReadX 12214 192512 4096 4096 NT_STATUS_OK
ReadX 12214 196608 61440 61440 NT_STATUS_OK
ReadX 12214 258048 4096 4096 NT_STATUS_OK
ReadX 12214 262144 61440 61440 NT_STATUS_OK
ReadX 12214 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 61440 61440 NT_STATUS_OK
ReadX 12215 61440 4096 4096 NT_STATUS_OK
ReadX 12215 65536 61440 61440 NT_STATUS_OK
ReadX 12215 126976 4096 4096 NT_STATUS_OK
ReadX 12215 131072 61440 61440 NT_STATUS_OK
ReadX 12215 192512 4096 4096 NT_STATUS_OK
ReadX 12215 196608 61440 61440 NT_STATUS_OK
ReadX 12215 258048 4096 4096 NT_STATUS_OK
ReadX 12215 262144 61440 61440 NT_STATUS_OK
ReadX 12215 323584 4096 4096 NT_STATUS_OK
ReadX 12215 327680 61440 61440 NT_STATUS_OK
ReadX 12215 389120 4096 4096 NT_STATUS_OK
ReadX 12215 393216 61440 61440 NT_STATUS_OK
ReadX 12215 454656 4096 4096 NT_STATUS_OK
ReadX 12215 458752 61440 61440 NT_STATUS_OK
ReadX 12215 520192 4096 4096 NT_STATUS_OK
ReadX 12215 524288 61440 61440 NT_STATUS_OK
ReadX 12215 585728 4096 4096 NT_STATUS_OK
ReadX 12215 589824 61440 61440 NT_STATUS_OK
ReadX 12215 651264 4096 4096 NT_STATUS_OK
ReadX 12215 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 61440 61440 NT_STATUS_OK
ReadX 12216 61440 4096 4096 NT_STATUS_OK
ReadX 12216 65536 61440 61440 NT_STATUS_OK
ReadX 12216 126976 4096 4096 NT_STATUS_OK
ReadX 12216 131072 61440 61440 NT_STATUS_OK
ReadX 12216 192512 4096 4096 NT_STATUS_OK
ReadX 12216 196608 61440 61440 NT_STATUS_OK
ReadX 12216 258048 4096 4096 NT_STATUS_OK
ReadX 12216 262144 61440 61440 NT_STATUS_OK
ReadX 12216 323584 4096 4096 NT_STATUS_OK
ReadX 12216 327680 61440 61440 NT_STATUS_OK
ReadX 12216 389120 4096 4096 NT_STATUS_OK
ReadX 12216 393216 61440 61440 NT_STATUS_OK
ReadX 12216 454656 4096 4096 NT_STATUS_OK
ReadX 12216 458752 61440 61440 NT_STATUS_OK
ReadX 12216 520192 4096 4096 NT_STATUS_OK
ReadX 12216 524288 61440 61440 NT_STATUS_OK
ReadX 12216 585728 4096 4096 NT_STATUS_OK
ReadX 12216 589824 61440 61440 NT_STATUS_OK
ReadX 12216 651264 4096 4096 NT_STATUS_OK
ReadX 12216 655360 61440 61440 NT_STATUS_OK
ReadX 12216 716800 4096 4096 NT_STATUS_OK
ReadX 12216 720896 61440 61440 NT_STATUS_OK
ReadX 12216 782336 4096 4096 NT_STATUS_OK
ReadX 12216 786432 61440 61440 NT_STATUS_OK
ReadX 12216 847872 4096 4096 NT_STATUS_OK
ReadX 12216 851968 61440 61440 NT_STATUS_OK
ReadX 12216 913408 4096 4096 NT_STATUS_OK
ReadX 12216 917504 61440 61440 NT_STATUS_OK
ReadX 12216 978944 4096 4096 NT_STATUS_OK
ReadX 12216 983040 61440 61440 NT_STATUS_OK
ReadX 12216 1044480 4096 4096 NT_STATUS_OK
ReadX 12216 1048576 61440 61440 NT_STATUS_OK
ReadX 12216 1110016 4096 4096 NT_STATUS_OK
ReadX 12216 1114112 61440 61440 NT_STATUS_OK
ReadX 12216 1175552 4096 4096 NT_STATUS_OK
ReadX 12216 1179648 61440 61440 NT_STATUS_OK
ReadX 12216 1241088 4096 4096 NT_STATUS_OK
ReadX 12216 1245184 61440 61440 NT_STATUS_OK
ReadX 12216 1306624 4096 4096 NT_STATUS_OK
ReadX 12216 1310720 61440 61440 NT_STATUS_OK
ReadX 12216 1372160 4096 4096 NT_STATUS_OK
ReadX 12216 1376256 61440 61440 NT_STATUS_OK
ReadX 12216 1437696 4096 4096 NT_STATUS_OK
ReadX 12216 1441792 61440 61440 NT_STATUS_OK
ReadX 12216 1503232 4096 4096 NT_STATUS_OK
ReadX 12216 1507328 61440 61440 NT_STATUS_OK
ReadX 12216 1568768 4096 4096 NT_STATUS_OK
ReadX 12216 1572864 61440 61440 NT_STATUS_OK
ReadX 12216 1634304 4096 4096 NT_STATUS_OK
ReadX 12216 1638400 61440 61440 NT_STATUS_OK
ReadX 12216 1699840 4096 4096 NT_STATUS_OK
ReadX 12216 1703936 61440 61440 NT_STATUS_OK
ReadX 12216 1765376 4096 4096 NT_STATUS_OK
ReadX 12216 1769472 61440 61440 NT_STATUS_OK
ReadX 12216 1830912 4096 4096 NT_STATUS_OK
ReadX 12216 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12217 NT_STATUS_OK
Close 12217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12219 NT_STATUS_OK
ReadX 12219 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12220 NT_STATUS_OK
ReadX 12220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12221 NT_STATUS_OK
ReadX 12221 0 4096 4096 NT_STATUS_OK
ReadX 12221 4096 4096 4096 NT_STATUS_OK
ReadX 12221 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12222 NT_STATUS_OK
Close 12222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12219 NT_STATUS_OK
Close 12220 NT_STATUS_OK
Close 12221 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12225 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12225 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12226 NT_STATUS_OK
Close 12226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12225 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12228 NT_STATUS_OK
ReadX 12228 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 8192 8192 NT_STATUS_OK
ReadX 12229 8192 8192 8192 NT_STATUS_OK
ReadX 12229 16384 8192 8192 NT_STATUS_OK
ReadX 12229 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12231 NT_STATUS_OK
Close 12231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12234 NT_STATUS_OK
WriteX 12234 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12234 258 NT_STATUS_OK
WriteX 12234 0 10438 10438 NT_STATUS_OK
Close 12234 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12235 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12236 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12238 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12240 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12241 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12243 NT_STATUS_OK
ReadX 12243 0 4096 4096 NT_STATUS_OK
ReadX 12243 4096 4096 4096 NT_STATUS_OK
ReadX 12243 8192 4096 4096 NT_STATUS_OK
ReadX 12243 12288 8192 8192 NT_STATUS_OK
ReadX 12243 20480 8192 8192 NT_STATUS_OK
ReadX 12243 28672 8192 8192 NT_STATUS_OK
ReadX 12243 36864 8192 8192 NT_STATUS_OK
ReadX 12243 45056 8192 8192 NT_STATUS_OK
ReadX 12243 53248 8192 8192 NT_STATUS_OK
ReadX 12243 61440 8192 8192 NT_STATUS_OK
ReadX 12243 69632 8192 8192 NT_STATUS_OK
ReadX 12243 77824 8192 8192 NT_STATUS_OK
ReadX 12243 86016 8192 8192 NT_STATUS_OK
ReadX 12243 94208 8192 8192 NT_STATUS_OK
ReadX 12243 102400 8192 8192 NT_STATUS_OK
ReadX 12243 110592 8192 8192 NT_STATUS_OK
ReadX 12243 118784 8192 8192 NT_STATUS_OK
ReadX 12243 126976 8192 8192 NT_STATUS_OK
ReadX 12243 135168 8192 8192 NT_STATUS_OK
ReadX 12243 143360 8192 8192 NT_STATUS_OK
ReadX 12243 151552 8192 8192 NT_STATUS_OK
ReadX 12243 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12243 NT_STATUS_OK
Close 12236 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Close 12240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12248 NT_STATUS_OK
WriteX 12248 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12248 258 NT_STATUS_OK
WriteX 12248 0 28489 28489 NT_STATUS_OK
Close 12248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12249 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12251 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12252 NT_STATUS_OK
Close 12252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12251 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 8192 8192 NT_STATUS_OK
ReadX 12255 8192 8192 8192 NT_STATUS_OK
ReadX 12255 16384 8192 8192 NT_STATUS_OK
ReadX 12255 24576 8192 8192 NT_STATUS_OK
ReadX 12255 32768 16384 16384 NT_STATUS_OK
ReadX 12255 49152 8192 8192 NT_STATUS_OK
ReadX 12255 57344 8192 8192 NT_STATUS_OK
ReadX 12255 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12260 NT_STATUS_OK
WriteX 12260 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12260 258 NT_STATUS_OK
WriteX 12260 0 29253 29253 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12261 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12264 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12267 NT_STATUS_OK
WriteX 12267 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12267 258 NT_STATUS_OK
WriteX 12267 0 30183 30183 NT_STATUS_OK
Close 12267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12268 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12270 NT_STATUS_OK
WriteX 12270 0 510 510 NT_STATUS_OK
WriteX 12270 510 512 512 NT_STATUS_OK
WriteX 12270 1022 510 510 NT_STATUS_OK
WriteX 12270 1532 510 510 NT_STATUS_OK
WriteX 12270 2042 168 168 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12271 NT_STATUS_OK
Close 12271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
WriteX 12273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 61440 4096 4096 NT_STATUS_OK
ReadX 12274 126976 4096 4096 NT_STATUS_OK
WriteX 12274 0 65536 65536 NT_STATUS_OK
WriteX 12274 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 61440 4096 4096 NT_STATUS_OK
ReadX 12275 126976 4096 4096 NT_STATUS_OK
ReadX 12275 192512 4096 4096 NT_STATUS_OK
ReadX 12275 258048 4096 4096 NT_STATUS_OK
WriteX 12275 0 65536 65536 NT_STATUS_OK
WriteX 12275 65536 65536 65536 NT_STATUS_OK
WriteX 12275 131072 65536 65536 NT_STATUS_OK
WriteX 12275 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 61440 4096 4096 NT_STATUS_OK
ReadX 12276 126976 4096 4096 NT_STATUS_OK
ReadX 12276 192512 4096 4096 NT_STATUS_OK
ReadX 12276 258048 4096 4096 NT_STATUS_OK
ReadX 12276 323584 4096 4096 NT_STATUS_OK
ReadX 12276 389120 4096 4096 NT_STATUS_OK
ReadX 12276 454656 4096 4096 NT_STATUS_OK
ReadX 12276 520192 4096 4096 NT_STATUS_OK
WriteX 12276 0 65536 65536 NT_STATUS_OK
WriteX 12276 65536 65536 65536 NT_STATUS_OK
WriteX 12276 131072 65536 65536 NT_STATUS_OK
WriteX 12276 196608 65536 65536 NT_STATUS_OK
WriteX 12276 262144 65536 65536 NT_STATUS_OK
WriteX 12276 327680 65536 65536 NT_STATUS_OK
WriteX 12276 393216 65536 65536 NT_STATUS_OK
WriteX 12276 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12277 NT_STATUS_OK
Close 12277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12276 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12283 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12286 NT_STATUS_OK
Close 12286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12288 NT_STATUS_OK
Close 12288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12295 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12306 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12311 NT_STATUS_OK
Close 12311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12321 NT_STATUS_OK
Close 12321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12326 NT_STATUS_OK
Close 12326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12331 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12339 NT_STATUS_OK
Close 12339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12342 NT_STATUS_OK
Close 12342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12345 NT_STATUS_OK
WriteX 12345 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12345 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12345 0 65536 65536 NT_STATUS_OK
WriteX 12345 65536 65536 65536 NT_STATUS_OK
WriteX 12345 131072 65536 65536 NT_STATUS_OK
WriteX 12345 196608 65536 65536 NT_STATUS_OK
WriteX 12345 262144 26634 26634 NT_STATUS_OK
Close 12345 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12350 NT_STATUS_OK
Close 12350 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12351 NT_STATUS_OK
Close 12351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
Close 12352 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
ReadX 12353 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12354 NT_STATUS_OK
Close 12354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12358 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12361 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12363 NT_STATUS_OK
Close 12363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12370 NT_STATUS_OK
Close 12370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12376 NT_STATUS_OK
Close 12376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12381 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12401 NT_STATUS_OK
Close 12401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12405 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12410 NT_STATUS_OK
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12415 NT_STATUS_OK
Close 12415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12418 NT_STATUS_OK
Close 12418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12420 NT_STATUS_OK
Close 12420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
Close 12446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
Close 12447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12434 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12477 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12477 0 4096 4096 NT_STATUS_OK
Close 12477 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12478 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
ReadX 12479 4096 4096 4096 NT_STATUS_OK
ReadX 12479 8192 4096 4096 NT_STATUS_OK
ReadX 12479 12288 4096 4096 NT_STATUS_OK
ReadX 12479 16384 4096 4096 NT_STATUS_OK
ReadX 12479 20480 4096 4096 NT_STATUS_OK
ReadX 12479 24576 4096 4096 NT_STATUS_OK
ReadX 12479 28672 4096 4096 NT_STATUS_OK
ReadX 12479 32768 4096 4096 NT_STATUS_OK
ReadX 12479 36864 4096 4096 NT_STATUS_OK
ReadX 12479 40960 4096 4096 NT_STATUS_OK
ReadX 12479 45056 4096 4096 NT_STATUS_OK
ReadX 12479 49152 4096 4096 NT_STATUS_OK
ReadX 12479 53248 4096 4096 NT_STATUS_OK
ReadX 12479 57344 4096 4096 NT_STATUS_OK
ReadX 12479 61440 4096 4096 NT_STATUS_OK
ReadX 12479 65536 4096 4096 NT_STATUS_OK
ReadX 12479 69632 4096 4096 NT_STATUS_OK
ReadX 12479 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12479 1004 NT_STATUS_OK
WriteX 12479 0 4096 4096 NT_STATUS_OK
Close 12479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12480 NT_STATUS_OK
SET_FILE_INFORMATION 12480 1004 NT_STATUS_OK
Close 12480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12481 NT_STATUS_OK
ReadX 12481 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12482 NT_STATUS_OK
Close 12482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12485 NT_STATUS_OK
WriteX 12485 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12485 258 NT_STATUS_OK
WriteX 12485 0 65536 65536 NT_STATUS_OK
WriteX 12485 65536 19979 19979 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
QUERY_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
SET_FILE_INFORMATION 12486 1004 NT_STATUS_OK
WriteX 12486 0 4096 4096 NT_STATUS_OK
Flush 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12488 NT_STATUS_OK
ReadX 12488 0 4096 4096 NT_STATUS_OK
Close 12487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
Close 12489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 4096 4096 NT_STATUS_OK
Close 12490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12491 1004 NT_STATUS_OK
WriteX 12491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12492 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12488 NT_STATUS_OK
Close 12491 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12494 NT_STATUS_OK
Close 12494 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12497 NT_STATUS_OK
WriteX 12497 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12497 258 NT_STATUS_OK
WriteX 12497 0 65536 65536 NT_STATUS_OK
WriteX 12497 65536 17654 17654 NT_STATUS_OK
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12498 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
QUERY_FILE_INFORMATION 12498 1004 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
SET_FILE_INFORMATION 12498 1004 NT_STATUS_OK
WriteX 12498 0 4096 4096 NT_STATUS_OK
Flush 12498 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12499 NT_STATUS_OK
SET_FILE_INFORMATION 12499 1004 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12501 NT_STATUS_OK
Close 12501 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12503 NT_STATUS_OK
ReadX 12503 0 4096 4096 NT_STATUS_OK
ReadX 12503 4096 4096 4096 NT_STATUS_OK
ReadX 12503 8192 4096 4096 NT_STATUS_OK
ReadX 12503 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12503 16384 4096 4096 NT_STATUS_OK
ReadX 12503 20480 4096 4096 NT_STATUS_OK
ReadX 12503 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 4096 4096 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12506 1004 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12507 NT_STATUS_OK
Close 12507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12509 NT_STATUS_OK
Close 12509 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12512 NT_STATUS_OK
WriteX 12512 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12512 258 NT_STATUS_OK
WriteX 12512 0 65536 65536 NT_STATUS_OK
WriteX 12512 65536 19490 19490 NT_STATUS_OK
Close 12512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
QUERY_FILE_INFORMATION 12513 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
SET_FILE_INFORMATION 12513 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12514 NT_STATUS_OK
SET_FILE_INFORMATION 12514 1004 NT_STATUS_OK
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12516 NT_STATUS_OK
Close 12516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12518 0 4096 4096 NT_STATUS_OK
Close 12518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
ReadX 12520 4096 4096 4096 NT_STATUS_OK
ReadX 12520 8192 4096 4096 NT_STATUS_OK
ReadX 12520 12288 4096 4096 NT_STATUS_OK
ReadX 12520 16384 4096 4096 NT_STATUS_OK
ReadX 12520 20480 4096 4096 NT_STATUS_OK
ReadX 12520 24576 4096 4096 NT_STATUS_OK
ReadX 12520 28672 4096 4096 NT_STATUS_OK
ReadX 12520 32768 4096 4096 NT_STATUS_OK
ReadX 12520 36864 4096 4096 NT_STATUS_OK
ReadX 12520 40960 4096 4096 NT_STATUS_OK
ReadX 12520 45056 4096 4096 NT_STATUS_OK
ReadX 12520 49152 4096 4096 NT_STATUS_OK
ReadX 12520 53248 4096 4096 NT_STATUS_OK
ReadX 12520 57344 4096 4096 NT_STATUS_OK
ReadX 12520 61440 4096 4096 NT_STATUS_OK
ReadX 12520 65536 4096 4096 NT_STATUS_OK
ReadX 12520 69632 4096 4096 NT_STATUS_OK
ReadX 12520 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12520 1004 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
Close 12520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12521 NT_STATUS_OK
SET_FILE_INFORMATION 12521 1004 NT_STATUS_OK
Close 12521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12523 NT_STATUS_OK
Close 12523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12526 NT_STATUS_OK
WriteX 12526 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12526 258 NT_STATUS_OK
WriteX 12526 0 65536 65536 NT_STATUS_OK
WriteX 12526 65536 8866 8866 NT_STATUS_OK
Close 12526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
WriteX 12527 0 4096 4096 NT_STATUS_OK
Flush 12527 NT_STATUS_OK
SET_FILE_INFORMATION 12527 1004 NT_STATUS_OK
WriteX 12527 0 4096 4096 NT_STATUS_OK
Flush 12527 NT_STATUS_OK
Close 12527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12529 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
Close 12529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12530 NT_STATUS_OK
ReadX 12530 0 4096 4096 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12531 1004 NT_STATUS_OK
WriteX 12531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12532 NT_STATUS_OK
Close 12532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12534 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12537 NT_STATUS_OK
WriteX 12537 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12537 258 NT_STATUS_OK
WriteX 12537 0 65536 65536 NT_STATUS_OK
WriteX 12537 65536 9298 9298 NT_STATUS_OK
Close 12537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12538 NT_STATUS_OK
ReadX 12538 0 4096 4096 NT_STATUS_OK
WriteX 12538 0 4096 4096 NT_STATUS_OK
Flush 12538 NT_STATUS_OK
SET_FILE_INFORMATION 12538 1004 NT_STATUS_OK
WriteX 12538 0 4096 4096 NT_STATUS_OK
Flush 12538 NT_STATUS_OK
Close 12538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12539 NT_STATUS_OK
SET_FILE_INFORMATION 12539 1004 NT_STATUS_OK
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12544 0 4096 4096 NT_STATUS_OK
Close 12544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12545 4096 4096 4096 NT_STATUS_OK
ReadX 12545 8192 4096 4096 NT_STATUS_OK
ReadX 12545 12288 4096 4096 NT_STATUS_OK
ReadX 12545 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
Close 12546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12548 1004 NT_STATUS_OK
WriteX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12549 NT_STATUS_OK
Close 12549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12554 NT_STATUS_OK
WriteX 12554 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12554 258 NT_STATUS_OK
WriteX 12554 0 65536 65536 NT_STATUS_OK
WriteX 12554 65536 11540 11540 NT_STATUS_OK
Close 12554 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Flush 12555 NT_STATUS_OK
SET_FILE_INFORMATION 12555 1004 NT_STATUS_OK
WriteX 12555 0 4096 4096 NT_STATUS_OK
Flush 12555 NT_STATUS_OK
Close 12555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12556 NT_STATUS_OK
SET_FILE_INFORMATION 12556 1004 NT_STATUS_OK
Close 12556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12558 NT_STATUS_OK
Close 12558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 61440 4096 4096 NT_STATUS_OK
ReadX 12560 126976 4096 4096 NT_STATUS_OK
WriteX 12560 0 65536 65536 NT_STATUS_OK
WriteX 12560 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 61440 4096 4096 NT_STATUS_OK
ReadX 12561 126976 4096 4096 NT_STATUS_OK
ReadX 12561 192512 4096 4096 NT_STATUS_OK
ReadX 12561 258048 4096 4096 NT_STATUS_OK
WriteX 12561 0 65536 65536 NT_STATUS_OK
WriteX 12561 65536 65536 65536 NT_STATUS_OK
WriteX 12561 131072 65536 65536 NT_STATUS_OK
WriteX 12561 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12562 NT_STATUS_OK
ReadX 12562 61440 4096 4096 NT_STATUS_OK
ReadX 12562 126976 4096 4096 NT_STATUS_OK
ReadX 12562 192512 4096 4096 NT_STATUS_OK
ReadX 12562 258048 4096 4096 NT_STATUS_OK
ReadX 12562 323584 4096 4096 NT_STATUS_OK
ReadX 12562 389120 4096 4096 NT_STATUS_OK
ReadX 12562 454656 4096 4096 NT_STATUS_OK
ReadX 12562 520192 4096 4096 NT_STATUS_OK
WriteX 12562 0 65536 65536 NT_STATUS_OK
WriteX 12562 65536 65536 65536 NT_STATUS_OK
WriteX 12562 131072 65536 65536 NT_STATUS_OK
WriteX 12562 196608 65536 65536 NT_STATUS_OK
WriteX 12562 262144 65536 65536 NT_STATUS_OK
WriteX 12562 327680 65536 65536 NT_STATUS_OK
WriteX 12562 393216 65536 65536 NT_STATUS_OK
WriteX 12562 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12563 NT_STATUS_OK
ReadX 12563 0 4096 4096 NT_STATUS_OK
ReadX 12563 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12564 NT_STATUS_OK
WriteX 12564 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12564 258 NT_STATUS_OK
WriteX 12564 0 53 53 NT_STATUS_OK
Close 12564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12565 NT_STATUS_OK
Close 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12503 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Close 12562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12563 8192 4096 4096 NT_STATUS_OK
ReadX 12563 12288 4096 4096 NT_STATUS_OK
WriteX 12567 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 258 NT_STATUS_OK
ReadX 12563 16384 4096 4096 NT_STATUS_OK
ReadX 12563 20480 4096 4096 NT_STATUS_OK
WriteX 12567 0 15360 15360 NT_STATUS_OK
Close 12567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12568 NT_STATUS_OK
ReadX 12568 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12568 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12568 1004 NT_STATUS_OK
WriteX 12568 0 4096 4096 NT_STATUS_OK
Close 12568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12569 NT_STATUS_OK
Close 12569 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12572 NT_STATUS_OK
Close 12572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12571 4096 4096 4096 NT_STATUS_OK
ReadX 12571 8192 4096 4096 NT_STATUS_OK
ReadX 12571 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12574 NT_STATUS_OK
ReadX 12574 0 4096 4096 NT_STATUS_OK
ReadX 12574 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12575 NT_STATUS_OK
ReadX 12575 0 4096 4096 NT_STATUS_OK
ReadX 12575 4096 4096 4096 NT_STATUS_OK
ReadX 12575 8192 4096 4096 NT_STATUS_OK
Close 12574 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12576 NT_STATUS_OK
WriteX 12576 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12576 258 NT_STATUS_OK
WriteX 12576 0 15360 15360 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12577 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12577 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12578 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12581 NT_STATUS_OK
SET_FILE_INFORMATION 12581 1004 NT_STATUS_OK
Close 12581 NT_STATUS_OK
WriteX 12577 0 4096 4096 NT_STATUS_OK
Close 12577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12582 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
ReadX 12584 4096 4096 4096 NT_STATUS_OK
ReadX 12584 8192 4096 4096 NT_STATUS_OK
ReadX 12584 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12585 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12586 NT_STATUS_OK
WriteX 12586 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12586 258 NT_STATUS_OK
WriteX 12586 0 53 53 NT_STATUS_OK
Close 12586 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12587 NT_STATUS_OK
Close 12587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12585 4096 4096 4096 NT_STATUS_OK
ReadX 12585 8192 4096 4096 NT_STATUS_OK
ReadX 12585 12288 4096 4096 NT_STATUS_OK
WriteX 12589 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12589 258 NT_STATUS_OK
WriteX 12589 0 12006 12006 NT_STATUS_OK
Close 12589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 4096 4096 NT_STATUS_OK
Close 12590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12594 NT_STATUS_OK
Close 12594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12593 4096 4096 4096 NT_STATUS_OK
ReadX 12593 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12596 NT_STATUS_OK
WriteX 12596 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12596 258 NT_STATUS_OK
WriteX 12596 0 11991 11991 NT_STATUS_OK
Close 12596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12597 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12597 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12585 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12598 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12601 NT_STATUS_OK
SET_FILE_INFORMATION 12601 1004 NT_STATUS_OK
Close 12601 NT_STATUS_OK
WriteX 12597 0 4096 4096 NT_STATUS_OK
Close 12597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12602 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12604 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12605 NT_STATUS_OK
Close 12605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12604 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
ReadX 12604 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
WriteX 12604 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12604 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12604 1004 NT_STATUS_OK
Close 12580 NT_STATUS_OK
WriteX 12584 0 19054 19054 NT_STATUS_OK
WriteX 12604 0 12288 12288 NT_STATUS_OK
Close 12600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12607 NT_STATUS_OK
Close 12607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12611 NT_STATUS_OK
ReadX 12611 0 61440 61440 NT_STATUS_OK
ReadX 12611 61440 4096 4096 NT_STATUS_OK
ReadX 12611 65536 61440 61440 NT_STATUS_OK
ReadX 12611 126976 4096 4096 NT_STATUS_OK
ReadX 12611 131072 61440 61440 NT_STATUS_OK
ReadX 12611 192512 4096 4096 NT_STATUS_OK
ReadX 12611 196608 61440 61440 NT_STATUS_OK
ReadX 12611 258048 4096 4096 NT_STATUS_OK
ReadX 12611 262144 61440 61440 NT_STATUS_OK
ReadX 12611 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12612 NT_STATUS_OK
ReadX 12612 0 61440 61440 NT_STATUS_OK
ReadX 12612 61440 4096 4096 NT_STATUS_OK
ReadX 12612 65536 61440 61440 NT_STATUS_OK
ReadX 12612 126976 4096 4096 NT_STATUS_OK
ReadX 12612 131072 61440 61440 NT_STATUS_OK
ReadX 12612 192512 4096 4096 NT_STATUS_OK
ReadX 12612 196608 61440 61440 NT_STATUS_OK
ReadX 12612 258048 4096 4096 NT_STATUS_OK
ReadX 12612 262144 61440 61440 NT_STATUS_OK
ReadX 12612 323584 4096 4096 NT_STATUS_OK
ReadX 12612 327680 61440 61440 NT_STATUS_OK
ReadX 12612 389120 4096 4096 NT_STATUS_OK
ReadX 12612 393216 61440 61440 NT_STATUS_OK
ReadX 12612 454656 4096 4096 NT_STATUS_OK
ReadX 12612 458752 61440 61440 NT_STATUS_OK
ReadX 12612 520192 4096 4096 NT_STATUS_OK
ReadX 12612 524288 61440 61440 NT_STATUS_OK
ReadX 12612 585728 4096 4096 NT_STATUS_OK
ReadX 12612 589824 61440 61440 NT_STATUS_OK
ReadX 12612 651264 4096 4096 NT_STATUS_OK
ReadX 12612 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 61440 61440 NT_STATUS_OK
ReadX 12613 61440 4096 4096 NT_STATUS_OK
ReadX 12613 65536 61440 61440 NT_STATUS_OK
ReadX 12613 126976 4096 4096 NT_STATUS_OK
ReadX 12613 131072 61440 61440 NT_STATUS_OK
ReadX 12613 192512 4096 4096 NT_STATUS_OK
ReadX 12613 196608 61440 61440 NT_STATUS_OK
ReadX 12613 258048 4096 4096 NT_STATUS_OK
ReadX 12613 262144 61440 61440 NT_STATUS_OK
ReadX 12613 323584 4096 4096 NT_STATUS_OK
ReadX 12613 327680 61440 61440 NT_STATUS_OK
ReadX 12613 389120 4096 4096 NT_STATUS_OK
ReadX 12613 393216 61440 61440 NT_STATUS_OK
ReadX 12613 454656 4096 4096 NT_STATUS_OK
ReadX 12613 458752 61440 61440 NT_STATUS_OK
ReadX 12613 520192 4096 4096 NT_STATUS_OK
ReadX 12613 524288 61440 61440 NT_STATUS_OK
ReadX 12613 585728 4096 4096 NT_STATUS_OK
ReadX 12613 589824 61440 61440 NT_STATUS_OK
ReadX 12613 651264 4096 4096 NT_STATUS_OK
ReadX 12613 655360 61440 61440 NT_STATUS_OK
ReadX 12613 716800 4096 4096 NT_STATUS_OK
ReadX 12613 720896 61440 61440 NT_STATUS_OK
ReadX 12613 782336 4096 4096 NT_STATUS_OK
ReadX 12613 786432 61440 61440 NT_STATUS_OK
ReadX 12613 847872 4096 4096 NT_STATUS_OK
ReadX 12613 851968 61440 61440 NT_STATUS_OK
ReadX 12613 913408 4096 4096 NT_STATUS_OK
ReadX 12613 917504 61440 61440 NT_STATUS_OK
ReadX 12613 978944 4096 4096 NT_STATUS_OK
ReadX 12613 983040 61440 61440 NT_STATUS_OK
ReadX 12613 1044480 4096 4096 NT_STATUS_OK
ReadX 12613 1048576 61440 61440 NT_STATUS_OK
ReadX 12613 1110016 4096 4096 NT_STATUS_OK
ReadX 12613 1114112 61440 61440 NT_STATUS_OK
ReadX 12613 1175552 4096 4096 NT_STATUS_OK
ReadX 12613 1179648 61440 61440 NT_STATUS_OK
ReadX 12613 1241088 4096 4096 NT_STATUS_OK
ReadX 12613 1245184 61440 61440 NT_STATUS_OK
ReadX 12613 1306624 4096 4096 NT_STATUS_OK
ReadX 12613 1310720 61440 61440 NT_STATUS_OK
ReadX 12613 1372160 4096 4096 NT_STATUS_OK
ReadX 12613 1376256 61440 61440 NT_STATUS_OK
ReadX 12613 1437696 4096 4096 NT_STATUS_OK
ReadX 12613 1441792 61440 61440 NT_STATUS_OK
ReadX 12613 1503232 4096 4096 NT_STATUS_OK
ReadX 12613 1507328 61440 61440 NT_STATUS_OK
ReadX 12613 1568768 4096 4096 NT_STATUS_OK
ReadX 12613 1572864 61440 61440 NT_STATUS_OK
ReadX 12613 1634304 4096 4096 NT_STATUS_OK
ReadX 12613 1638400 61440 61440 NT_STATUS_OK
ReadX 12613 1699840 4096 4096 NT_STATUS_OK
ReadX 12613 1703936 61440 61440 NT_STATUS_OK
ReadX 12613 1765376 4096 4096 NT_STATUS_OK
ReadX 12613 1769472 61440 61440 NT_STATUS_OK
ReadX 12613 1830912 4096 4096 NT_STATUS_OK
ReadX 12613 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12616 NT_STATUS_OK
ReadX 12616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12619 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12620 NT_STATUS_OK
QUERY_FILE_INFORMATION 12620 1004 NT_STATUS_OK
WriteX 12620 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12620 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12621 NT_STATUS_OK
Close 12621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12622 NT_STATUS_OK
WriteX 12622 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12622 258 NT_STATUS_OK
WriteX 12622 0 491 491 NT_STATUS_OK
Close 12622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12623 NT_STATUS_OK
ReadX 12623 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12620 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12625 NT_STATUS_OK
Close 12625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12626 NT_STATUS_OK
WriteX 12626 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12626 258 NT_STATUS_OK
WriteX 12626 0 543 543 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12611 NT_STATUS_OK
Close 12612 NT_STATUS_OK
Close 12613 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Close 12616 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12632 NT_STATUS_OK
ReadX 12632 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12634 NT_STATUS_OK
ReadX 12634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12635 NT_STATUS_OK
ReadX 12635 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12640 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1004 NT_STATUS_OK
WriteX 12640 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 258 NT_STATUS_OK
WriteX 12640 0 2048 2048 NT_STATUS_OK
Close 12640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12641 NT_STATUS_OK
ReadX 12641 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12641 0 4096 4096 NT_STATUS_OK
Flush 12641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12641 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12646 NT_STATUS_OK
WriteX 12646 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12646 258 NT_STATUS_OK
WriteX 12646 0 2048 2048 NT_STATUS_OK
Close 12646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12651 NT_STATUS_OK
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12652 NT_STATUS_OK
WriteX 12652 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 258 NT_STATUS_OK
WriteX 12652 0 2048 2048 NT_STATUS_OK
Close 12652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 2048 2048 NT_STATUS_OK
ReadX 12631 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12635 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12647 0 4096 4096 NT_STATUS_OK
WriteX 12631 0 8192 8192 NT_STATUS_OK
WriteX 12632 0 4096 4096 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12641 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12657 NT_STATUS_OK
QUERY_FILE_INFORMATION 12657 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12632 NT_STATUS_OK
Close 12633 NT_STATUS_OK
Close 12634 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12631 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12666 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12667 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12670 NT_STATUS_OK
ReadX 12670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12671 NT_STATUS_OK
ReadX 12671 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12677 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 1004 NT_STATUS_OK
WriteX 12677 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 258 NT_STATUS_OK
WriteX 12677 0 2048 2048 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12679 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12680 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12685 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 1004 NT_STATUS_OK
WriteX 12685 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 258 NT_STATUS_OK
WriteX 12685 0 2048 2048 NT_STATUS_OK
Close 12685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12678 0 4096 4096 NT_STATUS_OK
Flush 12678 NT_STATUS_OK
WriteX 12686 0 4096 4096 NT_STATUS_OK
Flush 12686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12678 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12686 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12680 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12687 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12688 NT_STATUS_OK
WriteX 12688 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12688 258 NT_STATUS_OK
WriteX 12688 0 4096 4096 NT_STATUS_OK
Close 12688 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12690 NT_STATUS_OK
Close 12690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12691 NT_STATUS_OK
WriteX 12691 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12691 258 NT_STATUS_OK
WriteX 12691 0 4096 4096 NT_STATUS_OK
Close 12691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12692 0 4096 4096 NT_STATUS_OK
Close 12689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12672 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12680 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Close 12670 NT_STATUS_OK
Close 12671 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Close 12663 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12695 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12697 NT_STATUS_OK
ReadX 12697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12699 NT_STATUS_OK
WriteX 12699 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12699 258 NT_STATUS_OK
WriteX 12699 0 2048 2048 NT_STATUS_OK
Close 12699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12701 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12711 NT_STATUS_OK
ReadX 12711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12713 NT_STATUS_OK
ReadX 12713 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12714 NT_STATUS_OK
QUERY_FILE_INFORMATION 12714 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12697 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Close 12712 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Close 12710 NT_STATUS_OK
Close 12711 NT_STATUS_OK
Close 12713 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12716 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12718 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
Close 12718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12719 NT_STATUS_OK
ReadX 12719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12721 NT_STATUS_OK
ReadX 12721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12722 NT_STATUS_OK
ReadX 12722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12736 NT_STATUS_OK
QUERY_FILE_INFORMATION 12736 1004 NT_STATUS_OK
WriteX 12736 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12736 258 NT_STATUS_OK
WriteX 12736 0 2048 2048 NT_STATUS_OK
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12742 NT_STATUS_OK
ReadX 12742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12747 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12748 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 1004 NT_STATUS_OK
WriteX 12748 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 258 NT_STATUS_OK
WriteX 12748 0 2048 2048 NT_STATUS_OK
Close 12748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12749 NT_STATUS_OK
ReadX 12749 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12756 NT_STATUS_OK
QUERY_FILE_INFORMATION 12756 1004 NT_STATUS_OK
WriteX 12756 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12756 258 NT_STATUS_OK
WriteX 12756 0 2048 2048 NT_STATUS_OK
Close 12756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12757 NT_STATUS_OK
ReadX 12757 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
Flush 12737 NT_STATUS_OK
WriteX 12749 0 4096 4096 NT_STATUS_OK
Flush 12749 NT_STATUS_OK
WriteX 12757 0 4096 4096 NT_STATUS_OK
Flush 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12737 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12749 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12757 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12739 4096 16384 16384 NT_STATUS_OK
ReadX 12719 4096 16384 16384 NT_STATUS_OK
ReadX 12751 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12758 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 2048 2048 NT_STATUS_OK
WriteX 12759 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12760 NT_STATUS_OK
QUERY_FILE_INFORMATION 12760 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12743 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12740 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12742 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12751 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Close 12727 NT_STATUS_OK
Close 12719 NT_STATUS_OK
Close 12720 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12762 NT_STATUS_OK
QUERY_FILE_INFORMATION 12762 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12764 NT_STATUS_OK
QUERY_FILE_INFORMATION 12764 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12766 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12767 NT_STATUS_OK
ReadX 12767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12767 4096 16384 16384 NT_STATUS_OK
WriteX 12767 0 4096 4096 NT_STATUS_OK
WriteX 12768 0 4096 4096 NT_STATUS_OK
WriteX 12769 0 4096 4096 NT_STATUS_OK
WriteX 12770 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12773 NT_STATUS_OK
ReadX 12773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12774 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12775 NT_STATUS_OK
ReadX 12775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12776 NT_STATUS_OK
ReadX 12776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12777 NT_STATUS_OK
ReadX 12777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12778 NT_STATUS_OK
ReadX 12778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12779 NT_STATUS_OK
ReadX 12779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12781 NT_STATUS_OK
ReadX 12781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12784 NT_STATUS_OK
ReadX 12784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 0 8192 8192 NT_STATUS_OK
ReadX 12773 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12787 0 4096 4096 NT_STATUS_OK
ReadX 12787 4096 4096 4096 NT_STATUS_OK
ReadX 12787 8192 4096 4096 NT_STATUS_OK
WriteX 12773 0 4096 4096 NT_STATUS_OK
WriteX 12774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
ReadX 12788 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12767 0 4096 4096 NT_STATUS_OK
WriteX 12768 0 4096 4096 NT_STATUS_OK
WriteX 12769 0 4096 4096 NT_STATUS_OK
Close 12786 NT_STATUS_OK
WriteX 12770 0 4096 4096 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Close 12784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12787 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12782 NT_STATUS_OK
Close 12767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12780 NT_STATUS_OK
Close 12785 NT_STATUS_OK
Close 12773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12789 NT_STATUS_OK
Close 12774 NT_STATUS_OK
ReadX 12789 0 4096 4096 NT_STATUS_OK
Close 12788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12790 NT_STATUS_OK
Close 12777 NT_STATUS_OK
ReadX 12790 0 4096 4096 NT_STATUS_OK
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12791 NT_STATUS_OK
Close 12771 NT_STATUS_OK
ReadX 12791 0 4096 4096 NT_STATUS_OK
Close 12768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12792 NT_STATUS_OK
Close 12769 NT_STATUS_OK
ReadX 12792 0 4096 4096 NT_STATUS_OK
Close 12770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12804 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 1004 NT_STATUS_OK
WriteX 12804 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 258 NT_STATUS_OK
WriteX 12804 0 2048 2048 NT_STATUS_OK
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12789 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
ReadX 12807 4096 4096 4096 NT_STATUS_OK
WriteX 12807 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12809 NT_STATUS_OK
ReadX 12809 0 4096 4096 NT_STATUS_OK
ReadX 12809 4096 4096 4096 NT_STATUS_OK
WriteX 12809 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12810 NT_STATUS_OK
QUERY_FILE_INFORMATION 12810 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Close 12796 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12789 NT_STATUS_OK
Close 12790 NT_STATUS_OK
Close 12791 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Close 12775 NT_STATUS_OK
Close 12776 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12812 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12812 0 4096 4096 NT_STATUS_OK
ReadX 12812 4096 4096 4096 NT_STATUS_OK
ReadX 12812 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12813 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12814 NT_STATUS_OK
ReadX 12814 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12815 NT_STATUS_OK
ReadX 12815 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12816 NT_STATUS_OK
ReadX 12816 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12821 NT_STATUS_OK
ReadX 12821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12823 NT_STATUS_OK
ReadX 12823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12824 NT_STATUS_OK
ReadX 12824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12825 NT_STATUS_OK
ReadX 12825 0 4096 4096 NT_STATUS_OK
ReadX 12813 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12829 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12830 NT_STATUS_OK
QUERY_FILE_INFORMATION 12830 1004 NT_STATUS_OK
WriteX 12830 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12830 258 NT_STATUS_OK
WriteX 12830 0 2048 2048 NT_STATUS_OK
Close 12830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12831 NT_STATUS_OK
ReadX 12831 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12831 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12835 NT_STATUS_OK
Close 12835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12836 NT_STATUS_OK
QUERY_FILE_INFORMATION 12836 1004 NT_STATUS_OK
WriteX 12836 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12836 258 NT_STATUS_OK
WriteX 12836 0 2048 2048 NT_STATUS_OK
Close 12836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12837 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12820 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12838 NT_STATUS_OK
QUERY_FILE_INFORMATION 12838 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12824 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Close 12825 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Close 12814 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Close 12820 NT_STATUS_OK
Close 12821 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Close 12823 NT_STATUS_OK
Close 12812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12840 NT_STATUS_OK
QUERY_FILE_INFORMATION 12840 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12842 NT_STATUS_OK
ReadX 12842 61440 4096 4096 NT_STATUS_OK
ReadX 12842 126976 4096 4096 NT_STATUS_OK
WriteX 12842 0 65536 65536 NT_STATUS_OK
WriteX 12842 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12843 NT_STATUS_OK
ReadX 12843 61440 4096 4096 NT_STATUS_OK
ReadX 12843 126976 4096 4096 NT_STATUS_OK
ReadX 12843 192512 4096 4096 NT_STATUS_OK
ReadX 12843 258048 4096 4096 NT_STATUS_OK
WriteX 12843 0 65536 65536 NT_STATUS_OK
WriteX 12843 65536 65536 65536 NT_STATUS_OK
WriteX 12843 131072 65536 65536 NT_STATUS_OK
WriteX 12843 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12844 NT_STATUS_OK
ReadX 12844 61440 4096 4096 NT_STATUS_OK
ReadX 12844 126976 4096 4096 NT_STATUS_OK
ReadX 12844 192512 4096 4096 NT_STATUS_OK
ReadX 12844 258048 4096 4096 NT_STATUS_OK
ReadX 12844 323584 4096 4096 NT_STATUS_OK
ReadX 12844 389120 4096 4096 NT_STATUS_OK
ReadX 12844 454656 4096 4096 NT_STATUS_OK
ReadX 12844 520192 4096 4096 NT_STATUS_OK
WriteX 12844 0 65536 65536 NT_STATUS_OK
WriteX 12844 65536 65536 65536 NT_STATUS_OK
WriteX 12844 131072 65536 65536 NT_STATUS_OK
WriteX 12844 196608 65536 65536 NT_STATUS_OK
WriteX 12844 262144 65536 65536 NT_STATUS_OK
WriteX 12844 327680 65536 65536 NT_STATUS_OK
WriteX 12844 393216 65536 65536 NT_STATUS_OK
WriteX 12844 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12845 NT_STATUS_OK
ReadX 12845 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12845 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12845 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12845 8192 4096 4096 NT_STATUS_OK
ReadX 12845 12288 4096 4096 NT_STATUS_OK
ReadX 12845 16384 4096 4096 NT_STATUS_OK
ReadX 12845 20480 4096 4096 NT_STATUS_OK
ReadX 12845 24576 4096 4096 NT_STATUS_OK
ReadX 12845 28672 4096 4096 NT_STATUS_OK
ReadX 12845 32768 4096 4096 NT_STATUS_OK
ReadX 12845 36864 4096 4096 NT_STATUS_OK
ReadX 12845 40960 4096 4096 NT_STATUS_OK
ReadX 12845 45056 4096 4096 NT_STATUS_OK
ReadX 12845 49152 4096 4096 NT_STATUS_OK
ReadX 12845 53248 4096 4096 NT_STATUS_OK
ReadX 12845 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12845 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12846 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12842 NT_STATUS_OK
Close 12843 NT_STATUS_OK
Close 12844 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12848 NT_STATUS_OK
WriteX 12848 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12848 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12848 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12848 1004 NT_STATUS_OK
WriteX 12848 0 57088 57088 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
Flush 12848 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12849 NT_STATUS_OK
SET_FILE_INFORMATION 12849 1004 NT_STATUS_OK
Close 12849 NT_STATUS_OK
SET_FILE_INFORMATION 12848 1004 NT_STATUS_OK
WriteX 12848 0 4096 4096 NT_STATUS_OK
Close 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12850 NT_STATUS_OK
Close 12850 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12852 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12853 NT_STATUS_OK
WriteX 12853 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 51456 51456 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Flush 12853 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12857 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12862 NT_STATUS_OK
WriteX 12862 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12862 258 NT_STATUS_OK
WriteX 12862 0 53077 53077 NT_STATUS_OK
Close 12862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12863 NT_STATUS_OK
WriteX 12863 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12863 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
WriteX 12863 0 65536 65536 NT_STATUS_OK
WriteX 12863 65536 1856 1856 NT_STATUS_OK
WriteX 12863 0 4096 4096 NT_STATUS_OK
Flush 12863 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
WriteX 12863 0 4096 4096 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Close 12857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12869 NT_STATUS_OK
Close 12869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12872 NT_STATUS_OK
WriteX 12872 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12872 258 NT_STATUS_OK
WriteX 12872 0 7983 7983 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12874 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12877 NT_STATUS_OK
WriteX 12877 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12877 258 NT_STATUS_OK
WriteX 12877 0 65536 65536 NT_STATUS_OK
WriteX 12877 65536 65536 65536 NT_STATUS_OK
WriteX 12877 131072 65536 65536 NT_STATUS_OK
WriteX 12877 196608 65536 65536 NT_STATUS_OK
WriteX 12877 262144 65536 65536 NT_STATUS_OK
WriteX 12877 327680 65536 65536 NT_STATUS_OK
WriteX 12877 393216 65536 65536 NT_STATUS_OK
WriteX 12877 458752 46731 46731 NT_STATUS_OK
Close 12877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12878 NT_STATUS_OK
WriteX 12878 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12878 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12867 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12878 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12878 1004 NT_STATUS_OK
WriteX 12878 0 65536 65536 NT_STATUS_OK
WriteX 12878 65536 22848 22848 NT_STATUS_OK
WriteX 12878 0 4096 4096 NT_STATUS_OK
Flush 12878 NT_STATUS_OK
SET_FILE_INFORMATION 12878 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12878 1004 NT_STATUS_OK
WriteX 12878 0 4096 4096 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12882 NT_STATUS_OK
ReadX 12882 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12882 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12883 NT_STATUS_OK
ReadX 12883 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12883 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12883 1004 NT_STATUS_OK
ReadX 12883 8192 4096 4096 NT_STATUS_OK
ReadX 12883 12288 4096 4096 NT_STATUS_OK
ReadX 12883 16384 4096 4096 NT_STATUS_OK
ReadX 12883 20480 4096 4096 NT_STATUS_OK
ReadX 12883 24576 4096 4096 NT_STATUS_OK
ReadX 12883 28672 4096 4096 NT_STATUS_OK
ReadX 12883 32768 4096 4096 NT_STATUS_OK
ReadX 12883 36864 4096 4096 NT_STATUS_OK
ReadX 12883 40960 4096 4096 NT_STATUS_OK
ReadX 12883 45056 4096 4096 NT_STATUS_OK
ReadX 12883 49152 4096 4096 NT_STATUS_OK
ReadX 12883 53248 4096 4096 NT_STATUS_OK
ReadX 12883 57344 4096 4096 NT_STATUS_OK
ReadX 12883 61440 4096 4096 NT_STATUS_OK
ReadX 12883 65536 4096 4096 NT_STATUS_OK
ReadX 12883 69632 4096 4096 NT_STATUS_OK
ReadX 12883 73728 4096 4096 NT_STATUS_OK
ReadX 12883 77824 4096 4096 NT_STATUS_OK
ReadX 12883 81920 4096 4096 NT_STATUS_OK
ReadX 12883 86016 4096 4096 NT_STATUS_OK
ReadX 12883 90112 4096 4096 NT_STATUS_OK
ReadX 12883 94208 4096 4096 NT_STATUS_OK
ReadX 12883 98304 4096 4096 NT_STATUS_OK
ReadX 12883 102400 4096 4096 NT_STATUS_OK
ReadX 12883 106496 4096 4096 NT_STATUS_OK
ReadX 12883 110592 4096 4096 NT_STATUS_OK
ReadX 12883 114688 4096 4096 NT_STATUS_OK
ReadX 12883 118784 4096 4096 NT_STATUS_OK
ReadX 12883 122880 4096 4096 NT_STATUS_OK
ReadX 12883 126976 4096 4096 NT_STATUS_OK
ReadX 12883 131072 4096 4096 NT_STATUS_OK
ReadX 12883 135168 4096 4096 NT_STATUS_OK
ReadX 12883 139264 4096 4096 NT_STATUS_OK
ReadX 12883 143360 4096 4096 NT_STATUS_OK
ReadX 12883 147456 4096 4096 NT_STATUS_OK
ReadX 12883 151552 4096 4096 NT_STATUS_OK
ReadX 12883 155648 4096 4096 NT_STATUS_OK
ReadX 12883 159744 4096 4096 NT_STATUS_OK
ReadX 12883 163840 4096 4096 NT_STATUS_OK
ReadX 12883 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12883 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12884 NT_STATUS_OK
Close 12884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12882 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12886 NT_STATUS_OK
WriteX 12886 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12886 258 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12887 NT_STATUS_OK
SET_FILE_INFORMATION 12887 1004 NT_STATUS_OK
Close 12887 NT_STATUS_OK
WriteX 12886 0 42388 42388 NT_STATUS_OK
Close 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12888 NT_STATUS_OK
Close 12888 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12890 NT_STATUS_OK
ReadX 12890 0 4096 4096 NT_STATUS_OK
ReadX 12890 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12891 NT_STATUS_OK
WriteX 12891 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12891 258 NT_STATUS_OK
SET_FILE_INFORMATION 12891 1004 NT_STATUS_OK
WriteX 12891 0 42652 42652 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12893 NT_STATUS_OK
Close 12893 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12895 NT_STATUS_OK
ReadX 12895 0 4096 4096 NT_STATUS_OK
ReadX 12895 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12897 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12900 NT_STATUS_OK
WriteX 12900 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12900 258 NT_STATUS_OK
WriteX 12900 0 65536 65536 NT_STATUS_OK
WriteX 12900 65536 49 49 NT_STATUS_OK
Close 12900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12901 NT_STATUS_OK
ReadX 12901 0 61440 61440 NT_STATUS_OK
ReadX 12901 61440 4096 4096 NT_STATUS_OK
ReadX 12901 65536 61440 61440 NT_STATUS_OK
ReadX 12901 126976 4096 4096 NT_STATUS_OK
ReadX 12901 131072 61440 61440 NT_STATUS_OK
ReadX 12901 192512 4096 4096 NT_STATUS_OK
ReadX 12901 196608 61440 61440 NT_STATUS_OK
ReadX 12901 258048 4096 4096 NT_STATUS_OK
ReadX 12901 262144 61440 61440 NT_STATUS_OK
ReadX 12901 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12902 NT_STATUS_OK
ReadX 12902 0 61440 61440 NT_STATUS_OK
ReadX 12902 61440 4096 4096 NT_STATUS_OK
ReadX 12902 65536 61440 61440 NT_STATUS_OK
ReadX 12902 126976 4096 4096 NT_STATUS_OK
ReadX 12902 131072 61440 61440 NT_STATUS_OK
ReadX 12902 192512 4096 4096 NT_STATUS_OK
ReadX 12902 196608 61440 61440 NT_STATUS_OK
ReadX 12902 258048 4096 4096 NT_STATUS_OK
ReadX 12902 262144 61440 61440 NT_STATUS_OK
ReadX 12902 323584 4096 4096 NT_STATUS_OK
ReadX 12902 327680 61440 61440 NT_STATUS_OK
ReadX 12902 389120 4096 4096 NT_STATUS_OK
ReadX 12902 393216 61440 61440 NT_STATUS_OK
ReadX 12902 454656 4096 4096 NT_STATUS_OK
ReadX 12902 458752 61440 61440 NT_STATUS_OK
ReadX 12902 520192 4096 4096 NT_STATUS_OK
ReadX 12902 524288 61440 61440 NT_STATUS_OK
ReadX 12902 585728 4096 4096 NT_STATUS_OK
ReadX 12902 589824 61440 61440 NT_STATUS_OK
ReadX 12902 651264 4096 4096 NT_STATUS_OK
ReadX 12902 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12903 NT_STATUS_OK
ReadX 12903 0 61440 61440 NT_STATUS_OK
ReadX 12903 61440 4096 4096 NT_STATUS_OK
ReadX 12903 65536 61440 61440 NT_STATUS_OK
ReadX 12903 126976 4096 4096 NT_STATUS_OK
ReadX 12903 131072 61440 61440 NT_STATUS_OK
ReadX 12903 192512 4096 4096 NT_STATUS_OK
ReadX 12903 196608 61440 61440 NT_STATUS_OK
ReadX 12903 258048 4096 4096 NT_STATUS_OK
ReadX 12903 262144 61440 61440 NT_STATUS_OK
ReadX 12903 323584 4096 4096 NT_STATUS_OK
ReadX 12903 327680 61440 61440 NT_STATUS_OK
ReadX 12903 389120 4096 4096 NT_STATUS_OK
ReadX 12903 393216 61440 61440 NT_STATUS_OK
ReadX 12903 454656 4096 4096 NT_STATUS_OK
ReadX 12903 458752 61440 61440 NT_STATUS_OK
ReadX 12903 520192 4096 4096 NT_STATUS_OK
ReadX 12903 524288 61440 61440 NT_STATUS_OK
ReadX 12903 585728 4096 4096 NT_STATUS_OK
ReadX 12903 589824 61440 61440 NT_STATUS_OK
ReadX 12903 651264 4096 4096 NT_STATUS_OK
ReadX 12903 655360 61440 61440 NT_STATUS_OK
ReadX 12903 716800 4096 4096 NT_STATUS_OK
ReadX 12903 720896 61440 61440 NT_STATUS_OK
ReadX 12903 782336 4096 4096 NT_STATUS_OK
ReadX 12903 786432 61440 61440 NT_STATUS_OK
ReadX 12903 847872 4096 4096 NT_STATUS_OK
ReadX 12903 851968 61440 61440 NT_STATUS_OK
ReadX 12903 913408 4096 4096 NT_STATUS_OK
ReadX 12903 917504 61440 61440 NT_STATUS_OK
ReadX 12903 978944 4096 4096 NT_STATUS_OK
ReadX 12903 983040 61440 61440 NT_STATUS_OK
ReadX 12903 1044480 4096 4096 NT_STATUS_OK
ReadX 12903 1048576 61440 61440 NT_STATUS_OK
ReadX 12903 1110016 4096 4096 NT_STATUS_OK
ReadX 12903 1114112 61440 61440 NT_STATUS_OK
ReadX 12903 1175552 4096 4096 NT_STATUS_OK
ReadX 12903 1179648 61440 61440 NT_STATUS_OK
ReadX 12903 1241088 4096 4096 NT_STATUS_OK
ReadX 12903 1245184 61440 61440 NT_STATUS_OK
ReadX 12903 1306624 4096 4096 NT_STATUS_OK
ReadX 12903 1310720 61440 61440 NT_STATUS_OK
ReadX 12903 1372160 4096 4096 NT_STATUS_OK
ReadX 12903 1376256 61440 61440 NT_STATUS_OK
ReadX 12903 1437696 4096 4096 NT_STATUS_OK
ReadX 12903 1441792 61440 61440 NT_STATUS_OK
ReadX 12903 1503232 4096 4096 NT_STATUS_OK
ReadX 12903 1507328 61440 61440 NT_STATUS_OK
ReadX 12903 1568768 4096 4096 NT_STATUS_OK
ReadX 12903 1572864 61440 61440 NT_STATUS_OK
ReadX 12903 1634304 4096 4096 NT_STATUS_OK
ReadX 12903 1638400 61440 61440 NT_STATUS_OK
ReadX 12903 1699840 4096 4096 NT_STATUS_OK
ReadX 12903 1703936 61440 61440 NT_STATUS_OK
ReadX 12903 1765376 4096 4096 NT_STATUS_OK
ReadX 12903 1769472 61440 61440 NT_STATUS_OK
ReadX 12903 1830912 4096 4096 NT_STATUS_OK
ReadX 12903 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12905 NT_STATUS_OK
QUERY_FILE_INFORMATION 12905 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12905 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12905 1005 NT_STATUS_OK
ReadX 12905 2156 24 24 NT_STATUS_OK
ReadX 12905 2139 276 276 NT_STATUS_OK
ReadX 12905 2136 14 14 NT_STATUS_OK
ReadX 12905 2136 7 7 NT_STATUS_OK
ReadX 12905 2138 12 12 NT_STATUS_OK
ReadX 12905 2137 8 8 NT_STATUS_OK
ReadX 12905 2135 15 15 NT_STATUS_OK
ReadX 12905 0 16 16 NT_STATUS_OK
ReadX 12905 16 2048 2048 NT_STATUS_OK
ReadX 12905 2064 2048 2048 NT_STATUS_OK
ReadX 12905 257 2048 2048 NT_STATUS_OK
ReadX 12905 385 2048 2048 NT_STATUS_OK
ReadX 12905 513 2048 2048 NT_STATUS_OK
ReadX 12905 641 2048 2048 NT_STATUS_OK
ReadX 12905 769 2048 2048 NT_STATUS_OK
ReadX 12905 897 2048 2048 NT_STATUS_OK
ReadX 12905 1025 2048 2048 NT_STATUS_OK
ReadX 12905 1153 2048 2048 NT_STATUS_OK
ReadX 12905 1281 2048 2048 NT_STATUS_OK
ReadX 12905 1409 2048 2048 NT_STATUS_OK
ReadX 12905 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12907 NT_STATUS_OK
Close 12907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12901 NT_STATUS_OK
Close 12902 NT_STATUS_OK
Close 12903 NT_STATUS_OK
Close 12895 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12910 NT_STATUS_OK
WriteX 12910 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 258 NT_STATUS_OK
WriteX 12910 0 10575 10575 NT_STATUS_OK
Flush 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12913 NT_STATUS_OK
ReadX 12913 0 4096 4096 NT_STATUS_OK
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12915 NT_STATUS_OK
LockX 12915 2147483538 1 NT_STATUS_OK
UnlockX 12915 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1005 NT_STATUS_OK
ReadX 12915 0 512 512 NT_STATUS_OK
ReadX 12915 512 512 512 NT_STATUS_OK
ReadX 12915 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 1004 NT_STATUS_OK
Close 12915 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12916 NT_STATUS_OK
QUERY_FILE_INFORMATION 12916 1005 NT_STATUS_OK
ReadX 12916 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12917 NT_STATUS_OK
LockX 12917 2147483538 1 NT_STATUS_OK
UnlockX 12917 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12917 1005 NT_STATUS_OK
ReadX 12917 0 512 512 NT_STATUS_OK
ReadX 12917 512 512 512 NT_STATUS_OK
ReadX 12917 1024 512 512 NT_STATUS_OK
ReadX 12917 288 20 20 NT_STATUS_OK
ReadX 12917 308 2084 2084 NT_STATUS_OK
ReadX 12917 388 2084 2084 NT_STATUS_OK
ReadX 12917 388 2084 2084 NT_STATUS_OK
ReadX 12904 2157 1386 1386 NT_STATUS_OK
ReadX 12917 2472 399 399 NT_STATUS_OK
ReadX 12917 3072 1536 1536 NT_STATUS_OK
ReadX 12917 544 149 149 NT_STATUS_OK
ReadX 12917 693 485 485 NT_STATUS_OK
Close 12917 NT_STATUS_OK
ReadX 12904 2157 4096 4096 NT_STATUS_OK
ReadX 12904 6253 4096 4096 NT_STATUS_OK
ReadX 12904 10349 4096 4096 NT_STATUS_OK
ReadX 12904 14445 4096 4096 NT_STATUS_OK
ReadX 12904 18541 4096 4096 NT_STATUS_OK
ReadX 12904 22637 256 256 NT_STATUS_OK
ReadX 12904 22893 4096 4096 NT_STATUS_OK
ReadX 12904 26989 4096 4096 NT_STATUS_OK
ReadX 12904 31085 4096 4096 NT_STATUS_OK
ReadX 12904 35181 4096 4096 NT_STATUS_OK
ReadX 12904 39277 4096 4096 NT_STATUS_OK
ReadX 12904 43373 4096 4096 NT_STATUS_OK
ReadX 12904 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12904 2157 1024 1024 NT_STATUS_OK
ReadX 12904 1667 4688 4688 NT_STATUS_OK
ReadX 12904 6355 3516 3516 NT_STATUS_OK
ReadX 12904 9871 16384 16384 NT_STATUS_OK
ReadX 12904 26255 3771 3771 NT_STATUS_OK
ReadX 12904 30026 2048 2048 NT_STATUS_OK
ReadX 12904 32074 1024 1024 NT_STATUS_OK
ReadX 12904 33098 6652 6652 NT_STATUS_OK
ReadX 12904 39750 16384 16384 NT_STATUS_OK
ReadX 12904 56134 10496 10496 NT_STATUS_OK
ReadX 12904 66630 1784 1784 NT_STATUS_OK
ReadX 12904 68414 90 90 NT_STATUS_OK
ReadX 12904 68504 273 273 NT_STATUS_OK
ReadX 12904 68777 1600 1600 NT_STATUS_OK
ReadX 12904 70377 640 640 NT_STATUS_OK
ReadX 12904 71017 1280 1280 NT_STATUS_OK
ReadX 12904 72297 8464 8464 NT_STATUS_OK
ReadX 12904 80761 158 158 NT_STATUS_OK
ReadX 12904 80919 912 912 NT_STATUS_OK
ReadX 12904 81831 1980 1980 NT_STATUS_OK
ReadX 12904 83811 2256 2256 NT_STATUS_OK
ReadX 12904 86067 400 400 NT_STATUS_OK
ReadX 12904 86467 252 252 NT_STATUS_OK
ReadX 12904 86719 42 42 NT_STATUS_OK
ReadX 12904 86761 725 725 NT_STATUS_OK
ReadX 12904 2009 512 512 NT_STATUS_OK
ReadX 12904 3895 9 9 NT_STATUS_OK
ReadX 12904 3781 46 46 NT_STATUS_OK
ReadX 12904 4059 92 92 NT_STATUS_OK
ReadX 12904 3781 92 92 NT_STATUS_OK
ReadX 12904 3986 184 184 NT_STATUS_OK
ReadX 12904 3987 16384 16384 NT_STATUS_OK
ReadX 12904 3902 16384 16384 NT_STATUS_OK
ReadX 12904 3781 10240 10240 NT_STATUS_OK
ReadX 12904 3821 16384 16384 NT_STATUS_OK
ReadX 12904 3891 935 935 NT_STATUS_OK
ReadX 12904 4060 10240 10240 NT_STATUS_OK
ReadX 12904 4059 184 184 NT_STATUS_OK
ReadX 12904 256 184 184 NT_STATUS_OK
ReadX 12904 256 1026 1026 NT_STATUS_OK
ReadX 12904 3901 326 326 NT_STATUS_OK
ReadX 12904 3899 652 652 NT_STATUS_OK
ReadX 12904 256 2 2 NT_STATUS_OK
ReadX 12904 258 4948 4948 NT_STATUS_OK
Close 12904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12922 NT_STATUS_OK
WriteX 12922 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12922 258 NT_STATUS_OK
WriteX 12922 0 65536 65536 NT_STATUS_OK
WriteX 12922 65536 65536 65536 NT_STATUS_OK
WriteX 12922 131072 65536 65536 NT_STATUS_OK
WriteX 12922 196608 65536 65536 NT_STATUS_OK
WriteX 12922 262144 65536 65536 NT_STATUS_OK
WriteX 12922 327680 65536 65536 NT_STATUS_OK
WriteX 12922 393216 65536 65536 NT_STATUS_OK
WriteX 12922 458752 65536 65536 NT_STATUS_OK
WriteX 12922 524288 65536 65536 NT_STATUS_OK
WriteX 12922 589824 35257 35257 NT_STATUS_OK
Close 12922 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12924 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12927 NT_STATUS_OK
WriteX 12927 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 258 NT_STATUS_OK
WriteX 12927 0 65536 65536 NT_STATUS_OK
WriteX 12927 65536 65536 65536 NT_STATUS_OK
WriteX 12927 131072 65536 65536 NT_STATUS_OK
WriteX 12927 196608 65536 65536 NT_STATUS_OK
WriteX 12927 262144 65536 65536 NT_STATUS_OK
WriteX 12927 327680 65536 65536 NT_STATUS_OK
WriteX 12927 393216 65536 65536 NT_STATUS_OK
WriteX 12927 458752 65536 65536 NT_STATUS_OK
WriteX 12927 524288 65536 65536 NT_STATUS_OK
WriteX 12927 589824 57598 57598 NT_STATUS_OK
Close 12927 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12929 NT_STATUS_OK
WriteX 12929 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12929 258 NT_STATUS_OK
WriteX 12929 0 12543 12543 NT_STATUS_OK
Flush 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
Close 12913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12931 NT_STATUS_OK
Close 12931 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12933 NT_STATUS_OK
ReadX 12933 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12935 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12935 1005 NT_STATUS_OK
ReadX 12935 1938 24 24 NT_STATUS_OK
ReadX 12935 1920 276 276 NT_STATUS_OK
ReadX 12935 1918 14 14 NT_STATUS_OK
ReadX 12935 1918 7 7 NT_STATUS_OK
ReadX 12935 1919 12 12 NT_STATUS_OK
ReadX 12935 1919 8 8 NT_STATUS_OK
ReadX 12935 1917 15 15 NT_STATUS_OK
ReadX 12935 0 16 16 NT_STATUS_OK
ReadX 12935 16 2048 2048 NT_STATUS_OK
ReadX 12935 2064 2048 2048 NT_STATUS_OK
ReadX 12935 257 2048 2048 NT_STATUS_OK
ReadX 12935 385 2048 2048 NT_STATUS_OK
ReadX 12935 513 2048 2048 NT_STATUS_OK
ReadX 12935 641 2048 2048 NT_STATUS_OK
ReadX 12935 769 2048 2048 NT_STATUS_OK
ReadX 12935 897 2048 2048 NT_STATUS_OK
ReadX 12935 1025 2048 2048 NT_STATUS_OK
ReadX 12935 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12940 NT_STATUS_OK
WriteX 12940 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12940 258 NT_STATUS_OK
WriteX 12940 0 11588 11588 NT_STATUS_OK
Flush 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12941 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
Close 12935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12945 NT_STATUS_OK
WriteX 12945 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12945 258 NT_STATUS_OK
WriteX 12945 0 11615 11615 NT_STATUS_OK
Flush 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12947 NT_STATUS_OK
Close 12947 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12949 NT_STATUS_OK
ReadX 12949 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12951 NT_STATUS_OK
Close 12951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12954 NT_STATUS_OK
WriteX 12954 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12954 258 NT_STATUS_OK
WriteX 12954 0 65536 65536 NT_STATUS_OK
WriteX 12954 65536 16050 16050 NT_STATUS_OK
Close 12954 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12934 1939 64 64 NT_STATUS_OK
ReadX 12934 128 248 248 NT_STATUS_OK
ReadX 12934 128 568 568 NT_STATUS_OK
ReadX 12934 3872 1536 1536 NT_STATUS_OK
ReadX 12934 3456 2560 2560 NT_STATUS_OK
ReadX 12934 3136 512 512 NT_STATUS_OK
ReadX 12934 2880 4096 4096 NT_STATUS_OK
ReadX 12934 3264 3072 3072 NT_STATUS_OK
ReadX 12934 320 4096 4096 NT_STATUS_OK
ReadX 12934 1024 4096 4096 NT_STATUS_OK
ReadX 12934 3616 4096 4096 NT_STATUS_OK
ReadX 12934 1939 64 64 NT_STATUS_OK
ReadX 12934 128 248 248 NT_STATUS_OK
ReadX 12934 128 608 608 NT_STATUS_OK
ReadX 12934 2858 1024 1024 NT_STATUS_OK
ReadX 12934 2810 4096 4096 NT_STATUS_OK
ReadX 12934 2826 4096 4096 NT_STATUS_OK
ReadX 12934 2580 2048 2048 NT_STATUS_OK
ReadX 12934 2800 2560 2560 NT_STATUS_OK
ReadX 12934 2100 4096 4096 NT_STATUS_OK
ReadX 12934 2084 4096 4096 NT_STATUS_OK
ReadX 12934 868 4096 4096 NT_STATUS_OK
ReadX 12934 2324 4096 4096 NT_STATUS_OK
ReadX 12934 884 4096 4096 NT_STATUS_OK
ReadX 12934 2604 1024 1024 NT_STATUS_OK
ReadX 12934 580 4096 4096 NT_STATUS_OK
ReadX 12934 596 4096 4096 NT_STATUS_OK
ReadX 12934 2752 4096 4096 NT_STATUS_OK
ReadX 12934 2842 1024 1024 NT_STATUS_OK
ReadX 12934 660 4096 4096 NT_STATUS_OK
ReadX 12934 2720 4096 4096 NT_STATUS_OK
ReadX 12934 2736 4096 4096 NT_STATUS_OK
ReadX 12934 628 4096 4096 NT_STATUS_OK
ReadX 12934 2704 4096 4096 NT_STATUS_OK
ReadX 12934 1556 4096 4096 NT_STATUS_OK
ReadX 12934 576 4096 4096 NT_STATUS_OK
ReadX 12934 3168 1536 1536 NT_STATUS_OK
ReadX 12934 832 4096 4096 NT_STATUS_OK
ReadX 12934 1088 4096 4096 NT_STATUS_OK
ReadX 12934 1344 4096 4096 NT_STATUS_OK
ReadX 12934 1600 4096 4096 NT_STATUS_OK
ReadX 12934 1856 4096 4096 NT_STATUS_OK
ReadX 12934 2112 4096 4096 NT_STATUS_OK
ReadX 12934 1892 4096 4096 NT_STATUS_OK
ReadX 12934 820 4096 4096 NT_STATUS_OK
ReadX 12934 788 4096 4096 NT_STATUS_OK
ReadX 12934 1604 4096 4096 NT_STATUS_OK
ReadX 12934 3648 4096 4096 NT_STATUS_OK
ReadX 12934 2608 4096 4096 NT_STATUS_OK
ReadX 12934 548 4096 4096 NT_STATUS_OK
ReadX 12934 740 4096 4096 NT_STATUS_OK
ReadX 12934 1344 4096 4096 NT_STATUS_OK
ReadX 12934 3392 4096 4096 NT_STATUS_OK
ReadX 12934 3904 4096 4096 NT_STATUS_OK
ReadX 12934 644 4096 4096 NT_STATUS_OK
ReadX 12934 676 4096 4096 NT_STATUS_OK
ReadX 12934 2688 4096 4096 NT_STATUS_OK
ReadX 12934 320 4096 4096 NT_STATUS_OK
ReadX 12934 900 4096 4096 NT_STATUS_OK
ReadX 12934 1908 4096 4096 NT_STATUS_OK
ReadX 12934 852 4096 4096 NT_STATUS_OK
ReadX 12934 724 4096 4096 NT_STATUS_OK
ReadX 12934 2292 4096 4096 NT_STATUS_OK
ReadX 12934 612 4096 4096 NT_STATUS_OK
ReadX 12934 388 4096 4096 NT_STATUS_OK
ReadX 12934 2368 4096 4096 NT_STATUS_OK
ReadX 12934 2624 4096 4096 NT_STATUS_OK
ReadX 12934 500 4096 4096 NT_STATUS_OK
ReadX 12934 356 4096 4096 NT_STATUS_OK
ReadX 12934 1024 4096 4096 NT_STATUS_OK
ReadX 12934 576 4096 4096 NT_STATUS_OK
ReadX 12934 340 4096 4096 NT_STATUS_OK
ReadX 12934 420 4096 4096 NT_STATUS_OK
ReadX 12934 1600 4096 4096 NT_STATUS_OK
ReadX 12934 404 4096 4096 NT_STATUS_OK
ReadX 12934 1428 4096 4096 NT_STATUS_OK
ReadX 12934 2656 4096 4096 NT_STATUS_OK
ReadX 12934 2624 4096 4096 NT_STATUS_OK
ReadX 12934 452 4096 4096 NT_STATUS_OK
ReadX 12934 692 4096 4096 NT_STATUS_OK
ReadX 12934 564 4096 4096 NT_STATUS_OK
ReadX 12934 372 4096 4096 NT_STATUS_OK
ReadX 12934 468 4096 4096 NT_STATUS_OK
ReadX 12934 484 4096 4096 NT_STATUS_OK
ReadX 12934 1088 4096 4096 NT_STATUS_OK
ReadX 12934 1924 4096 4096 NT_STATUS_OK
ReadX 12934 2768 4096 4096 NT_STATUS_OK
ReadX 12934 832 4096 4096 NT_STATUS_OK
ReadX 12934 836 4096 4096 NT_STATUS_OK
ReadX 12934 1856 4096 4096 NT_STATUS_OK
ReadX 12934 2640 4096 4096 NT_STATUS_OK
ReadX 12934 436 4096 4096 NT_STATUS_OK
ReadX 12934 1828 4096 4096 NT_STATUS_OK
ReadX 12934 804 4096 4096 NT_STATUS_OK
ReadX 12934 1860 4096 4096 NT_STATUS_OK
ReadX 12934 1812 4096 4096 NT_STATUS_OK
ReadX 12934 756 4096 4096 NT_STATUS_OK
ReadX 12934 1636 4096 4096 NT_STATUS_OK
ReadX 12934 772 4096 4096 NT_STATUS_OK
ReadX 12934 2036 4096 4096 NT_STATUS_OK
ReadX 12934 1220 4096 4096 NT_STATUS_OK
ReadX 12934 1652 4096 4096 NT_STATUS_OK
ReadX 12934 2588 4096 4096 NT_STATUS_OK
ReadX 12934 916 4096 4096 NT_STATUS_OK
ReadX 12934 260 4096 4096 NT_STATUS_OK
ReadX 12934 932 4096 4096 NT_STATUS_OK
ReadX 12934 2624 4096 4096 NT_STATUS_OK
ReadX 12934 308 4096 4096 NT_STATUS_OK
ReadX 12934 292 4096 4096 NT_STATUS_OK
ReadX 12934 1140 4096 4096 NT_STATUS_OK
ReadX 12934 276 4096 4096 NT_STATUS_OK
ReadX 12934 2020 4096 4096 NT_STATUS_OK
ReadX 12934 2880 4096 4096 NT_STATUS_OK
ReadX 12934 516 4096 4096 NT_STATUS_OK
ReadX 12934 1844 4096 4096 NT_STATUS_OK
ReadX 12934 1124 4096 4096 NT_STATUS_OK
ReadX 12934 3136 4096 4096 NT_STATUS_OK
ReadX 12934 324 4096 4096 NT_STATUS_OK
ReadX 12934 1156 4096 4096 NT_STATUS_OK
ReadX 12934 1172 4096 4096 NT_STATUS_OK
ReadX 12934 2112 4096 4096 NT_STATUS_OK
ReadX 12934 2368 4096 4096 NT_STATUS_OK
ReadX 12934 964 4096 4096 NT_STATUS_OK
ReadX 12934 980 4096 4096 NT_STATUS_OK
ReadX 12934 1012 4096 4096 NT_STATUS_OK
ReadX 12934 532 4096 4096 NT_STATUS_OK
ReadX 12934 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12934 1620 4096 4096 NT_STATUS_OK
ReadX 12934 1604 4096 4096 NT_STATUS_OK
ReadX 12934 2116 4096 4096 NT_STATUS_OK
ReadX 12934 2132 4096 4096 NT_STATUS_OK
ReadX 12934 2148 4096 4096 NT_STATUS_OK
ReadX 12934 2276 4096 4096 NT_STATUS_OK
ReadX 12934 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12956 NT_STATUS_OK
Close 12956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12959 NT_STATUS_OK
QUERY_FILE_INFORMATION 12914 1004 NT_STATUS_OK
Close 12914 NT_STATUS_OK
WriteX 12959 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12959 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12916 1004 NT_STATUS_OK
Close 12916 NT_STATUS_OK
WriteX 12959 0 65536 65536 NT_STATUS_OK
WriteX 12959 65536 64850 64850 NT_STATUS_OK
Close 12959 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12961 NT_STATUS_OK
WriteX 12961 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12961 258 NT_STATUS_OK
ReadX 12934 2068 4096 4096 NT_STATUS_OK
ReadX 12934 1588 4096 4096 NT_STATUS_OK
ReadX 12934 1572 4096 4096 NT_STATUS_OK
WriteX 12961 0 18630 18630 NT_STATUS_OK
Flush 12961 NT_STATUS_OK
Close 12961 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12963 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12934 612 4096 4096 NT_STATUS_OK
ReadX 12934 564 4096 4096 NT_STATUS_OK
ReadX 12934 1876 4096 4096 NT_STATUS_OK
ReadX 12934 628 4096 4096 NT_STATUS_OK
ReadX 12934 740 4096 4096 NT_STATUS_OK
ReadX 12934 724 4096 4096 NT_STATUS_OK
ReadX 12934 644 4096 4096 NT_STATUS_OK
ReadX 12934 2324 4096 4096 NT_STATUS_OK
ReadX 12934 660 4096 4096 NT_STATUS_OK
ReadX 12934 852 4096 4096 NT_STATUS_OK
ReadX 12934 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12934 2368 4096 4096 NT_STATUS_OK
ReadX 12934 1024 4096 4096 NT_STATUS_OK
ReadX 12934 320 4096 4096 NT_STATUS_OK
ReadX 12934 580 4096 4096 NT_STATUS_OK
ReadX 12934 3136 512 512 NT_STATUS_OK
ReadX 12934 2880 4096 4096 NT_STATUS_OK
Close 12934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12966 NT_STATUS_OK
ReadX 12966 61440 4096 4096 NT_STATUS_OK
ReadX 12966 126976 4096 4096 NT_STATUS_OK
WriteX 12966 0 65536 65536 NT_STATUS_OK
WriteX 12966 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 61440 4096 4096 NT_STATUS_OK
ReadX 12967 126976 4096 4096 NT_STATUS_OK
ReadX 12967 192512 4096 4096 NT_STATUS_OK
ReadX 12967 258048 4096 4096 NT_STATUS_OK
WriteX 12967 0 65536 65536 NT_STATUS_OK
WriteX 12967 65536 65536 65536 NT_STATUS_OK
WriteX 12967 131072 65536 65536 NT_STATUS_OK
WriteX 12967 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 61440 4096 4096 NT_STATUS_OK
ReadX 12968 126976 4096 4096 NT_STATUS_OK
ReadX 12968 192512 4096 4096 NT_STATUS_OK
ReadX 12968 258048 4096 4096 NT_STATUS_OK
ReadX 12968 323584 4096 4096 NT_STATUS_OK
ReadX 12968 389120 4096 4096 NT_STATUS_OK
ReadX 12968 454656 4096 4096 NT_STATUS_OK
ReadX 12968 520192 4096 4096 NT_STATUS_OK
WriteX 12968 0 65536 65536 NT_STATUS_OK
WriteX 12968 65536 65536 65536 NT_STATUS_OK
WriteX 12968 131072 65536 65536 NT_STATUS_OK
WriteX 12968 196608 65536 65536 NT_STATUS_OK
WriteX 12968 262144 65536 65536 NT_STATUS_OK
WriteX 12968 327680 65536 65536 NT_STATUS_OK
WriteX 12968 393216 65536 65536 NT_STATUS_OK
WriteX 12968 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12970 NT_STATUS_OK
Close 12970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12971 NT_STATUS_OK
WriteX 12971 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12971 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12969 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12969 0 8192 8192 NT_STATUS_OK
Flush 12969 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12973 NT_STATUS_OK
Close 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Close 12933 NT_STATUS_OK
Close 12966 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12976 NT_STATUS_OK
WriteX 12976 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12976 258 NT_STATUS_OK
WriteX 12976 0 62591 62591 NT_STATUS_OK
Close 12976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12981 NT_STATUS_OK
WriteX 12981 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12981 258 NT_STATUS_OK
WriteX 12981 0 10845 10845 NT_STATUS_OK
Close 12981 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12983 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12986 NT_STATUS_OK
WriteX 12986 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12986 258 NT_STATUS_OK
WriteX 12986 0 30118 30118 NT_STATUS_OK
Close 12986 NT_STATUS_OK
WriteX 12969 0 4096 4096 NT_STATUS_OK
WriteX 12971 0 64 64 NT_STATUS_OK
Close 12971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 61440 61440 NT_STATUS_OK
ReadX 12988 61440 4096 4096 NT_STATUS_OK
ReadX 12988 65536 61440 61440 NT_STATUS_OK
ReadX 12988 126976 4096 4096 NT_STATUS_OK
ReadX 12988 131072 61440 61440 NT_STATUS_OK
ReadX 12988 192512 4096 4096 NT_STATUS_OK
ReadX 12988 196608 61440 61440 NT_STATUS_OK
ReadX 12988 258048 4096 4096 NT_STATUS_OK
ReadX 12988 262144 61440 61440 NT_STATUS_OK
ReadX 12988 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 61440 61440 NT_STATUS_OK
ReadX 12989 61440 4096 4096 NT_STATUS_OK
ReadX 12989 65536 61440 61440 NT_STATUS_OK
ReadX 12989 126976 4096 4096 NT_STATUS_OK
ReadX 12989 131072 61440 61440 NT_STATUS_OK
ReadX 12989 192512 4096 4096 NT_STATUS_OK
ReadX 12989 196608 61440 61440 NT_STATUS_OK
ReadX 12989 258048 4096 4096 NT_STATUS_OK
ReadX 12989 262144 61440 61440 NT_STATUS_OK
ReadX 12989 323584 4096 4096 NT_STATUS_OK
ReadX 12989 327680 61440 61440 NT_STATUS_OK
ReadX 12989 389120 4096 4096 NT_STATUS_OK
ReadX 12989 393216 61440 61440 NT_STATUS_OK
ReadX 12989 454656 4096 4096 NT_STATUS_OK
ReadX 12989 458752 61440 61440 NT_STATUS_OK
ReadX 12989 520192 4096 4096 NT_STATUS_OK
ReadX 12989 524288 61440 61440 NT_STATUS_OK
ReadX 12989 585728 4096 4096 NT_STATUS_OK
ReadX 12989 589824 61440 61440 NT_STATUS_OK
ReadX 12989 651264 4096 4096 NT_STATUS_OK
ReadX 12989 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 61440 61440 NT_STATUS_OK
ReadX 12990 61440 4096 4096 NT_STATUS_OK
ReadX 12990 65536 61440 61440 NT_STATUS_OK
ReadX 12990 126976 4096 4096 NT_STATUS_OK
ReadX 12990 131072 61440 61440 NT_STATUS_OK
ReadX 12990 192512 4096 4096 NT_STATUS_OK
ReadX 12990 196608 61440 61440 NT_STATUS_OK
ReadX 12990 258048 4096 4096 NT_STATUS_OK
ReadX 12990 262144 61440 61440 NT_STATUS_OK
ReadX 12990 323584 4096 4096 NT_STATUS_OK
ReadX 12990 327680 61440 61440 NT_STATUS_OK
ReadX 12990 389120 4096 4096 NT_STATUS_OK
ReadX 12990 393216 61440 61440 NT_STATUS_OK
ReadX 12990 454656 4096 4096 NT_STATUS_OK
ReadX 12990 458752 61440 61440 NT_STATUS_OK
ReadX 12990 520192 4096 4096 NT_STATUS_OK
ReadX 12990 524288 61440 61440 NT_STATUS_OK
ReadX 12990 585728 4096 4096 NT_STATUS_OK
ReadX 12990 589824 61440 61440 NT_STATUS_OK
ReadX 12990 651264 4096 4096 NT_STATUS_OK
ReadX 12990 655360 61440 61440 NT_STATUS_OK
ReadX 12990 716800 4096 4096 NT_STATUS_OK
ReadX 12990 720896 61440 61440 NT_STATUS_OK
ReadX 12990 782336 4096 4096 NT_STATUS_OK
ReadX 12990 786432 61440 61440 NT_STATUS_OK
ReadX 12990 847872 4096 4096 NT_STATUS_OK
ReadX 12990 851968 61440 61440 NT_STATUS_OK
ReadX 12990 913408 4096 4096 NT_STATUS_OK
ReadX 12990 917504 61440 61440 NT_STATUS_OK
ReadX 12990 978944 4096 4096 NT_STATUS_OK
ReadX 12990 983040 61440 61440 NT_STATUS_OK
ReadX 12990 1044480 4096 4096 NT_STATUS_OK
ReadX 12990 1048576 61440 61440 NT_STATUS_OK
ReadX 12990 1110016 4096 4096 NT_STATUS_OK
ReadX 12990 1114112 61440 61440 NT_STATUS_OK
ReadX 12990 1175552 4096 4096 NT_STATUS_OK
ReadX 12990 1179648 61440 61440 NT_STATUS_OK
ReadX 12990 1241088 4096 4096 NT_STATUS_OK
ReadX 12990 1245184 61440 61440 NT_STATUS_OK
ReadX 12990 1306624 4096 4096 NT_STATUS_OK
ReadX 12990 1310720 61440 61440 NT_STATUS_OK
ReadX 12990 1372160 4096 4096 NT_STATUS_OK
ReadX 12990 1376256 61440 61440 NT_STATUS_OK
ReadX 12990 1437696 4096 4096 NT_STATUS_OK
ReadX 12990 1441792 61440 61440 NT_STATUS_OK
ReadX 12990 1503232 4096 4096 NT_STATUS_OK
ReadX 12990 1507328 61440 61440 NT_STATUS_OK
ReadX 12990 1568768 4096 4096 NT_STATUS_OK
ReadX 12990 1572864 61440 61440 NT_STATUS_OK
ReadX 12990 1634304 4096 4096 NT_STATUS_OK
ReadX 12990 1638400 61440 61440 NT_STATUS_OK
ReadX 12990 1699840 4096 4096 NT_STATUS_OK
ReadX 12990 1703936 61440 61440 NT_STATUS_OK
ReadX 12990 1765376 4096 4096 NT_STATUS_OK
ReadX 12990 1769472 61440 61440 NT_STATUS_OK
ReadX 12990 1830912 4096 4096 NT_STATUS_OK
ReadX 12990 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12988 NT_STATUS_OK
Close 12989 NT_STATUS_OK
Close 12990 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12994 NT_STATUS_OK
ReadX 12994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
ReadX 12995 4096 4096 4096 NT_STATUS_OK
ReadX 12995 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12996 NT_STATUS_OK
Close 12996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12993 NT_STATUS_OK
Close 12994 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12999 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12999 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Close 12999 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13002 NT_STATUS_OK
ReadX 13002 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 8192 8192 NT_STATUS_OK
ReadX 13003 8192 8192 8192 NT_STATUS_OK
ReadX 13003 16384 8192 8192 NT_STATUS_OK
ReadX 13003 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13003 NT_STATUS_OK
Close 13002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13008 NT_STATUS_OK
WriteX 13008 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13008 258 NT_STATUS_OK
WriteX 13008 0 10438 10438 NT_STATUS_OK
Close 13008 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13011 NT_STATUS_OK
Close 13011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13012 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13013 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13014 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13017 NT_STATUS_OK
ReadX 13017 0 4096 4096 NT_STATUS_OK
ReadX 13017 4096 4096 4096 NT_STATUS_OK
ReadX 13017 8192 4096 4096 NT_STATUS_OK
ReadX 13017 12288 8192 8192 NT_STATUS_OK
ReadX 13017 20480 8192 8192 NT_STATUS_OK
ReadX 13017 28672 8192 8192 NT_STATUS_OK
ReadX 13017 36864 8192 8192 NT_STATUS_OK
ReadX 13017 45056 8192 8192 NT_STATUS_OK
ReadX 13017 53248 8192 8192 NT_STATUS_OK
ReadX 13017 61440 8192 8192 NT_STATUS_OK
ReadX 13017 69632 8192 8192 NT_STATUS_OK
ReadX 13017 77824 8192 8192 NT_STATUS_OK
ReadX 13017 86016 8192 8192 NT_STATUS_OK
ReadX 13017 94208 8192 8192 NT_STATUS_OK
ReadX 13017 102400 8192 8192 NT_STATUS_OK
ReadX 13017 110592 8192 8192 NT_STATUS_OK
ReadX 13017 118784 8192 8192 NT_STATUS_OK
ReadX 13017 126976 8192 8192 NT_STATUS_OK
ReadX 13017 135168 8192 8192 NT_STATUS_OK
ReadX 13017 143360 8192 8192 NT_STATUS_OK
ReadX 13017 151552 8192 8192 NT_STATUS_OK
ReadX 13017 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13019 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13022 NT_STATUS_OK
WriteX 13022 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 258 NT_STATUS_OK
WriteX 13022 0 28489 28489 NT_STATUS_OK
Close 13022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13025 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 8192 8192 NT_STATUS_OK
ReadX 13029 8192 8192 8192 NT_STATUS_OK
ReadX 13029 16384 8192 8192 NT_STATUS_OK
ReadX 13029 24576 8192 8192 NT_STATUS_OK
ReadX 13029 32768 16384 16384 NT_STATUS_OK
ReadX 13029 49152 8192 8192 NT_STATUS_OK
ReadX 13029 57344 8192 8192 NT_STATUS_OK
ReadX 13029 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13031 NT_STATUS_OK
Close 13031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Close 13028 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13034 NT_STATUS_OK
WriteX 13034 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13034 258 NT_STATUS_OK
WriteX 13034 0 29253 29253 NT_STATUS_OK
Close 13034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13036 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13041 NT_STATUS_OK
WriteX 13041 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13041 258 NT_STATUS_OK
WriteX 13041 0 30183 30183 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13044 NT_STATUS_OK
WriteX 13044 0 510 510 NT_STATUS_OK
WriteX 13044 510 512 512 NT_STATUS_OK
WriteX 13044 1022 510 510 NT_STATUS_OK
WriteX 13044 1532 510 510 NT_STATUS_OK
WriteX 13044 2042 168 168 NT_STATUS_OK
Close 13044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13045 NT_STATUS_OK
Close 13045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
WriteX 13047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 61440 4096 4096 NT_STATUS_OK
ReadX 13048 126976 4096 4096 NT_STATUS_OK
WriteX 13048 0 65536 65536 NT_STATUS_OK
WriteX 13048 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 61440 4096 4096 NT_STATUS_OK
ReadX 13049 126976 4096 4096 NT_STATUS_OK
ReadX 13049 192512 4096 4096 NT_STATUS_OK
ReadX 13049 258048 4096 4096 NT_STATUS_OK
WriteX 13049 0 65536 65536 NT_STATUS_OK
WriteX 13049 65536 65536 65536 NT_STATUS_OK
WriteX 13049 131072 65536 65536 NT_STATUS_OK
WriteX 13049 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13050 NT_STATUS_OK
ReadX 13050 61440 4096 4096 NT_STATUS_OK
ReadX 13050 126976 4096 4096 NT_STATUS_OK
ReadX 13050 192512 4096 4096 NT_STATUS_OK
ReadX 13050 258048 4096 4096 NT_STATUS_OK
ReadX 13050 323584 4096 4096 NT_STATUS_OK
ReadX 13050 389120 4096 4096 NT_STATUS_OK
ReadX 13050 454656 4096 4096 NT_STATUS_OK
ReadX 13050 520192 4096 4096 NT_STATUS_OK
WriteX 13050 0 65536 65536 NT_STATUS_OK
WriteX 13050 65536 65536 65536 NT_STATUS_OK
WriteX 13050 131072 65536 65536 NT_STATUS_OK
WriteX 13050 196608 65536 65536 NT_STATUS_OK
WriteX 13050 262144 65536 65536 NT_STATUS_OK
WriteX 13050 327680 65536 65536 NT_STATUS_OK
WriteX 13050 393216 65536 65536 NT_STATUS_OK
WriteX 13050 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13051 NT_STATUS_OK
Close 13051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Close 13048 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Close 13050 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13053 NT_STATUS_OK
Close 13053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13057 NT_STATUS_OK
Close 13057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13062 NT_STATUS_OK
Close 13062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13066 NT_STATUS_OK
Close 13066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13069 NT_STATUS_OK
Close 13069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13071 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13075 NT_STATUS_OK
Close 13075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13085 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13090 NT_STATUS_OK
Close 13090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13095 NT_STATUS_OK
Close 13095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13100 NT_STATUS_OK
Close 13100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13105 NT_STATUS_OK
Close 13105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13113 NT_STATUS_OK
Close 13113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13119 NT_STATUS_OK
WriteX 13119 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13119 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13119 0 65536 65536 NT_STATUS_OK
WriteX 13119 65536 65536 65536 NT_STATUS_OK
WriteX 13119 131072 65536 65536 NT_STATUS_OK
WriteX 13119 196608 65536 65536 NT_STATUS_OK
WriteX 13119 262144 26634 26634 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13124 NT_STATUS_OK
Close 13124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
ReadX 13127 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13132 NT_STATUS_OK
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13137 NT_STATUS_OK
Close 13137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13141 NT_STATUS_OK
Close 13141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13144 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13146 NT_STATUS_OK
Close 13146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13150 NT_STATUS_OK
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13160 NT_STATUS_OK
Close 13160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13175 NT_STATUS_OK
Close 13175 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13179 NT_STATUS_OK
Close 13179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13189 NT_STATUS_OK
Close 13189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13192 NT_STATUS_OK
Close 13192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13194 NT_STATUS_OK
Close 13194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
Close 13206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
Close 13207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13208 NT_STATUS_OK
ReadX 13208 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13218 NT_STATUS_OK
Close 13218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
Close 13220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
Close 13221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13208 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13251 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13251 0 4096 4096 NT_STATUS_OK
Close 13251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 4096 4096 NT_STATUS_OK
ReadX 13253 4096 4096 4096 NT_STATUS_OK
ReadX 13253 8192 4096 4096 NT_STATUS_OK
ReadX 13253 12288 4096 4096 NT_STATUS_OK
ReadX 13253 16384 4096 4096 NT_STATUS_OK
ReadX 13253 20480 4096 4096 NT_STATUS_OK
ReadX 13253 24576 4096 4096 NT_STATUS_OK
ReadX 13253 28672 4096 4096 NT_STATUS_OK
ReadX 13253 32768 4096 4096 NT_STATUS_OK
ReadX 13253 36864 4096 4096 NT_STATUS_OK
ReadX 13253 40960 4096 4096 NT_STATUS_OK
ReadX 13253 45056 4096 4096 NT_STATUS_OK
ReadX 13253 49152 4096 4096 NT_STATUS_OK
ReadX 13253 53248 4096 4096 NT_STATUS_OK
ReadX 13253 57344 4096 4096 NT_STATUS_OK
ReadX 13253 61440 4096 4096 NT_STATUS_OK
ReadX 13253 65536 4096 4096 NT_STATUS_OK
ReadX 13253 69632 4096 4096 NT_STATUS_OK
ReadX 13253 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13253 1004 NT_STATUS_OK
WriteX 13253 0 4096 4096 NT_STATUS_OK
Close 13253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13254 NT_STATUS_OK
SET_FILE_INFORMATION 13254 1004 NT_STATUS_OK
Close 13254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13255 NT_STATUS_OK
ReadX 13255 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13256 NT_STATUS_OK
Close 13256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13259 NT_STATUS_OK
WriteX 13259 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13259 258 NT_STATUS_OK
WriteX 13259 0 65536 65536 NT_STATUS_OK
WriteX 13259 65536 19979 19979 NT_STATUS_OK
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
QUERY_FILE_INFORMATION 13260 1004 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
SET_FILE_INFORMATION 13260 1004 NT_STATUS_OK
WriteX 13260 0 4096 4096 NT_STATUS_OK
Flush 13260 NT_STATUS_OK
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13261 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 0 4096 4096 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 0 4096 4096 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13265 1004 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13266 NT_STATUS_OK
Close 13266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13262 NT_STATUS_OK
Close 13265 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13268 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13271 NT_STATUS_OK
WriteX 13271 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13271 258 NT_STATUS_OK
WriteX 13271 0 65536 65536 NT_STATUS_OK
WriteX 13271 65536 17654 17654 NT_STATUS_OK
Close 13271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13272 NT_STATUS_OK
ReadX 13272 0 4096 4096 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
QUERY_FILE_INFORMATION 13272 1004 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
SET_FILE_INFORMATION 13272 1004 NT_STATUS_OK
WriteX 13272 0 4096 4096 NT_STATUS_OK
Flush 13272 NT_STATUS_OK
Close 13272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13273 NT_STATUS_OK
SET_FILE_INFORMATION 13273 1004 NT_STATUS_OK
Close 13273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13275 NT_STATUS_OK
Close 13275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
ReadX 13277 4096 4096 4096 NT_STATUS_OK
ReadX 13277 8192 4096 4096 NT_STATUS_OK
ReadX 13277 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13277 16384 4096 4096 NT_STATUS_OK
ReadX 13277 20480 4096 4096 NT_STATUS_OK
ReadX 13277 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
Close 13279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13280 1004 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13281 NT_STATUS_OK
Close 13281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13283 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13286 NT_STATUS_OK
WriteX 13286 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13286 258 NT_STATUS_OK
WriteX 13286 0 65536 65536 NT_STATUS_OK
WriteX 13286 65536 19490 19490 NT_STATUS_OK
Close 13286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
QUERY_FILE_INFORMATION 13287 1004 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
SET_FILE_INFORMATION 13287 1004 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
Close 13287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13288 NT_STATUS_OK
SET_FILE_INFORMATION 13288 1004 NT_STATUS_OK
Close 13288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13290 NT_STATUS_OK
Close 13290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13292 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13292 0 4096 4096 NT_STATUS_OK
Close 13292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13293 NT_STATUS_OK
ReadX 13293 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
ReadX 13294 4096 4096 4096 NT_STATUS_OK
ReadX 13294 8192 4096 4096 NT_STATUS_OK
ReadX 13294 12288 4096 4096 NT_STATUS_OK
ReadX 13294 16384 4096 4096 NT_STATUS_OK
ReadX 13294 20480 4096 4096 NT_STATUS_OK
ReadX 13294 24576 4096 4096 NT_STATUS_OK
ReadX 13294 28672 4096 4096 NT_STATUS_OK
ReadX 13294 32768 4096 4096 NT_STATUS_OK
ReadX 13294 36864 4096 4096 NT_STATUS_OK
ReadX 13294 40960 4096 4096 NT_STATUS_OK
ReadX 13294 45056 4096 4096 NT_STATUS_OK
ReadX 13294 49152 4096 4096 NT_STATUS_OK
ReadX 13294 53248 4096 4096 NT_STATUS_OK
ReadX 13294 57344 4096 4096 NT_STATUS_OK
ReadX 13294 61440 4096 4096 NT_STATUS_OK
ReadX 13294 65536 4096 4096 NT_STATUS_OK
ReadX 13294 69632 4096 4096 NT_STATUS_OK
ReadX 13294 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13294 1004 NT_STATUS_OK
WriteX 13294 0 4096 4096 NT_STATUS_OK
Close 13294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13295 NT_STATUS_OK
SET_FILE_INFORMATION 13295 1004 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13297 NT_STATUS_OK
Close 13297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13300 NT_STATUS_OK
WriteX 13300 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13300 258 NT_STATUS_OK
WriteX 13300 0 65536 65536 NT_STATUS_OK
WriteX 13300 65536 8866 8866 NT_STATUS_OK
Close 13300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13301 NT_STATUS_OK
ReadX 13301 0 4096 4096 NT_STATUS_OK
WriteX 13301 0 4096 4096 NT_STATUS_OK
Flush 13301 NT_STATUS_OK
SET_FILE_INFORMATION 13301 1004 NT_STATUS_OK
WriteX 13301 0 4096 4096 NT_STATUS_OK
Flush 13301 NT_STATUS_OK
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13305 1004 NT_STATUS_OK
WriteX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13306 NT_STATUS_OK
Close 13306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13308 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13311 NT_STATUS_OK
WriteX 13311 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13311 258 NT_STATUS_OK
WriteX 13311 0 65536 65536 NT_STATUS_OK
WriteX 13311 65536 9298 9298 NT_STATUS_OK
Close 13311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
WriteX 13312 0 4096 4096 NT_STATUS_OK
Flush 13312 NT_STATUS_OK
SET_FILE_INFORMATION 13312 1004 NT_STATUS_OK
WriteX 13312 0 4096 4096 NT_STATUS_OK
Flush 13312 NT_STATUS_OK
Close 13312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13313 NT_STATUS_OK
SET_FILE_INFORMATION 13313 1004 NT_STATUS_OK
Close 13313 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13315 NT_STATUS_OK
Close 13315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13318 0 4096 4096 NT_STATUS_OK
Close 13318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13319 4096 4096 4096 NT_STATUS_OK
ReadX 13319 8192 4096 4096 NT_STATUS_OK
ReadX 13319 12288 4096 4096 NT_STATUS_OK
ReadX 13319 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13322 1004 NT_STATUS_OK
WriteX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13323 NT_STATUS_OK
Close 13323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13325 NT_STATUS_OK
Close 13325 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13328 NT_STATUS_OK
WriteX 13328 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 258 NT_STATUS_OK
WriteX 13328 0 65536 65536 NT_STATUS_OK
WriteX 13328 65536 11540 11540 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 4096 4096 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
Flush 13329 NT_STATUS_OK
SET_FILE_INFORMATION 13329 1004 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
Flush 13329 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13330 NT_STATUS_OK
SET_FILE_INFORMATION 13330 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13331 NT_STATUS_OK
ReadX 13331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13332 NT_STATUS_OK
Close 13332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 61440 4096 4096 NT_STATUS_OK
ReadX 13334 126976 4096 4096 NT_STATUS_OK
WriteX 13334 0 65536 65536 NT_STATUS_OK
WriteX 13334 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 61440 4096 4096 NT_STATUS_OK
ReadX 13335 126976 4096 4096 NT_STATUS_OK
ReadX 13335 192512 4096 4096 NT_STATUS_OK
ReadX 13335 258048 4096 4096 NT_STATUS_OK
WriteX 13335 0 65536 65536 NT_STATUS_OK
WriteX 13335 65536 65536 65536 NT_STATUS_OK
WriteX 13335 131072 65536 65536 NT_STATUS_OK
WriteX 13335 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 61440 4096 4096 NT_STATUS_OK
ReadX 13336 126976 4096 4096 NT_STATUS_OK
ReadX 13336 192512 4096 4096 NT_STATUS_OK
ReadX 13336 258048 4096 4096 NT_STATUS_OK
ReadX 13336 323584 4096 4096 NT_STATUS_OK
ReadX 13336 389120 4096 4096 NT_STATUS_OK
ReadX 13336 454656 4096 4096 NT_STATUS_OK
ReadX 13336 520192 4096 4096 NT_STATUS_OK
WriteX 13336 0 65536 65536 NT_STATUS_OK
WriteX 13336 65536 65536 65536 NT_STATUS_OK
WriteX 13336 131072 65536 65536 NT_STATUS_OK
WriteX 13336 196608 65536 65536 NT_STATUS_OK
WriteX 13336 262144 65536 65536 NT_STATUS_OK
WriteX 13336 327680 65536 65536 NT_STATUS_OK
WriteX 13336 393216 65536 65536 NT_STATUS_OK
WriteX 13336 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13337 NT_STATUS_OK
ReadX 13337 0 4096 4096 NT_STATUS_OK
ReadX 13337 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13338 NT_STATUS_OK
WriteX 13338 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 258 NT_STATUS_OK
WriteX 13338 0 53 53 NT_STATUS_OK
Close 13338 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13339 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13331 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Close 13335 NT_STATUS_OK
Close 13336 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13337 8192 4096 4096 NT_STATUS_OK
ReadX 13337 12288 4096 4096 NT_STATUS_OK
WriteX 13341 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 258 NT_STATUS_OK
ReadX 13337 16384 4096 4096 NT_STATUS_OK
ReadX 13337 20480 4096 4096 NT_STATUS_OK
WriteX 13341 0 15360 15360 NT_STATUS_OK
Close 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13342 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13342 1004 NT_STATUS_OK
WriteX 13342 0 4096 4096 NT_STATUS_OK
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13343 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13346 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13345 4096 4096 4096 NT_STATUS_OK
ReadX 13345 8192 4096 4096 NT_STATUS_OK
ReadX 13345 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13348 NT_STATUS_OK
ReadX 13348 0 4096 4096 NT_STATUS_OK
ReadX 13348 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
ReadX 13349 4096 4096 4096 NT_STATUS_OK
ReadX 13349 8192 4096 4096 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13350 NT_STATUS_OK
WriteX 13350 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13350 258 NT_STATUS_OK
WriteX 13350 0 15360 15360 NT_STATUS_OK
Close 13350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13352 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13355 NT_STATUS_OK
SET_FILE_INFORMATION 13355 1004 NT_STATUS_OK
Close 13355 NT_STATUS_OK
WriteX 13351 0 4096 4096 NT_STATUS_OK
Close 13351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13356 NT_STATUS_OK
Close 13356 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13358 NT_STATUS_OK
ReadX 13358 0 4096 4096 NT_STATUS_OK
ReadX 13358 4096 4096 4096 NT_STATUS_OK
ReadX 13358 8192 4096 4096 NT_STATUS_OK
ReadX 13358 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13358 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13358 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13359 NT_STATUS_OK
ReadX 13359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13360 NT_STATUS_OK
WriteX 13360 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13360 258 NT_STATUS_OK
WriteX 13360 0 53 53 NT_STATUS_OK
Close 13360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13361 NT_STATUS_OK
Close 13361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13359 4096 4096 4096 NT_STATUS_OK
ReadX 13359 8192 4096 4096 NT_STATUS_OK
ReadX 13359 12288 4096 4096 NT_STATUS_OK
WriteX 13363 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13363 258 NT_STATUS_OK
WriteX 13363 0 12006 12006 NT_STATUS_OK
Close 13363 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13364 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13364 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13364 1004 NT_STATUS_OK
WriteX 13364 0 4096 4096 NT_STATUS_OK
Close 13364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13365 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13367 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13368 NT_STATUS_OK
Close 13368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13367 4096 4096 4096 NT_STATUS_OK
ReadX 13367 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13370 NT_STATUS_OK
WriteX 13370 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13370 258 NT_STATUS_OK
WriteX 13370 0 11991 11991 NT_STATUS_OK
Close 13370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13371 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13371 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13374 NT_STATUS_OK
ReadX 13374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13375 NT_STATUS_OK
SET_FILE_INFORMATION 13375 1004 NT_STATUS_OK
WriteX 13358 0 19054 19054 NT_STATUS_OK
Close 13375 NT_STATUS_OK
WriteX 13371 0 4096 4096 NT_STATUS_OK
Close 13371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13376 NT_STATUS_OK
Close 13376 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13378 NT_STATUS_OK
ReadX 13378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13379 NT_STATUS_OK
Close 13379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13378 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
ReadX 13378 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
WriteX 13378 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13378 1004 NT_STATUS_OK
Close 13354 NT_STATUS_OK
WriteX 13378 0 12288 12288 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13381 NT_STATUS_OK
Close 13381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13358 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 61440 61440 NT_STATUS_OK
ReadX 13385 61440 4096 4096 NT_STATUS_OK
ReadX 13385 65536 61440 61440 NT_STATUS_OK
ReadX 13385 126976 4096 4096 NT_STATUS_OK
ReadX 13385 131072 61440 61440 NT_STATUS_OK
ReadX 13385 192512 4096 4096 NT_STATUS_OK
ReadX 13385 196608 61440 61440 NT_STATUS_OK
ReadX 13385 258048 4096 4096 NT_STATUS_OK
ReadX 13385 262144 61440 61440 NT_STATUS_OK
ReadX 13385 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13386 NT_STATUS_OK
ReadX 13386 0 61440 61440 NT_STATUS_OK
ReadX 13386 61440 4096 4096 NT_STATUS_OK
ReadX 13386 65536 61440 61440 NT_STATUS_OK
ReadX 13386 126976 4096 4096 NT_STATUS_OK
ReadX 13386 131072 61440 61440 NT_STATUS_OK
ReadX 13386 192512 4096 4096 NT_STATUS_OK
ReadX 13386 196608 61440 61440 NT_STATUS_OK
ReadX 13386 258048 4096 4096 NT_STATUS_OK
ReadX 13386 262144 61440 61440 NT_STATUS_OK
ReadX 13386 323584 4096 4096 NT_STATUS_OK
ReadX 13386 327680 61440 61440 NT_STATUS_OK
ReadX 13386 389120 4096 4096 NT_STATUS_OK
ReadX 13386 393216 61440 61440 NT_STATUS_OK
ReadX 13386 454656 4096 4096 NT_STATUS_OK
ReadX 13386 458752 61440 61440 NT_STATUS_OK
ReadX 13386 520192 4096 4096 NT_STATUS_OK
ReadX 13386 524288 61440 61440 NT_STATUS_OK
ReadX 13386 585728 4096 4096 NT_STATUS_OK
ReadX 13386 589824 61440 61440 NT_STATUS_OK
ReadX 13386 651264 4096 4096 NT_STATUS_OK
ReadX 13386 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13387 NT_STATUS_OK
ReadX 13387 0 61440 61440 NT_STATUS_OK
ReadX 13387 61440 4096 4096 NT_STATUS_OK
ReadX 13387 65536 61440 61440 NT_STATUS_OK
ReadX 13387 126976 4096 4096 NT_STATUS_OK
ReadX 13387 131072 61440 61440 NT_STATUS_OK
ReadX 13387 192512 4096 4096 NT_STATUS_OK
ReadX 13387 196608 61440 61440 NT_STATUS_OK
ReadX 13387 258048 4096 4096 NT_STATUS_OK
ReadX 13387 262144 61440 61440 NT_STATUS_OK
ReadX 13387 323584 4096 4096 NT_STATUS_OK
ReadX 13387 327680 61440 61440 NT_STATUS_OK
ReadX 13387 389120 4096 4096 NT_STATUS_OK
ReadX 13387 393216 61440 61440 NT_STATUS_OK
ReadX 13387 454656 4096 4096 NT_STATUS_OK
ReadX 13387 458752 61440 61440 NT_STATUS_OK
ReadX 13387 520192 4096 4096 NT_STATUS_OK
ReadX 13387 524288 61440 61440 NT_STATUS_OK
ReadX 13387 585728 4096 4096 NT_STATUS_OK
ReadX 13387 589824 61440 61440 NT_STATUS_OK
ReadX 13387 651264 4096 4096 NT_STATUS_OK
ReadX 13387 655360 61440 61440 NT_STATUS_OK
ReadX 13387 716800 4096 4096 NT_STATUS_OK
ReadX 13387 720896 61440 61440 NT_STATUS_OK
ReadX 13387 782336 4096 4096 NT_STATUS_OK
ReadX 13387 786432 61440 61440 NT_STATUS_OK
ReadX 13387 847872 4096 4096 NT_STATUS_OK
ReadX 13387 851968 61440 61440 NT_STATUS_OK
ReadX 13387 913408 4096 4096 NT_STATUS_OK
ReadX 13387 917504 61440 61440 NT_STATUS_OK
ReadX 13387 978944 4096 4096 NT_STATUS_OK
ReadX 13387 983040 61440 61440 NT_STATUS_OK
ReadX 13387 1044480 4096 4096 NT_STATUS_OK
ReadX 13387 1048576 61440 61440 NT_STATUS_OK
ReadX 13387 1110016 4096 4096 NT_STATUS_OK
ReadX 13387 1114112 61440 61440 NT_STATUS_OK
ReadX 13387 1175552 4096 4096 NT_STATUS_OK
ReadX 13387 1179648 61440 61440 NT_STATUS_OK
ReadX 13387 1241088 4096 4096 NT_STATUS_OK
ReadX 13387 1245184 61440 61440 NT_STATUS_OK
ReadX 13387 1306624 4096 4096 NT_STATUS_OK
ReadX 13387 1310720 61440 61440 NT_STATUS_OK
ReadX 13387 1372160 4096 4096 NT_STATUS_OK
ReadX 13387 1376256 61440 61440 NT_STATUS_OK
ReadX 13387 1437696 4096 4096 NT_STATUS_OK
ReadX 13387 1441792 61440 61440 NT_STATUS_OK
ReadX 13387 1503232 4096 4096 NT_STATUS_OK
ReadX 13387 1507328 61440 61440 NT_STATUS_OK
ReadX 13387 1568768 4096 4096 NT_STATUS_OK
ReadX 13387 1572864 61440 61440 NT_STATUS_OK
ReadX 13387 1634304 4096 4096 NT_STATUS_OK
ReadX 13387 1638400 61440 61440 NT_STATUS_OK
ReadX 13387 1699840 4096 4096 NT_STATUS_OK
ReadX 13387 1703936 61440 61440 NT_STATUS_OK
ReadX 13387 1765376 4096 4096 NT_STATUS_OK
ReadX 13387 1769472 61440 61440 NT_STATUS_OK
ReadX 13387 1830912 4096 4096 NT_STATUS_OK
ReadX 13387 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13392 NT_STATUS_OK
ReadX 13392 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13394 NT_STATUS_OK
QUERY_FILE_INFORMATION 13394 1004 NT_STATUS_OK
WriteX 13394 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13394 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13395 NT_STATUS_OK
Close 13395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13396 NT_STATUS_OK
WriteX 13396 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13396 258 NT_STATUS_OK
WriteX 13396 0 491 491 NT_STATUS_OK
Close 13396 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13397 NT_STATUS_OK
ReadX 13397 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13394 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13399 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13400 NT_STATUS_OK
WriteX 13400 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13400 258 NT_STATUS_OK
WriteX 13400 0 543 543 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13404 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13404 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13406 NT_STATUS_OK
ReadX 13406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13407 NT_STATUS_OK
ReadX 13407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13408 NT_STATUS_OK
ReadX 13408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13413 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13414 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1004 NT_STATUS_OK
WriteX 13414 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 258 NT_STATUS_OK
WriteX 13414 0 2048 2048 NT_STATUS_OK
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
Flush 13415 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13419 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13420 NT_STATUS_OK
WriteX 13420 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13420 258 NT_STATUS_OK
WriteX 13420 0 2048 2048 NT_STATUS_OK
Close 13420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13425 NT_STATUS_OK
Close 13425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13426 NT_STATUS_OK
WriteX 13426 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 258 NT_STATUS_OK
WriteX 13426 0 2048 2048 NT_STATUS_OK
Close 13426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 2048 2048 NT_STATUS_OK
ReadX 13405 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13421 0 4096 4096 NT_STATUS_OK
WriteX 13405 0 8192 8192 NT_STATUS_OK
WriteX 13406 0 4096 4096 NT_STATUS_OK
WriteX 13407 0 4096 4096 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13430 NT_STATUS_OK
ReadX 13430 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13431 NT_STATUS_OK
QUERY_FILE_INFORMATION 13431 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Close 13406 NT_STATUS_OK
Close 13407 NT_STATUS_OK
Close 13408 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13434 NT_STATUS_OK
ReadX 13434 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13436 NT_STATUS_OK
ReadX 13436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13437 NT_STATUS_OK
ReadX 13437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13439 NT_STATUS_OK
ReadX 13439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13443 NT_STATUS_OK
ReadX 13443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13444 NT_STATUS_OK
ReadX 13444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13451 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 1004 NT_STATUS_OK
WriteX 13451 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13451 258 NT_STATUS_OK
WriteX 13451 0 2048 2048 NT_STATUS_OK
Close 13451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13458 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13459 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 1004 NT_STATUS_OK
WriteX 13459 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 258 NT_STATUS_OK
WriteX 13459 0 2048 2048 NT_STATUS_OK
Close 13459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13460 NT_STATUS_OK
ReadX 13460 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13452 0 4096 4096 NT_STATUS_OK
Flush 13452 NT_STATUS_OK
WriteX 13460 0 4096 4096 NT_STATUS_OK
Flush 13460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13452 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13460 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13454 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13462 NT_STATUS_OK
WriteX 13462 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13462 258 NT_STATUS_OK
WriteX 13462 0 4096 4096 NT_STATUS_OK
Close 13462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13464 NT_STATUS_OK
Close 13464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13465 NT_STATUS_OK
WriteX 13465 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13465 258 NT_STATUS_OK
WriteX 13465 0 4096 4096 NT_STATUS_OK
Close 13465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13466 0 4096 4096 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Close 13454 NT_STATUS_OK
Close 13443 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Close 13441 NT_STATUS_OK
Close 13434 NT_STATUS_OK
Close 13435 NT_STATUS_OK
Close 13438 NT_STATUS_OK
Close 13439 NT_STATUS_OK
Close 13436 NT_STATUS_OK
Close 13437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13469 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13472 NT_STATUS_OK
Close 13472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13473 NT_STATUS_OK
WriteX 13473 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13473 258 NT_STATUS_OK
WriteX 13473 0 2048 2048 NT_STATUS_OK
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13474 NT_STATUS_OK
ReadX 13474 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13475 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13476 NT_STATUS_OK
ReadX 13476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13477 NT_STATUS_OK
ReadX 13477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13481 NT_STATUS_OK
ReadX 13481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13482 NT_STATUS_OK
ReadX 13482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13484 NT_STATUS_OK
ReadX 13484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13485 NT_STATUS_OK
ReadX 13485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13488 NT_STATUS_OK
QUERY_FILE_INFORMATION 13488 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Close 13474 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Close 13481 NT_STATUS_OK
Close 13482 NT_STATUS_OK
Close 13483 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13485 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13475 NT_STATUS_OK
Close 13476 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13480 NT_STATUS_OK
Close 13477 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13490 NT_STATUS_OK
QUERY_FILE_INFORMATION 13490 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13492 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13495 NT_STATUS_OK
ReadX 13495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13496 NT_STATUS_OK
ReadX 13496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13497 NT_STATUS_OK
ReadX 13497 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13499 NT_STATUS_OK
ReadX 13499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13505 NT_STATUS_OK
ReadX 13505 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13510 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 1004 NT_STATUS_OK
WriteX 13510 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13510 258 NT_STATUS_OK
WriteX 13510 0 2048 2048 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13511 NT_STATUS_OK
ReadX 13511 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13512 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13515 NT_STATUS_OK
ReadX 13515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13521 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13522 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 1004 NT_STATUS_OK
WriteX 13522 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 258 NT_STATUS_OK
WriteX 13522 0 2048 2048 NT_STATUS_OK
Close 13522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13525 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13529 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13530 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 1004 NT_STATUS_OK
WriteX 13530 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13530 258 NT_STATUS_OK
WriteX 13530 0 2048 2048 NT_STATUS_OK
Close 13530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13511 0 4096 4096 NT_STATUS_OK
Flush 13511 NT_STATUS_OK
WriteX 13523 0 4096 4096 NT_STATUS_OK
Flush 13523 NT_STATUS_OK
WriteX 13531 0 4096 4096 NT_STATUS_OK
Flush 13531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13511 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13523 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13531 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13513 4096 16384 16384 NT_STATUS_OK
ReadX 13493 4096 16384 16384 NT_STATUS_OK
ReadX 13525 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 2048 2048 NT_STATUS_OK
WriteX 13533 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13534 NT_STATUS_OK
QUERY_FILE_INFORMATION 13534 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Close 13505 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Close 13514 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13499 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13503 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Close 13495 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13536 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13538 NT_STATUS_OK
QUERY_FILE_INFORMATION 13538 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13540 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13541 NT_STATUS_OK
ReadX 13541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13542 NT_STATUS_OK
ReadX 13542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13544 NT_STATUS_OK
ReadX 13544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13541 4096 16384 16384 NT_STATUS_OK
WriteX 13541 0 4096 4096 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
WriteX 13544 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13547 NT_STATUS_OK
ReadX 13547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13550 NT_STATUS_OK
ReadX 13550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13552 NT_STATUS_OK
ReadX 13552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13553 NT_STATUS_OK
ReadX 13553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13555 NT_STATUS_OK
ReadX 13555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 8192 8192 NT_STATUS_OK
ReadX 13547 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13561 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13561 0 4096 4096 NT_STATUS_OK
ReadX 13561 4096 4096 4096 NT_STATUS_OK
ReadX 13561 8192 4096 4096 NT_STATUS_OK
WriteX 13547 0 4096 4096 NT_STATUS_OK
WriteX 13548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
ReadX 13562 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13541 0 4096 4096 NT_STATUS_OK
WriteX 13542 0 4096 4096 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
WriteX 13544 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13567 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 1004 NT_STATUS_OK
WriteX 13567 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 258 NT_STATUS_OK
WriteX 13567 0 2048 2048 NT_STATUS_OK
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
ReadX 13570 4096 4096 4096 NT_STATUS_OK
WriteX 13570 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13571 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13572 NT_STATUS_OK
ReadX 13572 0 4096 4096 NT_STATUS_OK
ReadX 13572 4096 4096 4096 NT_STATUS_OK
WriteX 13572 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13573 NT_STATUS_OK
QUERY_FILE_INFORMATION 13573 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13545 NT_STATUS_OK
Close 13541 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Close 13543 NT_STATUS_OK
Close 13544 NT_STATUS_OK
Close 13553 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Close 13554 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13559 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13548 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Close 13552 NT_STATUS_OK
Close 13549 NT_STATUS_OK
Close 13550 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13575 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13575 0 4096 4096 NT_STATUS_OK
ReadX 13575 4096 4096 4096 NT_STATUS_OK
ReadX 13575 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13577 NT_STATUS_OK
ReadX 13577 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13578 NT_STATUS_OK
ReadX 13578 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13579 NT_STATUS_OK
ReadX 13579 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13584 NT_STATUS_OK
ReadX 13584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13586 NT_STATUS_OK
ReadX 13586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13587 NT_STATUS_OK
ReadX 13587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13588 NT_STATUS_OK
ReadX 13588 0 4096 4096 NT_STATUS_OK
ReadX 13576 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13592 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13593 NT_STATUS_OK
QUERY_FILE_INFORMATION 13593 1004 NT_STATUS_OK
WriteX 13593 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13593 258 NT_STATUS_OK
WriteX 13593 0 2048 2048 NT_STATUS_OK
Close 13593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13594 NT_STATUS_OK
ReadX 13594 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13594 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13598 NT_STATUS_OK
Close 13598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13599 NT_STATUS_OK
QUERY_FILE_INFORMATION 13599 1004 NT_STATUS_OK
WriteX 13599 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13599 258 NT_STATUS_OK
WriteX 13599 0 2048 2048 NT_STATUS_OK
Close 13599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13600 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13583 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13601 NT_STATUS_OK
QUERY_FILE_INFORMATION 13601 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13587 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Close 13588 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Close 13577 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Close 13583 NT_STATUS_OK
Close 13584 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Close 13586 NT_STATUS_OK
Close 13575 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13603 NT_STATUS_OK
QUERY_FILE_INFORMATION 13603 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13605 NT_STATUS_OK
ReadX 13605 61440 4096 4096 NT_STATUS_OK
ReadX 13605 126976 4096 4096 NT_STATUS_OK
WriteX 13605 0 65536 65536 NT_STATUS_OK
WriteX 13605 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13606 NT_STATUS_OK
ReadX 13606 61440 4096 4096 NT_STATUS_OK
ReadX 13606 126976 4096 4096 NT_STATUS_OK
ReadX 13606 192512 4096 4096 NT_STATUS_OK
ReadX 13606 258048 4096 4096 NT_STATUS_OK
WriteX 13606 0 65536 65536 NT_STATUS_OK
WriteX 13606 65536 65536 65536 NT_STATUS_OK
WriteX 13606 131072 65536 65536 NT_STATUS_OK
WriteX 13606 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13607 NT_STATUS_OK
ReadX 13607 61440 4096 4096 NT_STATUS_OK
ReadX 13607 126976 4096 4096 NT_STATUS_OK
ReadX 13607 192512 4096 4096 NT_STATUS_OK
ReadX 13607 258048 4096 4096 NT_STATUS_OK
ReadX 13607 323584 4096 4096 NT_STATUS_OK
ReadX 13607 389120 4096 4096 NT_STATUS_OK
ReadX 13607 454656 4096 4096 NT_STATUS_OK
ReadX 13607 520192 4096 4096 NT_STATUS_OK
WriteX 13607 0 65536 65536 NT_STATUS_OK
WriteX 13607 65536 65536 65536 NT_STATUS_OK
WriteX 13607 131072 65536 65536 NT_STATUS_OK
WriteX 13607 196608 65536 65536 NT_STATUS_OK
WriteX 13607 262144 65536 65536 NT_STATUS_OK
WriteX 13607 327680 65536 65536 NT_STATUS_OK
WriteX 13607 393216 65536 65536 NT_STATUS_OK
WriteX 13607 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13608 NT_STATUS_OK
ReadX 13608 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13608 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13608 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13608 8192 4096 4096 NT_STATUS_OK
ReadX 13608 12288 4096 4096 NT_STATUS_OK
ReadX 13608 16384 4096 4096 NT_STATUS_OK
ReadX 13608 20480 4096 4096 NT_STATUS_OK
ReadX 13608 24576 4096 4096 NT_STATUS_OK
ReadX 13608 28672 4096 4096 NT_STATUS_OK
ReadX 13608 32768 4096 4096 NT_STATUS_OK
ReadX 13608 36864 4096 4096 NT_STATUS_OK
ReadX 13608 40960 4096 4096 NT_STATUS_OK
ReadX 13608 45056 4096 4096 NT_STATUS_OK
ReadX 13608 49152 4096 4096 NT_STATUS_OK
ReadX 13608 53248 4096 4096 NT_STATUS_OK
ReadX 13608 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13608 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13609 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13605 NT_STATUS_OK
Close 13606 NT_STATUS_OK
Close 13607 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13611 NT_STATUS_OK
WriteX 13611 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13611 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13611 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13611 1004 NT_STATUS_OK
WriteX 13611 0 57088 57088 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
Flush 13611 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13612 NT_STATUS_OK
SET_FILE_INFORMATION 13612 1004 NT_STATUS_OK
Close 13612 NT_STATUS_OK
SET_FILE_INFORMATION 13611 1004 NT_STATUS_OK
WriteX 13611 0 4096 4096 NT_STATUS_OK
Close 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13613 NT_STATUS_OK
Close 13613 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13615 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13616 NT_STATUS_OK
WriteX 13616 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 51456 51456 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Flush 13616 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13620 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13625 NT_STATUS_OK
WriteX 13625 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13625 258 NT_STATUS_OK
WriteX 13625 0 53077 53077 NT_STATUS_OK
Close 13625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13626 NT_STATUS_OK
WriteX 13626 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13626 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13626 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
WriteX 13626 0 65536 65536 NT_STATUS_OK
WriteX 13626 65536 1856 1856 NT_STATUS_OK
WriteX 13626 0 4096 4096 NT_STATUS_OK
Flush 13626 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
WriteX 13626 0 4096 4096 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Close 13620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13632 NT_STATUS_OK
Close 13632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13635 NT_STATUS_OK
WriteX 13635 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13635 258 NT_STATUS_OK
WriteX 13635 0 7983 7983 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13637 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13640 NT_STATUS_OK
WriteX 13640 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13640 258 NT_STATUS_OK
WriteX 13640 0 65536 65536 NT_STATUS_OK
WriteX 13640 65536 65536 65536 NT_STATUS_OK
WriteX 13640 131072 65536 65536 NT_STATUS_OK
WriteX 13640 196608 65536 65536 NT_STATUS_OK
WriteX 13640 262144 65536 65536 NT_STATUS_OK
WriteX 13640 327680 65536 65536 NT_STATUS_OK
WriteX 13640 393216 65536 65536 NT_STATUS_OK
WriteX 13640 458752 46731 46731 NT_STATUS_OK
Close 13640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13641 NT_STATUS_OK
WriteX 13641 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13641 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13630 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13641 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13641 1004 NT_STATUS_OK
WriteX 13641 0 65536 65536 NT_STATUS_OK
WriteX 13641 65536 22848 22848 NT_STATUS_OK
WriteX 13641 0 4096 4096 NT_STATUS_OK
Flush 13641 NT_STATUS_OK
SET_FILE_INFORMATION 13641 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13641 1004 NT_STATUS_OK
WriteX 13641 0 4096 4096 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13645 NT_STATUS_OK
ReadX 13645 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13645 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13646 NT_STATUS_OK
ReadX 13646 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13646 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13646 1004 NT_STATUS_OK
ReadX 13646 8192 4096 4096 NT_STATUS_OK
ReadX 13646 12288 4096 4096 NT_STATUS_OK
ReadX 13646 16384 4096 4096 NT_STATUS_OK
ReadX 13646 20480 4096 4096 NT_STATUS_OK
ReadX 13646 24576 4096 4096 NT_STATUS_OK
ReadX 13646 28672 4096 4096 NT_STATUS_OK
ReadX 13646 32768 4096 4096 NT_STATUS_OK
ReadX 13646 36864 4096 4096 NT_STATUS_OK
ReadX 13646 40960 4096 4096 NT_STATUS_OK
ReadX 13646 45056 4096 4096 NT_STATUS_OK
ReadX 13646 49152 4096 4096 NT_STATUS_OK
ReadX 13646 53248 4096 4096 NT_STATUS_OK
ReadX 13646 57344 4096 4096 NT_STATUS_OK
ReadX 13646 61440 4096 4096 NT_STATUS_OK
ReadX 13646 65536 4096 4096 NT_STATUS_OK
ReadX 13646 69632 4096 4096 NT_STATUS_OK
ReadX 13646 73728 4096 4096 NT_STATUS_OK
ReadX 13646 77824 4096 4096 NT_STATUS_OK
ReadX 13646 81920 4096 4096 NT_STATUS_OK
ReadX 13646 86016 4096 4096 NT_STATUS_OK
ReadX 13646 90112 4096 4096 NT_STATUS_OK
ReadX 13646 94208 4096 4096 NT_STATUS_OK
ReadX 13646 98304 4096 4096 NT_STATUS_OK
ReadX 13646 102400 4096 4096 NT_STATUS_OK
ReadX 13646 106496 4096 4096 NT_STATUS_OK
ReadX 13646 110592 4096 4096 NT_STATUS_OK
ReadX 13646 114688 4096 4096 NT_STATUS_OK
ReadX 13646 118784 4096 4096 NT_STATUS_OK
ReadX 13646 122880 4096 4096 NT_STATUS_OK
ReadX 13646 126976 4096 4096 NT_STATUS_OK
ReadX 13646 131072 4096 4096 NT_STATUS_OK
ReadX 13646 135168 4096 4096 NT_STATUS_OK
ReadX 13646 139264 4096 4096 NT_STATUS_OK
ReadX 13646 143360 4096 4096 NT_STATUS_OK
ReadX 13646 147456 4096 4096 NT_STATUS_OK
ReadX 13646 151552 4096 4096 NT_STATUS_OK
ReadX 13646 155648 4096 4096 NT_STATUS_OK
ReadX 13646 159744 4096 4096 NT_STATUS_OK
ReadX 13646 163840 4096 4096 NT_STATUS_OK
ReadX 13646 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13646 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13647 NT_STATUS_OK
Close 13647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13645 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13649 NT_STATUS_OK
WriteX 13649 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13649 258 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13650 NT_STATUS_OK
SET_FILE_INFORMATION 13650 1004 NT_STATUS_OK
Close 13650 NT_STATUS_OK
WriteX 13649 0 42388 42388 NT_STATUS_OK
Close 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13651 NT_STATUS_OK
Close 13651 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13653 NT_STATUS_OK
ReadX 13653 0 4096 4096 NT_STATUS_OK
ReadX 13653 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13654 NT_STATUS_OK
WriteX 13654 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13654 258 NT_STATUS_OK
SET_FILE_INFORMATION 13654 1004 NT_STATUS_OK
WriteX 13654 0 42652 42652 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13656 NT_STATUS_OK
Close 13656 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13658 NT_STATUS_OK
ReadX 13658 0 4096 4096 NT_STATUS_OK
ReadX 13658 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13660 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13663 NT_STATUS_OK
WriteX 13663 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13663 258 NT_STATUS_OK
WriteX 13663 0 65536 65536 NT_STATUS_OK
WriteX 13663 65536 49 49 NT_STATUS_OK
Close 13663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13664 NT_STATUS_OK
ReadX 13664 0 61440 61440 NT_STATUS_OK
ReadX 13664 61440 4096 4096 NT_STATUS_OK
ReadX 13664 65536 61440 61440 NT_STATUS_OK
ReadX 13664 126976 4096 4096 NT_STATUS_OK
ReadX 13664 131072 61440 61440 NT_STATUS_OK
ReadX 13664 192512 4096 4096 NT_STATUS_OK
ReadX 13664 196608 61440 61440 NT_STATUS_OK
ReadX 13664 258048 4096 4096 NT_STATUS_OK
ReadX 13664 262144 61440 61440 NT_STATUS_OK
ReadX 13664 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13665 NT_STATUS_OK
ReadX 13665 0 61440 61440 NT_STATUS_OK
ReadX 13665 61440 4096 4096 NT_STATUS_OK
ReadX 13665 65536 61440 61440 NT_STATUS_OK
ReadX 13665 126976 4096 4096 NT_STATUS_OK
ReadX 13665 131072 61440 61440 NT_STATUS_OK
ReadX 13665 192512 4096 4096 NT_STATUS_OK
ReadX 13665 196608 61440 61440 NT_STATUS_OK
ReadX 13665 258048 4096 4096 NT_STATUS_OK
ReadX 13665 262144 61440 61440 NT_STATUS_OK
ReadX 13665 323584 4096 4096 NT_STATUS_OK
ReadX 13665 327680 61440 61440 NT_STATUS_OK
ReadX 13665 389120 4096 4096 NT_STATUS_OK
ReadX 13665 393216 61440 61440 NT_STATUS_OK
ReadX 13665 454656 4096 4096 NT_STATUS_OK
ReadX 13665 458752 61440 61440 NT_STATUS_OK
ReadX 13665 520192 4096 4096 NT_STATUS_OK
ReadX 13665 524288 61440 61440 NT_STATUS_OK
ReadX 13665 585728 4096 4096 NT_STATUS_OK
ReadX 13665 589824 61440 61440 NT_STATUS_OK
ReadX 13665 651264 4096 4096 NT_STATUS_OK
ReadX 13665 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13666 NT_STATUS_OK
ReadX 13666 0 61440 61440 NT_STATUS_OK
ReadX 13666 61440 4096 4096 NT_STATUS_OK
ReadX 13666 65536 61440 61440 NT_STATUS_OK
ReadX 13666 126976 4096 4096 NT_STATUS_OK
ReadX 13666 131072 61440 61440 NT_STATUS_OK
ReadX 13666 192512 4096 4096 NT_STATUS_OK
ReadX 13666 196608 61440 61440 NT_STATUS_OK
ReadX 13666 258048 4096 4096 NT_STATUS_OK
ReadX 13666 262144 61440 61440 NT_STATUS_OK
ReadX 13666 323584 4096 4096 NT_STATUS_OK
ReadX 13666 327680 61440 61440 NT_STATUS_OK
ReadX 13666 389120 4096 4096 NT_STATUS_OK
ReadX 13666 393216 61440 61440 NT_STATUS_OK
ReadX 13666 454656 4096 4096 NT_STATUS_OK
ReadX 13666 458752 61440 61440 NT_STATUS_OK
ReadX 13666 520192 4096 4096 NT_STATUS_OK
ReadX 13666 524288 61440 61440 NT_STATUS_OK
ReadX 13666 585728 4096 4096 NT_STATUS_OK
ReadX 13666 589824 61440 61440 NT_STATUS_OK
ReadX 13666 651264 4096 4096 NT_STATUS_OK
ReadX 13666 655360 61440 61440 NT_STATUS_OK
ReadX 13666 716800 4096 4096 NT_STATUS_OK
ReadX 13666 720896 61440 61440 NT_STATUS_OK
ReadX 13666 782336 4096 4096 NT_STATUS_OK
ReadX 13666 786432 61440 61440 NT_STATUS_OK
ReadX 13666 847872 4096 4096 NT_STATUS_OK
ReadX 13666 851968 61440 61440 NT_STATUS_OK
ReadX 13666 913408 4096 4096 NT_STATUS_OK
ReadX 13666 917504 61440 61440 NT_STATUS_OK
ReadX 13666 978944 4096 4096 NT_STATUS_OK
ReadX 13666 983040 61440 61440 NT_STATUS_OK
ReadX 13666 1044480 4096 4096 NT_STATUS_OK
ReadX 13666 1048576 61440 61440 NT_STATUS_OK
ReadX 13666 1110016 4096 4096 NT_STATUS_OK
ReadX 13666 1114112 61440 61440 NT_STATUS_OK
ReadX 13666 1175552 4096 4096 NT_STATUS_OK
ReadX 13666 1179648 61440 61440 NT_STATUS_OK
ReadX 13666 1241088 4096 4096 NT_STATUS_OK
ReadX 13666 1245184 61440 61440 NT_STATUS_OK
ReadX 13666 1306624 4096 4096 NT_STATUS_OK
ReadX 13666 1310720 61440 61440 NT_STATUS_OK
ReadX 13666 1372160 4096 4096 NT_STATUS_OK
ReadX 13666 1376256 61440 61440 NT_STATUS_OK
ReadX 13666 1437696 4096 4096 NT_STATUS_OK
ReadX 13666 1441792 61440 61440 NT_STATUS_OK
ReadX 13666 1503232 4096 4096 NT_STATUS_OK
ReadX 13666 1507328 61440 61440 NT_STATUS_OK
ReadX 13666 1568768 4096 4096 NT_STATUS_OK
ReadX 13666 1572864 61440 61440 NT_STATUS_OK
ReadX 13666 1634304 4096 4096 NT_STATUS_OK
ReadX 13666 1638400 61440 61440 NT_STATUS_OK
ReadX 13666 1699840 4096 4096 NT_STATUS_OK
ReadX 13666 1703936 61440 61440 NT_STATUS_OK
ReadX 13666 1765376 4096 4096 NT_STATUS_OK
ReadX 13666 1769472 61440 61440 NT_STATUS_OK
ReadX 13666 1830912 4096 4096 NT_STATUS_OK
ReadX 13666 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13668 NT_STATUS_OK
QUERY_FILE_INFORMATION 13668 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13668 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13668 1005 NT_STATUS_OK
ReadX 13668 2156 24 24 NT_STATUS_OK
ReadX 13668 2139 276 276 NT_STATUS_OK
ReadX 13668 2136 14 14 NT_STATUS_OK
ReadX 13668 2136 7 7 NT_STATUS_OK
ReadX 13668 2138 12 12 NT_STATUS_OK
ReadX 13668 2137 8 8 NT_STATUS_OK
ReadX 13668 2135 15 15 NT_STATUS_OK
ReadX 13668 0 16 16 NT_STATUS_OK
ReadX 13668 16 2048 2048 NT_STATUS_OK
ReadX 13668 2064 2048 2048 NT_STATUS_OK
ReadX 13668 257 2048 2048 NT_STATUS_OK
ReadX 13668 385 2048 2048 NT_STATUS_OK
ReadX 13668 513 2048 2048 NT_STATUS_OK
ReadX 13668 641 2048 2048 NT_STATUS_OK
ReadX 13668 769 2048 2048 NT_STATUS_OK
ReadX 13668 897 2048 2048 NT_STATUS_OK
ReadX 13668 1025 2048 2048 NT_STATUS_OK
ReadX 13668 1153 2048 2048 NT_STATUS_OK
ReadX 13668 1281 2048 2048 NT_STATUS_OK
ReadX 13668 1409 2048 2048 NT_STATUS_OK
ReadX 13668 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13670 NT_STATUS_OK
Close 13670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13664 NT_STATUS_OK
Close 13665 NT_STATUS_OK
Close 13666 NT_STATUS_OK
Close 13658 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13673 NT_STATUS_OK
WriteX 13673 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 258 NT_STATUS_OK
WriteX 13673 0 10575 10575 NT_STATUS_OK
Flush 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13676 NT_STATUS_OK
ReadX 13676 0 4096 4096 NT_STATUS_OK
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13678 NT_STATUS_OK
LockX 13678 2147483538 1 NT_STATUS_OK
UnlockX 13678 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1005 NT_STATUS_OK
ReadX 13678 0 512 512 NT_STATUS_OK
ReadX 13678 512 512 512 NT_STATUS_OK
ReadX 13678 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 1004 NT_STATUS_OK
Close 13678 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13679 NT_STATUS_OK
QUERY_FILE_INFORMATION 13679 1005 NT_STATUS_OK
ReadX 13679 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13680 NT_STATUS_OK
LockX 13680 2147483538 1 NT_STATUS_OK
UnlockX 13680 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13680 1005 NT_STATUS_OK
ReadX 13680 0 512 512 NT_STATUS_OK
ReadX 13680 512 512 512 NT_STATUS_OK
ReadX 13680 1024 512 512 NT_STATUS_OK
ReadX 13680 288 20 20 NT_STATUS_OK
ReadX 13680 308 2084 2084 NT_STATUS_OK
ReadX 13680 388 2084 2084 NT_STATUS_OK
ReadX 13680 388 2084 2084 NT_STATUS_OK
ReadX 13667 2157 1386 1386 NT_STATUS_OK
ReadX 13680 2472 399 399 NT_STATUS_OK
ReadX 13680 3072 1536 1536 NT_STATUS_OK
ReadX 13680 544 149 149 NT_STATUS_OK
ReadX 13680 693 485 485 NT_STATUS_OK
Close 13680 NT_STATUS_OK
ReadX 13667 2157 4096 4096 NT_STATUS_OK
ReadX 13667 6253 4096 4096 NT_STATUS_OK
ReadX 13667 10349 4096 4096 NT_STATUS_OK
ReadX 13667 14445 4096 4096 NT_STATUS_OK
ReadX 13667 18541 4096 4096 NT_STATUS_OK
ReadX 13667 22637 256 256 NT_STATUS_OK
ReadX 13667 22893 4096 4096 NT_STATUS_OK
ReadX 13667 26989 4096 4096 NT_STATUS_OK
ReadX 13667 31085 4096 4096 NT_STATUS_OK
ReadX 13667 35181 4096 4096 NT_STATUS_OK
ReadX 13667 39277 4096 4096 NT_STATUS_OK
ReadX 13667 43373 4096 4096 NT_STATUS_OK
ReadX 13667 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13667 2157 1024 1024 NT_STATUS_OK
ReadX 13667 1667 4688 4688 NT_STATUS_OK
ReadX 13667 6355 3516 3516 NT_STATUS_OK
ReadX 13667 9871 16384 16384 NT_STATUS_OK
ReadX 13667 26255 3771 3771 NT_STATUS_OK
ReadX 13667 30026 2048 2048 NT_STATUS_OK
ReadX 13667 32074 1024 1024 NT_STATUS_OK
ReadX 13667 33098 6652 6652 NT_STATUS_OK
ReadX 13667 39750 16384 16384 NT_STATUS_OK
ReadX 13667 56134 10496 10496 NT_STATUS_OK
ReadX 13667 66630 1784 1784 NT_STATUS_OK
ReadX 13667 68414 90 90 NT_STATUS_OK
ReadX 13667 68504 273 273 NT_STATUS_OK
ReadX 13667 68777 1600 1600 NT_STATUS_OK
ReadX 13667 70377 640 640 NT_STATUS_OK
ReadX 13667 71017 1280 1280 NT_STATUS_OK
ReadX 13667 72297 8464 8464 NT_STATUS_OK
ReadX 13667 80761 158 158 NT_STATUS_OK
ReadX 13667 80919 912 912 NT_STATUS_OK
ReadX 13667 81831 1980 1980 NT_STATUS_OK
ReadX 13667 83811 2256 2256 NT_STATUS_OK
ReadX 13667 86067 400 400 NT_STATUS_OK
ReadX 13667 86467 252 252 NT_STATUS_OK
ReadX 13667 86719 42 42 NT_STATUS_OK
ReadX 13667 86761 725 725 NT_STATUS_OK
ReadX 13667 2009 512 512 NT_STATUS_OK
ReadX 13667 3895 9 9 NT_STATUS_OK
ReadX 13667 3781 46 46 NT_STATUS_OK
ReadX 13667 4059 92 92 NT_STATUS_OK
ReadX 13667 3781 92 92 NT_STATUS_OK
ReadX 13667 3986 184 184 NT_STATUS_OK
ReadX 13667 3987 16384 16384 NT_STATUS_OK
ReadX 13667 3902 16384 16384 NT_STATUS_OK
ReadX 13667 3781 10240 10240 NT_STATUS_OK
ReadX 13667 3821 16384 16384 NT_STATUS_OK
ReadX 13667 3891 935 935 NT_STATUS_OK
ReadX 13667 4060 10240 10240 NT_STATUS_OK
ReadX 13667 4059 184 184 NT_STATUS_OK
ReadX 13667 256 184 184 NT_STATUS_OK
ReadX 13667 256 1026 1026 NT_STATUS_OK
ReadX 13667 3901 326 326 NT_STATUS_OK
ReadX 13667 3899 652 652 NT_STATUS_OK
ReadX 13667 256 2 2 NT_STATUS_OK
ReadX 13667 258 4948 4948 NT_STATUS_OK
Close 13667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13685 NT_STATUS_OK
WriteX 13685 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13685 258 NT_STATUS_OK
WriteX 13685 0 65536 65536 NT_STATUS_OK
WriteX 13685 65536 65536 65536 NT_STATUS_OK
WriteX 13685 131072 65536 65536 NT_STATUS_OK
WriteX 13685 196608 65536 65536 NT_STATUS_OK
WriteX 13685 262144 65536 65536 NT_STATUS_OK
WriteX 13685 327680 65536 65536 NT_STATUS_OK
WriteX 13685 393216 65536 65536 NT_STATUS_OK
WriteX 13685 458752 65536 65536 NT_STATUS_OK
WriteX 13685 524288 65536 65536 NT_STATUS_OK
WriteX 13685 589824 35257 35257 NT_STATUS_OK
Close 13685 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13687 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13690 NT_STATUS_OK
WriteX 13690 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 258 NT_STATUS_OK
WriteX 13690 0 65536 65536 NT_STATUS_OK
WriteX 13690 65536 65536 65536 NT_STATUS_OK
WriteX 13690 131072 65536 65536 NT_STATUS_OK
WriteX 13690 196608 65536 65536 NT_STATUS_OK
WriteX 13690 262144 65536 65536 NT_STATUS_OK
WriteX 13690 327680 65536 65536 NT_STATUS_OK
WriteX 13690 393216 65536 65536 NT_STATUS_OK
WriteX 13690 458752 65536 65536 NT_STATUS_OK
WriteX 13690 524288 65536 65536 NT_STATUS_OK
WriteX 13690 589824 57598 57598 NT_STATUS_OK
Close 13690 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13692 NT_STATUS_OK
WriteX 13692 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13692 258 NT_STATUS_OK
WriteX 13692 0 12543 12543 NT_STATUS_OK
Flush 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
Close 13676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13694 NT_STATUS_OK
Close 13694 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13696 NT_STATUS_OK
ReadX 13696 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13698 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13698 1005 NT_STATUS_OK
ReadX 13698 1938 24 24 NT_STATUS_OK
ReadX 13698 1920 276 276 NT_STATUS_OK
ReadX 13698 1918 14 14 NT_STATUS_OK
ReadX 13698 1918 7 7 NT_STATUS_OK
ReadX 13698 1919 12 12 NT_STATUS_OK
ReadX 13698 1919 8 8 NT_STATUS_OK
ReadX 13698 1917 15 15 NT_STATUS_OK
ReadX 13698 0 16 16 NT_STATUS_OK
ReadX 13698 16 2048 2048 NT_STATUS_OK
ReadX 13698 2064 2048 2048 NT_STATUS_OK
ReadX 13698 257 2048 2048 NT_STATUS_OK
ReadX 13698 385 2048 2048 NT_STATUS_OK
ReadX 13698 513 2048 2048 NT_STATUS_OK
ReadX 13698 641 2048 2048 NT_STATUS_OK
ReadX 13698 769 2048 2048 NT_STATUS_OK
ReadX 13698 897 2048 2048 NT_STATUS_OK
ReadX 13698 1025 2048 2048 NT_STATUS_OK
ReadX 13698 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13703 NT_STATUS_OK
WriteX 13703 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13703 258 NT_STATUS_OK
WriteX 13703 0 11588 11588 NT_STATUS_OK
Flush 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13704 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
Close 13698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13708 NT_STATUS_OK
WriteX 13708 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13708 258 NT_STATUS_OK
WriteX 13708 0 11615 11615 NT_STATUS_OK
Flush 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13710 NT_STATUS_OK
Close 13710 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13712 NT_STATUS_OK
ReadX 13712 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13714 NT_STATUS_OK
Close 13714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13717 NT_STATUS_OK
WriteX 13717 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13717 258 NT_STATUS_OK
WriteX 13717 0 65536 65536 NT_STATUS_OK
WriteX 13717 65536 16050 16050 NT_STATUS_OK
Close 13717 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13697 1939 64 64 NT_STATUS_OK
ReadX 13697 128 248 248 NT_STATUS_OK
ReadX 13697 128 568 568 NT_STATUS_OK
ReadX 13697 3872 1536 1536 NT_STATUS_OK
ReadX 13697 3456 2560 2560 NT_STATUS_OK
ReadX 13697 3136 512 512 NT_STATUS_OK
ReadX 13697 2880 4096 4096 NT_STATUS_OK
ReadX 13697 3264 3072 3072 NT_STATUS_OK
ReadX 13697 320 4096 4096 NT_STATUS_OK
ReadX 13697 1024 4096 4096 NT_STATUS_OK
ReadX 13697 3616 4096 4096 NT_STATUS_OK
ReadX 13697 1939 64 64 NT_STATUS_OK
ReadX 13697 128 248 248 NT_STATUS_OK
ReadX 13697 128 608 608 NT_STATUS_OK
ReadX 13697 2858 1024 1024 NT_STATUS_OK
ReadX 13697 2810 4096 4096 NT_STATUS_OK
ReadX 13697 2826 4096 4096 NT_STATUS_OK
ReadX 13697 2580 2048 2048 NT_STATUS_OK
ReadX 13697 2800 2560 2560 NT_STATUS_OK
ReadX 13697 2100 4096 4096 NT_STATUS_OK
ReadX 13697 2084 4096 4096 NT_STATUS_OK
ReadX 13697 868 4096 4096 NT_STATUS_OK
ReadX 13697 2324 4096 4096 NT_STATUS_OK
ReadX 13697 884 4096 4096 NT_STATUS_OK
ReadX 13697 2604 1024 1024 NT_STATUS_OK
ReadX 13697 580 4096 4096 NT_STATUS_OK
ReadX 13697 596 4096 4096 NT_STATUS_OK
ReadX 13697 2752 4096 4096 NT_STATUS_OK
ReadX 13697 2842 1024 1024 NT_STATUS_OK
ReadX 13697 660 4096 4096 NT_STATUS_OK
ReadX 13697 2720 4096 4096 NT_STATUS_OK
ReadX 13697 2736 4096 4096 NT_STATUS_OK
ReadX 13697 628 4096 4096 NT_STATUS_OK
ReadX 13697 2704 4096 4096 NT_STATUS_OK
ReadX 13697 1556 4096 4096 NT_STATUS_OK
ReadX 13697 576 4096 4096 NT_STATUS_OK
ReadX 13697 3168 1536 1536 NT_STATUS_OK
ReadX 13697 832 4096 4096 NT_STATUS_OK
ReadX 13697 1088 4096 4096 NT_STATUS_OK
ReadX 13697 1344 4096 4096 NT_STATUS_OK
ReadX 13697 1600 4096 4096 NT_STATUS_OK
ReadX 13697 1856 4096 4096 NT_STATUS_OK
ReadX 13697 2112 4096 4096 NT_STATUS_OK
ReadX 13697 1892 4096 4096 NT_STATUS_OK
ReadX 13697 820 4096 4096 NT_STATUS_OK
ReadX 13697 788 4096 4096 NT_STATUS_OK
ReadX 13697 1604 4096 4096 NT_STATUS_OK
ReadX 13697 3648 4096 4096 NT_STATUS_OK
ReadX 13697 2608 4096 4096 NT_STATUS_OK
ReadX 13697 548 4096 4096 NT_STATUS_OK
ReadX 13697 740 4096 4096 NT_STATUS_OK
ReadX 13697 1344 4096 4096 NT_STATUS_OK
ReadX 13697 3392 4096 4096 NT_STATUS_OK
ReadX 13697 3904 4096 4096 NT_STATUS_OK
ReadX 13697 644 4096 4096 NT_STATUS_OK
ReadX 13697 676 4096 4096 NT_STATUS_OK
ReadX 13697 2688 4096 4096 NT_STATUS_OK
ReadX 13697 320 4096 4096 NT_STATUS_OK
ReadX 13697 900 4096 4096 NT_STATUS_OK
ReadX 13697 1908 4096 4096 NT_STATUS_OK
ReadX 13697 852 4096 4096 NT_STATUS_OK
ReadX 13697 724 4096 4096 NT_STATUS_OK
ReadX 13697 2292 4096 4096 NT_STATUS_OK
ReadX 13697 612 4096 4096 NT_STATUS_OK
ReadX 13697 388 4096 4096 NT_STATUS_OK
ReadX 13697 2368 4096 4096 NT_STATUS_OK
ReadX 13697 2624 4096 4096 NT_STATUS_OK
ReadX 13697 500 4096 4096 NT_STATUS_OK
ReadX 13697 356 4096 4096 NT_STATUS_OK
ReadX 13697 1024 4096 4096 NT_STATUS_OK
ReadX 13697 576 4096 4096 NT_STATUS_OK
ReadX 13697 340 4096 4096 NT_STATUS_OK
ReadX 13697 420 4096 4096 NT_STATUS_OK
ReadX 13697 1600 4096 4096 NT_STATUS_OK
ReadX 13697 404 4096 4096 NT_STATUS_OK
ReadX 13697 1428 4096 4096 NT_STATUS_OK
ReadX 13697 2656 4096 4096 NT_STATUS_OK
ReadX 13697 2624 4096 4096 NT_STATUS_OK
ReadX 13697 452 4096 4096 NT_STATUS_OK
ReadX 13697 692 4096 4096 NT_STATUS_OK
ReadX 13697 564 4096 4096 NT_STATUS_OK
ReadX 13697 372 4096 4096 NT_STATUS_OK
ReadX 13697 468 4096 4096 NT_STATUS_OK
ReadX 13697 484 4096 4096 NT_STATUS_OK
ReadX 13697 1088 4096 4096 NT_STATUS_OK
ReadX 13697 1924 4096 4096 NT_STATUS_OK
ReadX 13697 2768 4096 4096 NT_STATUS_OK
ReadX 13697 832 4096 4096 NT_STATUS_OK
ReadX 13697 836 4096 4096 NT_STATUS_OK
ReadX 13697 1856 4096 4096 NT_STATUS_OK
ReadX 13697 2640 4096 4096 NT_STATUS_OK
ReadX 13697 436 4096 4096 NT_STATUS_OK
ReadX 13697 1828 4096 4096 NT_STATUS_OK
ReadX 13697 804 4096 4096 NT_STATUS_OK
ReadX 13697 1860 4096 4096 NT_STATUS_OK
ReadX 13697 1812 4096 4096 NT_STATUS_OK
ReadX 13697 756 4096 4096 NT_STATUS_OK
ReadX 13697 1636 4096 4096 NT_STATUS_OK
ReadX 13697 772 4096 4096 NT_STATUS_OK
ReadX 13697 2036 4096 4096 NT_STATUS_OK
ReadX 13697 1220 4096 4096 NT_STATUS_OK
ReadX 13697 1652 4096 4096 NT_STATUS_OK
ReadX 13697 2588 4096 4096 NT_STATUS_OK
ReadX 13697 916 4096 4096 NT_STATUS_OK
ReadX 13697 260 4096 4096 NT_STATUS_OK
ReadX 13697 932 4096 4096 NT_STATUS_OK
ReadX 13697 2624 4096 4096 NT_STATUS_OK
ReadX 13697 308 4096 4096 NT_STATUS_OK
ReadX 13697 292 4096 4096 NT_STATUS_OK
ReadX 13697 1140 4096 4096 NT_STATUS_OK
ReadX 13697 276 4096 4096 NT_STATUS_OK
ReadX 13697 2020 4096 4096 NT_STATUS_OK
ReadX 13697 2880 4096 4096 NT_STATUS_OK
ReadX 13697 516 4096 4096 NT_STATUS_OK
ReadX 13697 1844 4096 4096 NT_STATUS_OK
ReadX 13697 1124 4096 4096 NT_STATUS_OK
ReadX 13697 3136 4096 4096 NT_STATUS_OK
ReadX 13697 324 4096 4096 NT_STATUS_OK
ReadX 13697 1156 4096 4096 NT_STATUS_OK
ReadX 13697 1172 4096 4096 NT_STATUS_OK
ReadX 13697 2112 4096 4096 NT_STATUS_OK
ReadX 13697 2368 4096 4096 NT_STATUS_OK
ReadX 13697 964 4096 4096 NT_STATUS_OK
ReadX 13697 980 4096 4096 NT_STATUS_OK
ReadX 13697 1012 4096 4096 NT_STATUS_OK
ReadX 13697 532 4096 4096 NT_STATUS_OK
ReadX 13697 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13697 1620 4096 4096 NT_STATUS_OK
ReadX 13697 1604 4096 4096 NT_STATUS_OK
ReadX 13697 2116 4096 4096 NT_STATUS_OK
ReadX 13697 2132 4096 4096 NT_STATUS_OK
ReadX 13697 2148 4096 4096 NT_STATUS_OK
ReadX 13697 2276 4096 4096 NT_STATUS_OK
ReadX 13697 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13719 NT_STATUS_OK
Close 13719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13722 NT_STATUS_OK
QUERY_FILE_INFORMATION 13677 1004 NT_STATUS_OK
Close 13677 NT_STATUS_OK
WriteX 13722 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13722 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13679 1004 NT_STATUS_OK
Close 13679 NT_STATUS_OK
WriteX 13722 0 65536 65536 NT_STATUS_OK
WriteX 13722 65536 64850 64850 NT_STATUS_OK
Close 13722 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13724 NT_STATUS_OK
WriteX 13724 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13724 258 NT_STATUS_OK
ReadX 13697 2068 4096 4096 NT_STATUS_OK
ReadX 13697 1588 4096 4096 NT_STATUS_OK
ReadX 13697 1572 4096 4096 NT_STATUS_OK
WriteX 13724 0 18630 18630 NT_STATUS_OK
Flush 13724 NT_STATUS_OK
Close 13724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13726 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13697 612 4096 4096 NT_STATUS_OK
ReadX 13697 564 4096 4096 NT_STATUS_OK
ReadX 13697 1876 4096 4096 NT_STATUS_OK
ReadX 13697 628 4096 4096 NT_STATUS_OK
ReadX 13697 740 4096 4096 NT_STATUS_OK
ReadX 13697 724 4096 4096 NT_STATUS_OK
ReadX 13697 644 4096 4096 NT_STATUS_OK
ReadX 13697 2324 4096 4096 NT_STATUS_OK
ReadX 13697 660 4096 4096 NT_STATUS_OK
ReadX 13697 852 4096 4096 NT_STATUS_OK
ReadX 13697 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13697 2368 4096 4096 NT_STATUS_OK
ReadX 13697 1024 4096 4096 NT_STATUS_OK
ReadX 13697 320 4096 4096 NT_STATUS_OK
ReadX 13697 580 4096 4096 NT_STATUS_OK
ReadX 13697 3136 512 512 NT_STATUS_OK
ReadX 13697 2880 4096 4096 NT_STATUS_OK
Close 13697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13729 NT_STATUS_OK
ReadX 13729 61440 4096 4096 NT_STATUS_OK
ReadX 13729 126976 4096 4096 NT_STATUS_OK
WriteX 13729 0 65536 65536 NT_STATUS_OK
WriteX 13729 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 61440 4096 4096 NT_STATUS_OK
ReadX 13730 126976 4096 4096 NT_STATUS_OK
ReadX 13730 192512 4096 4096 NT_STATUS_OK
ReadX 13730 258048 4096 4096 NT_STATUS_OK
WriteX 13730 0 65536 65536 NT_STATUS_OK
WriteX 13730 65536 65536 65536 NT_STATUS_OK
WriteX 13730 131072 65536 65536 NT_STATUS_OK
WriteX 13730 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 61440 4096 4096 NT_STATUS_OK
ReadX 13731 126976 4096 4096 NT_STATUS_OK
ReadX 13731 192512 4096 4096 NT_STATUS_OK
ReadX 13731 258048 4096 4096 NT_STATUS_OK
ReadX 13731 323584 4096 4096 NT_STATUS_OK
ReadX 13731 389120 4096 4096 NT_STATUS_OK
ReadX 13731 454656 4096 4096 NT_STATUS_OK
ReadX 13731 520192 4096 4096 NT_STATUS_OK
WriteX 13731 0 65536 65536 NT_STATUS_OK
WriteX 13731 65536 65536 65536 NT_STATUS_OK
WriteX 13731 131072 65536 65536 NT_STATUS_OK
WriteX 13731 196608 65536 65536 NT_STATUS_OK
WriteX 13731 262144 65536 65536 NT_STATUS_OK
WriteX 13731 327680 65536 65536 NT_STATUS_OK
WriteX 13731 393216 65536 65536 NT_STATUS_OK
WriteX 13731 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13733 NT_STATUS_OK
Close 13733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13734 NT_STATUS_OK
WriteX 13734 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13734 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13732 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13732 0 8192 8192 NT_STATUS_OK
Flush 13732 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13736 NT_STATUS_OK
Close 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Close 13696 NT_STATUS_OK
Close 13729 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13739 NT_STATUS_OK
WriteX 13739 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13739 258 NT_STATUS_OK
WriteX 13739 0 62591 62591 NT_STATUS_OK
Close 13739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13744 NT_STATUS_OK
WriteX 13744 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13744 258 NT_STATUS_OK
WriteX 13744 0 10845 10845 NT_STATUS_OK
Close 13744 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13746 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13749 NT_STATUS_OK
WriteX 13749 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13749 258 NT_STATUS_OK
WriteX 13749 0 30118 30118 NT_STATUS_OK
Close 13749 NT_STATUS_OK
WriteX 13732 0 4096 4096 NT_STATUS_OK
WriteX 13734 0 64 64 NT_STATUS_OK
Close 13734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 61440 61440 NT_STATUS_OK
ReadX 13751 61440 4096 4096 NT_STATUS_OK
ReadX 13751 65536 61440 61440 NT_STATUS_OK
ReadX 13751 126976 4096 4096 NT_STATUS_OK
ReadX 13751 131072 61440 61440 NT_STATUS_OK
ReadX 13751 192512 4096 4096 NT_STATUS_OK
ReadX 13751 196608 61440 61440 NT_STATUS_OK
ReadX 13751 258048 4096 4096 NT_STATUS_OK
ReadX 13751 262144 61440 61440 NT_STATUS_OK
ReadX 13751 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 61440 61440 NT_STATUS_OK
ReadX 13752 61440 4096 4096 NT_STATUS_OK
ReadX 13752 65536 61440 61440 NT_STATUS_OK
ReadX 13752 126976 4096 4096 NT_STATUS_OK
ReadX 13752 131072 61440 61440 NT_STATUS_OK
ReadX 13752 192512 4096 4096 NT_STATUS_OK
ReadX 13752 196608 61440 61440 NT_STATUS_OK
ReadX 13752 258048 4096 4096 NT_STATUS_OK
ReadX 13752 262144 61440 61440 NT_STATUS_OK
ReadX 13752 323584 4096 4096 NT_STATUS_OK
ReadX 13752 327680 61440 61440 NT_STATUS_OK
ReadX 13752 389120 4096 4096 NT_STATUS_OK
ReadX 13752 393216 61440 61440 NT_STATUS_OK
ReadX 13752 454656 4096 4096 NT_STATUS_OK
ReadX 13752 458752 61440 61440 NT_STATUS_OK
ReadX 13752 520192 4096 4096 NT_STATUS_OK
ReadX 13752 524288 61440 61440 NT_STATUS_OK
ReadX 13752 585728 4096 4096 NT_STATUS_OK
ReadX 13752 589824 61440 61440 NT_STATUS_OK
ReadX 13752 651264 4096 4096 NT_STATUS_OK
ReadX 13752 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 61440 61440 NT_STATUS_OK
ReadX 13753 61440 4096 4096 NT_STATUS_OK
ReadX 13753 65536 61440 61440 NT_STATUS_OK
ReadX 13753 126976 4096 4096 NT_STATUS_OK
ReadX 13753 131072 61440 61440 NT_STATUS_OK
ReadX 13753 192512 4096 4096 NT_STATUS_OK
ReadX 13753 196608 61440 61440 NT_STATUS_OK
ReadX 13753 258048 4096 4096 NT_STATUS_OK
ReadX 13753 262144 61440 61440 NT_STATUS_OK
ReadX 13753 323584 4096 4096 NT_STATUS_OK
ReadX 13753 327680 61440 61440 NT_STATUS_OK
ReadX 13753 389120 4096 4096 NT_STATUS_OK
ReadX 13753 393216 61440 61440 NT_STATUS_OK
ReadX 13753 454656 4096 4096 NT_STATUS_OK
ReadX 13753 458752 61440 61440 NT_STATUS_OK
ReadX 13753 520192 4096 4096 NT_STATUS_OK
ReadX 13753 524288 61440 61440 NT_STATUS_OK
ReadX 13753 585728 4096 4096 NT_STATUS_OK
ReadX 13753 589824 61440 61440 NT_STATUS_OK
ReadX 13753 651264 4096 4096 NT_STATUS_OK
ReadX 13753 655360 61440 61440 NT_STATUS_OK
ReadX 13753 716800 4096 4096 NT_STATUS_OK
ReadX 13753 720896 61440 61440 NT_STATUS_OK
ReadX 13753 782336 4096 4096 NT_STATUS_OK
ReadX 13753 786432 61440 61440 NT_STATUS_OK
ReadX 13753 847872 4096 4096 NT_STATUS_OK
ReadX 13753 851968 61440 61440 NT_STATUS_OK
ReadX 13753 913408 4096 4096 NT_STATUS_OK
ReadX 13753 917504 61440 61440 NT_STATUS_OK
ReadX 13753 978944 4096 4096 NT_STATUS_OK
ReadX 13753 983040 61440 61440 NT_STATUS_OK
ReadX 13753 1044480 4096 4096 NT_STATUS_OK
ReadX 13753 1048576 61440 61440 NT_STATUS_OK
ReadX 13753 1110016 4096 4096 NT_STATUS_OK
ReadX 13753 1114112 61440 61440 NT_STATUS_OK
ReadX 13753 1175552 4096 4096 NT_STATUS_OK
ReadX 13753 1179648 61440 61440 NT_STATUS_OK
ReadX 13753 1241088 4096 4096 NT_STATUS_OK
ReadX 13753 1245184 61440 61440 NT_STATUS_OK
ReadX 13753 1306624 4096 4096 NT_STATUS_OK
ReadX 13753 1310720 61440 61440 NT_STATUS_OK
ReadX 13753 1372160 4096 4096 NT_STATUS_OK
ReadX 13753 1376256 61440 61440 NT_STATUS_OK
ReadX 13753 1437696 4096 4096 NT_STATUS_OK
ReadX 13753 1441792 61440 61440 NT_STATUS_OK
ReadX 13753 1503232 4096 4096 NT_STATUS_OK
ReadX 13753 1507328 61440 61440 NT_STATUS_OK
ReadX 13753 1568768 4096 4096 NT_STATUS_OK
ReadX 13753 1572864 61440 61440 NT_STATUS_OK
ReadX 13753 1634304 4096 4096 NT_STATUS_OK
ReadX 13753 1638400 61440 61440 NT_STATUS_OK
ReadX 13753 1699840 4096 4096 NT_STATUS_OK
ReadX 13753 1703936 61440 61440 NT_STATUS_OK
ReadX 13753 1765376 4096 4096 NT_STATUS_OK
ReadX 13753 1769472 61440 61440 NT_STATUS_OK
ReadX 13753 1830912 4096 4096 NT_STATUS_OK
ReadX 13753 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13751 NT_STATUS_OK
Close 13752 NT_STATUS_OK
Close 13753 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13757 NT_STATUS_OK
ReadX 13757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
ReadX 13758 4096 4096 4096 NT_STATUS_OK
ReadX 13758 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13759 NT_STATUS_OK
Close 13759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13756 NT_STATUS_OK
Close 13757 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13762 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13762 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Close 13762 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13765 NT_STATUS_OK
ReadX 13765 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 8192 8192 NT_STATUS_OK
ReadX 13766 8192 8192 8192 NT_STATUS_OK
ReadX 13766 16384 8192 8192 NT_STATUS_OK
ReadX 13766 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13766 NT_STATUS_OK
Close 13765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13771 NT_STATUS_OK
WriteX 13771 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13771 258 NT_STATUS_OK
WriteX 13771 0 10438 10438 NT_STATUS_OK
Close 13771 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13774 NT_STATUS_OK
Close 13774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13775 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13776 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13777 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13780 NT_STATUS_OK
ReadX 13780 0 4096 4096 NT_STATUS_OK
ReadX 13780 4096 4096 4096 NT_STATUS_OK
ReadX 13780 8192 4096 4096 NT_STATUS_OK
ReadX 13780 12288 8192 8192 NT_STATUS_OK
ReadX 13780 20480 8192 8192 NT_STATUS_OK
ReadX 13780 28672 8192 8192 NT_STATUS_OK
ReadX 13780 36864 8192 8192 NT_STATUS_OK
ReadX 13780 45056 8192 8192 NT_STATUS_OK
ReadX 13780 53248 8192 8192 NT_STATUS_OK
ReadX 13780 61440 8192 8192 NT_STATUS_OK
ReadX 13780 69632 8192 8192 NT_STATUS_OK
ReadX 13780 77824 8192 8192 NT_STATUS_OK
ReadX 13780 86016 8192 8192 NT_STATUS_OK
ReadX 13780 94208 8192 8192 NT_STATUS_OK
ReadX 13780 102400 8192 8192 NT_STATUS_OK
ReadX 13780 110592 8192 8192 NT_STATUS_OK
ReadX 13780 118784 8192 8192 NT_STATUS_OK
ReadX 13780 126976 8192 8192 NT_STATUS_OK
ReadX 13780 135168 8192 8192 NT_STATUS_OK
ReadX 13780 143360 8192 8192 NT_STATUS_OK
ReadX 13780 151552 8192 8192 NT_STATUS_OK
ReadX 13780 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Close 13775 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13782 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13785 NT_STATUS_OK
WriteX 13785 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 258 NT_STATUS_OK
WriteX 13785 0 28489 28489 NT_STATUS_OK
Close 13785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13788 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 8192 8192 NT_STATUS_OK
ReadX 13792 8192 8192 8192 NT_STATUS_OK
ReadX 13792 16384 8192 8192 NT_STATUS_OK
ReadX 13792 24576 8192 8192 NT_STATUS_OK
ReadX 13792 32768 16384 16384 NT_STATUS_OK
ReadX 13792 49152 8192 8192 NT_STATUS_OK
ReadX 13792 57344 8192 8192 NT_STATUS_OK
ReadX 13792 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13794 NT_STATUS_OK
Close 13794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Close 13791 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13797 NT_STATUS_OK
WriteX 13797 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13797 258 NT_STATUS_OK
WriteX 13797 0 29253 29253 NT_STATUS_OK
Close 13797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13798 NT_STATUS_OK
Close 13798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13799 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13804 NT_STATUS_OK
WriteX 13804 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13804 258 NT_STATUS_OK
WriteX 13804 0 30183 30183 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13807 NT_STATUS_OK
WriteX 13807 0 510 510 NT_STATUS_OK
WriteX 13807 510 512 512 NT_STATUS_OK
WriteX 13807 1022 510 510 NT_STATUS_OK
WriteX 13807 1532 510 510 NT_STATUS_OK
WriteX 13807 2042 168 168 NT_STATUS_OK
Close 13807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13808 NT_STATUS_OK
Close 13808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
WriteX 13810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 61440 4096 4096 NT_STATUS_OK
ReadX 13811 126976 4096 4096 NT_STATUS_OK
WriteX 13811 0 65536 65536 NT_STATUS_OK
WriteX 13811 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 61440 4096 4096 NT_STATUS_OK
ReadX 13812 126976 4096 4096 NT_STATUS_OK
ReadX 13812 192512 4096 4096 NT_STATUS_OK
ReadX 13812 258048 4096 4096 NT_STATUS_OK
WriteX 13812 0 65536 65536 NT_STATUS_OK
WriteX 13812 65536 65536 65536 NT_STATUS_OK
WriteX 13812 131072 65536 65536 NT_STATUS_OK
WriteX 13812 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13813 NT_STATUS_OK
ReadX 13813 61440 4096 4096 NT_STATUS_OK
ReadX 13813 126976 4096 4096 NT_STATUS_OK
ReadX 13813 192512 4096 4096 NT_STATUS_OK
ReadX 13813 258048 4096 4096 NT_STATUS_OK
ReadX 13813 323584 4096 4096 NT_STATUS_OK
ReadX 13813 389120 4096 4096 NT_STATUS_OK
ReadX 13813 454656 4096 4096 NT_STATUS_OK
ReadX 13813 520192 4096 4096 NT_STATUS_OK
WriteX 13813 0 65536 65536 NT_STATUS_OK
WriteX 13813 65536 65536 65536 NT_STATUS_OK
WriteX 13813 131072 65536 65536 NT_STATUS_OK
WriteX 13813 196608 65536 65536 NT_STATUS_OK
WriteX 13813 262144 65536 65536 NT_STATUS_OK
WriteX 13813 327680 65536 65536 NT_STATUS_OK
WriteX 13813 393216 65536 65536 NT_STATUS_OK
WriteX 13813 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13814 NT_STATUS_OK
Close 13814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Close 13811 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Close 13813 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13816 NT_STATUS_OK
Close 13816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13820 NT_STATUS_OK
Close 13820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13825 NT_STATUS_OK
Close 13825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13829 NT_STATUS_OK
Close 13829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13832 NT_STATUS_OK
Close 13832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13834 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13838 NT_STATUS_OK
Close 13838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13848 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13853 NT_STATUS_OK
Close 13853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13858 NT_STATUS_OK
Close 13858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13863 NT_STATUS_OK
Close 13863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13868 NT_STATUS_OK
Close 13868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13876 NT_STATUS_OK
Close 13876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13882 NT_STATUS_OK
WriteX 13882 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13882 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13882 0 65536 65536 NT_STATUS_OK
WriteX 13882 65536 65536 65536 NT_STATUS_OK
WriteX 13882 131072 65536 65536 NT_STATUS_OK
WriteX 13882 196608 65536 65536 NT_STATUS_OK
WriteX 13882 262144 26634 26634 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13887 NT_STATUS_OK
Close 13887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
ReadX 13890 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13895 NT_STATUS_OK
Close 13895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13900 NT_STATUS_OK
Close 13900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13904 NT_STATUS_OK
Close 13904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13907 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13909 NT_STATUS_OK
Close 13909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13913 NT_STATUS_OK
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13923 NT_STATUS_OK
Close 13923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13938 NT_STATUS_OK
Close 13938 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13942 NT_STATUS_OK
Close 13942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13952 NT_STATUS_OK
Close 13952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13955 NT_STATUS_OK
Close 13955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13957 NT_STATUS_OK
Close 13957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13967 NT_STATUS_OK
Close 13967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13969 NT_STATUS_OK
ReadX 13969 0 4096 4096 NT_STATUS_OK
Close 13969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
Close 13970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13971 NT_STATUS_OK
ReadX 13971 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13981 NT_STATUS_OK
Close 13981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
Close 13983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
Close 13984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13971 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14014 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14014 0 4096 4096 NT_STATUS_OK
Close 14014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 4096 4096 NT_STATUS_OK
ReadX 14016 4096 4096 4096 NT_STATUS_OK
ReadX 14016 8192 4096 4096 NT_STATUS_OK
ReadX 14016 12288 4096 4096 NT_STATUS_OK
ReadX 14016 16384 4096 4096 NT_STATUS_OK
ReadX 14016 20480 4096 4096 NT_STATUS_OK
ReadX 14016 24576 4096 4096 NT_STATUS_OK
ReadX 14016 28672 4096 4096 NT_STATUS_OK
ReadX 14016 32768 4096 4096 NT_STATUS_OK
ReadX 14016 36864 4096 4096 NT_STATUS_OK
ReadX 14016 40960 4096 4096 NT_STATUS_OK
ReadX 14016 45056 4096 4096 NT_STATUS_OK
ReadX 14016 49152 4096 4096 NT_STATUS_OK
ReadX 14016 53248 4096 4096 NT_STATUS_OK
ReadX 14016 57344 4096 4096 NT_STATUS_OK
ReadX 14016 61440 4096 4096 NT_STATUS_OK
ReadX 14016 65536 4096 4096 NT_STATUS_OK
ReadX 14016 69632 4096 4096 NT_STATUS_OK
ReadX 14016 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14016 1004 NT_STATUS_OK
WriteX 14016 0 4096 4096 NT_STATUS_OK
Close 14016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14017 NT_STATUS_OK
SET_FILE_INFORMATION 14017 1004 NT_STATUS_OK
Close 14017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 14018 NT_STATUS_OK
ReadX 14018 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14019 NT_STATUS_OK
Close 14019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14022 NT_STATUS_OK
WriteX 14022 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14022 258 NT_STATUS_OK
WriteX 14022 0 65536 65536 NT_STATUS_OK
WriteX 14022 65536 19979 19979 NT_STATUS_OK
Close 14022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 4096 4096 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
QUERY_FILE_INFORMATION 14023 1004 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
SET_FILE_INFORMATION 14023 1004 NT_STATUS_OK
WriteX 14023 0 4096 4096 NT_STATUS_OK
Flush 14023 NT_STATUS_OK
Close 14023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14024 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 0 4096 4096 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 0 4096 4096 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14028 1004 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 14029 NT_STATUS_OK
Close 14029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 14025 NT_STATUS_OK
Close 14028 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14031 NT_STATUS_OK
Close 14031 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14034 NT_STATUS_OK
WriteX 14034 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14034 258 NT_STATUS_OK
WriteX 14034 0 65536 65536 NT_STATUS_OK
WriteX 14034 65536 17654 17654 NT_STATUS_OK
Close 14034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14035 NT_STATUS_OK
ReadX 14035 0 4096 4096 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
QUERY_FILE_INFORMATION 14035 1004 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
SET_FILE_INFORMATION 14035 1004 NT_STATUS_OK
WriteX 14035 0 4096 4096 NT_STATUS_OK
Flush 14035 NT_STATUS_OK
Close 14035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14036 NT_STATUS_OK
SET_FILE_INFORMATION 14036 1004 NT_STATUS_OK
Close 14036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 14038 NT_STATUS_OK
Close 14038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
ReadX 14040 4096 4096 4096 NT_STATUS_OK
ReadX 14040 8192 4096 4096 NT_STATUS_OK
ReadX 14040 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 14040 16384 4096 4096 NT_STATUS_OK
ReadX 14040 20480 4096 4096 NT_STATUS_OK
ReadX 14040 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
Close 14042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14043 1004 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 14044 NT_STATUS_OK
Close 14044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14046 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14049 NT_STATUS_OK
WriteX 14049 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14049 258 NT_STATUS_OK
WriteX 14049 0 65536 65536 NT_STATUS_OK
WriteX 14049 65536 19490 19490 NT_STATUS_OK
Close 14049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
QUERY_FILE_INFORMATION 14050 1004 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
SET_FILE_INFORMATION 14050 1004 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
Close 14050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14051 NT_STATUS_OK
SET_FILE_INFORMATION 14051 1004 NT_STATUS_OK
Close 14051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 14053 NT_STATUS_OK
Close 14053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14055 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14055 0 4096 4096 NT_STATUS_OK
Close 14055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14056 NT_STATUS_OK
ReadX 14056 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
ReadX 14057 4096 4096 4096 NT_STATUS_OK
ReadX 14057 8192 4096 4096 NT_STATUS_OK
ReadX 14057 12288 4096 4096 NT_STATUS_OK
ReadX 14057 16384 4096 4096 NT_STATUS_OK
ReadX 14057 20480 4096 4096 NT_STATUS_OK
ReadX 14057 24576 4096 4096 NT_STATUS_OK
ReadX 14057 28672 4096 4096 NT_STATUS_OK
ReadX 14057 32768 4096 4096 NT_STATUS_OK
ReadX 14057 36864 4096 4096 NT_STATUS_OK
ReadX 14057 40960 4096 4096 NT_STATUS_OK
ReadX 14057 45056 4096 4096 NT_STATUS_OK
ReadX 14057 49152 4096 4096 NT_STATUS_OK
ReadX 14057 53248 4096 4096 NT_STATUS_OK
ReadX 14057 57344 4096 4096 NT_STATUS_OK
ReadX 14057 61440 4096 4096 NT_STATUS_OK
ReadX 14057 65536 4096 4096 NT_STATUS_OK
ReadX 14057 69632 4096 4096 NT_STATUS_OK
ReadX 14057 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14057 1004 NT_STATUS_OK
WriteX 14057 0 4096 4096 NT_STATUS_OK
Close 14057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14058 NT_STATUS_OK
SET_FILE_INFORMATION 14058 1004 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14060 NT_STATUS_OK
Close 14060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14063 NT_STATUS_OK
WriteX 14063 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14063 258 NT_STATUS_OK
WriteX 14063 0 65536 65536 NT_STATUS_OK
WriteX 14063 65536 8866 8866 NT_STATUS_OK
Close 14063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14064 NT_STATUS_OK
ReadX 14064 0 4096 4096 NT_STATUS_OK
WriteX 14064 0 4096 4096 NT_STATUS_OK
Flush 14064 NT_STATUS_OK
SET_FILE_INFORMATION 14064 1004 NT_STATUS_OK
WriteX 14064 0 4096 4096 NT_STATUS_OK
Flush 14064 NT_STATUS_OK
Close 14064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14068 1004 NT_STATUS_OK
WriteX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 14069 NT_STATUS_OK
Close 14069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Close 14059 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14071 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14074 NT_STATUS_OK
WriteX 14074 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14074 258 NT_STATUS_OK
WriteX 14074 0 65536 65536 NT_STATUS_OK
WriteX 14074 65536 9298 9298 NT_STATUS_OK
Close 14074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
WriteX 14075 0 4096 4096 NT_STATUS_OK
Flush 14075 NT_STATUS_OK
SET_FILE_INFORMATION 14075 1004 NT_STATUS_OK
WriteX 14075 0 4096 4096 NT_STATUS_OK
Flush 14075 NT_STATUS_OK
Close 14075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14076 NT_STATUS_OK
SET_FILE_INFORMATION 14076 1004 NT_STATUS_OK
Close 14076 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 14078 NT_STATUS_OK
Close 14078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14081 0 4096 4096 NT_STATUS_OK
Close 14081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14082 4096 4096 4096 NT_STATUS_OK
ReadX 14082 8192 4096 4096 NT_STATUS_OK
ReadX 14082 12288 4096 4096 NT_STATUS_OK
ReadX 14082 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14085 1004 NT_STATUS_OK
WriteX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 14086 NT_STATUS_OK
Close 14086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14088 NT_STATUS_OK
Close 14088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14091 NT_STATUS_OK
WriteX 14091 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14091 258 NT_STATUS_OK
WriteX 14091 0 65536 65536 NT_STATUS_OK
WriteX 14091 65536 11540 11540 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14092 NT_STATUS_OK
ReadX 14092 0 4096 4096 NT_STATUS_OK
WriteX 14092 0 4096 4096 NT_STATUS_OK
Flush 14092 NT_STATUS_OK
SET_FILE_INFORMATION 14092 1004 NT_STATUS_OK
WriteX 14092 0 4096 4096 NT_STATUS_OK
Flush 14092 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14093 NT_STATUS_OK
SET_FILE_INFORMATION 14093 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14094 NT_STATUS_OK
ReadX 14094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 14095 NT_STATUS_OK
Close 14095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9815 NT_STATUS_OK
ReadX 9815 61440 4096 4096 NT_STATUS_OK
ReadX 9815 126976 4096 4096 NT_STATUS_OK
WriteX 9815 0 65536 65536 NT_STATUS_OK
WriteX 9815 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9816 NT_STATUS_OK
ReadX 9816 61440 4096 4096 NT_STATUS_OK
ReadX 9816 126976 4096 4096 NT_STATUS_OK
ReadX 9816 192512 4096 4096 NT_STATUS_OK
ReadX 9816 258048 4096 4096 NT_STATUS_OK
WriteX 9816 0 65536 65536 NT_STATUS_OK
WriteX 9816 65536 65536 65536 NT_STATUS_OK
WriteX 9816 131072 65536 65536 NT_STATUS_OK
WriteX 9816 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9817 NT_STATUS_OK
ReadX 9817 61440 4096 4096 NT_STATUS_OK
ReadX 9817 126976 4096 4096 NT_STATUS_OK
ReadX 9817 192512 4096 4096 NT_STATUS_OK
ReadX 9817 258048 4096 4096 NT_STATUS_OK
ReadX 9817 323584 4096 4096 NT_STATUS_OK
ReadX 9817 389120 4096 4096 NT_STATUS_OK
ReadX 9817 454656 4096 4096 NT_STATUS_OK
ReadX 9817 520192 4096 4096 NT_STATUS_OK
WriteX 9817 0 65536 65536 NT_STATUS_OK
WriteX 9817 65536 65536 65536 NT_STATUS_OK
WriteX 9817 131072 65536 65536 NT_STATUS_OK
WriteX 9817 196608 65536 65536 NT_STATUS_OK
WriteX 9817 262144 65536 65536 NT_STATUS_OK
WriteX 9817 327680 65536 65536 NT_STATUS_OK
WriteX 9817 393216 65536 65536 NT_STATUS_OK
WriteX 9817 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 9818 NT_STATUS_OK
ReadX 9818 0 4096 4096 NT_STATUS_OK
ReadX 9818 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 9819 NT_STATUS_OK
WriteX 9819 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9819 258 NT_STATUS_OK
WriteX 9819 0 53 53 NT_STATUS_OK
Close 9819 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 9820 NT_STATUS_OK
Close 9820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14094 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Close 9816 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 9822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9818 8192 4096 4096 NT_STATUS_OK
ReadX 9818 12288 4096 4096 NT_STATUS_OK
WriteX 9822 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9822 258 NT_STATUS_OK
ReadX 9818 16384 4096 4096 NT_STATUS_OK
ReadX 9818 20480 4096 4096 NT_STATUS_OK
WriteX 9822 0 15360 15360 NT_STATUS_OK
Close 9822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 9823 NT_STATUS_OK
ReadX 9823 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9823 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9823 1004 NT_STATUS_OK
WriteX 9823 0 4096 4096 NT_STATUS_OK
Close 9823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 9824 NT_STATUS_OK
Close 9824 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9826 NT_STATUS_OK
ReadX 9826 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 9827 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 9826 4096 4096 4096 NT_STATUS_OK
ReadX 9826 8192 4096 4096 NT_STATUS_OK
ReadX 9826 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9829 NT_STATUS_OK
ReadX 9829 0 4096 4096 NT_STATUS_OK
ReadX 9829 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 9830 NT_STATUS_OK
ReadX 9830 0 4096 4096 NT_STATUS_OK
ReadX 9830 4096 4096 4096 NT_STATUS_OK
ReadX 9830 8192 4096 4096 NT_STATUS_OK
Close 9829 NT_STATUS_OK
Close 9830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 9831 NT_STATUS_OK
WriteX 9831 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9831 258 NT_STATUS_OK
WriteX 9831 0 15360 15360 NT_STATUS_OK
Close 9831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 9832 NT_STATUS_OK
ReadX 9832 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9832 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9832 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 9833 NT_STATUS_OK
Close 9833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9835 NT_STATUS_OK
ReadX 9835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 9836 NT_STATUS_OK
SET_FILE_INFORMATION 9836 1004 NT_STATUS_OK
Close 9836 NT_STATUS_OK
WriteX 9832 0 4096 4096 NT_STATUS_OK
Close 9832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 9837 NT_STATUS_OK
Close 9837 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 9839 NT_STATUS_OK
ReadX 9839 0 4096 4096 NT_STATUS_OK
ReadX 9839 4096 4096 4096 NT_STATUS_OK
ReadX 9839 8192 4096 4096 NT_STATUS_OK
ReadX 9839 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 9839 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9839 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 9840 NT_STATUS_OK
ReadX 9840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 9841 NT_STATUS_OK
WriteX 9841 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9841 258 NT_STATUS_OK
WriteX 9841 0 53 53 NT_STATUS_OK
Close 9841 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 9842 NT_STATUS_OK
Close 9842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9840 4096 4096 4096 NT_STATUS_OK
ReadX 9840 8192 4096 4096 NT_STATUS_OK
ReadX 9840 12288 4096 4096 NT_STATUS_OK
WriteX 9844 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9844 258 NT_STATUS_OK
WriteX 9844 0 12006 12006 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 9845 NT_STATUS_OK
ReadX 9845 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9845 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9845 1004 NT_STATUS_OK
WriteX 9845 0 4096 4096 NT_STATUS_OK
Close 9845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 9846 NT_STATUS_OK
Close 9846 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9848 NT_STATUS_OK
ReadX 9848 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 9849 NT_STATUS_OK
Close 9849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 9848 4096 4096 4096 NT_STATUS_OK
ReadX 9848 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 9851 NT_STATUS_OK
WriteX 9851 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9851 258 NT_STATUS_OK
WriteX 9851 0 11991 11991 NT_STATUS_OK
Close 9851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 9852 NT_STATUS_OK
ReadX 9852 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9852 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9852 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 9840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 9853 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 9856 NT_STATUS_OK
SET_FILE_INFORMATION 9856 1004 NT_STATUS_OK
Close 9856 NT_STATUS_OK
WriteX 9852 0 4096 4096 NT_STATUS_OK
Close 9852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 9857 NT_STATUS_OK
Close 9857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 9859 NT_STATUS_OK
ReadX 9859 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 9860 NT_STATUS_OK
Close 9860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 9859 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
ReadX 9859 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
WriteX 9859 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 9859 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9859 1004 NT_STATUS_OK
Close 9835 NT_STATUS_OK
WriteX 9839 0 19054 19054 NT_STATUS_OK
WriteX 9859 0 12288 12288 NT_STATUS_OK
Close 9855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 9862 NT_STATUS_OK
Close 9862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 9839 NT_STATUS_OK
Close 9859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 9864 NT_STATUS_OK
Close 9864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9866 NT_STATUS_OK
ReadX 9866 0 61440 61440 NT_STATUS_OK
ReadX 9866 61440 4096 4096 NT_STATUS_OK
ReadX 9866 65536 61440 61440 NT_STATUS_OK
ReadX 9866 126976 4096 4096 NT_STATUS_OK
ReadX 9866 131072 61440 61440 NT_STATUS_OK
ReadX 9866 192512 4096 4096 NT_STATUS_OK
ReadX 9866 196608 61440 61440 NT_STATUS_OK
ReadX 9866 258048 4096 4096 NT_STATUS_OK
ReadX 9866 262144 61440 61440 NT_STATUS_OK
ReadX 9866 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9867 NT_STATUS_OK
ReadX 9867 0 61440 61440 NT_STATUS_OK
ReadX 9867 61440 4096 4096 NT_STATUS_OK
ReadX 9867 65536 61440 61440 NT_STATUS_OK
ReadX 9867 126976 4096 4096 NT_STATUS_OK
ReadX 9867 131072 61440 61440 NT_STATUS_OK
ReadX 9867 192512 4096 4096 NT_STATUS_OK
ReadX 9867 196608 61440 61440 NT_STATUS_OK
ReadX 9867 258048 4096 4096 NT_STATUS_OK
ReadX 9867 262144 61440 61440 NT_STATUS_OK
ReadX 9867 323584 4096 4096 NT_STATUS_OK
ReadX 9867 327680 61440 61440 NT_STATUS_OK
ReadX 9867 389120 4096 4096 NT_STATUS_OK
ReadX 9867 393216 61440 61440 NT_STATUS_OK
ReadX 9867 454656 4096 4096 NT_STATUS_OK
ReadX 9867 458752 61440 61440 NT_STATUS_OK
ReadX 9867 520192 4096 4096 NT_STATUS_OK
ReadX 9867 524288 61440 61440 NT_STATUS_OK
ReadX 9867 585728 4096 4096 NT_STATUS_OK
ReadX 9867 589824 61440 61440 NT_STATUS_OK
ReadX 9867 651264 4096 4096 NT_STATUS_OK
ReadX 9867 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9868 NT_STATUS_OK
ReadX 9868 0 61440 61440 NT_STATUS_OK
ReadX 9868 61440 4096 4096 NT_STATUS_OK
ReadX 9868 65536 61440 61440 NT_STATUS_OK
ReadX 9868 126976 4096 4096 NT_STATUS_OK
ReadX 9868 131072 61440 61440 NT_STATUS_OK
ReadX 9868 192512 4096 4096 NT_STATUS_OK
ReadX 9868 196608 61440 61440 NT_STATUS_OK
ReadX 9868 258048 4096 4096 NT_STATUS_OK
ReadX 9868 262144 61440 61440 NT_STATUS_OK
ReadX 9868 323584 4096 4096 NT_STATUS_OK
ReadX 9868 327680 61440 61440 NT_STATUS_OK
ReadX 9868 389120 4096 4096 NT_STATUS_OK
ReadX 9868 393216 61440 61440 NT_STATUS_OK
ReadX 9868 454656 4096 4096 NT_STATUS_OK
ReadX 9868 458752 61440 61440 NT_STATUS_OK
ReadX 9868 520192 4096 4096 NT_STATUS_OK
ReadX 9868 524288 61440 61440 NT_STATUS_OK
ReadX 9868 585728 4096 4096 NT_STATUS_OK
ReadX 9868 589824 61440 61440 NT_STATUS_OK
ReadX 9868 651264 4096 4096 NT_STATUS_OK
ReadX 9868 655360 61440 61440 NT_STATUS_OK
ReadX 9868 716800 4096 4096 NT_STATUS_OK
ReadX 9868 720896 61440 61440 NT_STATUS_OK
ReadX 9868 782336 4096 4096 NT_STATUS_OK
ReadX 9868 786432 61440 61440 NT_STATUS_OK
ReadX 9868 847872 4096 4096 NT_STATUS_OK
ReadX 9868 851968 61440 61440 NT_STATUS_OK
ReadX 9868 913408 4096 4096 NT_STATUS_OK
ReadX 9868 917504 61440 61440 NT_STATUS_OK
ReadX 9868 978944 4096 4096 NT_STATUS_OK
ReadX 9868 983040 61440 61440 NT_STATUS_OK
ReadX 9868 1044480 4096 4096 NT_STATUS_OK
ReadX 9868 1048576 61440 61440 NT_STATUS_OK
ReadX 9868 1110016 4096 4096 NT_STATUS_OK
ReadX 9868 1114112 61440 61440 NT_STATUS_OK
ReadX 9868 1175552 4096 4096 NT_STATUS_OK
ReadX 9868 1179648 61440 61440 NT_STATUS_OK
ReadX 9868 1241088 4096 4096 NT_STATUS_OK
ReadX 9868 1245184 61440 61440 NT_STATUS_OK
ReadX 9868 1306624 4096 4096 NT_STATUS_OK
ReadX 9868 1310720 61440 61440 NT_STATUS_OK
ReadX 9868 1372160 4096 4096 NT_STATUS_OK
ReadX 9868 1376256 61440 61440 NT_STATUS_OK
ReadX 9868 1437696 4096 4096 NT_STATUS_OK
ReadX 9868 1441792 61440 61440 NT_STATUS_OK
ReadX 9868 1503232 4096 4096 NT_STATUS_OK
ReadX 9868 1507328 61440 61440 NT_STATUS_OK
ReadX 9868 1568768 4096 4096 NT_STATUS_OK
ReadX 9868 1572864 61440 61440 NT_STATUS_OK
ReadX 9868 1634304 4096 4096 NT_STATUS_OK
ReadX 9868 1638400 61440 61440 NT_STATUS_OK
ReadX 9868 1699840 4096 4096 NT_STATUS_OK
ReadX 9868 1703936 61440 61440 NT_STATUS_OK
ReadX 9868 1765376 4096 4096 NT_STATUS_OK
ReadX 9868 1769472 61440 61440 NT_STATUS_OK
ReadX 9868 1830912 4096 4096 NT_STATUS_OK
ReadX 9868 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9869 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9870 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9870 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9871 NT_STATUS_OK
ReadX 9871 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9872 NT_STATUS_OK
ReadX 9872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9873 NT_STATUS_OK
ReadX 9873 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 9874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 9875 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 1004 NT_STATUS_OK
WriteX 9875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9875 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 9876 NT_STATUS_OK
Close 9876 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9877 NT_STATUS_OK
WriteX 9877 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9877 258 NT_STATUS_OK
WriteX 9877 0 491 491 NT_STATUS_OK
Close 9877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 9878 NT_STATUS_OK
ReadX 9878 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 9875 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 9880 NT_STATUS_OK
Close 9880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9881 NT_STATUS_OK
WriteX 9881 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 258 NT_STATUS_OK
WriteX 9881 0 543 543 NT_STATUS_OK
Close 9881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9882 NT_STATUS_OK
ReadX 9882 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 9866 NT_STATUS_OK
Close 9867 NT_STATUS_OK
Close 9868 NT_STATUS_OK
Close 9882 NT_STATUS_OK
Close 9870 NT_STATUS_OK
Close 9871 NT_STATUS_OK
Close 9872 NT_STATUS_OK
Close 9873 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 9875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9885 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9886 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 9894 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9895 NT_STATUS_OK
QUERY_FILE_INFORMATION 9895 1004 NT_STATUS_OK
WriteX 9895 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9895 258 NT_STATUS_OK
WriteX 9895 0 2048 2048 NT_STATUS_OK
Close 9895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9896 NT_STATUS_OK
ReadX 9896 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9896 0 4096 4096 NT_STATUS_OK
Flush 9896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 9896 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 9900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9901 NT_STATUS_OK
WriteX 9901 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9901 258 NT_STATUS_OK
WriteX 9901 0 2048 2048 NT_STATUS_OK
Close 9901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 9902 NT_STATUS_OK
ReadX 9902 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 9906 NT_STATUS_OK
Close 9906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9907 NT_STATUS_OK
WriteX 9907 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9907 258 NT_STATUS_OK
WriteX 9907 0 2048 2048 NT_STATUS_OK
Close 9907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 9908 NT_STATUS_OK
ReadX 9908 0 2048 2048 NT_STATUS_OK
ReadX 9886 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 9890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 9902 0 4096 4096 NT_STATUS_OK
WriteX 9886 0 8192 8192 NT_STATUS_OK
WriteX 9887 0 4096 4096 NT_STATUS_OK
WriteX 9888 0 4096 4096 NT_STATUS_OK
ReadX 9902 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9911 NT_STATUS_OK
ReadX 9911 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 9912 NT_STATUS_OK
QUERY_FILE_INFORMATION 9912 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 9912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 9911 NT_STATUS_OK
Close 9887 NT_STATUS_OK
Close 9888 NT_STATUS_OK
Close 9889 NT_STATUS_OK
Close 9902 NT_STATUS_OK
Close 9886 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9914 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9915 NT_STATUS_OK
ReadX 9915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9916 NT_STATUS_OK
ReadX 9916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9917 NT_STATUS_OK
ReadX 9917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9918 NT_STATUS_OK
ReadX 9918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9919 NT_STATUS_OK
ReadX 9919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9920 NT_STATUS_OK
ReadX 9920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9921 NT_STATUS_OK
ReadX 9921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9922 NT_STATUS_OK
ReadX 9922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9923 NT_STATUS_OK
ReadX 9923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9924 NT_STATUS_OK
ReadX 9924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9925 NT_STATUS_OK
ReadX 9925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9926 NT_STATUS_OK
ReadX 9926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9927 NT_STATUS_OK
ReadX 9927 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 9931 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9932 NT_STATUS_OK
QUERY_FILE_INFORMATION 9932 1004 NT_STATUS_OK
WriteX 9932 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9932 258 NT_STATUS_OK
WriteX 9932 0 2048 2048 NT_STATUS_OK
Close 9932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9933 NT_STATUS_OK
ReadX 9933 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9935 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 9939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9940 NT_STATUS_OK
QUERY_FILE_INFORMATION 9940 1004 NT_STATUS_OK
WriteX 9940 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9940 258 NT_STATUS_OK
WriteX 9940 0 2048 2048 NT_STATUS_OK
Close 9940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9941 NT_STATUS_OK
ReadX 9941 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9933 0 4096 4096 NT_STATUS_OK
Flush 9933 NT_STATUS_OK
WriteX 9941 0 4096 4096 NT_STATUS_OK
Flush 9941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 9933 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 9941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9935 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 9942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9943 NT_STATUS_OK
WriteX 9943 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9943 258 NT_STATUS_OK
WriteX 9943 0 4096 4096 NT_STATUS_OK
Close 9943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 9944 NT_STATUS_OK
ReadX 9944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 9945 NT_STATUS_OK
Close 9945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9946 NT_STATUS_OK
WriteX 9946 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9946 258 NT_STATUS_OK
WriteX 9946 0 4096 4096 NT_STATUS_OK
Close 9946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 9947 0 4096 4096 NT_STATUS_OK
Close 9944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 9927 NT_STATUS_OK
Close 9921 NT_STATUS_OK
Close 9935 NT_STATUS_OK
Close 9924 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9926 NT_STATUS_OK
Close 9922 NT_STATUS_OK
Close 9915 NT_STATUS_OK
Close 9916 NT_STATUS_OK
Close 9919 NT_STATUS_OK
Close 9920 NT_STATUS_OK
Close 9917 NT_STATUS_OK
Close 9918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 9947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 9952 NT_STATUS_OK
ReadX 9952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9954 NT_STATUS_OK
WriteX 9954 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9954 258 NT_STATUS_OK
WriteX 9954 0 2048 2048 NT_STATUS_OK
Close 9954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 9955 NT_STATUS_OK
ReadX 9955 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9956 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9957 NT_STATUS_OK
ReadX 9957 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9958 NT_STATUS_OK
ReadX 9958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9959 NT_STATUS_OK
ReadX 9959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9960 NT_STATUS_OK
ReadX 9960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9961 NT_STATUS_OK
ReadX 9961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9962 NT_STATUS_OK
ReadX 9962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9963 NT_STATUS_OK
ReadX 9963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9964 NT_STATUS_OK
ReadX 9964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9965 NT_STATUS_OK
ReadX 9965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9966 NT_STATUS_OK
ReadX 9966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9967 NT_STATUS_OK
ReadX 9967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9968 NT_STATUS_OK
ReadX 9968 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 9969 NT_STATUS_OK
QUERY_FILE_INFORMATION 9969 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 9969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Close 9955 NT_STATUS_OK
Close 9967 NT_STATUS_OK
Close 9962 NT_STATUS_OK
Close 9963 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Close 9965 NT_STATUS_OK
Close 9966 NT_STATUS_OK
Close 9968 NT_STATUS_OK
Close 9956 NT_STATUS_OK
Close 9957 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Close 9961 NT_STATUS_OK
Close 9958 NT_STATUS_OK
Close 9959 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 9971 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 9971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 9974 NT_STATUS_OK
ReadX 9974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 9975 NT_STATUS_OK
ReadX 9975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 9976 NT_STATUS_OK
ReadX 9976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 9978 NT_STATUS_OK
ReadX 9978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 9979 NT_STATUS_OK
ReadX 9979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 9980 NT_STATUS_OK
ReadX 9980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 9981 NT_STATUS_OK
ReadX 9981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 9982 NT_STATUS_OK
ReadX 9982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 9983 NT_STATUS_OK
ReadX 9983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 9984 NT_STATUS_OK
ReadX 9984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9991 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 1004 NT_STATUS_OK
WriteX 9991 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9991 258 NT_STATUS_OK
WriteX 9991 0 2048 2048 NT_STATUS_OK
Close 9991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 9992 NT_STATUS_OK
ReadX 9992 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 9994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 9995 NT_STATUS_OK
ReadX 9995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 9996 NT_STATUS_OK
ReadX 9996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 9997 NT_STATUS_OK
ReadX 9997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 9998 NT_STATUS_OK
ReadX 9998 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10003 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 1004 NT_STATUS_OK
WriteX 10003 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10003 258 NT_STATUS_OK
WriteX 10003 0 2048 2048 NT_STATUS_OK
Close 10003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10005 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10006 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10011 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 1004 NT_STATUS_OK
WriteX 10011 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10011 258 NT_STATUS_OK
WriteX 10011 0 2048 2048 NT_STATUS_OK
Close 10011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10012 NT_STATUS_OK
ReadX 10012 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
Flush 9992 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
Flush 10004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
Flush 10012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 9992 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10004 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10012 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9994 4096 16384 16384 NT_STATUS_OK
ReadX 9974 4096 16384 16384 NT_STATUS_OK
ReadX 10006 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10014 NT_STATUS_OK
ReadX 10014 0 2048 2048 NT_STATUS_OK
WriteX 10014 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 9992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10015 NT_STATUS_OK
QUERY_FILE_INFORMATION 10015 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10014 NT_STATUS_OK
Close 9998 NT_STATUS_OK
Close 9986 NT_STATUS_OK
Close 9978 NT_STATUS_OK
Close 9994 NT_STATUS_OK
Close 9995 NT_STATUS_OK
Close 9996 NT_STATUS_OK
Close 9997 NT_STATUS_OK
Close 9985 NT_STATUS_OK
Close 10006 NT_STATUS_OK
Close 9980 NT_STATUS_OK
Close 9983 NT_STATUS_OK
Close 9984 NT_STATUS_OK
Close 9981 NT_STATUS_OK
Close 9982 NT_STATUS_OK
Close 9974 NT_STATUS_OK
Close 9975 NT_STATUS_OK
Close 9976 NT_STATUS_OK
Close 9977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10017 NT_STATUS_OK
QUERY_FILE_INFORMATION 10017 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10019 NT_STATUS_OK
QUERY_FILE_INFORMATION 10019 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10022 NT_STATUS_OK
ReadX 10022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10023 NT_STATUS_OK
ReadX 10023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10024 NT_STATUS_OK
ReadX 10024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10025 NT_STATUS_OK
ReadX 10025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10022 4096 16384 16384 NT_STATUS_OK
WriteX 10022 0 4096 4096 NT_STATUS_OK
WriteX 10023 0 4096 4096 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
WriteX 10025 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10028 NT_STATUS_OK
ReadX 10028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10030 NT_STATUS_OK
ReadX 10030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10031 NT_STATUS_OK
ReadX 10031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10034 NT_STATUS_OK
ReadX 10034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10035 NT_STATUS_OK
ReadX 10035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10036 NT_STATUS_OK
ReadX 10036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10037 NT_STATUS_OK
ReadX 10037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10038 NT_STATUS_OK
ReadX 10038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10039 NT_STATUS_OK
ReadX 10039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10040 NT_STATUS_OK
ReadX 10040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10041 NT_STATUS_OK
ReadX 10041 0 8192 8192 NT_STATUS_OK
ReadX 10028 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10042 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10042 0 4096 4096 NT_STATUS_OK
ReadX 10042 4096 4096 4096 NT_STATUS_OK
ReadX 10042 8192 4096 4096 NT_STATUS_OK
WriteX 10028 0 4096 4096 NT_STATUS_OK
WriteX 10029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10043 0 4096 4096 NT_STATUS_OK
ReadX 10043 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10022 0 4096 4096 NT_STATUS_OK
WriteX 10023 0 4096 4096 NT_STATUS_OK
WriteX 10024 0 4096 4096 NT_STATUS_OK
WriteX 10025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10047 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10048 NT_STATUS_OK
QUERY_FILE_INFORMATION 10048 1004 NT_STATUS_OK
WriteX 10048 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10048 258 NT_STATUS_OK
WriteX 10048 0 2048 2048 NT_STATUS_OK
Close 10048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10050 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 0 4096 4096 NT_STATUS_OK
ReadX 10051 4096 4096 4096 NT_STATUS_OK
WriteX 10051 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10049 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10052 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10053 NT_STATUS_OK
ReadX 10053 0 4096 4096 NT_STATUS_OK
ReadX 10053 4096 4096 4096 NT_STATUS_OK
WriteX 10053 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10054 NT_STATUS_OK
QUERY_FILE_INFORMATION 10054 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10041 NT_STATUS_OK
Close 10026 NT_STATUS_OK
Close 10022 NT_STATUS_OK
Close 10023 NT_STATUS_OK
Close 10024 NT_STATUS_OK
Close 10025 NT_STATUS_OK
Close 10034 NT_STATUS_OK
Close 10039 NT_STATUS_OK
Close 10035 NT_STATUS_OK
Close 10036 NT_STATUS_OK
Close 10037 NT_STATUS_OK
Close 10038 NT_STATUS_OK
Close 10040 NT_STATUS_OK
Close 10028 NT_STATUS_OK
Close 10029 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Close 10033 NT_STATUS_OK
Close 10030 NT_STATUS_OK
Close 10031 NT_STATUS_OK
Close 10053 NT_STATUS_OK
Close 10042 NT_STATUS_OK
Close 10043 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10056 0 4096 4096 NT_STATUS_OK
ReadX 10056 4096 4096 4096 NT_STATUS_OK
ReadX 10056 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10057 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10058 NT_STATUS_OK
ReadX 10058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10059 NT_STATUS_OK
ReadX 10059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10060 NT_STATUS_OK
ReadX 10060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10061 NT_STATUS_OK
ReadX 10061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10063 NT_STATUS_OK
ReadX 10063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10064 NT_STATUS_OK
ReadX 10064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10065 NT_STATUS_OK
ReadX 10065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10066 NT_STATUS_OK
ReadX 10066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10067 NT_STATUS_OK
ReadX 10067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10068 NT_STATUS_OK
ReadX 10068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10069 NT_STATUS_OK
ReadX 10069 0 4096 4096 NT_STATUS_OK
ReadX 10057 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10074 NT_STATUS_OK
QUERY_FILE_INFORMATION 10074 1004 NT_STATUS_OK
WriteX 10074 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10074 258 NT_STATUS_OK
WriteX 10074 0 2048 2048 NT_STATUS_OK
Close 10074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10075 NT_STATUS_OK
ReadX 10075 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10075 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10079 NT_STATUS_OK
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10080 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 1004 NT_STATUS_OK
WriteX 10080 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 258 NT_STATUS_OK
WriteX 10080 0 2048 2048 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10081 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10064 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10082 NT_STATUS_OK
QUERY_FILE_INFORMATION 10082 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10068 NT_STATUS_OK
Close 10063 NT_STATUS_OK
Close 10069 NT_STATUS_OK
Close 10057 NT_STATUS_OK
Close 10058 NT_STATUS_OK
Close 10061 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Close 10059 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Close 10064 NT_STATUS_OK
Close 10065 NT_STATUS_OK
Close 10066 NT_STATUS_OK
Close 10067 NT_STATUS_OK
Close 10056 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10084 NT_STATUS_OK
QUERY_FILE_INFORMATION 10084 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10086 NT_STATUS_OK
ReadX 10086 61440 4096 4096 NT_STATUS_OK
ReadX 10086 126976 4096 4096 NT_STATUS_OK
WriteX 10086 0 65536 65536 NT_STATUS_OK
WriteX 10086 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10087 NT_STATUS_OK
ReadX 10087 61440 4096 4096 NT_STATUS_OK
ReadX 10087 126976 4096 4096 NT_STATUS_OK
ReadX 10087 192512 4096 4096 NT_STATUS_OK
ReadX 10087 258048 4096 4096 NT_STATUS_OK
WriteX 10087 0 65536 65536 NT_STATUS_OK
WriteX 10087 65536 65536 65536 NT_STATUS_OK
WriteX 10087 131072 65536 65536 NT_STATUS_OK
WriteX 10087 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10088 NT_STATUS_OK
ReadX 10088 61440 4096 4096 NT_STATUS_OK
ReadX 10088 126976 4096 4096 NT_STATUS_OK
ReadX 10088 192512 4096 4096 NT_STATUS_OK
ReadX 10088 258048 4096 4096 NT_STATUS_OK
ReadX 10088 323584 4096 4096 NT_STATUS_OK
ReadX 10088 389120 4096 4096 NT_STATUS_OK
ReadX 10088 454656 4096 4096 NT_STATUS_OK
ReadX 10088 520192 4096 4096 NT_STATUS_OK
WriteX 10088 0 65536 65536 NT_STATUS_OK
WriteX 10088 65536 65536 65536 NT_STATUS_OK
WriteX 10088 131072 65536 65536 NT_STATUS_OK
WriteX 10088 196608 65536 65536 NT_STATUS_OK
WriteX 10088 262144 65536 65536 NT_STATUS_OK
WriteX 10088 327680 65536 65536 NT_STATUS_OK
WriteX 10088 393216 65536 65536 NT_STATUS_OK
WriteX 10088 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10089 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10089 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10089 8192 4096 4096 NT_STATUS_OK
ReadX 10089 12288 4096 4096 NT_STATUS_OK
ReadX 10089 16384 4096 4096 NT_STATUS_OK
ReadX 10089 20480 4096 4096 NT_STATUS_OK
ReadX 10089 24576 4096 4096 NT_STATUS_OK
ReadX 10089 28672 4096 4096 NT_STATUS_OK
ReadX 10089 32768 4096 4096 NT_STATUS_OK
ReadX 10089 36864 4096 4096 NT_STATUS_OK
ReadX 10089 40960 4096 4096 NT_STATUS_OK
ReadX 10089 45056 4096 4096 NT_STATUS_OK
ReadX 10089 49152 4096 4096 NT_STATUS_OK
ReadX 10089 53248 4096 4096 NT_STATUS_OK
ReadX 10089 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10089 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10090 NT_STATUS_OK
Close 10090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10086 NT_STATUS_OK
Close 10087 NT_STATUS_OK
Close 10088 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10092 NT_STATUS_OK
WriteX 10092 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10092 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10092 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10092 1004 NT_STATUS_OK
WriteX 10092 0 57088 57088 NT_STATUS_OK
WriteX 10092 0 4096 4096 NT_STATUS_OK
Flush 10092 NT_STATUS_OK
Close 10089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10093 NT_STATUS_OK
SET_FILE_INFORMATION 10093 1004 NT_STATUS_OK
Close 10093 NT_STATUS_OK
SET_FILE_INFORMATION 10092 1004 NT_STATUS_OK
WriteX 10092 0 4096 4096 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10094 NT_STATUS_OK
Close 10094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10096 NT_STATUS_OK
ReadX 10096 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10096 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10097 NT_STATUS_OK
WriteX 10097 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10097 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10097 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10097 1004 NT_STATUS_OK
WriteX 10097 0 51456 51456 NT_STATUS_OK
WriteX 10097 0 4096 4096 NT_STATUS_OK
Flush 10097 NT_STATUS_OK
SET_FILE_INFORMATION 10097 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10097 1004 NT_STATUS_OK
WriteX 10097 0 4096 4096 NT_STATUS_OK
Close 10097 NT_STATUS_OK
Close 10096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10099 NT_STATUS_OK
Close 10099 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10101 NT_STATUS_OK
ReadX 10101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10101 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10103 NT_STATUS_OK
Close 10103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10106 NT_STATUS_OK
WriteX 10106 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10106 258 NT_STATUS_OK
WriteX 10106 0 53077 53077 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10107 NT_STATUS_OK
WriteX 10107 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10107 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
WriteX 10107 0 65536 65536 NT_STATUS_OK
WriteX 10107 65536 1856 1856 NT_STATUS_OK
WriteX 10107 0 4096 4096 NT_STATUS_OK
Flush 10107 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10107 1004 NT_STATUS_OK
WriteX 10107 0 4096 4096 NT_STATUS_OK
Close 10107 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10113 NT_STATUS_OK
Close 10113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10116 NT_STATUS_OK
WriteX 10116 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10116 258 NT_STATUS_OK
WriteX 10116 0 7983 7983 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10118 NT_STATUS_OK
Close 10118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10121 NT_STATUS_OK
WriteX 10121 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10121 258 NT_STATUS_OK
WriteX 10121 0 65536 65536 NT_STATUS_OK
WriteX 10121 65536 65536 65536 NT_STATUS_OK
WriteX 10121 131072 65536 65536 NT_STATUS_OK
WriteX 10121 196608 65536 65536 NT_STATUS_OK
WriteX 10121 262144 65536 65536 NT_STATUS_OK
WriteX 10121 327680 65536 65536 NT_STATUS_OK
WriteX 10121 393216 65536 65536 NT_STATUS_OK
WriteX 10121 458752 46731 46731 NT_STATUS_OK
Close 10121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10122 NT_STATUS_OK
WriteX 10122 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10111 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10122 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10122 1004 NT_STATUS_OK
WriteX 10122 0 65536 65536 NT_STATUS_OK
WriteX 10122 65536 22848 22848 NT_STATUS_OK
WriteX 10122 0 4096 4096 NT_STATUS_OK
Flush 10122 NT_STATUS_OK
SET_FILE_INFORMATION 10122 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10122 1004 NT_STATUS_OK
WriteX 10122 0 4096 4096 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10124 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10126 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10127 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10127 1004 NT_STATUS_OK
ReadX 10127 8192 4096 4096 NT_STATUS_OK
ReadX 10127 12288 4096 4096 NT_STATUS_OK
ReadX 10127 16384 4096 4096 NT_STATUS_OK
ReadX 10127 20480 4096 4096 NT_STATUS_OK
ReadX 10127 24576 4096 4096 NT_STATUS_OK
ReadX 10127 28672 4096 4096 NT_STATUS_OK
ReadX 10127 32768 4096 4096 NT_STATUS_OK
ReadX 10127 36864 4096 4096 NT_STATUS_OK
ReadX 10127 40960 4096 4096 NT_STATUS_OK
ReadX 10127 45056 4096 4096 NT_STATUS_OK
ReadX 10127 49152 4096 4096 NT_STATUS_OK
ReadX 10127 53248 4096 4096 NT_STATUS_OK
ReadX 10127 57344 4096 4096 NT_STATUS_OK
ReadX 10127 61440 4096 4096 NT_STATUS_OK
ReadX 10127 65536 4096 4096 NT_STATUS_OK
ReadX 10127 69632 4096 4096 NT_STATUS_OK
ReadX 10127 73728 4096 4096 NT_STATUS_OK
ReadX 10127 77824 4096 4096 NT_STATUS_OK
ReadX 10127 81920 4096 4096 NT_STATUS_OK
ReadX 10127 86016 4096 4096 NT_STATUS_OK
ReadX 10127 90112 4096 4096 NT_STATUS_OK
ReadX 10127 94208 4096 4096 NT_STATUS_OK
ReadX 10127 98304 4096 4096 NT_STATUS_OK
ReadX 10127 102400 4096 4096 NT_STATUS_OK
ReadX 10127 106496 4096 4096 NT_STATUS_OK
ReadX 10127 110592 4096 4096 NT_STATUS_OK
ReadX 10127 114688 4096 4096 NT_STATUS_OK
ReadX 10127 118784 4096 4096 NT_STATUS_OK
ReadX 10127 122880 4096 4096 NT_STATUS_OK
ReadX 10127 126976 4096 4096 NT_STATUS_OK
ReadX 10127 131072 4096 4096 NT_STATUS_OK
ReadX 10127 135168 4096 4096 NT_STATUS_OK
ReadX 10127 139264 4096 4096 NT_STATUS_OK
ReadX 10127 143360 4096 4096 NT_STATUS_OK
ReadX 10127 147456 4096 4096 NT_STATUS_OK
ReadX 10127 151552 4096 4096 NT_STATUS_OK
ReadX 10127 155648 4096 4096 NT_STATUS_OK
Close 10126 NT_STATUS_OK
ReadX 10127 159744 4096 4096 NT_STATUS_OK
ReadX 10127 163840 4096 4096 NT_STATUS_OK
ReadX 10127 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10127 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10128 NT_STATUS_OK
Close 10128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10130 NT_STATUS_OK
WriteX 10130 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10130 258 NT_STATUS_OK
Close 10127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10131 NT_STATUS_OK
SET_FILE_INFORMATION 10131 1004 NT_STATUS_OK
Close 10131 NT_STATUS_OK
WriteX 10130 0 42388 42388 NT_STATUS_OK
Close 10130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10132 NT_STATUS_OK
Close 10132 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10134 NT_STATUS_OK
ReadX 10134 0 4096 4096 NT_STATUS_OK
ReadX 10134 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10135 NT_STATUS_OK
WriteX 10135 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 258 NT_STATUS_OK
SET_FILE_INFORMATION 10135 1004 NT_STATUS_OK
WriteX 10135 0 42652 42652 NT_STATUS_OK
Close 10135 NT_STATUS_OK
Close 10134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10137 NT_STATUS_OK
Close 10137 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10139 NT_STATUS_OK
ReadX 10139 0 4096 4096 NT_STATUS_OK
ReadX 10139 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10141 NT_STATUS_OK
Close 10141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10144 NT_STATUS_OK
WriteX 10144 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10144 258 NT_STATUS_OK
WriteX 10144 0 65536 65536 NT_STATUS_OK
WriteX 10144 65536 49 49 NT_STATUS_OK
Close 10144 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10145 NT_STATUS_OK
ReadX 10145 0 61440 61440 NT_STATUS_OK
ReadX 10145 61440 4096 4096 NT_STATUS_OK
ReadX 10145 65536 61440 61440 NT_STATUS_OK
ReadX 10145 126976 4096 4096 NT_STATUS_OK
ReadX 10145 131072 61440 61440 NT_STATUS_OK
ReadX 10145 192512 4096 4096 NT_STATUS_OK
ReadX 10145 196608 61440 61440 NT_STATUS_OK
ReadX 10145 258048 4096 4096 NT_STATUS_OK
ReadX 10145 262144 61440 61440 NT_STATUS_OK
ReadX 10145 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10146 NT_STATUS_OK
ReadX 10146 0 61440 61440 NT_STATUS_OK
ReadX 10146 61440 4096 4096 NT_STATUS_OK
ReadX 10146 65536 61440 61440 NT_STATUS_OK
ReadX 10146 126976 4096 4096 NT_STATUS_OK
ReadX 10146 131072 61440 61440 NT_STATUS_OK
ReadX 10146 192512 4096 4096 NT_STATUS_OK
ReadX 10146 196608 61440 61440 NT_STATUS_OK
ReadX 10146 258048 4096 4096 NT_STATUS_OK
ReadX 10146 262144 61440 61440 NT_STATUS_OK
ReadX 10146 323584 4096 4096 NT_STATUS_OK
ReadX 10146 327680 61440 61440 NT_STATUS_OK
ReadX 10146 389120 4096 4096 NT_STATUS_OK
ReadX 10146 393216 61440 61440 NT_STATUS_OK
ReadX 10146 454656 4096 4096 NT_STATUS_OK
ReadX 10146 458752 61440 61440 NT_STATUS_OK
ReadX 10146 520192 4096 4096 NT_STATUS_OK
ReadX 10146 524288 61440 61440 NT_STATUS_OK
ReadX 10146 585728 4096 4096 NT_STATUS_OK
ReadX 10146 589824 61440 61440 NT_STATUS_OK
ReadX 10146 651264 4096 4096 NT_STATUS_OK
ReadX 10146 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10147 NT_STATUS_OK
ReadX 10147 0 61440 61440 NT_STATUS_OK
ReadX 10147 61440 4096 4096 NT_STATUS_OK
ReadX 10147 65536 61440 61440 NT_STATUS_OK
ReadX 10147 126976 4096 4096 NT_STATUS_OK
ReadX 10147 131072 61440 61440 NT_STATUS_OK
ReadX 10147 192512 4096 4096 NT_STATUS_OK
ReadX 10147 196608 61440 61440 NT_STATUS_OK
ReadX 10147 258048 4096 4096 NT_STATUS_OK
ReadX 10147 262144 61440 61440 NT_STATUS_OK
ReadX 10147 323584 4096 4096 NT_STATUS_OK
ReadX 10147 327680 61440 61440 NT_STATUS_OK
ReadX 10147 389120 4096 4096 NT_STATUS_OK
ReadX 10147 393216 61440 61440 NT_STATUS_OK
ReadX 10147 454656 4096 4096 NT_STATUS_OK
ReadX 10147 458752 61440 61440 NT_STATUS_OK
ReadX 10147 520192 4096 4096 NT_STATUS_OK
ReadX 10147 524288 61440 61440 NT_STATUS_OK
ReadX 10147 585728 4096 4096 NT_STATUS_OK
ReadX 10147 589824 61440 61440 NT_STATUS_OK
ReadX 10147 651264 4096 4096 NT_STATUS_OK
ReadX 10147 655360 61440 61440 NT_STATUS_OK
ReadX 10147 716800 4096 4096 NT_STATUS_OK
ReadX 10147 720896 61440 61440 NT_STATUS_OK
ReadX 10147 782336 4096 4096 NT_STATUS_OK
ReadX 10147 786432 61440 61440 NT_STATUS_OK
ReadX 10147 847872 4096 4096 NT_STATUS_OK
ReadX 10147 851968 61440 61440 NT_STATUS_OK
ReadX 10147 913408 4096 4096 NT_STATUS_OK
ReadX 10147 917504 61440 61440 NT_STATUS_OK
ReadX 10147 978944 4096 4096 NT_STATUS_OK
ReadX 10147 983040 61440 61440 NT_STATUS_OK
ReadX 10147 1044480 4096 4096 NT_STATUS_OK
ReadX 10147 1048576 61440 61440 NT_STATUS_OK
ReadX 10147 1110016 4096 4096 NT_STATUS_OK
ReadX 10147 1114112 61440 61440 NT_STATUS_OK
ReadX 10147 1175552 4096 4096 NT_STATUS_OK
ReadX 10147 1179648 61440 61440 NT_STATUS_OK
ReadX 10147 1241088 4096 4096 NT_STATUS_OK
ReadX 10147 1245184 61440 61440 NT_STATUS_OK
ReadX 10147 1306624 4096 4096 NT_STATUS_OK
ReadX 10147 1310720 61440 61440 NT_STATUS_OK
ReadX 10147 1372160 4096 4096 NT_STATUS_OK
ReadX 10147 1376256 61440 61440 NT_STATUS_OK
ReadX 10147 1437696 4096 4096 NT_STATUS_OK
ReadX 10147 1441792 61440 61440 NT_STATUS_OK
ReadX 10147 1503232 4096 4096 NT_STATUS_OK
ReadX 10147 1507328 61440 61440 NT_STATUS_OK
ReadX 10147 1568768 4096 4096 NT_STATUS_OK
ReadX 10147 1572864 61440 61440 NT_STATUS_OK
ReadX 10147 1634304 4096 4096 NT_STATUS_OK
ReadX 10147 1638400 61440 61440 NT_STATUS_OK
ReadX 10147 1699840 4096 4096 NT_STATUS_OK
ReadX 10147 1703936 61440 61440 NT_STATUS_OK
ReadX 10147 1765376 4096 4096 NT_STATUS_OK
ReadX 10147 1769472 61440 61440 NT_STATUS_OK
ReadX 10147 1830912 4096 4096 NT_STATUS_OK
ReadX 10147 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10149 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 1005 NT_STATUS_OK
ReadX 10149 2156 24 24 NT_STATUS_OK
ReadX 10149 2139 276 276 NT_STATUS_OK
ReadX 10149 2136 14 14 NT_STATUS_OK
ReadX 10149 2136 7 7 NT_STATUS_OK
ReadX 10149 2138 12 12 NT_STATUS_OK
ReadX 10149 2137 8 8 NT_STATUS_OK
ReadX 10149 2135 15 15 NT_STATUS_OK
ReadX 10149 0 16 16 NT_STATUS_OK
ReadX 10149 16 2048 2048 NT_STATUS_OK
ReadX 10149 2064 2048 2048 NT_STATUS_OK
ReadX 10149 257 2048 2048 NT_STATUS_OK
ReadX 10149 385 2048 2048 NT_STATUS_OK
ReadX 10149 513 2048 2048 NT_STATUS_OK
ReadX 10149 641 2048 2048 NT_STATUS_OK
ReadX 10149 769 2048 2048 NT_STATUS_OK
ReadX 10149 897 2048 2048 NT_STATUS_OK
ReadX 10149 1025 2048 2048 NT_STATUS_OK
ReadX 10149 1153 2048 2048 NT_STATUS_OK
ReadX 10149 1281 2048 2048 NT_STATUS_OK
ReadX 10149 1409 2048 2048 NT_STATUS_OK
ReadX 10149 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10151 NT_STATUS_OK
Close 10151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10145 NT_STATUS_OK
Close 10146 NT_STATUS_OK
Close 10147 NT_STATUS_OK
Close 10139 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10154 NT_STATUS_OK
WriteX 10154 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10154 258 NT_STATUS_OK
WriteX 10154 0 10575 10575 NT_STATUS_OK
Flush 10154 NT_STATUS_OK
Close 10154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 4096 4096 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10159 NT_STATUS_OK
LockX 10159 2147483538 1 NT_STATUS_OK
UnlockX 10159 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1005 NT_STATUS_OK
ReadX 10159 0 512 512 NT_STATUS_OK
ReadX 10159 512 512 512 NT_STATUS_OK
ReadX 10159 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10159 1004 NT_STATUS_OK
Close 10159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10160 NT_STATUS_OK
QUERY_FILE_INFORMATION 10160 1005 NT_STATUS_OK
ReadX 10160 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10161 NT_STATUS_OK
LockX 10161 2147483538 1 NT_STATUS_OK
UnlockX 10161 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10161 1005 NT_STATUS_OK
ReadX 10161 0 512 512 NT_STATUS_OK
ReadX 10161 512 512 512 NT_STATUS_OK
ReadX 10161 1024 512 512 NT_STATUS_OK
ReadX 10161 288 20 20 NT_STATUS_OK
ReadX 10161 308 2084 2084 NT_STATUS_OK
ReadX 10161 388 2084 2084 NT_STATUS_OK
ReadX 10161 388 2084 2084 NT_STATUS_OK
ReadX 10148 2157 1386 1386 NT_STATUS_OK
ReadX 10161 2472 399 399 NT_STATUS_OK
ReadX 10161 3072 1536 1536 NT_STATUS_OK
ReadX 10161 544 149 149 NT_STATUS_OK
ReadX 10161 693 485 485 NT_STATUS_OK
Close 10161 NT_STATUS_OK
ReadX 10148 2157 4096 4096 NT_STATUS_OK
ReadX 10148 6253 4096 4096 NT_STATUS_OK
ReadX 10148 10349 4096 4096 NT_STATUS_OK
ReadX 10148 14445 4096 4096 NT_STATUS_OK
ReadX 10148 18541 4096 4096 NT_STATUS_OK
ReadX 10148 22637 256 256 NT_STATUS_OK
ReadX 10148 22893 4096 4096 NT_STATUS_OK
ReadX 10148 26989 4096 4096 NT_STATUS_OK
ReadX 10148 31085 4096 4096 NT_STATUS_OK
ReadX 10148 35181 4096 4096 NT_STATUS_OK
ReadX 10148 39277 4096 4096 NT_STATUS_OK
ReadX 10148 43373 4096 4096 NT_STATUS_OK
ReadX 10148 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10148 2157 1024 1024 NT_STATUS_OK
ReadX 10148 1667 4688 4688 NT_STATUS_OK
ReadX 10148 6355 3516 3516 NT_STATUS_OK
ReadX 10148 9871 16384 16384 NT_STATUS_OK
ReadX 10148 26255 3771 3771 NT_STATUS_OK
ReadX 10148 30026 2048 2048 NT_STATUS_OK
ReadX 10148 32074 1024 1024 NT_STATUS_OK
ReadX 10148 33098 6652 6652 NT_STATUS_OK
ReadX 10148 39750 16384 16384 NT_STATUS_OK
ReadX 10148 56134 10496 10496 NT_STATUS_OK
ReadX 10148 66630 1784 1784 NT_STATUS_OK
ReadX 10148 68414 90 90 NT_STATUS_OK
ReadX 10148 68504 273 273 NT_STATUS_OK
ReadX 10148 68777 1600 1600 NT_STATUS_OK
ReadX 10148 70377 640 640 NT_STATUS_OK
ReadX 10148 71017 1280 1280 NT_STATUS_OK
ReadX 10148 72297 8464 8464 NT_STATUS_OK
ReadX 10148 80761 158 158 NT_STATUS_OK
ReadX 10148 80919 912 912 NT_STATUS_OK
ReadX 10148 81831 1980 1980 NT_STATUS_OK
ReadX 10148 83811 2256 2256 NT_STATUS_OK
ReadX 10148 86067 400 400 NT_STATUS_OK
ReadX 10148 86467 252 252 NT_STATUS_OK
ReadX 10148 86719 42 42 NT_STATUS_OK
ReadX 10148 86761 725 725 NT_STATUS_OK
ReadX 10148 2009 512 512 NT_STATUS_OK
ReadX 10148 3895 9 9 NT_STATUS_OK
ReadX 10148 3781 46 46 NT_STATUS_OK
ReadX 10148 4059 92 92 NT_STATUS_OK
ReadX 10148 3781 92 92 NT_STATUS_OK
ReadX 10148 3986 184 184 NT_STATUS_OK
ReadX 10148 3987 16384 16384 NT_STATUS_OK
ReadX 10148 3902 16384 16384 NT_STATUS_OK
ReadX 10148 3781 10240 10240 NT_STATUS_OK
ReadX 10148 3821 16384 16384 NT_STATUS_OK
ReadX 10148 3891 935 935 NT_STATUS_OK
ReadX 10148 4060 10240 10240 NT_STATUS_OK
ReadX 10148 4059 184 184 NT_STATUS_OK
ReadX 10148 256 184 184 NT_STATUS_OK
ReadX 10148 256 1026 1026 NT_STATUS_OK
ReadX 10148 3901 326 326 NT_STATUS_OK
ReadX 10148 3899 652 652 NT_STATUS_OK
ReadX 10148 256 2 2 NT_STATUS_OK
ReadX 10148 258 4948 4948 NT_STATUS_OK
Close 10148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10163 NT_STATUS_OK
Close 10163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10166 NT_STATUS_OK
WriteX 10166 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10166 258 NT_STATUS_OK
WriteX 10166 0 65536 65536 NT_STATUS_OK
WriteX 10166 65536 65536 65536 NT_STATUS_OK
WriteX 10166 131072 65536 65536 NT_STATUS_OK
WriteX 10166 196608 65536 65536 NT_STATUS_OK
WriteX 10166 262144 65536 65536 NT_STATUS_OK
WriteX 10166 327680 65536 65536 NT_STATUS_OK
WriteX 10166 393216 65536 65536 NT_STATUS_OK
WriteX 10166 458752 65536 65536 NT_STATUS_OK
WriteX 10166 524288 65536 65536 NT_STATUS_OK
WriteX 10166 589824 35257 35257 NT_STATUS_OK
Close 10166 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10168 NT_STATUS_OK
Close 10168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10171 NT_STATUS_OK
WriteX 10171 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10171 258 NT_STATUS_OK
WriteX 10171 0 65536 65536 NT_STATUS_OK
WriteX 10171 65536 65536 65536 NT_STATUS_OK
WriteX 10171 131072 65536 65536 NT_STATUS_OK
WriteX 10171 196608 65536 65536 NT_STATUS_OK
WriteX 10171 262144 65536 65536 NT_STATUS_OK
WriteX 10171 327680 65536 65536 NT_STATUS_OK
WriteX 10171 393216 65536 65536 NT_STATUS_OK
WriteX 10171 458752 65536 65536 NT_STATUS_OK
WriteX 10171 524288 65536 65536 NT_STATUS_OK
WriteX 10171 589824 57598 57598 NT_STATUS_OK
Close 10171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10173 NT_STATUS_OK
WriteX 10173 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10173 258 NT_STATUS_OK
WriteX 10173 0 12543 12543 NT_STATUS_OK
Flush 10173 NT_STATUS_OK
Close 10173 NT_STATUS_OK
Close 10157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10175 NT_STATUS_OK
Close 10175 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10179 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 1005 NT_STATUS_OK
ReadX 10179 1938 24 24 NT_STATUS_OK
ReadX 10179 1920 276 276 NT_STATUS_OK
ReadX 10179 1918 14 14 NT_STATUS_OK
ReadX 10179 1918 7 7 NT_STATUS_OK
ReadX 10179 1919 12 12 NT_STATUS_OK
ReadX 10179 1919 8 8 NT_STATUS_OK
ReadX 10179 1917 15 15 NT_STATUS_OK
ReadX 10179 0 16 16 NT_STATUS_OK
ReadX 10179 16 2048 2048 NT_STATUS_OK
ReadX 10179 2064 2048 2048 NT_STATUS_OK
ReadX 10179 257 2048 2048 NT_STATUS_OK
ReadX 10179 385 2048 2048 NT_STATUS_OK
ReadX 10179 513 2048 2048 NT_STATUS_OK
ReadX 10179 641 2048 2048 NT_STATUS_OK
ReadX 10179 769 2048 2048 NT_STATUS_OK
ReadX 10179 897 2048 2048 NT_STATUS_OK
ReadX 10179 1025 2048 2048 NT_STATUS_OK
ReadX 10179 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10181 NT_STATUS_OK
Close 10181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10184 NT_STATUS_OK
WriteX 10184 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10184 258 NT_STATUS_OK
WriteX 10184 0 11588 11588 NT_STATUS_OK
Flush 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10185 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10189 NT_STATUS_OK
WriteX 10189 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10189 258 NT_STATUS_OK
WriteX 10189 0 11615 11615 NT_STATUS_OK
Flush 10189 NT_STATUS_OK
Close 10189 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10191 NT_STATUS_OK
Close 10191 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10193 NT_STATUS_OK
ReadX 10193 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10195 NT_STATUS_OK
Close 10195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10198 NT_STATUS_OK
WriteX 10198 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10198 258 NT_STATUS_OK
WriteX 10198 0 65536 65536 NT_STATUS_OK
WriteX 10198 65536 16050 16050 NT_STATUS_OK
Close 10198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10178 1939 64 64 NT_STATUS_OK
ReadX 10178 128 248 248 NT_STATUS_OK
ReadX 10178 128 568 568 NT_STATUS_OK
ReadX 10178 3872 1536 1536 NT_STATUS_OK
ReadX 10178 3456 2560 2560 NT_STATUS_OK
ReadX 10178 3136 512 512 NT_STATUS_OK
ReadX 10178 2880 4096 4096 NT_STATUS_OK
ReadX 10178 3264 3072 3072 NT_STATUS_OK
ReadX 10178 320 4096 4096 NT_STATUS_OK
ReadX 10178 1024 4096 4096 NT_STATUS_OK
ReadX 10178 3616 4096 4096 NT_STATUS_OK
ReadX 10178 1939 64 64 NT_STATUS_OK
ReadX 10178 128 248 248 NT_STATUS_OK
ReadX 10178 128 608 608 NT_STATUS_OK
ReadX 10178 2858 1024 1024 NT_STATUS_OK
ReadX 10178 2810 4096 4096 NT_STATUS_OK
ReadX 10178 2826 4096 4096 NT_STATUS_OK
ReadX 10178 2580 2048 2048 NT_STATUS_OK
ReadX 10178 2800 2560 2560 NT_STATUS_OK
ReadX 10178 2100 4096 4096 NT_STATUS_OK
ReadX 10178 2084 4096 4096 NT_STATUS_OK
ReadX 10178 868 4096 4096 NT_STATUS_OK
ReadX 10178 2324 4096 4096 NT_STATUS_OK
ReadX 10178 884 4096 4096 NT_STATUS_OK
ReadX 10178 2604 1024 1024 NT_STATUS_OK
ReadX 10178 580 4096 4096 NT_STATUS_OK
ReadX 10178 596 4096 4096 NT_STATUS_OK
ReadX 10178 2752 4096 4096 NT_STATUS_OK
ReadX 10178 2842 1024 1024 NT_STATUS_OK
ReadX 10178 660 4096 4096 NT_STATUS_OK
ReadX 10178 2720 4096 4096 NT_STATUS_OK
ReadX 10178 2736 4096 4096 NT_STATUS_OK
ReadX 10178 628 4096 4096 NT_STATUS_OK
ReadX 10178 2704 4096 4096 NT_STATUS_OK
ReadX 10178 1556 4096 4096 NT_STATUS_OK
ReadX 10178 576 4096 4096 NT_STATUS_OK
ReadX 10178 3168 1536 1536 NT_STATUS_OK
ReadX 10178 832 4096 4096 NT_STATUS_OK
ReadX 10178 1088 4096 4096 NT_STATUS_OK
ReadX 10178 1344 4096 4096 NT_STATUS_OK
ReadX 10178 1600 4096 4096 NT_STATUS_OK
ReadX 10178 1856 4096 4096 NT_STATUS_OK
ReadX 10178 2112 4096 4096 NT_STATUS_OK
ReadX 10178 1892 4096 4096 NT_STATUS_OK
ReadX 10178 820 4096 4096 NT_STATUS_OK
ReadX 10178 788 4096 4096 NT_STATUS_OK
ReadX 10178 1604 4096 4096 NT_STATUS_OK
ReadX 10178 3648 4096 4096 NT_STATUS_OK
ReadX 10178 2608 4096 4096 NT_STATUS_OK
ReadX 10178 548 4096 4096 NT_STATUS_OK
ReadX 10178 740 4096 4096 NT_STATUS_OK
ReadX 10178 1344 4096 4096 NT_STATUS_OK
ReadX 10178 3392 4096 4096 NT_STATUS_OK
ReadX 10178 3904 4096 4096 NT_STATUS_OK
ReadX 10178 644 4096 4096 NT_STATUS_OK
ReadX 10178 676 4096 4096 NT_STATUS_OK
ReadX 10178 2688 4096 4096 NT_STATUS_OK
ReadX 10178 320 4096 4096 NT_STATUS_OK
ReadX 10178 900 4096 4096 NT_STATUS_OK
ReadX 10178 1908 4096 4096 NT_STATUS_OK
ReadX 10178 852 4096 4096 NT_STATUS_OK
ReadX 10178 724 4096 4096 NT_STATUS_OK
ReadX 10178 2292 4096 4096 NT_STATUS_OK
ReadX 10178 612 4096 4096 NT_STATUS_OK
ReadX 10178 388 4096 4096 NT_STATUS_OK
ReadX 10178 2368 4096 4096 NT_STATUS_OK
ReadX 10178 2624 4096 4096 NT_STATUS_OK
ReadX 10178 500 4096 4096 NT_STATUS_OK
ReadX 10178 356 4096 4096 NT_STATUS_OK
ReadX 10178 1024 4096 4096 NT_STATUS_OK
ReadX 10178 576 4096 4096 NT_STATUS_OK
ReadX 10178 340 4096 4096 NT_STATUS_OK
ReadX 10178 420 4096 4096 NT_STATUS_OK
ReadX 10178 1600 4096 4096 NT_STATUS_OK
ReadX 10178 404 4096 4096 NT_STATUS_OK
ReadX 10178 1428 4096 4096 NT_STATUS_OK
ReadX 10178 2656 4096 4096 NT_STATUS_OK
ReadX 10178 2624 4096 4096 NT_STATUS_OK
ReadX 10178 452 4096 4096 NT_STATUS_OK
ReadX 10178 692 4096 4096 NT_STATUS_OK
ReadX 10178 564 4096 4096 NT_STATUS_OK
ReadX 10178 372 4096 4096 NT_STATUS_OK
ReadX 10178 468 4096 4096 NT_STATUS_OK
ReadX 10178 484 4096 4096 NT_STATUS_OK
ReadX 10178 1088 4096 4096 NT_STATUS_OK
ReadX 10178 1924 4096 4096 NT_STATUS_OK
ReadX 10178 2768 4096 4096 NT_STATUS_OK
ReadX 10178 832 4096 4096 NT_STATUS_OK
ReadX 10178 836 4096 4096 NT_STATUS_OK
ReadX 10178 1856 4096 4096 NT_STATUS_OK
ReadX 10178 2640 4096 4096 NT_STATUS_OK
ReadX 10178 436 4096 4096 NT_STATUS_OK
ReadX 10178 1828 4096 4096 NT_STATUS_OK
ReadX 10178 804 4096 4096 NT_STATUS_OK
ReadX 10178 1860 4096 4096 NT_STATUS_OK
ReadX 10178 1812 4096 4096 NT_STATUS_OK
ReadX 10178 756 4096 4096 NT_STATUS_OK
ReadX 10178 1636 4096 4096 NT_STATUS_OK
ReadX 10178 772 4096 4096 NT_STATUS_OK
ReadX 10178 2036 4096 4096 NT_STATUS_OK
ReadX 10178 1220 4096 4096 NT_STATUS_OK
ReadX 10178 1652 4096 4096 NT_STATUS_OK
ReadX 10178 2588 4096 4096 NT_STATUS_OK
ReadX 10178 916 4096 4096 NT_STATUS_OK
ReadX 10178 260 4096 4096 NT_STATUS_OK
ReadX 10178 932 4096 4096 NT_STATUS_OK
ReadX 10178 2624 4096 4096 NT_STATUS_OK
ReadX 10178 308 4096 4096 NT_STATUS_OK
ReadX 10178 292 4096 4096 NT_STATUS_OK
ReadX 10178 1140 4096 4096 NT_STATUS_OK
ReadX 10178 276 4096 4096 NT_STATUS_OK
ReadX 10178 2020 4096 4096 NT_STATUS_OK
ReadX 10178 2880 4096 4096 NT_STATUS_OK
ReadX 10178 516 4096 4096 NT_STATUS_OK
ReadX 10178 1844 4096 4096 NT_STATUS_OK
ReadX 10178 1124 4096 4096 NT_STATUS_OK
ReadX 10178 3136 4096 4096 NT_STATUS_OK
ReadX 10178 324 4096 4096 NT_STATUS_OK
ReadX 10178 1156 4096 4096 NT_STATUS_OK
ReadX 10178 1172 4096 4096 NT_STATUS_OK
ReadX 10178 2112 4096 4096 NT_STATUS_OK
ReadX 10178 2368 4096 4096 NT_STATUS_OK
ReadX 10178 964 4096 4096 NT_STATUS_OK
ReadX 10178 980 4096 4096 NT_STATUS_OK
ReadX 10178 1012 4096 4096 NT_STATUS_OK
ReadX 10178 532 4096 4096 NT_STATUS_OK
ReadX 10178 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10178 1620 4096 4096 NT_STATUS_OK
ReadX 10178 1604 4096 4096 NT_STATUS_OK
ReadX 10178 2116 4096 4096 NT_STATUS_OK
ReadX 10178 2132 4096 4096 NT_STATUS_OK
ReadX 10178 2148 4096 4096 NT_STATUS_OK
ReadX 10178 2276 4096 4096 NT_STATUS_OK
ReadX 10178 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10200 NT_STATUS_OK
Close 10200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10203 NT_STATUS_OK
QUERY_FILE_INFORMATION 10158 1004 NT_STATUS_OK
Close 10158 NT_STATUS_OK
WriteX 10203 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10203 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10160 1004 NT_STATUS_OK
Close 10160 NT_STATUS_OK
WriteX 10203 0 65536 65536 NT_STATUS_OK
WriteX 10203 65536 64850 64850 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10205 NT_STATUS_OK
WriteX 10205 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 258 NT_STATUS_OK
ReadX 10178 2068 4096 4096 NT_STATUS_OK
ReadX 10178 1588 4096 4096 NT_STATUS_OK
ReadX 10178 1572 4096 4096 NT_STATUS_OK
WriteX 10205 0 18630 18630 NT_STATUS_OK
Flush 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10207 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10178 612 4096 4096 NT_STATUS_OK
ReadX 10178 564 4096 4096 NT_STATUS_OK
ReadX 10178 1876 4096 4096 NT_STATUS_OK
ReadX 10178 628 4096 4096 NT_STATUS_OK
ReadX 10178 740 4096 4096 NT_STATUS_OK
ReadX 10178 724 4096 4096 NT_STATUS_OK
ReadX 10178 644 4096 4096 NT_STATUS_OK
ReadX 10178 2324 4096 4096 NT_STATUS_OK
ReadX 10178 660 4096 4096 NT_STATUS_OK
ReadX 10178 852 4096 4096 NT_STATUS_OK
ReadX 10178 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10178 2368 4096 4096 NT_STATUS_OK
ReadX 10178 1024 4096 4096 NT_STATUS_OK
ReadX 10178 320 4096 4096 NT_STATUS_OK
ReadX 10178 580 4096 4096 NT_STATUS_OK
ReadX 10178 3136 512 512 NT_STATUS_OK
ReadX 10178 2880 4096 4096 NT_STATUS_OK
Close 10178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10210 NT_STATUS_OK
ReadX 10210 61440 4096 4096 NT_STATUS_OK
ReadX 10210 126976 4096 4096 NT_STATUS_OK
WriteX 10210 0 65536 65536 NT_STATUS_OK
WriteX 10210 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 61440 4096 4096 NT_STATUS_OK
ReadX 10211 126976 4096 4096 NT_STATUS_OK
ReadX 10211 192512 4096 4096 NT_STATUS_OK
ReadX 10211 258048 4096 4096 NT_STATUS_OK
WriteX 10211 0 65536 65536 NT_STATUS_OK
WriteX 10211 65536 65536 65536 NT_STATUS_OK
WriteX 10211 131072 65536 65536 NT_STATUS_OK
WriteX 10211 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10212 NT_STATUS_OK
ReadX 10212 61440 4096 4096 NT_STATUS_OK
ReadX 10212 126976 4096 4096 NT_STATUS_OK
ReadX 10212 192512 4096 4096 NT_STATUS_OK
ReadX 10212 258048 4096 4096 NT_STATUS_OK
ReadX 10212 323584 4096 4096 NT_STATUS_OK
ReadX 10212 389120 4096 4096 NT_STATUS_OK
ReadX 10212 454656 4096 4096 NT_STATUS_OK
ReadX 10212 520192 4096 4096 NT_STATUS_OK
WriteX 10212 0 65536 65536 NT_STATUS_OK
WriteX 10212 65536 65536 65536 NT_STATUS_OK
WriteX 10212 131072 65536 65536 NT_STATUS_OK
WriteX 10212 196608 65536 65536 NT_STATUS_OK
WriteX 10212 262144 65536 65536 NT_STATUS_OK
WriteX 10212 327680 65536 65536 NT_STATUS_OK
WriteX 10212 393216 65536 65536 NT_STATUS_OK
WriteX 10212 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10213 NT_STATUS_OK
ReadX 10213 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10214 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10215 NT_STATUS_OK
WriteX 10215 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10215 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10213 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10213 0 8192 8192 NT_STATUS_OK
Flush 10213 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10217 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10209 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10210 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Close 10212 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10220 NT_STATUS_OK
WriteX 10220 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10220 258 NT_STATUS_OK
WriteX 10220 0 62591 62591 NT_STATUS_OK
Close 10220 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10222 NT_STATUS_OK
Close 10222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10225 NT_STATUS_OK
WriteX 10225 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10225 258 NT_STATUS_OK
WriteX 10225 0 10845 10845 NT_STATUS_OK
Close 10225 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10227 NT_STATUS_OK
Close 10227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10230 NT_STATUS_OK
WriteX 10230 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10230 258 NT_STATUS_OK
WriteX 10230 0 30118 30118 NT_STATUS_OK
Close 10230 NT_STATUS_OK
WriteX 10213 0 4096 4096 NT_STATUS_OK
WriteX 10215 0 64 64 NT_STATUS_OK
Close 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10213 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 61440 61440 NT_STATUS_OK
ReadX 10232 61440 4096 4096 NT_STATUS_OK
ReadX 10232 65536 61440 61440 NT_STATUS_OK
ReadX 10232 126976 4096 4096 NT_STATUS_OK
ReadX 10232 131072 61440 61440 NT_STATUS_OK
ReadX 10232 192512 4096 4096 NT_STATUS_OK
ReadX 10232 196608 61440 61440 NT_STATUS_OK
ReadX 10232 258048 4096 4096 NT_STATUS_OK
ReadX 10232 262144 61440 61440 NT_STATUS_OK
ReadX 10232 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 61440 61440 NT_STATUS_OK
ReadX 10233 61440 4096 4096 NT_STATUS_OK
ReadX 10233 65536 61440 61440 NT_STATUS_OK
ReadX 10233 126976 4096 4096 NT_STATUS_OK
ReadX 10233 131072 61440 61440 NT_STATUS_OK
ReadX 10233 192512 4096 4096 NT_STATUS_OK
ReadX 10233 196608 61440 61440 NT_STATUS_OK
ReadX 10233 258048 4096 4096 NT_STATUS_OK
ReadX 10233 262144 61440 61440 NT_STATUS_OK
ReadX 10233 323584 4096 4096 NT_STATUS_OK
ReadX 10233 327680 61440 61440 NT_STATUS_OK
ReadX 10233 389120 4096 4096 NT_STATUS_OK
ReadX 10233 393216 61440 61440 NT_STATUS_OK
ReadX 10233 454656 4096 4096 NT_STATUS_OK
ReadX 10233 458752 61440 61440 NT_STATUS_OK
ReadX 10233 520192 4096 4096 NT_STATUS_OK
ReadX 10233 524288 61440 61440 NT_STATUS_OK
ReadX 10233 585728 4096 4096 NT_STATUS_OK
ReadX 10233 589824 61440 61440 NT_STATUS_OK
ReadX 10233 651264 4096 4096 NT_STATUS_OK
ReadX 10233 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 61440 61440 NT_STATUS_OK
ReadX 10234 61440 4096 4096 NT_STATUS_OK
ReadX 10234 65536 61440 61440 NT_STATUS_OK
ReadX 10234 126976 4096 4096 NT_STATUS_OK
ReadX 10234 131072 61440 61440 NT_STATUS_OK
ReadX 10234 192512 4096 4096 NT_STATUS_OK
ReadX 10234 196608 61440 61440 NT_STATUS_OK
ReadX 10234 258048 4096 4096 NT_STATUS_OK
ReadX 10234 262144 61440 61440 NT_STATUS_OK
ReadX 10234 323584 4096 4096 NT_STATUS_OK
ReadX 10234 327680 61440 61440 NT_STATUS_OK
ReadX 10234 389120 4096 4096 NT_STATUS_OK
ReadX 10234 393216 61440 61440 NT_STATUS_OK
ReadX 10234 454656 4096 4096 NT_STATUS_OK
ReadX 10234 458752 61440 61440 NT_STATUS_OK
ReadX 10234 520192 4096 4096 NT_STATUS_OK
ReadX 10234 524288 61440 61440 NT_STATUS_OK
ReadX 10234 585728 4096 4096 NT_STATUS_OK
ReadX 10234 589824 61440 61440 NT_STATUS_OK
ReadX 10234 651264 4096 4096 NT_STATUS_OK
ReadX 10234 655360 61440 61440 NT_STATUS_OK
ReadX 10234 716800 4096 4096 NT_STATUS_OK
ReadX 10234 720896 61440 61440 NT_STATUS_OK
ReadX 10234 782336 4096 4096 NT_STATUS_OK
ReadX 10234 786432 61440 61440 NT_STATUS_OK
ReadX 10234 847872 4096 4096 NT_STATUS_OK
ReadX 10234 851968 61440 61440 NT_STATUS_OK
ReadX 10234 913408 4096 4096 NT_STATUS_OK
ReadX 10234 917504 61440 61440 NT_STATUS_OK
ReadX 10234 978944 4096 4096 NT_STATUS_OK
ReadX 10234 983040 61440 61440 NT_STATUS_OK
ReadX 10234 1044480 4096 4096 NT_STATUS_OK
ReadX 10234 1048576 61440 61440 NT_STATUS_OK
ReadX 10234 1110016 4096 4096 NT_STATUS_OK
ReadX 10234 1114112 61440 61440 NT_STATUS_OK
ReadX 10234 1175552 4096 4096 NT_STATUS_OK
ReadX 10234 1179648 61440 61440 NT_STATUS_OK
ReadX 10234 1241088 4096 4096 NT_STATUS_OK
ReadX 10234 1245184 61440 61440 NT_STATUS_OK
ReadX 10234 1306624 4096 4096 NT_STATUS_OK
ReadX 10234 1310720 61440 61440 NT_STATUS_OK
ReadX 10234 1372160 4096 4096 NT_STATUS_OK
ReadX 10234 1376256 61440 61440 NT_STATUS_OK
ReadX 10234 1437696 4096 4096 NT_STATUS_OK
ReadX 10234 1441792 61440 61440 NT_STATUS_OK
ReadX 10234 1503232 4096 4096 NT_STATUS_OK
ReadX 10234 1507328 61440 61440 NT_STATUS_OK
ReadX 10234 1568768 4096 4096 NT_STATUS_OK
ReadX 10234 1572864 61440 61440 NT_STATUS_OK
ReadX 10234 1634304 4096 4096 NT_STATUS_OK
ReadX 10234 1638400 61440 61440 NT_STATUS_OK
ReadX 10234 1699840 4096 4096 NT_STATUS_OK
ReadX 10234 1703936 61440 61440 NT_STATUS_OK
ReadX 10234 1765376 4096 4096 NT_STATUS_OK
ReadX 10234 1769472 61440 61440 NT_STATUS_OK
ReadX 10234 1830912 4096 4096 NT_STATUS_OK
ReadX 10234 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10235 NT_STATUS_OK
Close 10235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
ReadX 10239 4096 4096 4096 NT_STATUS_OK
ReadX 10239 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10240 NT_STATUS_OK
Close 10240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10243 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10243 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10244 NT_STATUS_OK
Close 10244 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10247 NT_STATUS_OK
ReadX 10247 0 8192 8192 NT_STATUS_OK
ReadX 10247 8192 8192 8192 NT_STATUS_OK
ReadX 10247 16384 8192 8192 NT_STATUS_OK
ReadX 10247 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10249 NT_STATUS_OK
Close 10249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10252 NT_STATUS_OK
WriteX 10252 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10252 258 NT_STATUS_OK
WriteX 10252 0 10438 10438 NT_STATUS_OK
Close 10252 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10253 NT_STATUS_OK
Close 10253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10254 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10255 NT_STATUS_OK
Close 10255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10256 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10257 NT_STATUS_OK
Close 10257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10260 NT_STATUS_OK
Close 10260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
ReadX 10261 4096 4096 4096 NT_STATUS_OK
ReadX 10261 8192 4096 4096 NT_STATUS_OK
ReadX 10261 12288 8192 8192 NT_STATUS_OK
ReadX 10261 20480 8192 8192 NT_STATUS_OK
ReadX 10261 28672 8192 8192 NT_STATUS_OK
ReadX 10261 36864 8192 8192 NT_STATUS_OK
ReadX 10261 45056 8192 8192 NT_STATUS_OK
ReadX 10261 53248 8192 8192 NT_STATUS_OK
ReadX 10261 61440 8192 8192 NT_STATUS_OK
ReadX 10261 69632 8192 8192 NT_STATUS_OK
ReadX 10261 77824 8192 8192 NT_STATUS_OK
ReadX 10261 86016 8192 8192 NT_STATUS_OK
ReadX 10261 94208 8192 8192 NT_STATUS_OK
ReadX 10261 102400 8192 8192 NT_STATUS_OK
ReadX 10261 110592 8192 8192 NT_STATUS_OK
ReadX 10261 118784 8192 8192 NT_STATUS_OK
ReadX 10261 126976 8192 8192 NT_STATUS_OK
ReadX 10261 135168 8192 8192 NT_STATUS_OK
ReadX 10261 143360 8192 8192 NT_STATUS_OK
ReadX 10261 151552 8192 8192 NT_STATUS_OK
ReadX 10261 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10263 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10266 NT_STATUS_OK
WriteX 10266 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10266 258 NT_STATUS_OK
WriteX 10266 0 28489 28489 NT_STATUS_OK
Close 10266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10267 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10269 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10270 NT_STATUS_OK
Close 10270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 0 8192 8192 NT_STATUS_OK
ReadX 10273 8192 8192 8192 NT_STATUS_OK
ReadX 10273 16384 8192 8192 NT_STATUS_OK
ReadX 10273 24576 8192 8192 NT_STATUS_OK
ReadX 10273 32768 16384 16384 NT_STATUS_OK
ReadX 10273 49152 8192 8192 NT_STATUS_OK
ReadX 10273 57344 8192 8192 NT_STATUS_OK
ReadX 10273 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10275 NT_STATUS_OK
Close 10275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10273 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10278 NT_STATUS_OK
WriteX 10278 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 258 NT_STATUS_OK
WriteX 10278 0 29253 29253 NT_STATUS_OK
Close 10278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10279 NT_STATUS_OK
Close 10279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10280 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10282 NT_STATUS_OK
Close 10282 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10285 NT_STATUS_OK
WriteX 10285 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 258 NT_STATUS_OK
WriteX 10285 0 30183 30183 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10286 NT_STATUS_OK
Close 10286 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10288 NT_STATUS_OK
WriteX 10288 0 510 510 NT_STATUS_OK
WriteX 10288 510 512 512 NT_STATUS_OK
WriteX 10288 1022 510 510 NT_STATUS_OK
WriteX 10288 1532 510 510 NT_STATUS_OK
WriteX 10288 2042 168 168 NT_STATUS_OK
Close 10288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10289 NT_STATUS_OK
Close 10289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
WriteX 10291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 61440 4096 4096 NT_STATUS_OK
ReadX 10292 126976 4096 4096 NT_STATUS_OK
WriteX 10292 0 65536 65536 NT_STATUS_OK
WriteX 10292 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 61440 4096 4096 NT_STATUS_OK
ReadX 10293 126976 4096 4096 NT_STATUS_OK
ReadX 10293 192512 4096 4096 NT_STATUS_OK
ReadX 10293 258048 4096 4096 NT_STATUS_OK
WriteX 10293 0 65536 65536 NT_STATUS_OK
WriteX 10293 65536 65536 65536 NT_STATUS_OK
WriteX 10293 131072 65536 65536 NT_STATUS_OK
WriteX 10293 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10294 NT_STATUS_OK
ReadX 10294 61440 4096 4096 NT_STATUS_OK
ReadX 10294 126976 4096 4096 NT_STATUS_OK
ReadX 10294 192512 4096 4096 NT_STATUS_OK
ReadX 10294 258048 4096 4096 NT_STATUS_OK
ReadX 10294 323584 4096 4096 NT_STATUS_OK
ReadX 10294 389120 4096 4096 NT_STATUS_OK
ReadX 10294 454656 4096 4096 NT_STATUS_OK
ReadX 10294 520192 4096 4096 NT_STATUS_OK
WriteX 10294 0 65536 65536 NT_STATUS_OK
WriteX 10294 65536 65536 65536 NT_STATUS_OK
WriteX 10294 131072 65536 65536 NT_STATUS_OK
WriteX 10294 196608 65536 65536 NT_STATUS_OK
WriteX 10294 262144 65536 65536 NT_STATUS_OK
WriteX 10294 327680 65536 65536 NT_STATUS_OK
WriteX 10294 393216 65536 65536 NT_STATUS_OK
WriteX 10294 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10295 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10292 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10301 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10304 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10306 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10310 NT_STATUS_OK
Close 10310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10313 NT_STATUS_OK
Close 10313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10315 NT_STATUS_OK
Close 10315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10319 NT_STATUS_OK
Close 10319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10324 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10329 NT_STATUS_OK
Close 10329 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10334 NT_STATUS_OK
Close 10334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10349 NT_STATUS_OK
Close 10349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10354 NT_STATUS_OK
Close 10354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10360 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10363 NT_STATUS_OK
WriteX 10363 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10363 0 65536 65536 NT_STATUS_OK
WriteX 10363 65536 65536 65536 NT_STATUS_OK
WriteX 10363 131072 65536 65536 NT_STATUS_OK
WriteX 10363 196608 65536 65536 NT_STATUS_OK
WriteX 10363 262144 26634 26634 NT_STATUS_OK
Close 10363 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10368 NT_STATUS_OK
Close 10368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10369 NT_STATUS_OK
Close 10369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 4096 4096 NT_STATUS_OK
Close 10370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
ReadX 10371 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10372 NT_STATUS_OK
Close 10372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10376 NT_STATUS_OK
Close 10376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10379 NT_STATUS_OK
Close 10379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10381 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10385 NT_STATUS_OK
Close 10385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10390 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10399 NT_STATUS_OK
Close 10399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10404 NT_STATUS_OK
Close 10404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10419 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10423 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10428 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10433 NT_STATUS_OK
Close 10433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10436 NT_STATUS_OK
Close 10436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10448 NT_STATUS_OK
Close 10448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10449 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 4096 4096 NT_STATUS_OK
Close 10450 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10451 NT_STATUS_OK
ReadX 10451 0 4096 4096 NT_STATUS_OK
Close 10451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10452 NT_STATUS_OK
ReadX 10452 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10462 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
Close 10464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10465 NT_STATUS_OK
ReadX 10465 0 4096 4096 NT_STATUS_OK
Close 10465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10452 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10495 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10495 0 4096 4096 NT_STATUS_OK
Close 10495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 0 4096 4096 NT_STATUS_OK
ReadX 10497 4096 4096 4096 NT_STATUS_OK
ReadX 10497 8192 4096 4096 NT_STATUS_OK
ReadX 10497 12288 4096 4096 NT_STATUS_OK
ReadX 10497 16384 4096 4096 NT_STATUS_OK
ReadX 10497 20480 4096 4096 NT_STATUS_OK
ReadX 10497 24576 4096 4096 NT_STATUS_OK
ReadX 10497 28672 4096 4096 NT_STATUS_OK
ReadX 10497 32768 4096 4096 NT_STATUS_OK
ReadX 10497 36864 4096 4096 NT_STATUS_OK
ReadX 10497 40960 4096 4096 NT_STATUS_OK
ReadX 10497 45056 4096 4096 NT_STATUS_OK
ReadX 10497 49152 4096 4096 NT_STATUS_OK
ReadX 10497 53248 4096 4096 NT_STATUS_OK
ReadX 10497 57344 4096 4096 NT_STATUS_OK
ReadX 10497 61440 4096 4096 NT_STATUS_OK
ReadX 10497 65536 4096 4096 NT_STATUS_OK
ReadX 10497 69632 4096 4096 NT_STATUS_OK
ReadX 10497 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10497 1004 NT_STATUS_OK
WriteX 10497 0 4096 4096 NT_STATUS_OK
Close 10497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10498 NT_STATUS_OK
SET_FILE_INFORMATION 10498 1004 NT_STATUS_OK
Close 10498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10503 NT_STATUS_OK
WriteX 10503 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10503 258 NT_STATUS_OK
WriteX 10503 0 65536 65536 NT_STATUS_OK
WriteX 10503 65536 19979 19979 NT_STATUS_OK
Close 10503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 4096 4096 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
QUERY_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
SET_FILE_INFORMATION 10504 1004 NT_STATUS_OK
WriteX 10504 0 4096 4096 NT_STATUS_OK
Flush 10504 NT_STATUS_OK
Close 10504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10506 NT_STATUS_OK
ReadX 10506 0 4096 4096 NT_STATUS_OK
Close 10505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
Close 10507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
Close 10508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10509 1004 NT_STATUS_OK
WriteX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10510 NT_STATUS_OK
Close 10510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10506 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10512 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10515 NT_STATUS_OK
WriteX 10515 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 258 NT_STATUS_OK
WriteX 10515 0 65536 65536 NT_STATUS_OK
WriteX 10515 65536 17654 17654 NT_STATUS_OK
Close 10515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 4096 4096 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
QUERY_FILE_INFORMATION 10516 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
SET_FILE_INFORMATION 10516 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
Flush 10516 NT_STATUS_OK
Close 10516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10517 NT_STATUS_OK
SET_FILE_INFORMATION 10517 1004 NT_STATUS_OK
Close 10517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10518 NT_STATUS_OK
ReadX 10518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10519 NT_STATUS_OK
Close 10519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10521 NT_STATUS_OK
ReadX 10521 0 4096 4096 NT_STATUS_OK
ReadX 10521 4096 4096 4096 NT_STATUS_OK
ReadX 10521 8192 4096 4096 NT_STATUS_OK
ReadX 10521 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10521 16384 4096 4096 NT_STATUS_OK
ReadX 10521 20480 4096 4096 NT_STATUS_OK
ReadX 10521 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
Close 10522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10523 NT_STATUS_OK
ReadX 10523 0 4096 4096 NT_STATUS_OK
Close 10523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10524 NT_STATUS_OK
ReadX 10524 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10524 1004 NT_STATUS_OK
WriteX 10524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10525 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10524 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10527 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10530 NT_STATUS_OK
WriteX 10530 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10530 258 NT_STATUS_OK
WriteX 10530 0 65536 65536 NT_STATUS_OK
WriteX 10530 65536 19490 19490 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10531 NT_STATUS_OK
ReadX 10531 0 4096 4096 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
QUERY_FILE_INFORMATION 10531 1004 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
SET_FILE_INFORMATION 10531 1004 NT_STATUS_OK
WriteX 10531 0 4096 4096 NT_STATUS_OK
Flush 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10532 NT_STATUS_OK
SET_FILE_INFORMATION 10532 1004 NT_STATUS_OK
Close 10532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10533 NT_STATUS_OK
ReadX 10533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10534 NT_STATUS_OK
Close 10534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10536 0 4096 4096 NT_STATUS_OK
Close 10536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10538 NT_STATUS_OK
ReadX 10538 0 4096 4096 NT_STATUS_OK
ReadX 10538 4096 4096 4096 NT_STATUS_OK
ReadX 10538 8192 4096 4096 NT_STATUS_OK
ReadX 10538 12288 4096 4096 NT_STATUS_OK
ReadX 10538 16384 4096 4096 NT_STATUS_OK
ReadX 10538 20480 4096 4096 NT_STATUS_OK
ReadX 10538 24576 4096 4096 NT_STATUS_OK
ReadX 10538 28672 4096 4096 NT_STATUS_OK
ReadX 10538 32768 4096 4096 NT_STATUS_OK
ReadX 10538 36864 4096 4096 NT_STATUS_OK
ReadX 10538 40960 4096 4096 NT_STATUS_OK
ReadX 10538 45056 4096 4096 NT_STATUS_OK
ReadX 10538 49152 4096 4096 NT_STATUS_OK
ReadX 10538 53248 4096 4096 NT_STATUS_OK
ReadX 10538 57344 4096 4096 NT_STATUS_OK
ReadX 10538 61440 4096 4096 NT_STATUS_OK
ReadX 10538 65536 4096 4096 NT_STATUS_OK
ReadX 10538 69632 4096 4096 NT_STATUS_OK
ReadX 10538 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10538 1004 NT_STATUS_OK
WriteX 10538 0 4096 4096 NT_STATUS_OK
Close 10538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10539 NT_STATUS_OK
SET_FILE_INFORMATION 10539 1004 NT_STATUS_OK
Close 10539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10540 NT_STATUS_OK
ReadX 10540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10533 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10544 NT_STATUS_OK
WriteX 10544 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10544 258 NT_STATUS_OK
WriteX 10544 0 65536 65536 NT_STATUS_OK
WriteX 10544 65536 8866 8866 NT_STATUS_OK
Close 10544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 0 4096 4096 NT_STATUS_OK
WriteX 10545 0 4096 4096 NT_STATUS_OK
Flush 10545 NT_STATUS_OK
SET_FILE_INFORMATION 10545 1004 NT_STATUS_OK
WriteX 10545 0 4096 4096 NT_STATUS_OK
Flush 10545 NT_STATUS_OK
Close 10545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 0 4096 4096 NT_STATUS_OK
Close 10547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 4096 4096 NT_STATUS_OK
Close 10548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10549 NT_STATUS_OK
ReadX 10549 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10549 1004 NT_STATUS_OK
WriteX 10549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10549 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10555 NT_STATUS_OK
WriteX 10555 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10555 258 NT_STATUS_OK
WriteX 10555 0 65536 65536 NT_STATUS_OK
WriteX 10555 65536 9298 9298 NT_STATUS_OK
Close 10555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10556 NT_STATUS_OK
ReadX 10556 0 4096 4096 NT_STATUS_OK
WriteX 10556 0 4096 4096 NT_STATUS_OK
Flush 10556 NT_STATUS_OK
SET_FILE_INFORMATION 10556 1004 NT_STATUS_OK
WriteX 10556 0 4096 4096 NT_STATUS_OK
Flush 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10557 NT_STATUS_OK
SET_FILE_INFORMATION 10557 1004 NT_STATUS_OK
Close 10557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10558 NT_STATUS_OK
ReadX 10558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10562 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10562 0 4096 4096 NT_STATUS_OK
Close 10562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10563 NT_STATUS_OK
ReadX 10563 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10563 4096 4096 4096 NT_STATUS_OK
ReadX 10563 8192 4096 4096 NT_STATUS_OK
ReadX 10563 12288 4096 4096 NT_STATUS_OK
ReadX 10563 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10564 NT_STATUS_OK
ReadX 10564 0 4096 4096 NT_STATUS_OK
Close 10564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10565 NT_STATUS_OK
ReadX 10565 0 4096 4096 NT_STATUS_OK
Close 10565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10566 NT_STATUS_OK
ReadX 10566 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10566 1004 NT_STATUS_OK
WriteX 10566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10567 NT_STATUS_OK
Close 10567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10566 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10569 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10572 NT_STATUS_OK
WriteX 10572 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10572 258 NT_STATUS_OK
WriteX 10572 0 65536 65536 NT_STATUS_OK
WriteX 10572 65536 11540 11540 NT_STATUS_OK
Close 10572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
WriteX 10573 0 4096 4096 NT_STATUS_OK
Flush 10573 NT_STATUS_OK
SET_FILE_INFORMATION 10573 1004 NT_STATUS_OK
WriteX 10573 0 4096 4096 NT_STATUS_OK
Flush 10573 NT_STATUS_OK
Close 10573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10574 NT_STATUS_OK
SET_FILE_INFORMATION 10574 1004 NT_STATUS_OK
Close 10574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10575 NT_STATUS_OK
ReadX 10575 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10576 NT_STATUS_OK
Close 10576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10578 NT_STATUS_OK
ReadX 10578 61440 4096 4096 NT_STATUS_OK
ReadX 10578 126976 4096 4096 NT_STATUS_OK
WriteX 10578 0 65536 65536 NT_STATUS_OK
WriteX 10578 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10579 NT_STATUS_OK
ReadX 10579 61440 4096 4096 NT_STATUS_OK
ReadX 10579 126976 4096 4096 NT_STATUS_OK
ReadX 10579 192512 4096 4096 NT_STATUS_OK
ReadX 10579 258048 4096 4096 NT_STATUS_OK
WriteX 10579 0 65536 65536 NT_STATUS_OK
WriteX 10579 65536 65536 65536 NT_STATUS_OK
WriteX 10579 131072 65536 65536 NT_STATUS_OK
WriteX 10579 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 61440 4096 4096 NT_STATUS_OK
ReadX 10580 126976 4096 4096 NT_STATUS_OK
ReadX 10580 192512 4096 4096 NT_STATUS_OK
ReadX 10580 258048 4096 4096 NT_STATUS_OK
ReadX 10580 323584 4096 4096 NT_STATUS_OK
ReadX 10580 389120 4096 4096 NT_STATUS_OK
ReadX 10580 454656 4096 4096 NT_STATUS_OK
ReadX 10580 520192 4096 4096 NT_STATUS_OK
WriteX 10580 0 65536 65536 NT_STATUS_OK
WriteX 10580 65536 65536 65536 NT_STATUS_OK
WriteX 10580 131072 65536 65536 NT_STATUS_OK
WriteX 10580 196608 65536 65536 NT_STATUS_OK
WriteX 10580 262144 65536 65536 NT_STATUS_OK
WriteX 10580 327680 65536 65536 NT_STATUS_OK
WriteX 10580 393216 65536 65536 NT_STATUS_OK
WriteX 10580 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 4096 4096 NT_STATUS_OK
ReadX 10581 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10582 NT_STATUS_OK
WriteX 10582 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10582 258 NT_STATUS_OK
WriteX 10582 0 53 53 NT_STATUS_OK
Close 10582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10583 NT_STATUS_OK
Close 10583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10575 NT_STATUS_OK
Close 10521 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Close 10579 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10581 8192 4096 4096 NT_STATUS_OK
ReadX 10581 12288 4096 4096 NT_STATUS_OK
WriteX 10585 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10585 258 NT_STATUS_OK
ReadX 10581 16384 4096 4096 NT_STATUS_OK
ReadX 10581 20480 4096 4096 NT_STATUS_OK
WriteX 10585 0 15360 15360 NT_STATUS_OK
Close 10585 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10586 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10586 1004 NT_STATUS_OK
WriteX 10586 0 4096 4096 NT_STATUS_OK
Close 10586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10587 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10589 NT_STATUS_OK
ReadX 10589 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10589 4096 4096 4096 NT_STATUS_OK
ReadX 10589 8192 4096 4096 NT_STATUS_OK
ReadX 10589 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10592 NT_STATUS_OK
ReadX 10592 0 4096 4096 NT_STATUS_OK
ReadX 10592 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10593 NT_STATUS_OK
ReadX 10593 0 4096 4096 NT_STATUS_OK
ReadX 10593 4096 4096 4096 NT_STATUS_OK
ReadX 10593 8192 4096 4096 NT_STATUS_OK
Close 10592 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10594 NT_STATUS_OK
WriteX 10594 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10594 258 NT_STATUS_OK
WriteX 10594 0 15360 15360 NT_STATUS_OK
Close 10594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10595 NT_STATUS_OK
ReadX 10595 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10595 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10595 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10599 NT_STATUS_OK
SET_FILE_INFORMATION 10599 1004 NT_STATUS_OK
Close 10599 NT_STATUS_OK
WriteX 10595 0 4096 4096 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10600 NT_STATUS_OK
Close 10600 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10602 NT_STATUS_OK
ReadX 10602 0 4096 4096 NT_STATUS_OK
ReadX 10602 4096 4096 4096 NT_STATUS_OK
ReadX 10602 8192 4096 4096 NT_STATUS_OK
ReadX 10602 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10602 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10602 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10603 NT_STATUS_OK
ReadX 10603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10604 NT_STATUS_OK
WriteX 10604 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10604 258 NT_STATUS_OK
WriteX 10604 0 53 53 NT_STATUS_OK
Close 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10605 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10603 4096 4096 4096 NT_STATUS_OK
ReadX 10603 8192 4096 4096 NT_STATUS_OK
ReadX 10603 12288 4096 4096 NT_STATUS_OK
WriteX 10607 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10607 258 NT_STATUS_OK
WriteX 10607 0 12006 12006 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10608 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10608 1004 NT_STATUS_OK
WriteX 10608 0 4096 4096 NT_STATUS_OK
Close 10608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10609 NT_STATUS_OK
Close 10609 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10611 NT_STATUS_OK
ReadX 10611 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10612 NT_STATUS_OK
Close 10612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10611 4096 4096 4096 NT_STATUS_OK
ReadX 10611 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10614 NT_STATUS_OK
WriteX 10614 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
WriteX 10614 0 11991 11991 NT_STATUS_OK
Close 10614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10615 NT_STATUS_OK
ReadX 10615 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10615 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10615 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10616 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10618 NT_STATUS_OK
ReadX 10618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10619 NT_STATUS_OK
SET_FILE_INFORMATION 10619 1004 NT_STATUS_OK
Close 10619 NT_STATUS_OK
WriteX 10615 0 4096 4096 NT_STATUS_OK
Close 10615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10620 NT_STATUS_OK
Close 10620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10622 NT_STATUS_OK
ReadX 10622 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10623 NT_STATUS_OK
Close 10623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10622 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
ReadX 10622 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
WriteX 10622 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10622 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10622 1004 NT_STATUS_OK
Close 10598 NT_STATUS_OK
WriteX 10602 0 19054 19054 NT_STATUS_OK
WriteX 10622 0 12288 12288 NT_STATUS_OK
Close 10618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Close 10622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10627 NT_STATUS_OK
Close 10627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 0 61440 61440 NT_STATUS_OK
ReadX 10629 61440 4096 4096 NT_STATUS_OK
ReadX 10629 65536 61440 61440 NT_STATUS_OK
ReadX 10629 126976 4096 4096 NT_STATUS_OK
ReadX 10629 131072 61440 61440 NT_STATUS_OK
ReadX 10629 192512 4096 4096 NT_STATUS_OK
ReadX 10629 196608 61440 61440 NT_STATUS_OK
ReadX 10629 258048 4096 4096 NT_STATUS_OK
ReadX 10629 262144 61440 61440 NT_STATUS_OK
ReadX 10629 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10630 NT_STATUS_OK
ReadX 10630 0 61440 61440 NT_STATUS_OK
ReadX 10630 61440 4096 4096 NT_STATUS_OK
ReadX 10630 65536 61440 61440 NT_STATUS_OK
ReadX 10630 126976 4096 4096 NT_STATUS_OK
ReadX 10630 131072 61440 61440 NT_STATUS_OK
ReadX 10630 192512 4096 4096 NT_STATUS_OK
ReadX 10630 196608 61440 61440 NT_STATUS_OK
ReadX 10630 258048 4096 4096 NT_STATUS_OK
ReadX 10630 262144 61440 61440 NT_STATUS_OK
ReadX 10630 323584 4096 4096 NT_STATUS_OK
ReadX 10630 327680 61440 61440 NT_STATUS_OK
ReadX 10630 389120 4096 4096 NT_STATUS_OK
ReadX 10630 393216 61440 61440 NT_STATUS_OK
ReadX 10630 454656 4096 4096 NT_STATUS_OK
ReadX 10630 458752 61440 61440 NT_STATUS_OK
ReadX 10630 520192 4096 4096 NT_STATUS_OK
ReadX 10630 524288 61440 61440 NT_STATUS_OK
ReadX 10630 585728 4096 4096 NT_STATUS_OK
ReadX 10630 589824 61440 61440 NT_STATUS_OK
ReadX 10630 651264 4096 4096 NT_STATUS_OK
ReadX 10630 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10631 NT_STATUS_OK
ReadX 10631 0 61440 61440 NT_STATUS_OK
ReadX 10631 61440 4096 4096 NT_STATUS_OK
ReadX 10631 65536 61440 61440 NT_STATUS_OK
ReadX 10631 126976 4096 4096 NT_STATUS_OK
ReadX 10631 131072 61440 61440 NT_STATUS_OK
ReadX 10631 192512 4096 4096 NT_STATUS_OK
ReadX 10631 196608 61440 61440 NT_STATUS_OK
ReadX 10631 258048 4096 4096 NT_STATUS_OK
ReadX 10631 262144 61440 61440 NT_STATUS_OK
ReadX 10631 323584 4096 4096 NT_STATUS_OK
ReadX 10631 327680 61440 61440 NT_STATUS_OK
ReadX 10631 389120 4096 4096 NT_STATUS_OK
ReadX 10631 393216 61440 61440 NT_STATUS_OK
ReadX 10631 454656 4096 4096 NT_STATUS_OK
ReadX 10631 458752 61440 61440 NT_STATUS_OK
ReadX 10631 520192 4096 4096 NT_STATUS_OK
ReadX 10631 524288 61440 61440 NT_STATUS_OK
ReadX 10631 585728 4096 4096 NT_STATUS_OK
ReadX 10631 589824 61440 61440 NT_STATUS_OK
ReadX 10631 651264 4096 4096 NT_STATUS_OK
ReadX 10631 655360 61440 61440 NT_STATUS_OK
ReadX 10631 716800 4096 4096 NT_STATUS_OK
ReadX 10631 720896 61440 61440 NT_STATUS_OK
ReadX 10631 782336 4096 4096 NT_STATUS_OK
ReadX 10631 786432 61440 61440 NT_STATUS_OK
ReadX 10631 847872 4096 4096 NT_STATUS_OK
ReadX 10631 851968 61440 61440 NT_STATUS_OK
ReadX 10631 913408 4096 4096 NT_STATUS_OK
ReadX 10631 917504 61440 61440 NT_STATUS_OK
ReadX 10631 978944 4096 4096 NT_STATUS_OK
ReadX 10631 983040 61440 61440 NT_STATUS_OK
ReadX 10631 1044480 4096 4096 NT_STATUS_OK
ReadX 10631 1048576 61440 61440 NT_STATUS_OK
ReadX 10631 1110016 4096 4096 NT_STATUS_OK
ReadX 10631 1114112 61440 61440 NT_STATUS_OK
ReadX 10631 1175552 4096 4096 NT_STATUS_OK
ReadX 10631 1179648 61440 61440 NT_STATUS_OK
ReadX 10631 1241088 4096 4096 NT_STATUS_OK
ReadX 10631 1245184 61440 61440 NT_STATUS_OK
ReadX 10631 1306624 4096 4096 NT_STATUS_OK
ReadX 10631 1310720 61440 61440 NT_STATUS_OK
ReadX 10631 1372160 4096 4096 NT_STATUS_OK
ReadX 10631 1376256 61440 61440 NT_STATUS_OK
ReadX 10631 1437696 4096 4096 NT_STATUS_OK
ReadX 10631 1441792 61440 61440 NT_STATUS_OK
ReadX 10631 1503232 4096 4096 NT_STATUS_OK
ReadX 10631 1507328 61440 61440 NT_STATUS_OK
ReadX 10631 1568768 4096 4096 NT_STATUS_OK
ReadX 10631 1572864 61440 61440 NT_STATUS_OK
ReadX 10631 1634304 4096 4096 NT_STATUS_OK
ReadX 10631 1638400 61440 61440 NT_STATUS_OK
ReadX 10631 1699840 4096 4096 NT_STATUS_OK
ReadX 10631 1703936 61440 61440 NT_STATUS_OK
ReadX 10631 1765376 4096 4096 NT_STATUS_OK
ReadX 10631 1769472 61440 61440 NT_STATUS_OK
ReadX 10631 1830912 4096 4096 NT_STATUS_OK
ReadX 10631 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10632 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10633 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10633 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10635 NT_STATUS_OK
ReadX 10635 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10636 NT_STATUS_OK
ReadX 10636 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10638 NT_STATUS_OK
QUERY_FILE_INFORMATION 10638 1004 NT_STATUS_OK
WriteX 10638 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10638 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10640 NT_STATUS_OK
WriteX 10640 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10640 258 NT_STATUS_OK
WriteX 10640 0 491 491 NT_STATUS_OK
Close 10640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10641 NT_STATUS_OK
ReadX 10641 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10638 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10643 NT_STATUS_OK
Close 10643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10644 NT_STATUS_OK
WriteX 10644 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 258 NT_STATUS_OK
WriteX 10644 0 543 543 NT_STATUS_OK
Close 10644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10645 NT_STATUS_OK
ReadX 10645 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Close 10630 NT_STATUS_OK
Close 10631 NT_STATUS_OK
Close 10645 NT_STATUS_OK
Close 10633 NT_STATUS_OK
Close 10634 NT_STATUS_OK
Close 10635 NT_STATUS_OK
Close 10636 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10648 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10648 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10649 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10650 NT_STATUS_OK
ReadX 10650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10651 NT_STATUS_OK
ReadX 10651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10657 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10658 NT_STATUS_OK
QUERY_FILE_INFORMATION 10658 1004 NT_STATUS_OK
WriteX 10658 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10658 258 NT_STATUS_OK
WriteX 10658 0 2048 2048 NT_STATUS_OK
Close 10658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10659 NT_STATUS_OK
ReadX 10659 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10659 0 4096 4096 NT_STATUS_OK
Flush 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10659 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10664 NT_STATUS_OK
WriteX 10664 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10664 258 NT_STATUS_OK
WriteX 10664 0 2048 2048 NT_STATUS_OK
Close 10664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10665 NT_STATUS_OK
ReadX 10665 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10669 NT_STATUS_OK
Close 10669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10670 NT_STATUS_OK
WriteX 10670 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10670 258 NT_STATUS_OK
WriteX 10670 0 2048 2048 NT_STATUS_OK
Close 10670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10671 NT_STATUS_OK
ReadX 10671 0 2048 2048 NT_STATUS_OK
ReadX 10649 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10665 0 4096 4096 NT_STATUS_OK
WriteX 10649 0 8192 8192 NT_STATUS_OK
WriteX 10650 0 4096 4096 NT_STATUS_OK
WriteX 10651 0 4096 4096 NT_STATUS_OK
ReadX 10665 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10674 NT_STATUS_OK
ReadX 10674 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10675 NT_STATUS_OK
QUERY_FILE_INFORMATION 10675 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10674 NT_STATUS_OK
Close 10650 NT_STATUS_OK
Close 10651 NT_STATUS_OK
Close 10652 NT_STATUS_OK
Close 10665 NT_STATUS_OK
Close 10649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10677 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10680 NT_STATUS_OK
ReadX 10680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10681 NT_STATUS_OK
ReadX 10681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10682 NT_STATUS_OK
ReadX 10682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10683 NT_STATUS_OK
ReadX 10683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10684 NT_STATUS_OK
ReadX 10684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10685 NT_STATUS_OK
ReadX 10685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10686 NT_STATUS_OK
ReadX 10686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10687 NT_STATUS_OK
ReadX 10687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10689 NT_STATUS_OK
ReadX 10689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10690 NT_STATUS_OK
ReadX 10690 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10694 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10695 NT_STATUS_OK
QUERY_FILE_INFORMATION 10695 1004 NT_STATUS_OK
WriteX 10695 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10695 258 NT_STATUS_OK
WriteX 10695 0 2048 2048 NT_STATUS_OK
Close 10695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10696 NT_STATUS_OK
ReadX 10696 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10686 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10703 NT_STATUS_OK
QUERY_FILE_INFORMATION 10703 1004 NT_STATUS_OK
WriteX 10703 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10703 258 NT_STATUS_OK
WriteX 10703 0 2048 2048 NT_STATUS_OK
Close 10703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10704 NT_STATUS_OK
ReadX 10704 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10696 0 4096 4096 NT_STATUS_OK
Flush 10696 NT_STATUS_OK
WriteX 10704 0 4096 4096 NT_STATUS_OK
Flush 10704 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10696 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10698 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10706 NT_STATUS_OK
WriteX 10706 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 258 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10708 NT_STATUS_OK
Close 10708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10709 NT_STATUS_OK
WriteX 10709 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10709 258 NT_STATUS_OK
WriteX 10709 0 4096 4096 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10710 0 4096 4096 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10690 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Close 10698 NT_STATUS_OK
Close 10687 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10689 NT_STATUS_OK
Close 10685 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Close 10682 NT_STATUS_OK
Close 10683 NT_STATUS_OK
Close 10680 NT_STATUS_OK
Close 10681 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10715 NT_STATUS_OK
ReadX 10715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10717 NT_STATUS_OK
WriteX 10717 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10717 258 NT_STATUS_OK
WriteX 10717 0 2048 2048 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10719 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10719 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10720 NT_STATUS_OK
ReadX 10720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10722 NT_STATUS_OK
ReadX 10722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10726 NT_STATUS_OK
ReadX 10726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10727 NT_STATUS_OK
ReadX 10727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10728 NT_STATUS_OK
ReadX 10728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10729 NT_STATUS_OK
ReadX 10729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10730 NT_STATUS_OK
ReadX 10730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10731 NT_STATUS_OK
ReadX 10731 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10732 NT_STATUS_OK
QUERY_FILE_INFORMATION 10732 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Close 10718 NT_STATUS_OK
Close 10730 NT_STATUS_OK
Close 10725 NT_STATUS_OK
Close 10726 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Close 10728 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Close 10731 NT_STATUS_OK
Close 10719 NT_STATUS_OK
Close 10720 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10724 NT_STATUS_OK
Close 10721 NT_STATUS_OK
Close 10722 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10734 NT_STATUS_OK
QUERY_FILE_INFORMATION 10734 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10737 NT_STATUS_OK
ReadX 10737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10738 NT_STATUS_OK
ReadX 10738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10744 NT_STATUS_OK
ReadX 10744 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10745 NT_STATUS_OK
ReadX 10745 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10746 NT_STATUS_OK
ReadX 10746 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10754 NT_STATUS_OK
QUERY_FILE_INFORMATION 10754 1004 NT_STATUS_OK
WriteX 10754 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10754 258 NT_STATUS_OK
WriteX 10754 0 2048 2048 NT_STATUS_OK
Close 10754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10755 NT_STATUS_OK
ReadX 10755 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10757 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10761 NT_STATUS_OK
ReadX 10761 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10765 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10766 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 1004 NT_STATUS_OK
WriteX 10766 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10766 258 NT_STATUS_OK
WriteX 10766 0 2048 2048 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10769 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10774 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 1004 NT_STATUS_OK
WriteX 10774 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 2048 2048 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
Flush 10755 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
Flush 10767 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10755 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10767 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10757 4096 16384 16384 NT_STATUS_OK
ReadX 10737 4096 16384 16384 NT_STATUS_OK
ReadX 10769 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 2048 2048 NT_STATUS_OK
WriteX 10777 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10778 NT_STATUS_OK
QUERY_FILE_INFORMATION 10778 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10761 NT_STATUS_OK
Close 10749 NT_STATUS_OK
Close 10741 NT_STATUS_OK
Close 10757 NT_STATUS_OK
Close 10758 NT_STATUS_OK
Close 10759 NT_STATUS_OK
Close 10760 NT_STATUS_OK
Close 10748 NT_STATUS_OK
Close 10769 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Close 10746 NT_STATUS_OK
Close 10747 NT_STATUS_OK
Close 10744 NT_STATUS_OK
Close 10745 NT_STATUS_OK
Close 10737 NT_STATUS_OK
Close 10738 NT_STATUS_OK
Close 10739 NT_STATUS_OK
Close 10740 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10780 NT_STATUS_OK
QUERY_FILE_INFORMATION 10780 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10782 NT_STATUS_OK
QUERY_FILE_INFORMATION 10782 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10788 NT_STATUS_OK
ReadX 10788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10785 4096 16384 16384 NT_STATUS_OK
WriteX 10785 0 4096 4096 NT_STATUS_OK
WriteX 10786 0 4096 4096 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10791 NT_STATUS_OK
ReadX 10791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10793 NT_STATUS_OK
ReadX 10793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10798 NT_STATUS_OK
ReadX 10798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10799 NT_STATUS_OK
ReadX 10799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10800 NT_STATUS_OK
ReadX 10800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10802 NT_STATUS_OK
ReadX 10802 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10803 NT_STATUS_OK
ReadX 10803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 8192 8192 NT_STATUS_OK
ReadX 10791 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10805 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10805 0 4096 4096 NT_STATUS_OK
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 4096 4096 NT_STATUS_OK
WriteX 10791 0 4096 4096 NT_STATUS_OK
WriteX 10792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10806 0 4096 4096 NT_STATUS_OK
ReadX 10806 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10785 0 4096 4096 NT_STATUS_OK
WriteX 10786 0 4096 4096 NT_STATUS_OK
WriteX 10787 0 4096 4096 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10810 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10811 NT_STATUS_OK
QUERY_FILE_INFORMATION 10811 1004 NT_STATUS_OK
WriteX 10811 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10811 258 NT_STATUS_OK
WriteX 10811 0 2048 2048 NT_STATUS_OK
Close 10811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10813 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 0 4096 4096 NT_STATUS_OK
ReadX 10814 4096 4096 4096 NT_STATUS_OK
WriteX 10814 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10812 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10815 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10816 NT_STATUS_OK
ReadX 10816 0 4096 4096 NT_STATUS_OK
ReadX 10816 4096 4096 4096 NT_STATUS_OK
WriteX 10816 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10817 NT_STATUS_OK
QUERY_FILE_INFORMATION 10817 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Close 10789 NT_STATUS_OK
Close 10785 NT_STATUS_OK
Close 10786 NT_STATUS_OK
Close 10787 NT_STATUS_OK
Close 10788 NT_STATUS_OK
Close 10797 NT_STATUS_OK
Close 10802 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Close 10799 NT_STATUS_OK
Close 10800 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Close 10791 NT_STATUS_OK
Close 10792 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Close 10796 NT_STATUS_OK
Close 10793 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Close 10816 NT_STATUS_OK
Close 10805 NT_STATUS_OK
Close 10806 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10819 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10819 0 4096 4096 NT_STATUS_OK
ReadX 10819 4096 4096 4096 NT_STATUS_OK
ReadX 10819 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10821 NT_STATUS_OK
ReadX 10821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10822 NT_STATUS_OK
ReadX 10822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10823 NT_STATUS_OK
ReadX 10823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10826 NT_STATUS_OK
ReadX 10826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10827 NT_STATUS_OK
ReadX 10827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10828 NT_STATUS_OK
ReadX 10828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10829 NT_STATUS_OK
ReadX 10829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10830 NT_STATUS_OK
ReadX 10830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 4096 4096 NT_STATUS_OK
ReadX 10820 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10837 NT_STATUS_OK
QUERY_FILE_INFORMATION 10837 1004 NT_STATUS_OK
WriteX 10837 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10837 258 NT_STATUS_OK
WriteX 10837 0 2048 2048 NT_STATUS_OK
Close 10837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10838 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10842 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10843 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 1004 NT_STATUS_OK
WriteX 10843 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 258 NT_STATUS_OK
WriteX 10843 0 2048 2048 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10827 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10845 NT_STATUS_OK
QUERY_FILE_INFORMATION 10845 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Close 10826 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Close 10820 NT_STATUS_OK
Close 10821 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Close 10822 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Close 10827 NT_STATUS_OK
Close 10828 NT_STATUS_OK
Close 10829 NT_STATUS_OK
Close 10830 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10847 NT_STATUS_OK
QUERY_FILE_INFORMATION 10847 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10849 NT_STATUS_OK
ReadX 10849 61440 4096 4096 NT_STATUS_OK
ReadX 10849 126976 4096 4096 NT_STATUS_OK
WriteX 10849 0 65536 65536 NT_STATUS_OK
WriteX 10849 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10850 NT_STATUS_OK
ReadX 10850 61440 4096 4096 NT_STATUS_OK
ReadX 10850 126976 4096 4096 NT_STATUS_OK
ReadX 10850 192512 4096 4096 NT_STATUS_OK
ReadX 10850 258048 4096 4096 NT_STATUS_OK
WriteX 10850 0 65536 65536 NT_STATUS_OK
WriteX 10850 65536 65536 65536 NT_STATUS_OK
WriteX 10850 131072 65536 65536 NT_STATUS_OK
WriteX 10850 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 61440 4096 4096 NT_STATUS_OK
ReadX 10851 126976 4096 4096 NT_STATUS_OK
ReadX 10851 192512 4096 4096 NT_STATUS_OK
ReadX 10851 258048 4096 4096 NT_STATUS_OK
ReadX 10851 323584 4096 4096 NT_STATUS_OK
ReadX 10851 389120 4096 4096 NT_STATUS_OK
ReadX 10851 454656 4096 4096 NT_STATUS_OK
ReadX 10851 520192 4096 4096 NT_STATUS_OK
WriteX 10851 0 65536 65536 NT_STATUS_OK
WriteX 10851 65536 65536 65536 NT_STATUS_OK
WriteX 10851 131072 65536 65536 NT_STATUS_OK
WriteX 10851 196608 65536 65536 NT_STATUS_OK
WriteX 10851 262144 65536 65536 NT_STATUS_OK
WriteX 10851 327680 65536 65536 NT_STATUS_OK
WriteX 10851 393216 65536 65536 NT_STATUS_OK
WriteX 10851 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10852 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10852 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10852 8192 4096 4096 NT_STATUS_OK
ReadX 10852 12288 4096 4096 NT_STATUS_OK
ReadX 10852 16384 4096 4096 NT_STATUS_OK
ReadX 10852 20480 4096 4096 NT_STATUS_OK
ReadX 10852 24576 4096 4096 NT_STATUS_OK
ReadX 10852 28672 4096 4096 NT_STATUS_OK
ReadX 10852 32768 4096 4096 NT_STATUS_OK
ReadX 10852 36864 4096 4096 NT_STATUS_OK
ReadX 10852 40960 4096 4096 NT_STATUS_OK
ReadX 10852 45056 4096 4096 NT_STATUS_OK
ReadX 10852 49152 4096 4096 NT_STATUS_OK
ReadX 10852 53248 4096 4096 NT_STATUS_OK
ReadX 10852 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10852 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10853 NT_STATUS_OK
Close 10853 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10849 NT_STATUS_OK
Close 10850 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10855 NT_STATUS_OK
WriteX 10855 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10855 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10855 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10855 1004 NT_STATUS_OK
WriteX 10855 0 57088 57088 NT_STATUS_OK
WriteX 10855 0 4096 4096 NT_STATUS_OK
Flush 10855 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10856 NT_STATUS_OK
SET_FILE_INFORMATION 10856 1004 NT_STATUS_OK
Close 10856 NT_STATUS_OK
SET_FILE_INFORMATION 10855 1004 NT_STATUS_OK
WriteX 10855 0 4096 4096 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10857 NT_STATUS_OK
Close 10857 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10859 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10860 NT_STATUS_OK
WriteX 10860 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10860 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10860 1004 NT_STATUS_OK
WriteX 10860 0 51456 51456 NT_STATUS_OK
WriteX 10860 0 4096 4096 NT_STATUS_OK
Flush 10860 NT_STATUS_OK
SET_FILE_INFORMATION 10860 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10860 1004 NT_STATUS_OK
WriteX 10860 0 4096 4096 NT_STATUS_OK
Close 10860 NT_STATUS_OK
Close 10859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10864 NT_STATUS_OK
ReadX 10864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10864 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10869 NT_STATUS_OK
WriteX 10869 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10869 258 NT_STATUS_OK
WriteX 10869 0 53077 53077 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10870 NT_STATUS_OK
WriteX 10870 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10870 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
WriteX 10870 0 65536 65536 NT_STATUS_OK
WriteX 10870 65536 1856 1856 NT_STATUS_OK
WriteX 10870 0 4096 4096 NT_STATUS_OK
Flush 10870 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10870 1004 NT_STATUS_OK
WriteX 10870 0 4096 4096 NT_STATUS_OK
Close 10870 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10879 NT_STATUS_OK
WriteX 10879 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10879 258 NT_STATUS_OK
WriteX 10879 0 7983 7983 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10881 NT_STATUS_OK
Close 10881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10884 NT_STATUS_OK
WriteX 10884 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10884 258 NT_STATUS_OK
WriteX 10884 0 65536 65536 NT_STATUS_OK
WriteX 10884 65536 65536 65536 NT_STATUS_OK
WriteX 10884 131072 65536 65536 NT_STATUS_OK
WriteX 10884 196608 65536 65536 NT_STATUS_OK
WriteX 10884 262144 65536 65536 NT_STATUS_OK
WriteX 10884 327680 65536 65536 NT_STATUS_OK
WriteX 10884 393216 65536 65536 NT_STATUS_OK
WriteX 10884 458752 46731 46731 NT_STATUS_OK
Close 10884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10885 NT_STATUS_OK
WriteX 10885 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10874 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10885 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10885 1004 NT_STATUS_OK
WriteX 10885 0 65536 65536 NT_STATUS_OK
WriteX 10885 65536 22848 22848 NT_STATUS_OK
WriteX 10885 0 4096 4096 NT_STATUS_OK
Flush 10885 NT_STATUS_OK
SET_FILE_INFORMATION 10885 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10885 1004 NT_STATUS_OK
WriteX 10885 0 4096 4096 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10889 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10890 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10890 1004 NT_STATUS_OK
ReadX 10890 8192 4096 4096 NT_STATUS_OK
ReadX 10890 12288 4096 4096 NT_STATUS_OK
ReadX 10890 16384 4096 4096 NT_STATUS_OK
ReadX 10890 20480 4096 4096 NT_STATUS_OK
ReadX 10890 24576 4096 4096 NT_STATUS_OK
ReadX 10890 28672 4096 4096 NT_STATUS_OK
ReadX 10890 32768 4096 4096 NT_STATUS_OK
ReadX 10890 36864 4096 4096 NT_STATUS_OK
ReadX 10890 40960 4096 4096 NT_STATUS_OK
ReadX 10890 45056 4096 4096 NT_STATUS_OK
ReadX 10890 49152 4096 4096 NT_STATUS_OK
ReadX 10890 53248 4096 4096 NT_STATUS_OK
ReadX 10890 57344 4096 4096 NT_STATUS_OK
ReadX 10890 61440 4096 4096 NT_STATUS_OK
ReadX 10890 65536 4096 4096 NT_STATUS_OK
ReadX 10890 69632 4096 4096 NT_STATUS_OK
ReadX 10890 73728 4096 4096 NT_STATUS_OK
ReadX 10890 77824 4096 4096 NT_STATUS_OK
ReadX 10890 81920 4096 4096 NT_STATUS_OK
ReadX 10890 86016 4096 4096 NT_STATUS_OK
ReadX 10890 90112 4096 4096 NT_STATUS_OK
ReadX 10890 94208 4096 4096 NT_STATUS_OK
ReadX 10890 98304 4096 4096 NT_STATUS_OK
ReadX 10890 102400 4096 4096 NT_STATUS_OK
ReadX 10890 106496 4096 4096 NT_STATUS_OK
ReadX 10890 110592 4096 4096 NT_STATUS_OK
ReadX 10890 114688 4096 4096 NT_STATUS_OK
ReadX 10890 118784 4096 4096 NT_STATUS_OK
ReadX 10890 122880 4096 4096 NT_STATUS_OK
ReadX 10890 126976 4096 4096 NT_STATUS_OK
ReadX 10890 131072 4096 4096 NT_STATUS_OK
ReadX 10890 135168 4096 4096 NT_STATUS_OK
ReadX 10890 139264 4096 4096 NT_STATUS_OK
ReadX 10890 143360 4096 4096 NT_STATUS_OK
ReadX 10890 147456 4096 4096 NT_STATUS_OK
ReadX 10890 151552 4096 4096 NT_STATUS_OK
ReadX 10890 155648 4096 4096 NT_STATUS_OK
ReadX 10890 159744 4096 4096 NT_STATUS_OK
ReadX 10890 163840 4096 4096 NT_STATUS_OK
ReadX 10890 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10890 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10891 NT_STATUS_OK
Close 10891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10893 NT_STATUS_OK
WriteX 10893 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10893 258 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10894 NT_STATUS_OK
SET_FILE_INFORMATION 10894 1004 NT_STATUS_OK
Close 10894 NT_STATUS_OK
WriteX 10893 0 42388 42388 NT_STATUS_OK
Close 10893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10895 NT_STATUS_OK
Close 10895 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10897 NT_STATUS_OK
ReadX 10897 0 4096 4096 NT_STATUS_OK
ReadX 10897 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10898 NT_STATUS_OK
WriteX 10898 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 258 NT_STATUS_OK
SET_FILE_INFORMATION 10898 1004 NT_STATUS_OK
WriteX 10898 0 42652 42652 NT_STATUS_OK
Close 10898 NT_STATUS_OK
Close 10897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10900 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10902 NT_STATUS_OK
ReadX 10902 0 4096 4096 NT_STATUS_OK
ReadX 10902 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10907 NT_STATUS_OK
WriteX 10907 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10907 258 NT_STATUS_OK
WriteX 10907 0 65536 65536 NT_STATUS_OK
WriteX 10907 65536 49 49 NT_STATUS_OK
Close 10907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 61440 61440 NT_STATUS_OK
ReadX 10908 61440 4096 4096 NT_STATUS_OK
ReadX 10908 65536 61440 61440 NT_STATUS_OK
ReadX 10908 126976 4096 4096 NT_STATUS_OK
ReadX 10908 131072 61440 61440 NT_STATUS_OK
ReadX 10908 192512 4096 4096 NT_STATUS_OK
ReadX 10908 196608 61440 61440 NT_STATUS_OK
ReadX 10908 258048 4096 4096 NT_STATUS_OK
ReadX 10908 262144 61440 61440 NT_STATUS_OK
ReadX 10908 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10909 NT_STATUS_OK
ReadX 10909 0 61440 61440 NT_STATUS_OK
ReadX 10909 61440 4096 4096 NT_STATUS_OK
ReadX 10909 65536 61440 61440 NT_STATUS_OK
ReadX 10909 126976 4096 4096 NT_STATUS_OK
ReadX 10909 131072 61440 61440 NT_STATUS_OK
ReadX 10909 192512 4096 4096 NT_STATUS_OK
ReadX 10909 196608 61440 61440 NT_STATUS_OK
ReadX 10909 258048 4096 4096 NT_STATUS_OK
ReadX 10909 262144 61440 61440 NT_STATUS_OK
ReadX 10909 323584 4096 4096 NT_STATUS_OK
ReadX 10909 327680 61440 61440 NT_STATUS_OK
ReadX 10909 389120 4096 4096 NT_STATUS_OK
ReadX 10909 393216 61440 61440 NT_STATUS_OK
ReadX 10909 454656 4096 4096 NT_STATUS_OK
ReadX 10909 458752 61440 61440 NT_STATUS_OK
ReadX 10909 520192 4096 4096 NT_STATUS_OK
ReadX 10909 524288 61440 61440 NT_STATUS_OK
ReadX 10909 585728 4096 4096 NT_STATUS_OK
ReadX 10909 589824 61440 61440 NT_STATUS_OK
ReadX 10909 651264 4096 4096 NT_STATUS_OK
ReadX 10909 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10910 NT_STATUS_OK
ReadX 10910 0 61440 61440 NT_STATUS_OK
ReadX 10910 61440 4096 4096 NT_STATUS_OK
ReadX 10910 65536 61440 61440 NT_STATUS_OK
ReadX 10910 126976 4096 4096 NT_STATUS_OK
ReadX 10910 131072 61440 61440 NT_STATUS_OK
ReadX 10910 192512 4096 4096 NT_STATUS_OK
ReadX 10910 196608 61440 61440 NT_STATUS_OK
ReadX 10910 258048 4096 4096 NT_STATUS_OK
ReadX 10910 262144 61440 61440 NT_STATUS_OK
ReadX 10910 323584 4096 4096 NT_STATUS_OK
ReadX 10910 327680 61440 61440 NT_STATUS_OK
ReadX 10910 389120 4096 4096 NT_STATUS_OK
ReadX 10910 393216 61440 61440 NT_STATUS_OK
ReadX 10910 454656 4096 4096 NT_STATUS_OK
ReadX 10910 458752 61440 61440 NT_STATUS_OK
ReadX 10910 520192 4096 4096 NT_STATUS_OK
ReadX 10910 524288 61440 61440 NT_STATUS_OK
ReadX 10910 585728 4096 4096 NT_STATUS_OK
ReadX 10910 589824 61440 61440 NT_STATUS_OK
ReadX 10910 651264 4096 4096 NT_STATUS_OK
ReadX 10910 655360 61440 61440 NT_STATUS_OK
ReadX 10910 716800 4096 4096 NT_STATUS_OK
ReadX 10910 720896 61440 61440 NT_STATUS_OK
ReadX 10910 782336 4096 4096 NT_STATUS_OK
ReadX 10910 786432 61440 61440 NT_STATUS_OK
ReadX 10910 847872 4096 4096 NT_STATUS_OK
ReadX 10910 851968 61440 61440 NT_STATUS_OK
ReadX 10910 913408 4096 4096 NT_STATUS_OK
ReadX 10910 917504 61440 61440 NT_STATUS_OK
ReadX 10910 978944 4096 4096 NT_STATUS_OK
ReadX 10910 983040 61440 61440 NT_STATUS_OK
ReadX 10910 1044480 4096 4096 NT_STATUS_OK
ReadX 10910 1048576 61440 61440 NT_STATUS_OK
ReadX 10910 1110016 4096 4096 NT_STATUS_OK
ReadX 10910 1114112 61440 61440 NT_STATUS_OK
ReadX 10910 1175552 4096 4096 NT_STATUS_OK
ReadX 10910 1179648 61440 61440 NT_STATUS_OK
ReadX 10910 1241088 4096 4096 NT_STATUS_OK
ReadX 10910 1245184 61440 61440 NT_STATUS_OK
ReadX 10910 1306624 4096 4096 NT_STATUS_OK
ReadX 10910 1310720 61440 61440 NT_STATUS_OK
ReadX 10910 1372160 4096 4096 NT_STATUS_OK
ReadX 10910 1376256 61440 61440 NT_STATUS_OK
ReadX 10910 1437696 4096 4096 NT_STATUS_OK
ReadX 10910 1441792 61440 61440 NT_STATUS_OK
ReadX 10910 1503232 4096 4096 NT_STATUS_OK
ReadX 10910 1507328 61440 61440 NT_STATUS_OK
ReadX 10910 1568768 4096 4096 NT_STATUS_OK
ReadX 10910 1572864 61440 61440 NT_STATUS_OK
ReadX 10910 1634304 4096 4096 NT_STATUS_OK
ReadX 10910 1638400 61440 61440 NT_STATUS_OK
ReadX 10910 1699840 4096 4096 NT_STATUS_OK
ReadX 10910 1703936 61440 61440 NT_STATUS_OK
ReadX 10910 1765376 4096 4096 NT_STATUS_OK
ReadX 10910 1769472 61440 61440 NT_STATUS_OK
ReadX 10910 1830912 4096 4096 NT_STATUS_OK
ReadX 10910 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10912 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 1005 NT_STATUS_OK
ReadX 10912 2156 24 24 NT_STATUS_OK
ReadX 10912 2139 276 276 NT_STATUS_OK
ReadX 10912 2136 14 14 NT_STATUS_OK
ReadX 10912 2136 7 7 NT_STATUS_OK
ReadX 10912 2138 12 12 NT_STATUS_OK
ReadX 10912 2137 8 8 NT_STATUS_OK
ReadX 10912 2135 15 15 NT_STATUS_OK
ReadX 10912 0 16 16 NT_STATUS_OK
ReadX 10912 16 2048 2048 NT_STATUS_OK
ReadX 10912 2064 2048 2048 NT_STATUS_OK
ReadX 10912 257 2048 2048 NT_STATUS_OK
ReadX 10912 385 2048 2048 NT_STATUS_OK
ReadX 10912 513 2048 2048 NT_STATUS_OK
ReadX 10912 641 2048 2048 NT_STATUS_OK
ReadX 10912 769 2048 2048 NT_STATUS_OK
ReadX 10912 897 2048 2048 NT_STATUS_OK
ReadX 10912 1025 2048 2048 NT_STATUS_OK
ReadX 10912 1153 2048 2048 NT_STATUS_OK
ReadX 10912 1281 2048 2048 NT_STATUS_OK
ReadX 10912 1409 2048 2048 NT_STATUS_OK
ReadX 10912 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10914 NT_STATUS_OK
Close 10914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10908 NT_STATUS_OK
Close 10909 NT_STATUS_OK
Close 10910 NT_STATUS_OK
Close 10902 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10917 NT_STATUS_OK
WriteX 10917 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10917 258 NT_STATUS_OK
WriteX 10917 0 10575 10575 NT_STATUS_OK
Flush 10917 NT_STATUS_OK
Close 10917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 4096 4096 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10922 NT_STATUS_OK
LockX 10922 2147483538 1 NT_STATUS_OK
UnlockX 10922 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1005 NT_STATUS_OK
ReadX 10922 0 512 512 NT_STATUS_OK
ReadX 10922 512 512 512 NT_STATUS_OK
ReadX 10922 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10922 1004 NT_STATUS_OK
Close 10922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10923 NT_STATUS_OK
QUERY_FILE_INFORMATION 10923 1005 NT_STATUS_OK
ReadX 10923 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10924 NT_STATUS_OK
LockX 10924 2147483538 1 NT_STATUS_OK
UnlockX 10924 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10924 1005 NT_STATUS_OK
ReadX 10924 0 512 512 NT_STATUS_OK
ReadX 10924 512 512 512 NT_STATUS_OK
ReadX 10924 1024 512 512 NT_STATUS_OK
ReadX 10924 288 20 20 NT_STATUS_OK
ReadX 10924 308 2084 2084 NT_STATUS_OK
ReadX 10924 388 2084 2084 NT_STATUS_OK
ReadX 10924 388 2084 2084 NT_STATUS_OK
ReadX 10911 2157 1386 1386 NT_STATUS_OK
ReadX 10924 2472 399 399 NT_STATUS_OK
ReadX 10924 3072 1536 1536 NT_STATUS_OK
ReadX 10924 544 149 149 NT_STATUS_OK
ReadX 10924 693 485 485 NT_STATUS_OK
Close 10924 NT_STATUS_OK
ReadX 10911 2157 4096 4096 NT_STATUS_OK
ReadX 10911 6253 4096 4096 NT_STATUS_OK
ReadX 10911 10349 4096 4096 NT_STATUS_OK
ReadX 10911 14445 4096 4096 NT_STATUS_OK
ReadX 10911 18541 4096 4096 NT_STATUS_OK
ReadX 10911 22637 256 256 NT_STATUS_OK
ReadX 10911 22893 4096 4096 NT_STATUS_OK
ReadX 10911 26989 4096 4096 NT_STATUS_OK
ReadX 10911 31085 4096 4096 NT_STATUS_OK
ReadX 10911 35181 4096 4096 NT_STATUS_OK
ReadX 10911 39277 4096 4096 NT_STATUS_OK
ReadX 10911 43373 4096 4096 NT_STATUS_OK
ReadX 10911 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10911 2157 1024 1024 NT_STATUS_OK
ReadX 10911 1667 4688 4688 NT_STATUS_OK
ReadX 10911 6355 3516 3516 NT_STATUS_OK
ReadX 10911 9871 16384 16384 NT_STATUS_OK
ReadX 10911 26255 3771 3771 NT_STATUS_OK
ReadX 10911 30026 2048 2048 NT_STATUS_OK
ReadX 10911 32074 1024 1024 NT_STATUS_OK
ReadX 10911 33098 6652 6652 NT_STATUS_OK
ReadX 10911 39750 16384 16384 NT_STATUS_OK
ReadX 10911 56134 10496 10496 NT_STATUS_OK
ReadX 10911 66630 1784 1784 NT_STATUS_OK
ReadX 10911 68414 90 90 NT_STATUS_OK
ReadX 10911 68504 273 273 NT_STATUS_OK
ReadX 10911 68777 1600 1600 NT_STATUS_OK
ReadX 10911 70377 640 640 NT_STATUS_OK
ReadX 10911 71017 1280 1280 NT_STATUS_OK
ReadX 10911 72297 8464 8464 NT_STATUS_OK
ReadX 10911 80761 158 158 NT_STATUS_OK
ReadX 10911 80919 912 912 NT_STATUS_OK
ReadX 10911 81831 1980 1980 NT_STATUS_OK
ReadX 10911 83811 2256 2256 NT_STATUS_OK
ReadX 10911 86067 400 400 NT_STATUS_OK
ReadX 10911 86467 252 252 NT_STATUS_OK
ReadX 10911 86719 42 42 NT_STATUS_OK
ReadX 10911 86761 725 725 NT_STATUS_OK
ReadX 10911 2009 512 512 NT_STATUS_OK
ReadX 10911 3895 9 9 NT_STATUS_OK
ReadX 10911 3781 46 46 NT_STATUS_OK
ReadX 10911 4059 92 92 NT_STATUS_OK
ReadX 10911 3781 92 92 NT_STATUS_OK
ReadX 10911 3986 184 184 NT_STATUS_OK
ReadX 10911 3987 16384 16384 NT_STATUS_OK
ReadX 10911 3902 16384 16384 NT_STATUS_OK
ReadX 10911 3781 10240 10240 NT_STATUS_OK
ReadX 10911 3821 16384 16384 NT_STATUS_OK
ReadX 10911 3891 935 935 NT_STATUS_OK
ReadX 10911 4060 10240 10240 NT_STATUS_OK
ReadX 10911 4059 184 184 NT_STATUS_OK
ReadX 10911 256 184 184 NT_STATUS_OK
ReadX 10911 256 1026 1026 NT_STATUS_OK
ReadX 10911 3901 326 326 NT_STATUS_OK
ReadX 10911 3899 652 652 NT_STATUS_OK
ReadX 10911 256 2 2 NT_STATUS_OK
ReadX 10911 258 4948 4948 NT_STATUS_OK
Close 10911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10926 NT_STATUS_OK
Close 10926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10929 NT_STATUS_OK
WriteX 10929 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
WriteX 10929 0 65536 65536 NT_STATUS_OK
WriteX 10929 65536 65536 65536 NT_STATUS_OK
WriteX 10929 131072 65536 65536 NT_STATUS_OK
WriteX 10929 196608 65536 65536 NT_STATUS_OK
WriteX 10929 262144 65536 65536 NT_STATUS_OK
WriteX 10929 327680 65536 65536 NT_STATUS_OK
WriteX 10929 393216 65536 65536 NT_STATUS_OK
WriteX 10929 458752 65536 65536 NT_STATUS_OK
WriteX 10929 524288 65536 65536 NT_STATUS_OK
WriteX 10929 589824 35257 35257 NT_STATUS_OK
Close 10929 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10931 NT_STATUS_OK
Close 10931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10934 NT_STATUS_OK
WriteX 10934 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10934 258 NT_STATUS_OK
WriteX 10934 0 65536 65536 NT_STATUS_OK
WriteX 10934 65536 65536 65536 NT_STATUS_OK
WriteX 10934 131072 65536 65536 NT_STATUS_OK
WriteX 10934 196608 65536 65536 NT_STATUS_OK
WriteX 10934 262144 65536 65536 NT_STATUS_OK
WriteX 10934 327680 65536 65536 NT_STATUS_OK
WriteX 10934 393216 65536 65536 NT_STATUS_OK
WriteX 10934 458752 65536 65536 NT_STATUS_OK
WriteX 10934 524288 65536 65536 NT_STATUS_OK
WriteX 10934 589824 57598 57598 NT_STATUS_OK
Close 10934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10936 NT_STATUS_OK
WriteX 10936 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10936 258 NT_STATUS_OK
WriteX 10936 0 12543 12543 NT_STATUS_OK
Flush 10936 NT_STATUS_OK
Close 10936 NT_STATUS_OK
Close 10920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10938 NT_STATUS_OK
Close 10938 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10942 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 1005 NT_STATUS_OK
ReadX 10942 1938 24 24 NT_STATUS_OK
ReadX 10942 1920 276 276 NT_STATUS_OK
ReadX 10942 1918 14 14 NT_STATUS_OK
ReadX 10942 1918 7 7 NT_STATUS_OK
ReadX 10942 1919 12 12 NT_STATUS_OK
ReadX 10942 1919 8 8 NT_STATUS_OK
ReadX 10942 1917 15 15 NT_STATUS_OK
ReadX 10942 0 16 16 NT_STATUS_OK
ReadX 10942 16 2048 2048 NT_STATUS_OK
ReadX 10942 2064 2048 2048 NT_STATUS_OK
ReadX 10942 257 2048 2048 NT_STATUS_OK
ReadX 10942 385 2048 2048 NT_STATUS_OK
ReadX 10942 513 2048 2048 NT_STATUS_OK
ReadX 10942 641 2048 2048 NT_STATUS_OK
ReadX 10942 769 2048 2048 NT_STATUS_OK
ReadX 10942 897 2048 2048 NT_STATUS_OK
ReadX 10942 1025 2048 2048 NT_STATUS_OK
ReadX 10942 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10944 NT_STATUS_OK
Close 10944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10947 NT_STATUS_OK
WriteX 10947 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10947 258 NT_STATUS_OK
WriteX 10947 0 11588 11588 NT_STATUS_OK
Flush 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10948 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10952 NT_STATUS_OK
WriteX 10952 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10952 258 NT_STATUS_OK
WriteX 10952 0 11615 11615 NT_STATUS_OK
Flush 10952 NT_STATUS_OK
Close 10952 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10954 NT_STATUS_OK
Close 10954 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10956 NT_STATUS_OK
ReadX 10956 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10958 NT_STATUS_OK
Close 10958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10961 NT_STATUS_OK
WriteX 10961 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10961 258 NT_STATUS_OK
WriteX 10961 0 65536 65536 NT_STATUS_OK
WriteX 10961 65536 16050 16050 NT_STATUS_OK
Close 10961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10941 1939 64 64 NT_STATUS_OK
ReadX 10941 128 248 248 NT_STATUS_OK
ReadX 10941 128 568 568 NT_STATUS_OK
ReadX 10941 3872 1536 1536 NT_STATUS_OK
ReadX 10941 3456 2560 2560 NT_STATUS_OK
ReadX 10941 3136 512 512 NT_STATUS_OK
ReadX 10941 2880 4096 4096 NT_STATUS_OK
ReadX 10941 3264 3072 3072 NT_STATUS_OK
ReadX 10941 320 4096 4096 NT_STATUS_OK
ReadX 10941 1024 4096 4096 NT_STATUS_OK
ReadX 10941 3616 4096 4096 NT_STATUS_OK
ReadX 10941 1939 64 64 NT_STATUS_OK
ReadX 10941 128 248 248 NT_STATUS_OK
ReadX 10941 128 608 608 NT_STATUS_OK
ReadX 10941 2858 1024 1024 NT_STATUS_OK
ReadX 10941 2810 4096 4096 NT_STATUS_OK
ReadX 10941 2826 4096 4096 NT_STATUS_OK
ReadX 10941 2580 2048 2048 NT_STATUS_OK
ReadX 10941 2800 2560 2560 NT_STATUS_OK
ReadX 10941 2100 4096 4096 NT_STATUS_OK
ReadX 10941 2084 4096 4096 NT_STATUS_OK
ReadX 10941 868 4096 4096 NT_STATUS_OK
ReadX 10941 2324 4096 4096 NT_STATUS_OK
ReadX 10941 884 4096 4096 NT_STATUS_OK
ReadX 10941 2604 1024 1024 NT_STATUS_OK
ReadX 10941 580 4096 4096 NT_STATUS_OK
ReadX 10941 596 4096 4096 NT_STATUS_OK
ReadX 10941 2752 4096 4096 NT_STATUS_OK
ReadX 10941 2842 1024 1024 NT_STATUS_OK
ReadX 10941 660 4096 4096 NT_STATUS_OK
ReadX 10941 2720 4096 4096 NT_STATUS_OK
ReadX 10941 2736 4096 4096 NT_STATUS_OK
ReadX 10941 628 4096 4096 NT_STATUS_OK
ReadX 10941 2704 4096 4096 NT_STATUS_OK
ReadX 10941 1556 4096 4096 NT_STATUS_OK
ReadX 10941 576 4096 4096 NT_STATUS_OK
ReadX 10941 3168 1536 1536 NT_STATUS_OK
ReadX 10941 832 4096 4096 NT_STATUS_OK
ReadX 10941 1088 4096 4096 NT_STATUS_OK
ReadX 10941 1344 4096 4096 NT_STATUS_OK
ReadX 10941 1600 4096 4096 NT_STATUS_OK
ReadX 10941 1856 4096 4096 NT_STATUS_OK
ReadX 10941 2112 4096 4096 NT_STATUS_OK
ReadX 10941 1892 4096 4096 NT_STATUS_OK
ReadX 10941 820 4096 4096 NT_STATUS_OK
ReadX 10941 788 4096 4096 NT_STATUS_OK
ReadX 10941 1604 4096 4096 NT_STATUS_OK
ReadX 10941 3648 4096 4096 NT_STATUS_OK
ReadX 10941 2608 4096 4096 NT_STATUS_OK
ReadX 10941 548 4096 4096 NT_STATUS_OK
ReadX 10941 740 4096 4096 NT_STATUS_OK
ReadX 10941 1344 4096 4096 NT_STATUS_OK
ReadX 10941 3392 4096 4096 NT_STATUS_OK
ReadX 10941 3904 4096 4096 NT_STATUS_OK
ReadX 10941 644 4096 4096 NT_STATUS_OK
ReadX 10941 676 4096 4096 NT_STATUS_OK
ReadX 10941 2688 4096 4096 NT_STATUS_OK
ReadX 10941 320 4096 4096 NT_STATUS_OK
ReadX 10941 900 4096 4096 NT_STATUS_OK
ReadX 10941 1908 4096 4096 NT_STATUS_OK
ReadX 10941 852 4096 4096 NT_STATUS_OK
ReadX 10941 724 4096 4096 NT_STATUS_OK
ReadX 10941 2292 4096 4096 NT_STATUS_OK
ReadX 10941 612 4096 4096 NT_STATUS_OK
ReadX 10941 388 4096 4096 NT_STATUS_OK
ReadX 10941 2368 4096 4096 NT_STATUS_OK
ReadX 10941 2624 4096 4096 NT_STATUS_OK
ReadX 10941 500 4096 4096 NT_STATUS_OK
ReadX 10941 356 4096 4096 NT_STATUS_OK
ReadX 10941 1024 4096 4096 NT_STATUS_OK
ReadX 10941 576 4096 4096 NT_STATUS_OK
ReadX 10941 340 4096 4096 NT_STATUS_OK
ReadX 10941 420 4096 4096 NT_STATUS_OK
ReadX 10941 1600 4096 4096 NT_STATUS_OK
ReadX 10941 404 4096 4096 NT_STATUS_OK
ReadX 10941 1428 4096 4096 NT_STATUS_OK
ReadX 10941 2656 4096 4096 NT_STATUS_OK
ReadX 10941 2624 4096 4096 NT_STATUS_OK
ReadX 10941 452 4096 4096 NT_STATUS_OK
ReadX 10941 692 4096 4096 NT_STATUS_OK
ReadX 10941 564 4096 4096 NT_STATUS_OK
ReadX 10941 372 4096 4096 NT_STATUS_OK
ReadX 10941 468 4096 4096 NT_STATUS_OK
ReadX 10941 484 4096 4096 NT_STATUS_OK
ReadX 10941 1088 4096 4096 NT_STATUS_OK
ReadX 10941 1924 4096 4096 NT_STATUS_OK
ReadX 10941 2768 4096 4096 NT_STATUS_OK
ReadX 10941 832 4096 4096 NT_STATUS_OK
ReadX 10941 836 4096 4096 NT_STATUS_OK
ReadX 10941 1856 4096 4096 NT_STATUS_OK
ReadX 10941 2640 4096 4096 NT_STATUS_OK
ReadX 10941 436 4096 4096 NT_STATUS_OK
ReadX 10941 1828 4096 4096 NT_STATUS_OK
ReadX 10941 804 4096 4096 NT_STATUS_OK
ReadX 10941 1860 4096 4096 NT_STATUS_OK
ReadX 10941 1812 4096 4096 NT_STATUS_OK
ReadX 10941 756 4096 4096 NT_STATUS_OK
ReadX 10941 1636 4096 4096 NT_STATUS_OK
ReadX 10941 772 4096 4096 NT_STATUS_OK
ReadX 10941 2036 4096 4096 NT_STATUS_OK
ReadX 10941 1220 4096 4096 NT_STATUS_OK
ReadX 10941 1652 4096 4096 NT_STATUS_OK
ReadX 10941 2588 4096 4096 NT_STATUS_OK
ReadX 10941 916 4096 4096 NT_STATUS_OK
ReadX 10941 260 4096 4096 NT_STATUS_OK
ReadX 10941 932 4096 4096 NT_STATUS_OK
ReadX 10941 2624 4096 4096 NT_STATUS_OK
ReadX 10941 308 4096 4096 NT_STATUS_OK
ReadX 10941 292 4096 4096 NT_STATUS_OK
ReadX 10941 1140 4096 4096 NT_STATUS_OK
ReadX 10941 276 4096 4096 NT_STATUS_OK
ReadX 10941 2020 4096 4096 NT_STATUS_OK
ReadX 10941 2880 4096 4096 NT_STATUS_OK
ReadX 10941 516 4096 4096 NT_STATUS_OK
ReadX 10941 1844 4096 4096 NT_STATUS_OK
ReadX 10941 1124 4096 4096 NT_STATUS_OK
ReadX 10941 3136 4096 4096 NT_STATUS_OK
ReadX 10941 324 4096 4096 NT_STATUS_OK
ReadX 10941 1156 4096 4096 NT_STATUS_OK
ReadX 10941 1172 4096 4096 NT_STATUS_OK
ReadX 10941 2112 4096 4096 NT_STATUS_OK
ReadX 10941 2368 4096 4096 NT_STATUS_OK
ReadX 10941 964 4096 4096 NT_STATUS_OK
ReadX 10941 980 4096 4096 NT_STATUS_OK
ReadX 10941 1012 4096 4096 NT_STATUS_OK
ReadX 10941 532 4096 4096 NT_STATUS_OK
ReadX 10941 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10941 1620 4096 4096 NT_STATUS_OK
ReadX 10941 1604 4096 4096 NT_STATUS_OK
ReadX 10941 2116 4096 4096 NT_STATUS_OK
ReadX 10941 2132 4096 4096 NT_STATUS_OK
ReadX 10941 2148 4096 4096 NT_STATUS_OK
ReadX 10941 2276 4096 4096 NT_STATUS_OK
ReadX 10941 1540 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10963 NT_STATUS_OK
Close 10963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10966 NT_STATUS_OK
QUERY_FILE_INFORMATION 10921 1004 NT_STATUS_OK
Close 10921 NT_STATUS_OK
WriteX 10966 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10966 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10923 1004 NT_STATUS_OK
Close 10923 NT_STATUS_OK
WriteX 10966 0 65536 65536 NT_STATUS_OK
WriteX 10966 65536 64850 64850 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10968 NT_STATUS_OK
WriteX 10968 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 258 NT_STATUS_OK
ReadX 10941 2068 4096 4096 NT_STATUS_OK
ReadX 10941 1588 4096 4096 NT_STATUS_OK
ReadX 10941 1572 4096 4096 NT_STATUS_OK
WriteX 10968 0 18630 18630 NT_STATUS_OK
Flush 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10970 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10941 612 4096 4096 NT_STATUS_OK
ReadX 10941 564 4096 4096 NT_STATUS_OK
ReadX 10941 1876 4096 4096 NT_STATUS_OK
ReadX 10941 628 4096 4096 NT_STATUS_OK
ReadX 10941 740 4096 4096 NT_STATUS_OK
ReadX 10941 724 4096 4096 NT_STATUS_OK
ReadX 10941 644 4096 4096 NT_STATUS_OK
ReadX 10941 2324 4096 4096 NT_STATUS_OK
ReadX 10941 660 4096 4096 NT_STATUS_OK
ReadX 10941 852 4096 4096 NT_STATUS_OK
ReadX 10941 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10941 2368 4096 4096 NT_STATUS_OK
ReadX 10941 1024 4096 4096 NT_STATUS_OK
ReadX 10941 320 4096 4096 NT_STATUS_OK
ReadX 10941 580 4096 4096 NT_STATUS_OK
ReadX 10941 3136 512 512 NT_STATUS_OK
ReadX 10941 2880 4096 4096 NT_STATUS_OK
Close 10941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10973 NT_STATUS_OK
ReadX 10973 61440 4096 4096 NT_STATUS_OK
ReadX 10973 126976 4096 4096 NT_STATUS_OK
WriteX 10973 0 65536 65536 NT_STATUS_OK
WriteX 10973 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 61440 4096 4096 NT_STATUS_OK
ReadX 10974 126976 4096 4096 NT_STATUS_OK
ReadX 10974 192512 4096 4096 NT_STATUS_OK
ReadX 10974 258048 4096 4096 NT_STATUS_OK
WriteX 10974 0 65536 65536 NT_STATUS_OK
WriteX 10974 65536 65536 65536 NT_STATUS_OK
WriteX 10974 131072 65536 65536 NT_STATUS_OK
WriteX 10974 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10975 NT_STATUS_OK
ReadX 10975 61440 4096 4096 NT_STATUS_OK
ReadX 10975 126976 4096 4096 NT_STATUS_OK
ReadX 10975 192512 4096 4096 NT_STATUS_OK
ReadX 10975 258048 4096 4096 NT_STATUS_OK
ReadX 10975 323584 4096 4096 NT_STATUS_OK
ReadX 10975 389120 4096 4096 NT_STATUS_OK
ReadX 10975 454656 4096 4096 NT_STATUS_OK
ReadX 10975 520192 4096 4096 NT_STATUS_OK
WriteX 10975 0 65536 65536 NT_STATUS_OK
WriteX 10975 65536 65536 65536 NT_STATUS_OK
WriteX 10975 131072 65536 65536 NT_STATUS_OK
WriteX 10975 196608 65536 65536 NT_STATUS_OK
WriteX 10975 262144 65536 65536 NT_STATUS_OK
WriteX 10975 327680 65536 65536 NT_STATUS_OK
WriteX 10975 393216 65536 65536 NT_STATUS_OK
WriteX 10975 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10976 NT_STATUS_OK
ReadX 10976 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10977 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10978 NT_STATUS_OK
WriteX 10978 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10978 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10976 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10976 0 8192 8192 NT_STATUS_OK
Flush 10976 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10980 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10972 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10973 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Close 10975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10983 NT_STATUS_OK
WriteX 10983 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10983 258 NT_STATUS_OK
WriteX 10983 0 62591 62591 NT_STATUS_OK
Close 10983 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10985 NT_STATUS_OK
Close 10985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10988 NT_STATUS_OK
WriteX 10988 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10988 258 NT_STATUS_OK
WriteX 10988 0 10845 10845 NT_STATUS_OK
Close 10988 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10990 NT_STATUS_OK
Close 10990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10993 NT_STATUS_OK
WriteX 10993 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10993 258 NT_STATUS_OK
WriteX 10993 0 30118 30118 NT_STATUS_OK
Close 10993 NT_STATUS_OK
WriteX 10976 0 4096 4096 NT_STATUS_OK
WriteX 10978 0 64 64 NT_STATUS_OK
Close 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10976 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 61440 61440 NT_STATUS_OK
ReadX 10995 61440 4096 4096 NT_STATUS_OK
ReadX 10995 65536 61440 61440 NT_STATUS_OK
ReadX 10995 126976 4096 4096 NT_STATUS_OK
ReadX 10995 131072 61440 61440 NT_STATUS_OK
ReadX 10995 192512 4096 4096 NT_STATUS_OK
ReadX 10995 196608 61440 61440 NT_STATUS_OK
ReadX 10995 258048 4096 4096 NT_STATUS_OK
ReadX 10995 262144 61440 61440 NT_STATUS_OK
ReadX 10995 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 61440 61440 NT_STATUS_OK
ReadX 10996 61440 4096 4096 NT_STATUS_OK
ReadX 10996 65536 61440 61440 NT_STATUS_OK
ReadX 10996 126976 4096 4096 NT_STATUS_OK
ReadX 10996 131072 61440 61440 NT_STATUS_OK
ReadX 10996 192512 4096 4096 NT_STATUS_OK
ReadX 10996 196608 61440 61440 NT_STATUS_OK
ReadX 10996 258048 4096 4096 NT_STATUS_OK
ReadX 10996 262144 61440 61440 NT_STATUS_OK
ReadX 10996 323584 4096 4096 NT_STATUS_OK
ReadX 10996 327680 61440 61440 NT_STATUS_OK
ReadX 10996 389120 4096 4096 NT_STATUS_OK
ReadX 10996 393216 61440 61440 NT_STATUS_OK
ReadX 10996 454656 4096 4096 NT_STATUS_OK
ReadX 10996 458752 61440 61440 NT_STATUS_OK
ReadX 10996 520192 4096 4096 NT_STATUS_OK
ReadX 10996 524288 61440 61440 NT_STATUS_OK
ReadX 10996 585728 4096 4096 NT_STATUS_OK
ReadX 10996 589824 61440 61440 NT_STATUS_OK
ReadX 10996 651264 4096 4096 NT_STATUS_OK
ReadX 10996 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 61440 61440 NT_STATUS_OK
ReadX 10997 61440 4096 4096 NT_STATUS_OK
ReadX 10997 65536 61440 61440 NT_STATUS_OK
ReadX 10997 126976 4096 4096 NT_STATUS_OK
ReadX 10997 131072 61440 61440 NT_STATUS_OK
ReadX 10997 192512 4096 4096 NT_STATUS_OK
ReadX 10997 196608 61440 61440 NT_STATUS_OK
ReadX 10997 258048 4096 4096 NT_STATUS_OK
ReadX 10997 262144 61440 61440 NT_STATUS_OK
ReadX 10997 323584 4096 4096 NT_STATUS_OK
ReadX 10997 327680 61440 61440 NT_STATUS_OK
ReadX 10997 389120 4096 4096 NT_STATUS_OK
ReadX 10997 393216 61440 61440 NT_STATUS_OK
ReadX 10997 454656 4096 4096 NT_STATUS_OK
ReadX 10997 458752 61440 61440 NT_STATUS_OK
ReadX 10997 520192 4096 4096 NT_STATUS_OK
ReadX 10997 524288 61440 61440 NT_STATUS_OK
ReadX 10997 585728 4096 4096 NT_STATUS_OK
ReadX 10997 589824 61440 61440 NT_STATUS_OK
ReadX 10997 651264 4096 4096 NT_STATUS_OK
ReadX 10997 655360 61440 61440 NT_STATUS_OK
ReadX 10997 716800 4096 4096 NT_STATUS_OK
ReadX 10997 720896 61440 61440 NT_STATUS_OK
ReadX 10997 782336 4096 4096 NT_STATUS_OK
ReadX 10997 786432 61440 61440 NT_STATUS_OK
ReadX 10997 847872 4096 4096 NT_STATUS_OK
ReadX 10997 851968 61440 61440 NT_STATUS_OK
ReadX 10997 913408 4096 4096 NT_STATUS_OK
ReadX 10997 917504 61440 61440 NT_STATUS_OK
ReadX 10997 978944 4096 4096 NT_STATUS_OK
ReadX 10997 983040 61440 61440 NT_STATUS_OK
ReadX 10997 1044480 4096 4096 NT_STATUS_OK
ReadX 10997 1048576 61440 61440 NT_STATUS_OK
ReadX 10997 1110016 4096 4096 NT_STATUS_OK
ReadX 10997 1114112 61440 61440 NT_STATUS_OK
ReadX 10997 1175552 4096 4096 NT_STATUS_OK
ReadX 10997 1179648 61440 61440 NT_STATUS_OK
ReadX 10997 1241088 4096 4096 NT_STATUS_OK
ReadX 10997 1245184 61440 61440 NT_STATUS_OK
ReadX 10997 1306624 4096 4096 NT_STATUS_OK
ReadX 10997 1310720 61440 61440 NT_STATUS_OK
ReadX 10997 1372160 4096 4096 NT_STATUS_OK
ReadX 10997 1376256 61440 61440 NT_STATUS_OK
ReadX 10997 1437696 4096 4096 NT_STATUS_OK
ReadX 10997 1441792 61440 61440 NT_STATUS_OK
ReadX 10997 1503232 4096 4096 NT_STATUS_OK
ReadX 10997 1507328 61440 61440 NT_STATUS_OK
ReadX 10997 1568768 4096 4096 NT_STATUS_OK
ReadX 10997 1572864 61440 61440 NT_STATUS_OK
ReadX 10997 1634304 4096 4096 NT_STATUS_OK
ReadX 10997 1638400 61440 61440 NT_STATUS_OK
ReadX 10997 1699840 4096 4096 NT_STATUS_OK
ReadX 10997 1703936 61440 61440 NT_STATUS_OK
ReadX 10997 1765376 4096 4096 NT_STATUS_OK
ReadX 10997 1769472 61440 61440 NT_STATUS_OK
ReadX 10997 1830912 4096 4096 NT_STATUS_OK
ReadX 10997 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10998 NT_STATUS_OK
Close 10998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
ReadX 11002 4096 4096 4096 NT_STATUS_OK
ReadX 11002 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11003 NT_STATUS_OK
Close 11003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11006 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11006 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11007 NT_STATUS_OK
Close 11007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11010 NT_STATUS_OK
ReadX 11010 0 8192 8192 NT_STATUS_OK
ReadX 11010 8192 8192 8192 NT_STATUS_OK
ReadX 11010 16384 8192 8192 NT_STATUS_OK
ReadX 11010 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11012 NT_STATUS_OK
Close 11012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11015 NT_STATUS_OK
WriteX 11015 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11015 258 NT_STATUS_OK
WriteX 11015 0 10438 10438 NT_STATUS_OK
Close 11015 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11016 NT_STATUS_OK
Close 11016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11017 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11018 NT_STATUS_OK
Close 11018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11019 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11020 NT_STATUS_OK
Close 11020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11021 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11023 NT_STATUS_OK
Close 11023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
ReadX 11024 4096 4096 4096 NT_STATUS_OK
ReadX 11024 8192 4096 4096 NT_STATUS_OK
ReadX 11024 12288 8192 8192 NT_STATUS_OK
ReadX 11024 20480 8192 8192 NT_STATUS_OK
ReadX 11024 28672 8192 8192 NT_STATUS_OK
ReadX 11024 36864 8192 8192 NT_STATUS_OK
ReadX 11024 45056 8192 8192 NT_STATUS_OK
ReadX 11024 53248 8192 8192 NT_STATUS_OK
ReadX 11024 61440 8192 8192 NT_STATUS_OK
ReadX 11024 69632 8192 8192 NT_STATUS_OK
ReadX 11024 77824 8192 8192 NT_STATUS_OK
ReadX 11024 86016 8192 8192 NT_STATUS_OK
ReadX 11024 94208 8192 8192 NT_STATUS_OK
ReadX 11024 102400 8192 8192 NT_STATUS_OK
ReadX 11024 110592 8192 8192 NT_STATUS_OK
ReadX 11024 118784 8192 8192 NT_STATUS_OK
ReadX 11024 126976 8192 8192 NT_STATUS_OK
ReadX 11024 135168 8192 8192 NT_STATUS_OK
ReadX 11024 143360 8192 8192 NT_STATUS_OK
ReadX 11024 151552 8192 8192 NT_STATUS_OK
ReadX 11024 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11026 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11029 NT_STATUS_OK
WriteX 11029 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11029 258 NT_STATUS_OK
WriteX 11029 0 28489 28489 NT_STATUS_OK
Close 11029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11030 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11032 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11033 NT_STATUS_OK
Close 11033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 0 8192 8192 NT_STATUS_OK
ReadX 11036 8192 8192 8192 NT_STATUS_OK
ReadX 11036 16384 8192 8192 NT_STATUS_OK
ReadX 11036 24576 8192 8192 NT_STATUS_OK
ReadX 11036 32768 16384 16384 NT_STATUS_OK
ReadX 11036 49152 8192 8192 NT_STATUS_OK
ReadX 11036 57344 8192 8192 NT_STATUS_OK
ReadX 11036 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11038 NT_STATUS_OK
Close 11038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11036 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11041 NT_STATUS_OK
WriteX 11041 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 258 NT_STATUS_OK
WriteX 11041 0 29253 29253 NT_STATUS_OK
Close 11041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11042 NT_STATUS_OK
Close 11042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11043 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11045 NT_STATUS_OK
Close 11045 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11048 NT_STATUS_OK
WriteX 11048 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 258 NT_STATUS_OK
WriteX 11048 0 30183 30183 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11049 NT_STATUS_OK
Close 11049 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11051 NT_STATUS_OK
WriteX 11051 0 510 510 NT_STATUS_OK
WriteX 11051 510 512 512 NT_STATUS_OK
WriteX 11051 1022 510 510 NT_STATUS_OK
WriteX 11051 1532 510 510 NT_STATUS_OK
WriteX 11051 2042 168 168 NT_STATUS_OK
Close 11051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11052 NT_STATUS_OK
Close 11052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
WriteX 11054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 61440 4096 4096 NT_STATUS_OK
ReadX 11055 126976 4096 4096 NT_STATUS_OK
WriteX 11055 0 65536 65536 NT_STATUS_OK
WriteX 11055 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 61440 4096 4096 NT_STATUS_OK
ReadX 11056 126976 4096 4096 NT_STATUS_OK
ReadX 11056 192512 4096 4096 NT_STATUS_OK
ReadX 11056 258048 4096 4096 NT_STATUS_OK
WriteX 11056 0 65536 65536 NT_STATUS_OK
WriteX 11056 65536 65536 65536 NT_STATUS_OK
WriteX 11056 131072 65536 65536 NT_STATUS_OK
WriteX 11056 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11057 NT_STATUS_OK
ReadX 11057 61440 4096 4096 NT_STATUS_OK
ReadX 11057 126976 4096 4096 NT_STATUS_OK
ReadX 11057 192512 4096 4096 NT_STATUS_OK
ReadX 11057 258048 4096 4096 NT_STATUS_OK
ReadX 11057 323584 4096 4096 NT_STATUS_OK
ReadX 11057 389120 4096 4096 NT_STATUS_OK
ReadX 11057 454656 4096 4096 NT_STATUS_OK
ReadX 11057 520192 4096 4096 NT_STATUS_OK
WriteX 11057 0 65536 65536 NT_STATUS_OK
WriteX 11057 65536 65536 65536 NT_STATUS_OK
WriteX 11057 131072 65536 65536 NT_STATUS_OK
WriteX 11057 196608 65536 65536 NT_STATUS_OK
WriteX 11057 262144 65536 65536 NT_STATUS_OK
WriteX 11057 327680 65536 65536 NT_STATUS_OK
WriteX 11057 393216 65536 65536 NT_STATUS_OK
WriteX 11057 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11058 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11055 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11064 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11067 NT_STATUS_OK
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11069 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11073 NT_STATUS_OK
Close 11073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11076 NT_STATUS_OK
Close 11076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11078 NT_STATUS_OK
Close 11078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11082 NT_STATUS_OK
Close 11082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11087 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11092 NT_STATUS_OK
Close 11092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11097 NT_STATUS_OK
Close 11097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11102 NT_STATUS_OK
Close 11102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11112 NT_STATUS_OK
Close 11112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11117 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11123 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11126 NT_STATUS_OK
WriteX 11126 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11126 0 65536 65536 NT_STATUS_OK
WriteX 11126 65536 65536 65536 NT_STATUS_OK
WriteX 11126 131072 65536 65536 NT_STATUS_OK
WriteX 11126 196608 65536 65536 NT_STATUS_OK
WriteX 11126 262144 26634 26634 NT_STATUS_OK
Close 11126 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11131 NT_STATUS_OK
Close 11131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11132 NT_STATUS_OK
Close 11132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
Close 11133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
ReadX 11134 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11135 NT_STATUS_OK
Close 11135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11139 NT_STATUS_OK
Close 11139 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11142 NT_STATUS_OK
Close 11142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11144 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11148 NT_STATUS_OK
Close 11148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11151 NT_STATUS_OK
Close 11151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11153 NT_STATUS_OK
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11162 NT_STATUS_OK
Close 11162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11167 NT_STATUS_OK
Close 11167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11182 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11186 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11191 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11196 NT_STATUS_OK
Close 11196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11199 NT_STATUS_OK
Close 11199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11211 NT_STATUS_OK
Close 11211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 4096 4096 NT_STATUS_OK
Close 11213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11214 NT_STATUS_OK
ReadX 11214 0 4096 4096 NT_STATUS_OK
Close 11214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11215 NT_STATUS_OK
ReadX 11215 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11225 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
Close 11227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11228 NT_STATUS_OK
ReadX 11228 0 4096 4096 NT_STATUS_OK
Close 11228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11215 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11258 0 4096 4096 NT_STATUS_OK
Close 11258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 0 4096 4096 NT_STATUS_OK
ReadX 11260 4096 4096 4096 NT_STATUS_OK
ReadX 11260 8192 4096 4096 NT_STATUS_OK
ReadX 11260 12288 4096 4096 NT_STATUS_OK
ReadX 11260 16384 4096 4096 NT_STATUS_OK
ReadX 11260 20480 4096 4096 NT_STATUS_OK
ReadX 11260 24576 4096 4096 NT_STATUS_OK
ReadX 11260 28672 4096 4096 NT_STATUS_OK
ReadX 11260 32768 4096 4096 NT_STATUS_OK
ReadX 11260 36864 4096 4096 NT_STATUS_OK
ReadX 11260 40960 4096 4096 NT_STATUS_OK
ReadX 11260 45056 4096 4096 NT_STATUS_OK
ReadX 11260 49152 4096 4096 NT_STATUS_OK
ReadX 11260 53248 4096 4096 NT_STATUS_OK
ReadX 11260 57344 4096 4096 NT_STATUS_OK
ReadX 11260 61440 4096 4096 NT_STATUS_OK
ReadX 11260 65536 4096 4096 NT_STATUS_OK
ReadX 11260 69632 4096 4096 NT_STATUS_OK
ReadX 11260 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11260 1004 NT_STATUS_OK
WriteX 11260 0 4096 4096 NT_STATUS_OK
Close 11260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11261 NT_STATUS_OK
SET_FILE_INFORMATION 11261 1004 NT_STATUS_OK
Close 11261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11262 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11266 NT_STATUS_OK
WriteX 11266 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11266 258 NT_STATUS_OK
WriteX 11266 0 65536 65536 NT_STATUS_OK
WriteX 11266 65536 19979 19979 NT_STATUS_OK
Close 11266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 4096 4096 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
QUERY_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
SET_FILE_INFORMATION 11267 1004 NT_STATUS_OK
WriteX 11267 0 4096 4096 NT_STATUS_OK
Flush 11267 NT_STATUS_OK
Close 11267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11269 NT_STATUS_OK
ReadX 11269 0 4096 4096 NT_STATUS_OK
Close 11268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
Close 11270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
Close 11271 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11272 1004 NT_STATUS_OK
WriteX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11273 NT_STATUS_OK
Close 11273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11269 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11275 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11278 NT_STATUS_OK
WriteX 11278 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11278 258 NT_STATUS_OK
WriteX 11278 0 65536 65536 NT_STATUS_OK
WriteX 11278 65536 17654 17654 NT_STATUS_OK
Close 11278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11279 NT_STATUS_OK
ReadX 11279 0 4096 4096 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
QUERY_FILE_INFORMATION 11279 1004 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
SET_FILE_INFORMATION 11279 1004 NT_STATUS_OK
WriteX 11279 0 4096 4096 NT_STATUS_OK
Flush 11279 NT_STATUS_OK
Close 11279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11280 NT_STATUS_OK
SET_FILE_INFORMATION 11280 1004 NT_STATUS_OK
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11281 NT_STATUS_OK
ReadX 11281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11282 NT_STATUS_OK
Close 11282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11284 NT_STATUS_OK
ReadX 11284 0 4096 4096 NT_STATUS_OK
ReadX 11284 4096 4096 4096 NT_STATUS_OK
ReadX 11284 8192 4096 4096 NT_STATUS_OK
ReadX 11284 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11284 16384 4096 4096 NT_STATUS_OK
ReadX 11284 20480 4096 4096 NT_STATUS_OK
ReadX 11284 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
Close 11285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 4096 4096 NT_STATUS_OK
Close 11286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11287 NT_STATUS_OK
ReadX 11287 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11287 1004 NT_STATUS_OK
WriteX 11287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11288 NT_STATUS_OK
Close 11288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11287 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11290 NT_STATUS_OK
Close 11290 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11293 NT_STATUS_OK
WriteX 11293 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11293 258 NT_STATUS_OK
WriteX 11293 0 65536 65536 NT_STATUS_OK
WriteX 11293 65536 19490 19490 NT_STATUS_OK
Close 11293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 4096 4096 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
QUERY_FILE_INFORMATION 11294 1004 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
SET_FILE_INFORMATION 11294 1004 NT_STATUS_OK
WriteX 11294 0 4096 4096 NT_STATUS_OK
Flush 11294 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11295 NT_STATUS_OK
SET_FILE_INFORMATION 11295 1004 NT_STATUS_OK
Close 11295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11296 NT_STATUS_OK
ReadX 11296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11297 NT_STATUS_OK
Close 11297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11299 0 4096 4096 NT_STATUS_OK
Close 11299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11300 NT_STATUS_OK
ReadX 11300 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11301 NT_STATUS_OK
ReadX 11301 0 4096 4096 NT_STATUS_OK
ReadX 11301 4096 4096 4096 NT_STATUS_OK
ReadX 11301 8192 4096 4096 NT_STATUS_OK
ReadX 11301 12288 4096 4096 NT_STATUS_OK
ReadX 11301 16384 4096 4096 NT_STATUS_OK
ReadX 11301 20480 4096 4096 NT_STATUS_OK
ReadX 11301 24576 4096 4096 NT_STATUS_OK
ReadX 11301 28672 4096 4096 NT_STATUS_OK
ReadX 11301 32768 4096 4096 NT_STATUS_OK
ReadX 11301 36864 4096 4096 NT_STATUS_OK
ReadX 11301 40960 4096 4096 NT_STATUS_OK
ReadX 11301 45056 4096 4096 NT_STATUS_OK
ReadX 11301 49152 4096 4096 NT_STATUS_OK
ReadX 11301 53248 4096 4096 NT_STATUS_OK
ReadX 11301 57344 4096 4096 NT_STATUS_OK
ReadX 11301 61440 4096 4096 NT_STATUS_OK
ReadX 11301 65536 4096 4096 NT_STATUS_OK
ReadX 11301 69632 4096 4096 NT_STATUS_OK
ReadX 11301 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11301 1004 NT_STATUS_OK
WriteX 11301 0 4096 4096 NT_STATUS_OK
Close 11301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11302 NT_STATUS_OK
SET_FILE_INFORMATION 11302 1004 NT_STATUS_OK
Close 11302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11303 NT_STATUS_OK
ReadX 11303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11296 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11307 NT_STATUS_OK
WriteX 11307 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11307 258 NT_STATUS_OK
WriteX 11307 0 65536 65536 NT_STATUS_OK
WriteX 11307 65536 8866 8866 NT_STATUS_OK
Close 11307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 0 4096 4096 NT_STATUS_OK
WriteX 11308 0 4096 4096 NT_STATUS_OK
Flush 11308 NT_STATUS_OK
SET_FILE_INFORMATION 11308 1004 NT_STATUS_OK
WriteX 11308 0 4096 4096 NT_STATUS_OK
Flush 11308 NT_STATUS_OK
Close 11308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11309 NT_STATUS_OK
ReadX 11309 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 0 4096 4096 NT_STATUS_OK
Close 11310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 4096 4096 NT_STATUS_OK
Close 11311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11312 NT_STATUS_OK
ReadX 11312 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11313 NT_STATUS_OK
Close 11313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11303 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11318 NT_STATUS_OK
WriteX 11318 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11318 258 NT_STATUS_OK
WriteX 11318 0 65536 65536 NT_STATUS_OK
WriteX 11318 65536 9298 9298 NT_STATUS_OK
Close 11318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11319 NT_STATUS_OK
ReadX 11319 0 4096 4096 NT_STATUS_OK
WriteX 11319 0 4096 4096 NT_STATUS_OK
Flush 11319 NT_STATUS_OK
SET_FILE_INFORMATION 11319 1004 NT_STATUS_OK
WriteX 11319 0 4096 4096 NT_STATUS_OK
Flush 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11320 NT_STATUS_OK
SET_FILE_INFORMATION 11320 1004 NT_STATUS_OK
Close 11320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11321 NT_STATUS_OK
ReadX 11321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11322 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11325 0 4096 4096 NT_STATUS_OK
Close 11325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11326 NT_STATUS_OK
ReadX 11326 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11326 4096 4096 4096 NT_STATUS_OK
ReadX 11326 8192 4096 4096 NT_STATUS_OK
ReadX 11326 12288 4096 4096 NT_STATUS_OK
ReadX 11326 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11327 NT_STATUS_OK
ReadX 11327 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11328 NT_STATUS_OK
ReadX 11328 0 4096 4096 NT_STATUS_OK
Close 11328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11329 NT_STATUS_OK
ReadX 11329 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11329 1004 NT_STATUS_OK
WriteX 11329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11330 NT_STATUS_OK
Close 11330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11326 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11332 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11335 NT_STATUS_OK
WriteX 11335 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 258 NT_STATUS_OK
WriteX 11335 0 65536 65536 NT_STATUS_OK
WriteX 11335 65536 11540 11540 NT_STATUS_OK
Close 11335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
WriteX 11336 0 4096 4096 NT_STATUS_OK
Flush 11336 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
WriteX 11336 0 4096 4096 NT_STATUS_OK
Flush 11336 NT_STATUS_OK
Close 11336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11337 NT_STATUS_OK
SET_FILE_INFORMATION 11337 1004 NT_STATUS_OK
Close 11337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11338 NT_STATUS_OK
ReadX 11338 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11339 NT_STATUS_OK
Close 11339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11341 NT_STATUS_OK
ReadX 11341 61440 4096 4096 NT_STATUS_OK
ReadX 11341 126976 4096 4096 NT_STATUS_OK
WriteX 11341 0 65536 65536 NT_STATUS_OK
WriteX 11341 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11342 NT_STATUS_OK
ReadX 11342 61440 4096 4096 NT_STATUS_OK
ReadX 11342 126976 4096 4096 NT_STATUS_OK
ReadX 11342 192512 4096 4096 NT_STATUS_OK
ReadX 11342 258048 4096 4096 NT_STATUS_OK
WriteX 11342 0 65536 65536 NT_STATUS_OK
WriteX 11342 65536 65536 65536 NT_STATUS_OK
WriteX 11342 131072 65536 65536 NT_STATUS_OK
WriteX 11342 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11343 NT_STATUS_OK
ReadX 11343 61440 4096 4096 NT_STATUS_OK
ReadX 11343 126976 4096 4096 NT_STATUS_OK
ReadX 11343 192512 4096 4096 NT_STATUS_OK
ReadX 11343 258048 4096 4096 NT_STATUS_OK
ReadX 11343 323584 4096 4096 NT_STATUS_OK
ReadX 11343 389120 4096 4096 NT_STATUS_OK
ReadX 11343 454656 4096 4096 NT_STATUS_OK
ReadX 11343 520192 4096 4096 NT_STATUS_OK
WriteX 11343 0 65536 65536 NT_STATUS_OK
WriteX 11343 65536 65536 65536 NT_STATUS_OK
WriteX 11343 131072 65536 65536 NT_STATUS_OK
WriteX 11343 196608 65536 65536 NT_STATUS_OK
WriteX 11343 262144 65536 65536 NT_STATUS_OK
WriteX 11343 327680 65536 65536 NT_STATUS_OK
WriteX 11343 393216 65536 65536 NT_STATUS_OK
WriteX 11343 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
ReadX 11344 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11345 NT_STATUS_OK
WriteX 11345 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11345 258 NT_STATUS_OK
WriteX 11345 0 53 53 NT_STATUS_OK
Close 11345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11338 NT_STATUS_OK
Close 11284 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Close 11343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11344 8192 4096 4096 NT_STATUS_OK
ReadX 11344 12288 4096 4096 NT_STATUS_OK
WriteX 11348 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11348 258 NT_STATUS_OK
ReadX 11344 16384 4096 4096 NT_STATUS_OK
ReadX 11344 20480 4096 4096 NT_STATUS_OK
WriteX 11348 0 15360 15360 NT_STATUS_OK
Close 11348 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11349 NT_STATUS_OK
ReadX 11349 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11349 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11349 1004 NT_STATUS_OK
WriteX 11349 0 4096 4096 NT_STATUS_OK
Close 11349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11350 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11352 4096 4096 4096 NT_STATUS_OK
ReadX 11352 8192 4096 4096 NT_STATUS_OK
ReadX 11352 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11355 NT_STATUS_OK
ReadX 11355 0 4096 4096 NT_STATUS_OK
ReadX 11355 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11356 NT_STATUS_OK
ReadX 11356 0 4096 4096 NT_STATUS_OK
ReadX 11356 4096 4096 4096 NT_STATUS_OK
ReadX 11356 8192 4096 4096 NT_STATUS_OK
Close 11355 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11357 NT_STATUS_OK
WriteX 11357 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11357 258 NT_STATUS_OK
WriteX 11357 0 15360 15360 NT_STATUS_OK
Close 11357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11358 NT_STATUS_OK
ReadX 11358 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11358 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11358 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11361 NT_STATUS_OK
ReadX 11361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11362 NT_STATUS_OK
SET_FILE_INFORMATION 11362 1004 NT_STATUS_OK
Close 11362 NT_STATUS_OK
WriteX 11358 0 4096 4096 NT_STATUS_OK
Close 11358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11363 NT_STATUS_OK
Close 11363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11365 NT_STATUS_OK
ReadX 11365 0 4096 4096 NT_STATUS_OK
ReadX 11365 4096 4096 4096 NT_STATUS_OK
ReadX 11365 8192 4096 4096 NT_STATUS_OK
ReadX 11365 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11365 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11365 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11366 NT_STATUS_OK
ReadX 11366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11367 NT_STATUS_OK
WriteX 11367 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11367 258 NT_STATUS_OK
WriteX 11367 0 53 53 NT_STATUS_OK
Close 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11366 4096 4096 4096 NT_STATUS_OK
ReadX 11366 8192 4096 4096 NT_STATUS_OK
ReadX 11366 12288 4096 4096 NT_STATUS_OK
WriteX 11370 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11370 258 NT_STATUS_OK
WriteX 11370 0 12006 12006 NT_STATUS_OK
Close 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11371 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11371 1004 NT_STATUS_OK
WriteX 11371 0 4096 4096 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11372 NT_STATUS_OK
Close 11372 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11374 NT_STATUS_OK
ReadX 11374 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11375 NT_STATUS_OK
Close 11375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11374 4096 4096 4096 NT_STATUS_OK
ReadX 11374 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11377 NT_STATUS_OK
WriteX 11377 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11377 258 NT_STATUS_OK
WriteX 11377 0 11991 11991 NT_STATUS_OK
Close 11377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11378 NT_STATUS_OK
ReadX 11378 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11378 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11378 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11379 NT_STATUS_OK
Close 11379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11381 NT_STATUS_OK
ReadX 11381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11382 NT_STATUS_OK
SET_FILE_INFORMATION 11382 1004 NT_STATUS_OK
Close 11382 NT_STATUS_OK
WriteX 11378 0 4096 4096 NT_STATUS_OK
Close 11378 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11383 NT_STATUS_OK
Close 11383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11385 NT_STATUS_OK
ReadX 11385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11386 NT_STATUS_OK
Close 11386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11385 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
ReadX 11385 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
WriteX 11385 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11385 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11385 1004 NT_STATUS_OK
Close 11361 NT_STATUS_OK
WriteX 11365 0 19054 19054 NT_STATUS_OK
WriteX 11385 0 12288 12288 NT_STATUS_OK
Close 11381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Close 11385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11390 NT_STATUS_OK
Close 11390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 61440 61440 NT_STATUS_OK
ReadX 11392 61440 4096 4096 NT_STATUS_OK
ReadX 11392 65536 61440 61440 NT_STATUS_OK
ReadX 11392 126976 4096 4096 NT_STATUS_OK
ReadX 11392 131072 61440 61440 NT_STATUS_OK
ReadX 11392 192512 4096 4096 NT_STATUS_OK
ReadX 11392 196608 61440 61440 NT_STATUS_OK
ReadX 11392 258048 4096 4096 NT_STATUS_OK
ReadX 11392 262144 61440 61440 NT_STATUS_OK
ReadX 11392 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11393 NT_STATUS_OK
ReadX 11393 0 61440 61440 NT_STATUS_OK
ReadX 11393 61440 4096 4096 NT_STATUS_OK
ReadX 11393 65536 61440 61440 NT_STATUS_OK
ReadX 11393 126976 4096 4096 NT_STATUS_OK
ReadX 11393 131072 61440 61440 NT_STATUS_OK
ReadX 11393 192512 4096 4096 NT_STATUS_OK
ReadX 11393 196608 61440 61440 NT_STATUS_OK
ReadX 11393 258048 4096 4096 NT_STATUS_OK
ReadX 11393 262144 61440 61440 NT_STATUS_OK
ReadX 11393 323584 4096 4096 NT_STATUS_OK
ReadX 11393 327680 61440 61440 NT_STATUS_OK
ReadX 11393 389120 4096 4096 NT_STATUS_OK
ReadX 11393 393216 61440 61440 NT_STATUS_OK
ReadX 11393 454656 4096 4096 NT_STATUS_OK
ReadX 11393 458752 61440 61440 NT_STATUS_OK
ReadX 11393 520192 4096 4096 NT_STATUS_OK
ReadX 11393 524288 61440 61440 NT_STATUS_OK
ReadX 11393 585728 4096 4096 NT_STATUS_OK
ReadX 11393 589824 61440 61440 NT_STATUS_OK
ReadX 11393 651264 4096 4096 NT_STATUS_OK
ReadX 11393 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11394 NT_STATUS_OK
ReadX 11394 0 61440 61440 NT_STATUS_OK
ReadX 11394 61440 4096 4096 NT_STATUS_OK
ReadX 11394 65536 61440 61440 NT_STATUS_OK
ReadX 11394 126976 4096 4096 NT_STATUS_OK
ReadX 11394 131072 61440 61440 NT_STATUS_OK
ReadX 11394 192512 4096 4096 NT_STATUS_OK
ReadX 11394 196608 61440 61440 NT_STATUS_OK
ReadX 11394 258048 4096 4096 NT_STATUS_OK
ReadX 11394 262144 61440 61440 NT_STATUS_OK
ReadX 11394 323584 4096 4096 NT_STATUS_OK
ReadX 11394 327680 61440 61440 NT_STATUS_OK
ReadX 11394 389120 4096 4096 NT_STATUS_OK
ReadX 11394 393216 61440 61440 NT_STATUS_OK
ReadX 11394 454656 4096 4096 NT_STATUS_OK
ReadX 11394 458752 61440 61440 NT_STATUS_OK
ReadX 11394 520192 4096 4096 NT_STATUS_OK
ReadX 11394 524288 61440 61440 NT_STATUS_OK
ReadX 11394 585728 4096 4096 NT_STATUS_OK
ReadX 11394 589824 61440 61440 NT_STATUS_OK
ReadX 11394 651264 4096 4096 NT_STATUS_OK
ReadX 11394 655360 61440 61440 NT_STATUS_OK
ReadX 11394 716800 4096 4096 NT_STATUS_OK
ReadX 11394 720896 61440 61440 NT_STATUS_OK
ReadX 11394 782336 4096 4096 NT_STATUS_OK
ReadX 11394 786432 61440 61440 NT_STATUS_OK
ReadX 11394 847872 4096 4096 NT_STATUS_OK
ReadX 11394 851968 61440 61440 NT_STATUS_OK
ReadX 11394 913408 4096 4096 NT_STATUS_OK
ReadX 11394 917504 61440 61440 NT_STATUS_OK
ReadX 11394 978944 4096 4096 NT_STATUS_OK
ReadX 11394 983040 61440 61440 NT_STATUS_OK
ReadX 11394 1044480 4096 4096 NT_STATUS_OK
ReadX 11394 1048576 61440 61440 NT_STATUS_OK
ReadX 11394 1110016 4096 4096 NT_STATUS_OK
ReadX 11394 1114112 61440 61440 NT_STATUS_OK
ReadX 11394 1175552 4096 4096 NT_STATUS_OK
ReadX 11394 1179648 61440 61440 NT_STATUS_OK
ReadX 11394 1241088 4096 4096 NT_STATUS_OK
ReadX 11394 1245184 61440 61440 NT_STATUS_OK
ReadX 11394 1306624 4096 4096 NT_STATUS_OK
ReadX 11394 1310720 61440 61440 NT_STATUS_OK
ReadX 11394 1372160 4096 4096 NT_STATUS_OK
ReadX 11394 1376256 61440 61440 NT_STATUS_OK
ReadX 11394 1437696 4096 4096 NT_STATUS_OK
ReadX 11394 1441792 61440 61440 NT_STATUS_OK
ReadX 11394 1503232 4096 4096 NT_STATUS_OK
ReadX 11394 1507328 61440 61440 NT_STATUS_OK
ReadX 11394 1568768 4096 4096 NT_STATUS_OK
ReadX 11394 1572864 61440 61440 NT_STATUS_OK
ReadX 11394 1634304 4096 4096 NT_STATUS_OK
ReadX 11394 1638400 61440 61440 NT_STATUS_OK
ReadX 11394 1699840 4096 4096 NT_STATUS_OK
ReadX 11394 1703936 61440 61440 NT_STATUS_OK
ReadX 11394 1765376 4096 4096 NT_STATUS_OK
ReadX 11394 1769472 61440 61440 NT_STATUS_OK
ReadX 11394 1830912 4096 4096 NT_STATUS_OK
ReadX 11394 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11395 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11396 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11397 NT_STATUS_OK
ReadX 11397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11399 NT_STATUS_OK
ReadX 11399 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11401 NT_STATUS_OK
QUERY_FILE_INFORMATION 11401 1004 NT_STATUS_OK
WriteX 11401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11401 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11403 NT_STATUS_OK
WriteX 11403 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11403 258 NT_STATUS_OK
WriteX 11403 0 491 491 NT_STATUS_OK
Close 11403 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11404 NT_STATUS_OK
ReadX 11404 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11401 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11406 NT_STATUS_OK
Close 11406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11407 NT_STATUS_OK
WriteX 11407 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11407 258 NT_STATUS_OK
WriteX 11407 0 543 543 NT_STATUS_OK
Close 11407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11408 NT_STATUS_OK
ReadX 11408 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Close 11393 NT_STATUS_OK
Close 11394 NT_STATUS_OK
Close 11408 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Close 11397 NT_STATUS_OK
Close 11398 NT_STATUS_OK
Close 11399 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11411 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11411 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11412 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11413 NT_STATUS_OK
ReadX 11413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11414 NT_STATUS_OK
ReadX 11414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11420 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11421 NT_STATUS_OK
QUERY_FILE_INFORMATION 11421 1004 NT_STATUS_OK
WriteX 11421 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11421 258 NT_STATUS_OK
WriteX 11421 0 2048 2048 NT_STATUS_OK
Close 11421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11422 NT_STATUS_OK
ReadX 11422 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11422 0 4096 4096 NT_STATUS_OK
Flush 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11422 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11427 NT_STATUS_OK
WriteX 11427 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11427 258 NT_STATUS_OK
WriteX 11427 0 2048 2048 NT_STATUS_OK
Close 11427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11428 NT_STATUS_OK
ReadX 11428 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11432 NT_STATUS_OK
Close 11432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11433 NT_STATUS_OK
WriteX 11433 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11433 258 NT_STATUS_OK
WriteX 11433 0 2048 2048 NT_STATUS_OK
Close 11433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11434 NT_STATUS_OK
ReadX 11434 0 2048 2048 NT_STATUS_OK
ReadX 11412 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11428 0 4096 4096 NT_STATUS_OK
WriteX 11412 0 8192 8192 NT_STATUS_OK
WriteX 11413 0 4096 4096 NT_STATUS_OK
WriteX 11414 0 4096 4096 NT_STATUS_OK
ReadX 11428 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11437 NT_STATUS_OK
ReadX 11437 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11438 NT_STATUS_OK
QUERY_FILE_INFORMATION 11438 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11437 NT_STATUS_OK
Close 11413 NT_STATUS_OK
Close 11414 NT_STATUS_OK
Close 11415 NT_STATUS_OK
Close 11428 NT_STATUS_OK
Close 11412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11440 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11441 NT_STATUS_OK
ReadX 11441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11443 NT_STATUS_OK
ReadX 11443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11445 NT_STATUS_OK
ReadX 11445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11446 NT_STATUS_OK
ReadX 11446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11448 NT_STATUS_OK
ReadX 11448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11449 NT_STATUS_OK
ReadX 11449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11450 NT_STATUS_OK
ReadX 11450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11453 NT_STATUS_OK
ReadX 11453 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11458 NT_STATUS_OK
QUERY_FILE_INFORMATION 11458 1004 NT_STATUS_OK
WriteX 11458 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11458 258 NT_STATUS_OK
WriteX 11458 0 2048 2048 NT_STATUS_OK
Close 11458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11459 NT_STATUS_OK
ReadX 11459 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11449 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11466 NT_STATUS_OK
QUERY_FILE_INFORMATION 11466 1004 NT_STATUS_OK
WriteX 11466 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11466 258 NT_STATUS_OK
WriteX 11466 0 2048 2048 NT_STATUS_OK
Close 11466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11467 NT_STATUS_OK
ReadX 11467 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11459 0 4096 4096 NT_STATUS_OK
Flush 11459 NT_STATUS_OK
WriteX 11467 0 4096 4096 NT_STATUS_OK
Flush 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11459 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11467 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11461 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11469 NT_STATUS_OK
WriteX 11469 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 258 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11471 NT_STATUS_OK
Close 11471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11472 NT_STATUS_OK
WriteX 11472 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11472 258 NT_STATUS_OK
WriteX 11472 0 4096 4096 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11473 0 4096 4096 NT_STATUS_OK
Close 11470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11453 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11450 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11448 NT_STATUS_OK
Close 11441 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Close 11445 NT_STATUS_OK
Close 11446 NT_STATUS_OK
Close 11443 NT_STATUS_OK
Close 11444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11480 NT_STATUS_OK
WriteX 11480 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11480 258 NT_STATUS_OK
WriteX 11480 0 2048 2048 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11482 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11483 NT_STATUS_OK
ReadX 11483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11485 NT_STATUS_OK
ReadX 11485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11489 NT_STATUS_OK
ReadX 11489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11490 NT_STATUS_OK
ReadX 11490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11491 NT_STATUS_OK
ReadX 11491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11492 NT_STATUS_OK
ReadX 11492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11493 NT_STATUS_OK
ReadX 11493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11494 NT_STATUS_OK
ReadX 11494 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11495 NT_STATUS_OK
QUERY_FILE_INFORMATION 11495 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11481 NT_STATUS_OK
Close 11493 NT_STATUS_OK
Close 11488 NT_STATUS_OK
Close 11489 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Close 11494 NT_STATUS_OK
Close 11482 NT_STATUS_OK
Close 11483 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Close 11484 NT_STATUS_OK
Close 11485 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11497 NT_STATUS_OK
QUERY_FILE_INFORMATION 11497 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11500 NT_STATUS_OK
ReadX 11500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11501 NT_STATUS_OK
ReadX 11501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11507 NT_STATUS_OK
ReadX 11507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11508 NT_STATUS_OK
ReadX 11508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11509 NT_STATUS_OK
ReadX 11509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11516 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11517 NT_STATUS_OK
QUERY_FILE_INFORMATION 11517 1004 NT_STATUS_OK
WriteX 11517 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11517 258 NT_STATUS_OK
WriteX 11517 0 2048 2048 NT_STATUS_OK
Close 11517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11518 NT_STATUS_OK
ReadX 11518 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11520 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11524 NT_STATUS_OK
ReadX 11524 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11528 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11529 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 1004 NT_STATUS_OK
WriteX 11529 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11529 258 NT_STATUS_OK
WriteX 11529 0 2048 2048 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11532 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11537 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 1004 NT_STATUS_OK
WriteX 11537 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 2048 2048 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
Flush 11518 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
Flush 11530 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11518 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11530 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11520 4096 16384 16384 NT_STATUS_OK
ReadX 11500 4096 16384 16384 NT_STATUS_OK
ReadX 11532 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 2048 2048 NT_STATUS_OK
WriteX 11540 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11541 NT_STATUS_OK
QUERY_FILE_INFORMATION 11541 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11524 NT_STATUS_OK
Close 11512 NT_STATUS_OK
Close 11504 NT_STATUS_OK
Close 11520 NT_STATUS_OK
Close 11521 NT_STATUS_OK
Close 11522 NT_STATUS_OK
Close 11523 NT_STATUS_OK
Close 11511 NT_STATUS_OK
Close 11532 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Close 11509 NT_STATUS_OK
Close 11510 NT_STATUS_OK
Close 11507 NT_STATUS_OK
Close 11508 NT_STATUS_OK
Close 11500 NT_STATUS_OK
Close 11501 NT_STATUS_OK
Close 11502 NT_STATUS_OK
Close 11503 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11543 NT_STATUS_OK
QUERY_FILE_INFORMATION 11543 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11545 NT_STATUS_OK
QUERY_FILE_INFORMATION 11545 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11551 NT_STATUS_OK
ReadX 11551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11548 4096 16384 16384 NT_STATUS_OK
WriteX 11548 0 4096 4096 NT_STATUS_OK
WriteX 11549 0 4096 4096 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11553 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11553 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11554 NT_STATUS_OK
ReadX 11554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11556 NT_STATUS_OK
ReadX 11556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11561 NT_STATUS_OK
ReadX 11561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11562 NT_STATUS_OK
ReadX 11562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11563 NT_STATUS_OK
ReadX 11563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11565 NT_STATUS_OK
ReadX 11565 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11566 NT_STATUS_OK
ReadX 11566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 8192 8192 NT_STATUS_OK
ReadX 11554 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11568 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11568 0 4096 4096 NT_STATUS_OK
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 4096 4096 NT_STATUS_OK
WriteX 11554 0 4096 4096 NT_STATUS_OK
WriteX 11555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11569 0 4096 4096 NT_STATUS_OK
ReadX 11569 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11548 0 4096 4096 NT_STATUS_OK
WriteX 11549 0 4096 4096 NT_STATUS_OK
WriteX 11550 0 4096 4096 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11573 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11574 NT_STATUS_OK
QUERY_FILE_INFORMATION 11574 1004 NT_STATUS_OK
WriteX 11574 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11574 258 NT_STATUS_OK
WriteX 11574 0 2048 2048 NT_STATUS_OK
Close 11574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11576 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11576 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 0 4096 4096 NT_STATUS_OK
ReadX 11577 4096 4096 4096 NT_STATUS_OK
WriteX 11577 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11575 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11579 NT_STATUS_OK
ReadX 11579 0 4096 4096 NT_STATUS_OK
ReadX 11579 4096 4096 4096 NT_STATUS_OK
WriteX 11579 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11580 NT_STATUS_OK
QUERY_FILE_INFORMATION 11580 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Close 11552 NT_STATUS_OK
Close 11548 NT_STATUS_OK
Close 11549 NT_STATUS_OK
Close 11550 NT_STATUS_OK
Close 11551 NT_STATUS_OK
Close 11560 NT_STATUS_OK
Close 11565 NT_STATUS_OK
Close 11561 NT_STATUS_OK
Close 11562 NT_STATUS_OK
Close 11563 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Close 11554 NT_STATUS_OK
Close 11555 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Close 11559 NT_STATUS_OK
Close 11556 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Close 11579 NT_STATUS_OK
Close 11568 NT_STATUS_OK
Close 11569 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11582 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11582 0 4096 4096 NT_STATUS_OK
ReadX 11582 4096 4096 4096 NT_STATUS_OK
ReadX 11582 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11583 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11584 NT_STATUS_OK
ReadX 11584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11585 NT_STATUS_OK
ReadX 11585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11586 NT_STATUS_OK
ReadX 11586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11589 NT_STATUS_OK
ReadX 11589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11590 NT_STATUS_OK
ReadX 11590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11591 NT_STATUS_OK
ReadX 11591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11592 NT_STATUS_OK
ReadX 11592 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11593 NT_STATUS_OK
ReadX 11593 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 4096 4096 NT_STATUS_OK
ReadX 11583 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11599 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11600 NT_STATUS_OK
QUERY_FILE_INFORMATION 11600 1004 NT_STATUS_OK
WriteX 11600 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11600 258 NT_STATUS_OK
WriteX 11600 0 2048 2048 NT_STATUS_OK
Close 11600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11601 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11605 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11606 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 1004 NT_STATUS_OK
WriteX 11606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 258 NT_STATUS_OK
WriteX 11606 0 2048 2048 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11590 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11608 NT_STATUS_OK
QUERY_FILE_INFORMATION 11608 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Close 11589 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Close 11583 NT_STATUS_OK
Close 11584 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Close 11585 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Close 11590 NT_STATUS_OK
Close 11591 NT_STATUS_OK
Close 11592 NT_STATUS_OK
Close 11593 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11610 NT_STATUS_OK
QUERY_FILE_INFORMATION 11610 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11612 NT_STATUS_OK
ReadX 11612 61440 4096 4096 NT_STATUS_OK
ReadX 11612 126976 4096 4096 NT_STATUS_OK
WriteX 11612 0 65536 65536 NT_STATUS_OK
WriteX 11612 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11613 NT_STATUS_OK
ReadX 11613 61440 4096 4096 NT_STATUS_OK
ReadX 11613 126976 4096 4096 NT_STATUS_OK
ReadX 11613 192512 4096 4096 NT_STATUS_OK
ReadX 11613 258048 4096 4096 NT_STATUS_OK
WriteX 11613 0 65536 65536 NT_STATUS_OK
WriteX 11613 65536 65536 65536 NT_STATUS_OK
WriteX 11613 131072 65536 65536 NT_STATUS_OK
WriteX 11613 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 61440 4096 4096 NT_STATUS_OK
ReadX 11614 126976 4096 4096 NT_STATUS_OK
ReadX 11614 192512 4096 4096 NT_STATUS_OK
ReadX 11614 258048 4096 4096 NT_STATUS_OK
ReadX 11614 323584 4096 4096 NT_STATUS_OK
ReadX 11614 389120 4096 4096 NT_STATUS_OK
ReadX 11614 454656 4096 4096 NT_STATUS_OK
ReadX 11614 520192 4096 4096 NT_STATUS_OK
WriteX 11614 0 65536 65536 NT_STATUS_OK
WriteX 11614 65536 65536 65536 NT_STATUS_OK
WriteX 11614 131072 65536 65536 NT_STATUS_OK
WriteX 11614 196608 65536 65536 NT_STATUS_OK
WriteX 11614 262144 65536 65536 NT_STATUS_OK
WriteX 11614 327680 65536 65536 NT_STATUS_OK
WriteX 11614 393216 65536 65536 NT_STATUS_OK
WriteX 11614 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11615 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11615 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11615 8192 4096 4096 NT_STATUS_OK
ReadX 11615 12288 4096 4096 NT_STATUS_OK
ReadX 11615 16384 4096 4096 NT_STATUS_OK
ReadX 11615 20480 4096 4096 NT_STATUS_OK
ReadX 11615 24576 4096 4096 NT_STATUS_OK
ReadX 11615 28672 4096 4096 NT_STATUS_OK
ReadX 11615 32768 4096 4096 NT_STATUS_OK
ReadX 11615 36864 4096 4096 NT_STATUS_OK
ReadX 11615 40960 4096 4096 NT_STATUS_OK
ReadX 11615 45056 4096 4096 NT_STATUS_OK
ReadX 11615 49152 4096 4096 NT_STATUS_OK
ReadX 11615 53248 4096 4096 NT_STATUS_OK
ReadX 11615 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11615 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11616 NT_STATUS_OK
Close 11616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11612 NT_STATUS_OK
Close 11613 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11618 NT_STATUS_OK
WriteX 11618 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11618 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11618 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11618 1004 NT_STATUS_OK
WriteX 11618 0 57088 57088 NT_STATUS_OK
WriteX 11618 0 4096 4096 NT_STATUS_OK
Flush 11618 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11619 NT_STATUS_OK
SET_FILE_INFORMATION 11619 1004 NT_STATUS_OK
Close 11619 NT_STATUS_OK
SET_FILE_INFORMATION 11618 1004 NT_STATUS_OK
WriteX 11618 0 4096 4096 NT_STATUS_OK
Close 11618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11620 NT_STATUS_OK
Close 11620 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11622 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11623 NT_STATUS_OK
WriteX 11623 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11623 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11623 1004 NT_STATUS_OK
WriteX 11623 0 51456 51456 NT_STATUS_OK
WriteX 11623 0 4096 4096 NT_STATUS_OK
Flush 11623 NT_STATUS_OK
SET_FILE_INFORMATION 11623 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11623 1004 NT_STATUS_OK
WriteX 11623 0 4096 4096 NT_STATUS_OK
Close 11623 NT_STATUS_OK
Close 11622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11625 NT_STATUS_OK
Close 11625 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11627 NT_STATUS_OK
ReadX 11627 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11627 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11632 NT_STATUS_OK
WriteX 11632 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11632 258 NT_STATUS_OK
WriteX 11632 0 53077 53077 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11633 NT_STATUS_OK
WriteX 11633 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11633 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
WriteX 11633 0 65536 65536 NT_STATUS_OK
WriteX 11633 65536 1856 1856 NT_STATUS_OK
WriteX 11633 0 4096 4096 NT_STATUS_OK
Flush 11633 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11633 1004 NT_STATUS_OK
WriteX 11633 0 4096 4096 NT_STATUS_OK
Close 11633 NT_STATUS_OK
Close 11627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11635 NT_STATUS_OK
Close 11635 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11642 NT_STATUS_OK
WriteX 11642 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11642 258 NT_STATUS_OK
WriteX 11642 0 7983 7983 NT_STATUS_OK
Close 11642 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11644 NT_STATUS_OK
Close 11644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11647 NT_STATUS_OK
WriteX 11647 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11647 258 NT_STATUS_OK
WriteX 11647 0 65536 65536 NT_STATUS_OK
WriteX 11647 65536 65536 65536 NT_STATUS_OK
WriteX 11647 131072 65536 65536 NT_STATUS_OK
WriteX 11647 196608 65536 65536 NT_STATUS_OK
WriteX 11647 262144 65536 65536 NT_STATUS_OK
WriteX 11647 327680 65536 65536 NT_STATUS_OK
WriteX 11647 393216 65536 65536 NT_STATUS_OK
WriteX 11647 458752 46731 46731 NT_STATUS_OK
Close 11647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11648 NT_STATUS_OK
WriteX 11648 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11637 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11648 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11648 1004 NT_STATUS_OK
WriteX 11648 0 65536 65536 NT_STATUS_OK
WriteX 11648 65536 22848 22848 NT_STATUS_OK
WriteX 11648 0 4096 4096 NT_STATUS_OK
Flush 11648 NT_STATUS_OK
SET_FILE_INFORMATION 11648 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11648 1004 NT_STATUS_OK
WriteX 11648 0 4096 4096 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Close 11637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11652 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11653 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11653 1004 NT_STATUS_OK
ReadX 11653 8192 4096 4096 NT_STATUS_OK
ReadX 11653 12288 4096 4096 NT_STATUS_OK
ReadX 11653 16384 4096 4096 NT_STATUS_OK
ReadX 11653 20480 4096 4096 NT_STATUS_OK
ReadX 11653 24576 4096 4096 NT_STATUS_OK
ReadX 11653 28672 4096 4096 NT_STATUS_OK
ReadX 11653 32768 4096 4096 NT_STATUS_OK
ReadX 11653 36864 4096 4096 NT_STATUS_OK
ReadX 11653 40960 4096 4096 NT_STATUS_OK
ReadX 11653 45056 4096 4096 NT_STATUS_OK
ReadX 11653 49152 4096 4096 NT_STATUS_OK
ReadX 11653 53248 4096 4096 NT_STATUS_OK
ReadX 11653 57344 4096 4096 NT_STATUS_OK
ReadX 11653 61440 4096 4096 NT_STATUS_OK
ReadX 11653 65536 4096 4096 NT_STATUS_OK
ReadX 11653 69632 4096 4096 NT_STATUS_OK
ReadX 11653 73728 4096 4096 NT_STATUS_OK
ReadX 11653 77824 4096 4096 NT_STATUS_OK
ReadX 11653 81920 4096 4096 NT_STATUS_OK
ReadX 11653 86016 4096 4096 NT_STATUS_OK
ReadX 11653 90112 4096 4096 NT_STATUS_OK
ReadX 11653 94208 4096 4096 NT_STATUS_OK
ReadX 11653 98304 4096 4096 NT_STATUS_OK
ReadX 11653 102400 4096 4096 NT_STATUS_OK
ReadX 11653 106496 4096 4096 NT_STATUS_OK
ReadX 11653 110592 4096 4096 NT_STATUS_OK
ReadX 11653 114688 4096 4096 NT_STATUS_OK
ReadX 11653 118784 4096 4096 NT_STATUS_OK
ReadX 11653 122880 4096 4096 NT_STATUS_OK
ReadX 11653 126976 4096 4096 NT_STATUS_OK
ReadX 11653 131072 4096 4096 NT_STATUS_OK
ReadX 11653 135168 4096 4096 NT_STATUS_OK
ReadX 11653 139264 4096 4096 NT_STATUS_OK
ReadX 11653 143360 4096 4096 NT_STATUS_OK
ReadX 11653 147456 4096 4096 NT_STATUS_OK
ReadX 11653 151552 4096 4096 NT_STATUS_OK
ReadX 11653 155648 4096 4096 NT_STATUS_OK
ReadX 11653 159744 4096 4096 NT_STATUS_OK
ReadX 11653 163840 4096 4096 NT_STATUS_OK
ReadX 11653 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11653 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11654 NT_STATUS_OK
Close 11654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11656 NT_STATUS_OK
WriteX 11656 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11656 258 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11657 NT_STATUS_OK
SET_FILE_INFORMATION 11657 1004 NT_STATUS_OK
Close 11657 NT_STATUS_OK
WriteX 11656 0 42388 42388 NT_STATUS_OK
Close 11656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11658 NT_STATUS_OK
Close 11658 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11660 NT_STATUS_OK
ReadX 11660 0 4096 4096 NT_STATUS_OK
ReadX 11660 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11661 NT_STATUS_OK
WriteX 11661 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 258 NT_STATUS_OK
SET_FILE_INFORMATION 11661 1004 NT_STATUS_OK
WriteX 11661 0 42652 42652 NT_STATUS_OK
Close 11661 NT_STATUS_OK
Close 11660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11663 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11665 NT_STATUS_OK
ReadX 11665 0 4096 4096 NT_STATUS_OK
ReadX 11665 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11670 NT_STATUS_OK
WriteX 11670 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11670 258 NT_STATUS_OK
WriteX 11670 0 65536 65536 NT_STATUS_OK
WriteX 11670 65536 49 49 NT_STATUS_OK
Close 11670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 61440 61440 NT_STATUS_OK
ReadX 11671 61440 4096 4096 NT_STATUS_OK
ReadX 11671 65536 61440 61440 NT_STATUS_OK
ReadX 11671 126976 4096 4096 NT_STATUS_OK
ReadX 11671 131072 61440 61440 NT_STATUS_OK
ReadX 11671 192512 4096 4096 NT_STATUS_OK
ReadX 11671 196608 61440 61440 NT_STATUS_OK
ReadX 11671 258048 4096 4096 NT_STATUS_OK
ReadX 11671 262144 61440 61440 NT_STATUS_OK
ReadX 11671 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11672 NT_STATUS_OK
ReadX 11672 0 61440 61440 NT_STATUS_OK
ReadX 11672 61440 4096 4096 NT_STATUS_OK
ReadX 11672 65536 61440 61440 NT_STATUS_OK
ReadX 11672 126976 4096 4096 NT_STATUS_OK
ReadX 11672 131072 61440 61440 NT_STATUS_OK
ReadX 11672 192512 4096 4096 NT_STATUS_OK
ReadX 11672 196608 61440 61440 NT_STATUS_OK
ReadX 11672 258048 4096 4096 NT_STATUS_OK
ReadX 11672 262144 61440 61440 NT_STATUS_OK
ReadX 11672 323584 4096 4096 NT_STATUS_OK
ReadX 11672 327680 61440 61440 NT_STATUS_OK
ReadX 11672 389120 4096 4096 NT_STATUS_OK
ReadX 11672 393216 61440 61440 NT_STATUS_OK
ReadX 11672 454656 4096 4096 NT_STATUS_OK
ReadX 11672 458752 61440 61440 NT_STATUS_OK
ReadX 11672 520192 4096 4096 NT_STATUS_OK
ReadX 11672 524288 61440 61440 NT_STATUS_OK
ReadX 11672 585728 4096 4096 NT_STATUS_OK
ReadX 11672 589824 61440 61440 NT_STATUS_OK
ReadX 11672 651264 4096 4096 NT_STATUS_OK
ReadX 11672 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 61440 61440 NT_STATUS_OK
ReadX 11673 61440 4096 4096 NT_STATUS_OK
ReadX 11673 65536 61440 61440 NT_STATUS_OK
ReadX 11673 126976 4096 4096 NT_STATUS_OK
ReadX 11673 131072 61440 61440 NT_STATUS_OK
ReadX 11673 192512 4096 4096 NT_STATUS_OK
ReadX 11673 196608 61440 61440 NT_STATUS_OK
ReadX 11673 258048 4096 4096 NT_STATUS_OK
ReadX 11673 262144 61440 61440 NT_STATUS_OK
ReadX 11673 323584 4096 4096 NT_STATUS_OK
ReadX 11673 327680 61440 61440 NT_STATUS_OK
ReadX 11673 389120 4096 4096 NT_STATUS_OK
ReadX 11673 393216 61440 61440 NT_STATUS_OK
ReadX 11673 454656 4096 4096 NT_STATUS_OK
ReadX 11673 458752 61440 61440 NT_STATUS_OK
ReadX 11673 520192 4096 4096 NT_STATUS_OK
ReadX 11673 524288 61440 61440 NT_STATUS_OK
ReadX 11673 585728 4096 4096 NT_STATUS_OK
ReadX 11673 589824 61440 61440 NT_STATUS_OK
ReadX 11673 651264 4096 4096 NT_STATUS_OK
ReadX 11673 655360 61440 61440 NT_STATUS_OK
ReadX 11673 716800 4096 4096 NT_STATUS_OK
ReadX 11673 720896 61440 61440 NT_STATUS_OK
ReadX 11673 782336 4096 4096 NT_STATUS_OK
ReadX 11673 786432 61440 61440 NT_STATUS_OK
ReadX 11673 847872 4096 4096 NT_STATUS_OK
ReadX 11673 851968 61440 61440 NT_STATUS_OK
ReadX 11673 913408 4096 4096 NT_STATUS_OK
ReadX 11673 917504 61440 61440 NT_STATUS_OK
ReadX 11673 978944 4096 4096 NT_STATUS_OK
ReadX 11673 983040 61440 61440 NT_STATUS_OK
ReadX 11673 1044480 4096 4096 NT_STATUS_OK
ReadX 11673 1048576 61440 61440 NT_STATUS_OK
ReadX 11673 1110016 4096 4096 NT_STATUS_OK
ReadX 11673 1114112 61440 61440 NT_STATUS_OK
ReadX 11673 1175552 4096 4096 NT_STATUS_OK
ReadX 11673 1179648 61440 61440 NT_STATUS_OK
ReadX 11673 1241088 4096 4096 NT_STATUS_OK
ReadX 11673 1245184 61440 61440 NT_STATUS_OK
ReadX 11673 1306624 4096 4096 NT_STATUS_OK
ReadX 11673 1310720 61440 61440 NT_STATUS_OK
ReadX 11673 1372160 4096 4096 NT_STATUS_OK
ReadX 11673 1376256 61440 61440 NT_STATUS_OK
ReadX 11673 1437696 4096 4096 NT_STATUS_OK
ReadX 11673 1441792 61440 61440 NT_STATUS_OK
ReadX 11673 1503232 4096 4096 NT_STATUS_OK
ReadX 11673 1507328 61440 61440 NT_STATUS_OK
ReadX 11673 1568768 4096 4096 NT_STATUS_OK
ReadX 11673 1572864 61440 61440 NT_STATUS_OK
ReadX 11673 1634304 4096 4096 NT_STATUS_OK
ReadX 11673 1638400 61440 61440 NT_STATUS_OK
ReadX 11673 1699840 4096 4096 NT_STATUS_OK
ReadX 11673 1703936 61440 61440 NT_STATUS_OK
ReadX 11673 1765376 4096 4096 NT_STATUS_OK
ReadX 11673 1769472 61440 61440 NT_STATUS_OK
ReadX 11673 1830912 4096 4096 NT_STATUS_OK
ReadX 11673 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11675 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 1005 NT_STATUS_OK
ReadX 11675 2156 24 24 NT_STATUS_OK
ReadX 11675 2139 276 276 NT_STATUS_OK
ReadX 11675 2136 14 14 NT_STATUS_OK
ReadX 11675 2136 7 7 NT_STATUS_OK
ReadX 11675 2138 12 12 NT_STATUS_OK
ReadX 11675 2137 8 8 NT_STATUS_OK
ReadX 11675 2135 15 15 NT_STATUS_OK
ReadX 11675 0 16 16 NT_STATUS_OK
ReadX 11675 16 2048 2048 NT_STATUS_OK
ReadX 11675 2064 2048 2048 NT_STATUS_OK
ReadX 11675 257 2048 2048 NT_STATUS_OK
ReadX 11675 385 2048 2048 NT_STATUS_OK
ReadX 11675 513 2048 2048 NT_STATUS_OK
ReadX 11675 641 2048 2048 NT_STATUS_OK
ReadX 11675 769 2048 2048 NT_STATUS_OK
ReadX 11675 897 2048 2048 NT_STATUS_OK
ReadX 11675 1025 2048 2048 NT_STATUS_OK
ReadX 11675 1153 2048 2048 NT_STATUS_OK
ReadX 11675 1281 2048 2048 NT_STATUS_OK
ReadX 11675 1409 2048 2048 NT_STATUS_OK
ReadX 11675 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11677 NT_STATUS_OK
Close 11677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11671 NT_STATUS_OK
Close 11672 NT_STATUS_OK
Close 11673 NT_STATUS_OK
Close 11665 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11680 NT_STATUS_OK
WriteX 11680 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11680 258 NT_STATUS_OK
WriteX 11680 0 10575 10575 NT_STATUS_OK
Flush 11680 NT_STATUS_OK
Close 11680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 4096 4096 NT_STATUS_OK
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11685 NT_STATUS_OK
LockX 11685 2147483538 1 NT_STATUS_OK
UnlockX 11685 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1005 NT_STATUS_OK
ReadX 11685 0 512 512 NT_STATUS_OK
ReadX 11685 512 512 512 NT_STATUS_OK
ReadX 11685 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11685 1004 NT_STATUS_OK
Close 11685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11686 NT_STATUS_OK
QUERY_FILE_INFORMATION 11686 1005 NT_STATUS_OK
ReadX 11686 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11687 NT_STATUS_OK
LockX 11687 2147483538 1 NT_STATUS_OK
UnlockX 11687 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11687 1005 NT_STATUS_OK
ReadX 11687 0 512 512 NT_STATUS_OK
ReadX 11687 512 512 512 NT_STATUS_OK
ReadX 11687 1024 512 512 NT_STATUS_OK
ReadX 11687 288 20 20 NT_STATUS_OK
ReadX 11687 308 2084 2084 NT_STATUS_OK
ReadX 11687 388 2084 2084 NT_STATUS_OK
ReadX 11687 388 2084 2084 NT_STATUS_OK
ReadX 11674 2157 1386 1386 NT_STATUS_OK
ReadX 11687 2472 399 399 NT_STATUS_OK
ReadX 11687 3072 1536 1536 NT_STATUS_OK
ReadX 11687 544 149 149 NT_STATUS_OK
ReadX 11687 693 485 485 NT_STATUS_OK
Close 11687 NT_STATUS_OK
ReadX 11674 2157 4096 4096 NT_STATUS_OK
ReadX 11674 6253 4096 4096 NT_STATUS_OK
ReadX 11674 10349 4096 4096 NT_STATUS_OK
ReadX 11674 14445 4096 4096 NT_STATUS_OK
ReadX 11674 18541 4096 4096 NT_STATUS_OK
ReadX 11674 22637 256 256 NT_STATUS_OK
ReadX 11674 22893 4096 4096 NT_STATUS_OK
ReadX 11674 26989 4096 4096 NT_STATUS_OK
ReadX 11674 31085 4096 4096 NT_STATUS_OK
ReadX 11674 35181 4096 4096 NT_STATUS_OK
ReadX 11674 39277 4096 4096 NT_STATUS_OK
ReadX 11674 43373 4096 4096 NT_STATUS_OK
ReadX 11674 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11674 2157 1024 1024 NT_STATUS_OK
ReadX 11674 1667 4688 4688 NT_STATUS_OK
ReadX 11674 6355 3516 3516 NT_STATUS_OK
ReadX 11674 9871 16384 16384 NT_STATUS_OK
ReadX 11674 26255 3771 3771 NT_STATUS_OK
ReadX 11674 30026 2048 2048 NT_STATUS_OK
ReadX 11674 32074 1024 1024 NT_STATUS_OK
ReadX 11674 33098 6652 6652 NT_STATUS_OK
ReadX 11674 39750 16384 16384 NT_STATUS_OK
ReadX 11674 56134 10496 10496 NT_STATUS_OK
ReadX 11674 66630 1784 1784 NT_STATUS_OK
ReadX 11674 68414 90 90 NT_STATUS_OK
ReadX 11674 68504 273 273 NT_STATUS_OK
ReadX 11674 68777 1600 1600 NT_STATUS_OK
ReadX 11674 70377 640 640 NT_STATUS_OK
ReadX 11674 71017 1280 1280 NT_STATUS_OK
ReadX 11674 72297 8464 8464 NT_STATUS_OK
ReadX 11674 80761 158 158 NT_STATUS_OK
ReadX 11674 80919 912 912 NT_STATUS_OK
ReadX 11674 81831 1980 1980 NT_STATUS_OK
ReadX 11674 83811 2256 2256 NT_STATUS_OK
ReadX 11674 86067 400 400 NT_STATUS_OK
ReadX 11674 86467 252 252 NT_STATUS_OK
ReadX 11674 86719 42 42 NT_STATUS_OK
ReadX 11674 86761 725 725 NT_STATUS_OK
ReadX 11674 2009 512 512 NT_STATUS_OK
ReadX 11674 3895 9 9 NT_STATUS_OK
ReadX 11674 3781 46 46 NT_STATUS_OK
ReadX 11674 4059 92 92 NT_STATUS_OK
ReadX 11674 3781 92 92 NT_STATUS_OK
ReadX 11674 3986 184 184 NT_STATUS_OK
ReadX 11674 3987 16384 16384 NT_STATUS_OK
ReadX 11674 3902 16384 16384 NT_STATUS_OK
ReadX 11674 3781 10240 10240 NT_STATUS_OK
ReadX 11674 3821 16384 16384 NT_STATUS_OK
ReadX 11674 3891 935 935 NT_STATUS_OK
ReadX 11674 4060 10240 10240 NT_STATUS_OK
ReadX 11674 4059 184 184 NT_STATUS_OK
ReadX 11674 256 184 184 NT_STATUS_OK
ReadX 11674 256 1026 1026 NT_STATUS_OK
ReadX 11674 3901 326 326 NT_STATUS_OK
ReadX 11674 3899 652 652 NT_STATUS_OK
ReadX 11674 256 2 2 NT_STATUS_OK
ReadX 11674 258 4948 4948 NT_STATUS_OK
Close 11674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11689 NT_STATUS_OK
Close 11689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11692 NT_STATUS_OK
WriteX 11692 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 258 NT_STATUS_OK
WriteX 11692 0 65536 65536 NT_STATUS_OK
WriteX 11692 65536 65536 65536 NT_STATUS_OK
WriteX 11692 131072 65536 65536 NT_STATUS_OK
WriteX 11692 196608 65536 65536 NT_STATUS_OK
WriteX 11692 262144 65536 65536 NT_STATUS_OK
WriteX 11692 327680 65536 65536 NT_STATUS_OK
WriteX 11692 393216 65536 65536 NT_STATUS_OK
WriteX 11692 458752 65536 65536 NT_STATUS_OK
WriteX 11692 524288 65536 65536 NT_STATUS_OK
WriteX 11692 589824 35257 35257 NT_STATUS_OK
Close 11692 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11694 NT_STATUS_OK
Close 11694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11697 NT_STATUS_OK
WriteX 11697 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11697 258 NT_STATUS_OK
WriteX 11697 0 65536 65536 NT_STATUS_OK
WriteX 11697 65536 65536 65536 NT_STATUS_OK
WriteX 11697 131072 65536 65536 NT_STATUS_OK
WriteX 11697 196608 65536 65536 NT_STATUS_OK
WriteX 11697 262144 65536 65536 NT_STATUS_OK
WriteX 11697 327680 65536 65536 NT_STATUS_OK
WriteX 11697 393216 65536 65536 NT_STATUS_OK
WriteX 11697 458752 65536 65536 NT_STATUS_OK
WriteX 11697 524288 65536 65536 NT_STATUS_OK
WriteX 11697 589824 57598 57598 NT_STATUS_OK
Close 11697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11699 NT_STATUS_OK
WriteX 11699 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11699 258 NT_STATUS_OK
WriteX 11699 0 12543 12543 NT_STATUS_OK
Flush 11699 NT_STATUS_OK
Close 11699 NT_STATUS_OK
Close 11683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11701 NT_STATUS_OK
Close 11701 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11705 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 1005 NT_STATUS_OK
ReadX 11705 1938 24 24 NT_STATUS_OK
ReadX 11705 1920 276 276 NT_STATUS_OK
ReadX 11705 1918 14 14 NT_STATUS_OK
ReadX 11705 1918 7 7 NT_STATUS_OK
ReadX 11705 1919 12 12 NT_STATUS_OK
ReadX 11705 1919 8 8 NT_STATUS_OK
ReadX 11705 1917 15 15 NT_STATUS_OK
ReadX 11705 0 16 16 NT_STATUS_OK
ReadX 11705 16 2048 2048 NT_STATUS_OK
ReadX 11705 2064 2048 2048 NT_STATUS_OK
ReadX 11705 257 2048 2048 NT_STATUS_OK
ReadX 11705 385 2048 2048 NT_STATUS_OK
ReadX 11705 513 2048 2048 NT_STATUS_OK
ReadX 11705 641 2048 2048 NT_STATUS_OK
ReadX 11705 769 2048 2048 NT_STATUS_OK
ReadX 11705 897 2048 2048 NT_STATUS_OK
ReadX 11705 1025 2048 2048 NT_STATUS_OK
ReadX 11705 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11707 NT_STATUS_OK
Close 11707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11710 NT_STATUS_OK
WriteX 11710 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11710 258 NT_STATUS_OK
WriteX 11710 0 11588 11588 NT_STATUS_OK
Flush 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11711 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11715 NT_STATUS_OK
WriteX 11715 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11715 258 NT_STATUS_OK
WriteX 11715 0 11615 11615 NT_STATUS_OK
Flush 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11717 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11719 NT_STATUS_OK
ReadX 11719 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11721 NT_STATUS_OK
Close 11721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11724 NT_STATUS_OK
WriteX 11724 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11724 258 NT_STATUS_OK
WriteX 11724 0 65536 65536 NT_STATUS_OK
WriteX 11724 65536 16050 16050 NT_STATUS_OK
Close 11724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11704 1939 64 64 NT_STATUS_OK
ReadX 11704 128 248 248 NT_STATUS_OK
ReadX 11704 128 568 568 NT_STATUS_OK
ReadX 11704 3872 1536 1536 NT_STATUS_OK
ReadX 11704 3456 2560 2560 NT_STATUS_OK
ReadX 11704 3136 512 512 NT_STATUS_OK
ReadX 11704 2880 4096 4096 NT_STATUS_OK
ReadX 11704 3264 3072 3072 NT_STATUS_OK
ReadX 11704 320 4096 4096 NT_STATUS_OK
ReadX 11704 1024 4096 4096 NT_STATUS_OK
ReadX 11704 3616 4096 4096 NT_STATUS_OK
ReadX 11704 1939 64 64 NT_STATUS_OK
ReadX 11704 128 248 248 NT_STATUS_OK
ReadX 11704 128 608 608 NT_STATUS_OK
ReadX 11704 2858 1024 1024 NT_STATUS_OK
ReadX 11704 2810 4096 4096 NT_STATUS_OK
ReadX 11704 2826 4096 4096 NT_STATUS_OK
ReadX 11704 2580 2048 2048 NT_STATUS_OK
ReadX 11704 2800 2560 2560 NT_STATUS_OK
ReadX 11704 2100 4096 4096 NT_STATUS_OK
ReadX 11704 2084 4096 4096 NT_STATUS_OK
ReadX 11704 868 4096 4096 NT_STATUS_OK
ReadX 11704 2324 4096 4096 NT_STATUS_OK
ReadX 11704 884 4096 4096 NT_STATUS_OK
ReadX 11704 2604 1024 1024 NT_STATUS_OK
ReadX 11704 580 4096 4096 NT_STATUS_OK
ReadX 11704 596 4096 4096 NT_STATUS_OK
ReadX 11704 2752 4096 4096 NT_STATUS_OK
ReadX 11704 2842 1024 1024 NT_STATUS_OK
ReadX 11704 660 4096 4096 NT_STATUS_OK
ReadX 11704 2720 4096 4096 NT_STATUS_OK
ReadX 11704 2736 4096 4096 NT_STATUS_OK
ReadX 11704 628 4096 4096 NT_STATUS_OK
ReadX 11704 2704 4096 4096 NT_STATUS_OK
ReadX 11704 1556 4096 4096 NT_STATUS_OK
ReadX 11704 576 4096 4096 NT_STATUS_OK
ReadX 11704 3168 1536 1536 NT_STATUS_OK
ReadX 11704 832 4096 4096 NT_STATUS_OK
ReadX 11704 1088 4096 4096 NT_STATUS_OK
ReadX 11704 1344 4096 4096 NT_STATUS_OK
ReadX 11704 1600 4096 4096 NT_STATUS_OK
ReadX 11704 1856 4096 4096 NT_STATUS_OK
ReadX 11704 2112 4096 4096 NT_STATUS_OK
ReadX 11704 1892 4096 4096 NT_STATUS_OK
ReadX 11704 820 4096 4096 NT_STATUS_OK
ReadX 11704 788 4096 4096 NT_STATUS_OK
ReadX 11704 1604 4096 4096 NT_STATUS_OK
ReadX 11704 3648 4096 4096 NT_STATUS_OK
ReadX 11704 2608 4096 4096 NT_STATUS_OK
ReadX 11704 548 4096 4096 NT_STATUS_OK
ReadX 11704 740 4096 4096 NT_STATUS_OK
ReadX 11704 1344 4096 4096 NT_STATUS_OK
ReadX 11704 3392 4096 4096 NT_STATUS_OK
ReadX 11704 3904 4096 4096 NT_STATUS_OK
ReadX 11704 644 4096 4096 NT_STATUS_OK
ReadX 11704 676 4096 4096 NT_STATUS_OK
ReadX 11704 2688 4096 4096 NT_STATUS_OK
ReadX 11704 320 4096 4096 NT_STATUS_OK
ReadX 11704 900 4096 4096 NT_STATUS_OK
ReadX 11704 1908 4096 4096 NT_STATUS_OK
ReadX 11704 852 4096 4096 NT_STATUS_OK
ReadX 11704 724 4096 4096 NT_STATUS_OK
ReadX 11704 2292 4096 4096 NT_STATUS_OK
ReadX 11704 612 4096 4096 NT_STATUS_OK
ReadX 11704 388 4096 4096 NT_STATUS_OK
ReadX 11704 2368 4096 4096 NT_STATUS_OK
ReadX 11704 2624 4096 4096 NT_STATUS_OK
ReadX 11704 500 4096 4096 NT_STATUS_OK
ReadX 11704 356 4096 4096 NT_STATUS_OK
ReadX 11704 1024 4096 4096 NT_STATUS_OK
ReadX 11704 576 4096 4096 NT_STATUS_OK
ReadX 11704 340 4096 4096 NT_STATUS_OK
ReadX 11704 420 4096 4096 NT_STATUS_OK
ReadX 11704 1600 4096 4096 NT_STATUS_OK
ReadX 11704 404 4096 4096 NT_STATUS_OK
ReadX 11704 1428 4096 4096 NT_STATUS_OK
ReadX 11704 2656 4096 4096 NT_STATUS_OK
ReadX 11704 2624 4096 4096 NT_STATUS_OK
ReadX 11704 452 4096 4096 NT_STATUS_OK
ReadX 11704 692 4096 4096 NT_STATUS_OK
ReadX 11704 564 4096 4096 NT_STATUS_OK
ReadX 11704 372 4096 4096 NT_STATUS_OK
ReadX 11704 468 4096 4096 NT_STATUS_OK
ReadX 11704 484 4096 4096 NT_STATUS_OK
ReadX 11704 1088 4096 4096 NT_STATUS_OK
ReadX 11704 1924 4096 4096 NT_STATUS_OK
ReadX 11704 2768 4096 4096 NT_STATUS_OK
ReadX 11704 832 4096 4096 NT_STATUS_OK
ReadX 11704 836 4096 4096 NT_STATUS_OK
ReadX 11704 1856 4096 4096 NT_STATUS_OK
ReadX 11704 2640 4096 4096 NT_STATUS_OK
ReadX 11704 436 4096 4096 NT_STATUS_OK
ReadX 11704 1828 4096 4096 NT_STATUS_OK
ReadX 11704 804 4096 4096 NT_STATUS_OK
ReadX 11704 1860 4096 4096 NT_STATUS_OK
ReadX 11704 1812 4096 4096 NT_STATUS_OK
ReadX 11704 756 4096 4096 NT_STATUS_OK
ReadX 11704 1636 4096 4096 NT_STATUS_OK
ReadX 11704 772 4096 4096 NT_STATUS_OK
ReadX 11704 2036 4096 4096 NT_STATUS_OK
ReadX 11704 1220 4096 4096 NT_STATUS_OK
ReadX 11704 1652 4096 4096 NT_STATUS_OK
ReadX 11704 2588 4096 4096 NT_STATUS_OK
ReadX 11704 916 4096 4096 NT_STATUS_OK
ReadX 11704 260 4096 4096 NT_STATUS_OK
ReadX 11704 932 4096 4096 NT_STATUS_OK
ReadX 11704 2624 4096 4096 NT_STATUS_OK
ReadX 11704 308 4096 4096 NT_STATUS_OK
ReadX 11704 292 4096 4096 NT_STATUS_OK
ReadX 11704 1140 4096 4096 NT_STATUS_OK
ReadX 11704 276 4096 4096 NT_STATUS_OK
ReadX 11704 2020 4096 4096 NT_STATUS_OK
ReadX 11704 2880 4096 4096 NT_STATUS_OK
ReadX 11704 516 4096 4096 NT_STATUS_OK
ReadX 11704 1844 4096 4096 NT_STATUS_OK
ReadX 11704 1124 4096 4096 NT_STATUS_OK
ReadX 11704 3136 4096 4096 NT_STATUS_OK
ReadX 11704 324 4096 4096 NT_STATUS_OK
ReadX 11704 1156 4096 4096 NT_STATUS_OK
ReadX 11704 1172 4096 4096 NT_STATUS_OK
ReadX 11704 2112 4096 4096 NT_STATUS_OK
ReadX 11704 2368 4096 4096 NT_STATUS_OK
ReadX 11704 964 4096 4096 NT_STATUS_OK
ReadX 11704 980 4096 4096 NT_STATUS_OK
ReadX 11704 1012 4096 4096 NT_STATUS_OK
ReadX 11704 532 4096 4096 NT_STATUS_OK
ReadX 11704 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11704 1620 4096 4096 NT_STATUS_OK
ReadX 11704 1604 4096 4096 NT_STATUS_OK
ReadX 11704 2116 4096 4096 NT_STATUS_OK
ReadX 11704 2132 4096 4096 NT_STATUS_OK
ReadX 11704 2148 4096 4096 NT_STATUS_OK
ReadX 11704 2276 4096 4096 NT_STATUS_OK
ReadX 11704 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11726 NT_STATUS_OK
Close 11726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11729 NT_STATUS_OK
QUERY_FILE_INFORMATION 11684 1004 NT_STATUS_OK
Close 11684 NT_STATUS_OK
WriteX 11729 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11729 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11686 1004 NT_STATUS_OK
Close 11686 NT_STATUS_OK
WriteX 11729 0 65536 65536 NT_STATUS_OK
WriteX 11729 65536 64850 64850 NT_STATUS_OK
Close 11729 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11731 NT_STATUS_OK
WriteX 11731 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 258 NT_STATUS_OK
ReadX 11704 2068 4096 4096 NT_STATUS_OK
ReadX 11704 1588 4096 4096 NT_STATUS_OK
ReadX 11704 1572 4096 4096 NT_STATUS_OK
WriteX 11731 0 18630 18630 NT_STATUS_OK
Flush 11731 NT_STATUS_OK
Close 11731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11733 NT_STATUS_OK
Close 11733 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11735 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11704 612 4096 4096 NT_STATUS_OK
ReadX 11704 564 4096 4096 NT_STATUS_OK
ReadX 11704 1876 4096 4096 NT_STATUS_OK
ReadX 11704 628 4096 4096 NT_STATUS_OK
ReadX 11704 740 4096 4096 NT_STATUS_OK
ReadX 11704 724 4096 4096 NT_STATUS_OK
ReadX 11704 644 4096 4096 NT_STATUS_OK
ReadX 11704 2324 4096 4096 NT_STATUS_OK
ReadX 11704 660 4096 4096 NT_STATUS_OK
ReadX 11704 852 4096 4096 NT_STATUS_OK
ReadX 11704 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11704 2368 4096 4096 NT_STATUS_OK
ReadX 11704 1024 4096 4096 NT_STATUS_OK
ReadX 11704 320 4096 4096 NT_STATUS_OK
ReadX 11704 580 4096 4096 NT_STATUS_OK
ReadX 11704 3136 512 512 NT_STATUS_OK
ReadX 11704 2880 4096 4096 NT_STATUS_OK
Close 11704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 61440 4096 4096 NT_STATUS_OK
ReadX 11736 126976 4096 4096 NT_STATUS_OK
WriteX 11736 0 65536 65536 NT_STATUS_OK
WriteX 11736 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11737 NT_STATUS_OK
ReadX 11737 61440 4096 4096 NT_STATUS_OK
ReadX 11737 126976 4096 4096 NT_STATUS_OK
ReadX 11737 192512 4096 4096 NT_STATUS_OK
ReadX 11737 258048 4096 4096 NT_STATUS_OK
WriteX 11737 0 65536 65536 NT_STATUS_OK
WriteX 11737 65536 65536 65536 NT_STATUS_OK
WriteX 11737 131072 65536 65536 NT_STATUS_OK
WriteX 11737 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 61440 4096 4096 NT_STATUS_OK
ReadX 11738 126976 4096 4096 NT_STATUS_OK
ReadX 11738 192512 4096 4096 NT_STATUS_OK
ReadX 11738 258048 4096 4096 NT_STATUS_OK
ReadX 11738 323584 4096 4096 NT_STATUS_OK
ReadX 11738 389120 4096 4096 NT_STATUS_OK
ReadX 11738 454656 4096 4096 NT_STATUS_OK
ReadX 11738 520192 4096 4096 NT_STATUS_OK
WriteX 11738 0 65536 65536 NT_STATUS_OK
WriteX 11738 65536 65536 65536 NT_STATUS_OK
WriteX 11738 131072 65536 65536 NT_STATUS_OK
WriteX 11738 196608 65536 65536 NT_STATUS_OK
WriteX 11738 262144 65536 65536 NT_STATUS_OK
WriteX 11738 327680 65536 65536 NT_STATUS_OK
WriteX 11738 393216 65536 65536 NT_STATUS_OK
WriteX 11738 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11739 NT_STATUS_OK
ReadX 11739 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11740 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11741 NT_STATUS_OK
WriteX 11741 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11741 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11739 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11739 0 8192 8192 NT_STATUS_OK
Flush 11739 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11743 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11735 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11736 NT_STATUS_OK
Close 11737 NT_STATUS_OK
Close 11738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11746 NT_STATUS_OK
WriteX 11746 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11746 258 NT_STATUS_OK
WriteX 11746 0 62591 62591 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11748 NT_STATUS_OK
Close 11748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11751 NT_STATUS_OK
WriteX 11751 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11751 258 NT_STATUS_OK
WriteX 11751 0 10845 10845 NT_STATUS_OK
Close 11751 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11753 NT_STATUS_OK
Close 11753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11756 NT_STATUS_OK
WriteX 11756 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11756 258 NT_STATUS_OK
WriteX 11756 0 30118 30118 NT_STATUS_OK
Close 11756 NT_STATUS_OK
WriteX 11739 0 4096 4096 NT_STATUS_OK
WriteX 11741 0 64 64 NT_STATUS_OK
Close 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11739 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 61440 61440 NT_STATUS_OK
ReadX 11758 61440 4096 4096 NT_STATUS_OK
ReadX 11758 65536 61440 61440 NT_STATUS_OK
ReadX 11758 126976 4096 4096 NT_STATUS_OK
ReadX 11758 131072 61440 61440 NT_STATUS_OK
ReadX 11758 192512 4096 4096 NT_STATUS_OK
ReadX 11758 196608 61440 61440 NT_STATUS_OK
ReadX 11758 258048 4096 4096 NT_STATUS_OK
ReadX 11758 262144 61440 61440 NT_STATUS_OK
ReadX 11758 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 61440 61440 NT_STATUS_OK
ReadX 11759 61440 4096 4096 NT_STATUS_OK
ReadX 11759 65536 61440 61440 NT_STATUS_OK
ReadX 11759 126976 4096 4096 NT_STATUS_OK
ReadX 11759 131072 61440 61440 NT_STATUS_OK
ReadX 11759 192512 4096 4096 NT_STATUS_OK
ReadX 11759 196608 61440 61440 NT_STATUS_OK
ReadX 11759 258048 4096 4096 NT_STATUS_OK
ReadX 11759 262144 61440 61440 NT_STATUS_OK
ReadX 11759 323584 4096 4096 NT_STATUS_OK
ReadX 11759 327680 61440 61440 NT_STATUS_OK
ReadX 11759 389120 4096 4096 NT_STATUS_OK
ReadX 11759 393216 61440 61440 NT_STATUS_OK
ReadX 11759 454656 4096 4096 NT_STATUS_OK
ReadX 11759 458752 61440 61440 NT_STATUS_OK
ReadX 11759 520192 4096 4096 NT_STATUS_OK
ReadX 11759 524288 61440 61440 NT_STATUS_OK
ReadX 11759 585728 4096 4096 NT_STATUS_OK
ReadX 11759 589824 61440 61440 NT_STATUS_OK
ReadX 11759 651264 4096 4096 NT_STATUS_OK
ReadX 11759 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 61440 61440 NT_STATUS_OK
ReadX 11760 61440 4096 4096 NT_STATUS_OK
ReadX 11760 65536 61440 61440 NT_STATUS_OK
ReadX 11760 126976 4096 4096 NT_STATUS_OK
ReadX 11760 131072 61440 61440 NT_STATUS_OK
ReadX 11760 192512 4096 4096 NT_STATUS_OK
ReadX 11760 196608 61440 61440 NT_STATUS_OK
ReadX 11760 258048 4096 4096 NT_STATUS_OK
ReadX 11760 262144 61440 61440 NT_STATUS_OK
ReadX 11760 323584 4096 4096 NT_STATUS_OK
ReadX 11760 327680 61440 61440 NT_STATUS_OK
ReadX 11760 389120 4096 4096 NT_STATUS_OK
ReadX 11760 393216 61440 61440 NT_STATUS_OK
ReadX 11760 454656 4096 4096 NT_STATUS_OK
ReadX 11760 458752 61440 61440 NT_STATUS_OK
ReadX 11760 520192 4096 4096 NT_STATUS_OK
ReadX 11760 524288 61440 61440 NT_STATUS_OK
ReadX 11760 585728 4096 4096 NT_STATUS_OK
ReadX 11760 589824 61440 61440 NT_STATUS_OK
ReadX 11760 651264 4096 4096 NT_STATUS_OK
ReadX 11760 655360 61440 61440 NT_STATUS_OK
ReadX 11760 716800 4096 4096 NT_STATUS_OK
ReadX 11760 720896 61440 61440 NT_STATUS_OK
ReadX 11760 782336 4096 4096 NT_STATUS_OK
ReadX 11760 786432 61440 61440 NT_STATUS_OK
ReadX 11760 847872 4096 4096 NT_STATUS_OK
ReadX 11760 851968 61440 61440 NT_STATUS_OK
ReadX 11760 913408 4096 4096 NT_STATUS_OK
ReadX 11760 917504 61440 61440 NT_STATUS_OK
ReadX 11760 978944 4096 4096 NT_STATUS_OK
ReadX 11760 983040 61440 61440 NT_STATUS_OK
ReadX 11760 1044480 4096 4096 NT_STATUS_OK
ReadX 11760 1048576 61440 61440 NT_STATUS_OK
ReadX 11760 1110016 4096 4096 NT_STATUS_OK
ReadX 11760 1114112 61440 61440 NT_STATUS_OK
ReadX 11760 1175552 4096 4096 NT_STATUS_OK
ReadX 11760 1179648 61440 61440 NT_STATUS_OK
ReadX 11760 1241088 4096 4096 NT_STATUS_OK
ReadX 11760 1245184 61440 61440 NT_STATUS_OK
ReadX 11760 1306624 4096 4096 NT_STATUS_OK
ReadX 11760 1310720 61440 61440 NT_STATUS_OK
ReadX 11760 1372160 4096 4096 NT_STATUS_OK
ReadX 11760 1376256 61440 61440 NT_STATUS_OK
ReadX 11760 1437696 4096 4096 NT_STATUS_OK
ReadX 11760 1441792 61440 61440 NT_STATUS_OK
ReadX 11760 1503232 4096 4096 NT_STATUS_OK
ReadX 11760 1507328 61440 61440 NT_STATUS_OK
ReadX 11760 1568768 4096 4096 NT_STATUS_OK
ReadX 11760 1572864 61440 61440 NT_STATUS_OK
ReadX 11760 1634304 4096 4096 NT_STATUS_OK
ReadX 11760 1638400 61440 61440 NT_STATUS_OK
ReadX 11760 1699840 4096 4096 NT_STATUS_OK
ReadX 11760 1703936 61440 61440 NT_STATUS_OK
ReadX 11760 1765376 4096 4096 NT_STATUS_OK
ReadX 11760 1769472 61440 61440 NT_STATUS_OK
ReadX 11760 1830912 4096 4096 NT_STATUS_OK
ReadX 11760 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11761 NT_STATUS_OK
Close 11761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
ReadX 11765 4096 4096 4096 NT_STATUS_OK
ReadX 11765 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11766 NT_STATUS_OK
Close 11766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11769 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11769 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11770 NT_STATUS_OK
Close 11770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11773 NT_STATUS_OK
ReadX 11773 0 8192 8192 NT_STATUS_OK
ReadX 11773 8192 8192 8192 NT_STATUS_OK
ReadX 11773 16384 8192 8192 NT_STATUS_OK
ReadX 11773 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11775 NT_STATUS_OK
Close 11775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11773 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11778 NT_STATUS_OK
WriteX 11778 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11778 258 NT_STATUS_OK
WriteX 11778 0 10438 10438 NT_STATUS_OK
Close 11778 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11779 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11780 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11782 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11783 NT_STATUS_OK
Close 11783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11784 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11786 NT_STATUS_OK
Close 11786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
ReadX 11787 4096 4096 4096 NT_STATUS_OK
ReadX 11787 8192 4096 4096 NT_STATUS_OK
ReadX 11787 12288 8192 8192 NT_STATUS_OK
ReadX 11787 20480 8192 8192 NT_STATUS_OK
ReadX 11787 28672 8192 8192 NT_STATUS_OK
ReadX 11787 36864 8192 8192 NT_STATUS_OK
ReadX 11787 45056 8192 8192 NT_STATUS_OK
ReadX 11787 53248 8192 8192 NT_STATUS_OK
ReadX 11787 61440 8192 8192 NT_STATUS_OK
ReadX 11787 69632 8192 8192 NT_STATUS_OK
ReadX 11787 77824 8192 8192 NT_STATUS_OK
ReadX 11787 86016 8192 8192 NT_STATUS_OK
ReadX 11787 94208 8192 8192 NT_STATUS_OK
ReadX 11787 102400 8192 8192 NT_STATUS_OK
ReadX 11787 110592 8192 8192 NT_STATUS_OK
ReadX 11787 118784 8192 8192 NT_STATUS_OK
ReadX 11787 126976 8192 8192 NT_STATUS_OK
ReadX 11787 135168 8192 8192 NT_STATUS_OK
ReadX 11787 143360 8192 8192 NT_STATUS_OK
ReadX 11787 151552 8192 8192 NT_STATUS_OK
ReadX 11787 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11789 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11792 NT_STATUS_OK
WriteX 11792 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11792 258 NT_STATUS_OK
WriteX 11792 0 28489 28489 NT_STATUS_OK
Close 11792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11793 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11795 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11796 NT_STATUS_OK
Close 11796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11799 NT_STATUS_OK
ReadX 11799 0 8192 8192 NT_STATUS_OK
ReadX 11799 8192 8192 8192 NT_STATUS_OK
ReadX 11799 16384 8192 8192 NT_STATUS_OK
ReadX 11799 24576 8192 8192 NT_STATUS_OK
ReadX 11799 32768 16384 16384 NT_STATUS_OK
ReadX 11799 49152 8192 8192 NT_STATUS_OK
ReadX 11799 57344 8192 8192 NT_STATUS_OK
ReadX 11799 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11801 NT_STATUS_OK
Close 11801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11799 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11804 NT_STATUS_OK
WriteX 11804 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 258 NT_STATUS_OK
WriteX 11804 0 29253 29253 NT_STATUS_OK
Close 11804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11805 NT_STATUS_OK
Close 11805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11808 NT_STATUS_OK
Close 11808 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11811 NT_STATUS_OK
WriteX 11811 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11811 258 NT_STATUS_OK
WriteX 11811 0 30183 30183 NT_STATUS_OK
Close 11811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11812 NT_STATUS_OK
Close 11812 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11814 NT_STATUS_OK
WriteX 11814 0 510 510 NT_STATUS_OK
WriteX 11814 510 512 512 NT_STATUS_OK
WriteX 11814 1022 510 510 NT_STATUS_OK
WriteX 11814 1532 510 510 NT_STATUS_OK
WriteX 11814 2042 168 168 NT_STATUS_OK
Close 11814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11815 NT_STATUS_OK
Close 11815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
WriteX 11817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 61440 4096 4096 NT_STATUS_OK
ReadX 11818 126976 4096 4096 NT_STATUS_OK
WriteX 11818 0 65536 65536 NT_STATUS_OK
WriteX 11818 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 61440 4096 4096 NT_STATUS_OK
ReadX 11819 126976 4096 4096 NT_STATUS_OK
ReadX 11819 192512 4096 4096 NT_STATUS_OK
ReadX 11819 258048 4096 4096 NT_STATUS_OK
WriteX 11819 0 65536 65536 NT_STATUS_OK
WriteX 11819 65536 65536 65536 NT_STATUS_OK
WriteX 11819 131072 65536 65536 NT_STATUS_OK
WriteX 11819 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 61440 4096 4096 NT_STATUS_OK
ReadX 11820 126976 4096 4096 NT_STATUS_OK
ReadX 11820 192512 4096 4096 NT_STATUS_OK
ReadX 11820 258048 4096 4096 NT_STATUS_OK
ReadX 11820 323584 4096 4096 NT_STATUS_OK
ReadX 11820 389120 4096 4096 NT_STATUS_OK
ReadX 11820 454656 4096 4096 NT_STATUS_OK
ReadX 11820 520192 4096 4096 NT_STATUS_OK
WriteX 11820 0 65536 65536 NT_STATUS_OK
WriteX 11820 65536 65536 65536 NT_STATUS_OK
WriteX 11820 131072 65536 65536 NT_STATUS_OK
WriteX 11820 196608 65536 65536 NT_STATUS_OK
WriteX 11820 262144 65536 65536 NT_STATUS_OK
WriteX 11820 327680 65536 65536 NT_STATUS_OK
WriteX 11820 393216 65536 65536 NT_STATUS_OK
WriteX 11820 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11821 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11818 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Close 11820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11827 NT_STATUS_OK
Close 11827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11830 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11836 NT_STATUS_OK
Close 11836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11839 NT_STATUS_OK
Close 11839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11841 NT_STATUS_OK
Close 11841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11845 NT_STATUS_OK
Close 11845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11850 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11855 NT_STATUS_OK
Close 11855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11860 NT_STATUS_OK
Close 11860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11865 NT_STATUS_OK
Close 11865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11875 NT_STATUS_OK
Close 11875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11880 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11886 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11889 NT_STATUS_OK
WriteX 11889 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11889 0 65536 65536 NT_STATUS_OK
WriteX 11889 65536 65536 65536 NT_STATUS_OK
WriteX 11889 131072 65536 65536 NT_STATUS_OK
WriteX 11889 196608 65536 65536 NT_STATUS_OK
WriteX 11889 262144 26634 26634 NT_STATUS_OK
Close 11889 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11894 NT_STATUS_OK
Close 11894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11895 NT_STATUS_OK
Close 11895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
Close 11896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
ReadX 11897 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11898 NT_STATUS_OK
Close 11898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11902 NT_STATUS_OK
Close 11902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11905 NT_STATUS_OK
Close 11905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11907 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11911 NT_STATUS_OK
Close 11911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11914 NT_STATUS_OK
Close 11914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11916 NT_STATUS_OK
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11920 NT_STATUS_OK
Close 11920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11925 NT_STATUS_OK
Close 11925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11930 NT_STATUS_OK
Close 11930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11945 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11949 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11954 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11959 NT_STATUS_OK
Close 11959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11962 NT_STATUS_OK
Close 11962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11974 NT_STATUS_OK
Close 11974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 4096 4096 NT_STATUS_OK
Close 11976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11977 NT_STATUS_OK
ReadX 11977 0 4096 4096 NT_STATUS_OK
Close 11977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11978 NT_STATUS_OK
ReadX 11978 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11988 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
Close 11990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11991 NT_STATUS_OK
ReadX 11991 0 4096 4096 NT_STATUS_OK
Close 11991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11978 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12021 0 4096 4096 NT_STATUS_OK
Close 12021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 0 4096 4096 NT_STATUS_OK
ReadX 12023 4096 4096 4096 NT_STATUS_OK
ReadX 12023 8192 4096 4096 NT_STATUS_OK
ReadX 12023 12288 4096 4096 NT_STATUS_OK
ReadX 12023 16384 4096 4096 NT_STATUS_OK
ReadX 12023 20480 4096 4096 NT_STATUS_OK
ReadX 12023 24576 4096 4096 NT_STATUS_OK
ReadX 12023 28672 4096 4096 NT_STATUS_OK
ReadX 12023 32768 4096 4096 NT_STATUS_OK
ReadX 12023 36864 4096 4096 NT_STATUS_OK
ReadX 12023 40960 4096 4096 NT_STATUS_OK
ReadX 12023 45056 4096 4096 NT_STATUS_OK
ReadX 12023 49152 4096 4096 NT_STATUS_OK
ReadX 12023 53248 4096 4096 NT_STATUS_OK
ReadX 12023 57344 4096 4096 NT_STATUS_OK
ReadX 12023 61440 4096 4096 NT_STATUS_OK
ReadX 12023 65536 4096 4096 NT_STATUS_OK
ReadX 12023 69632 4096 4096 NT_STATUS_OK
ReadX 12023 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12023 1004 NT_STATUS_OK
WriteX 12023 0 4096 4096 NT_STATUS_OK
Close 12023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12024 NT_STATUS_OK
SET_FILE_INFORMATION 12024 1004 NT_STATUS_OK
Close 12024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12025 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12029 NT_STATUS_OK
WriteX 12029 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12029 258 NT_STATUS_OK
WriteX 12029 0 65536 65536 NT_STATUS_OK
WriteX 12029 65536 19979 19979 NT_STATUS_OK
Close 12029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 4096 4096 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
QUERY_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
SET_FILE_INFORMATION 12030 1004 NT_STATUS_OK
WriteX 12030 0 4096 4096 NT_STATUS_OK
Flush 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12032 NT_STATUS_OK
ReadX 12032 0 4096 4096 NT_STATUS_OK
Close 12031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
Close 12033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
Close 12034 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12035 1004 NT_STATUS_OK
WriteX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12036 NT_STATUS_OK
Close 12036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12032 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12038 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12041 NT_STATUS_OK
WriteX 12041 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12041 258 NT_STATUS_OK
WriteX 12041 0 65536 65536 NT_STATUS_OK
WriteX 12041 65536 17654 17654 NT_STATUS_OK
Close 12041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12042 NT_STATUS_OK
ReadX 12042 0 4096 4096 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
QUERY_FILE_INFORMATION 12042 1004 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
SET_FILE_INFORMATION 12042 1004 NT_STATUS_OK
WriteX 12042 0 4096 4096 NT_STATUS_OK
Flush 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12043 NT_STATUS_OK
SET_FILE_INFORMATION 12043 1004 NT_STATUS_OK
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12044 NT_STATUS_OK
ReadX 12044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12045 NT_STATUS_OK
Close 12045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12047 NT_STATUS_OK
ReadX 12047 0 4096 4096 NT_STATUS_OK
ReadX 12047 4096 4096 4096 NT_STATUS_OK
ReadX 12047 8192 4096 4096 NT_STATUS_OK
ReadX 12047 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12047 16384 4096 4096 NT_STATUS_OK
ReadX 12047 20480 4096 4096 NT_STATUS_OK
ReadX 12047 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
Close 12048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 4096 4096 NT_STATUS_OK
Close 12049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12050 NT_STATUS_OK
ReadX 12050 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12050 1004 NT_STATUS_OK
WriteX 12050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12051 NT_STATUS_OK
Close 12051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12050 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12056 NT_STATUS_OK
WriteX 12056 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12056 258 NT_STATUS_OK
WriteX 12056 0 65536 65536 NT_STATUS_OK
WriteX 12056 65536 19490 19490 NT_STATUS_OK
Close 12056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 4096 4096 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
QUERY_FILE_INFORMATION 12057 1004 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
SET_FILE_INFORMATION 12057 1004 NT_STATUS_OK
WriteX 12057 0 4096 4096 NT_STATUS_OK
Flush 12057 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12058 NT_STATUS_OK
SET_FILE_INFORMATION 12058 1004 NT_STATUS_OK
Close 12058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12059 NT_STATUS_OK
ReadX 12059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12060 NT_STATUS_OK
Close 12060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12062 0 4096 4096 NT_STATUS_OK
Close 12062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12063 NT_STATUS_OK
ReadX 12063 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12064 NT_STATUS_OK
ReadX 12064 0 4096 4096 NT_STATUS_OK
ReadX 12064 4096 4096 4096 NT_STATUS_OK
ReadX 12064 8192 4096 4096 NT_STATUS_OK
ReadX 12064 12288 4096 4096 NT_STATUS_OK
ReadX 12064 16384 4096 4096 NT_STATUS_OK
ReadX 12064 20480 4096 4096 NT_STATUS_OK
ReadX 12064 24576 4096 4096 NT_STATUS_OK
ReadX 12064 28672 4096 4096 NT_STATUS_OK
ReadX 12064 32768 4096 4096 NT_STATUS_OK
ReadX 12064 36864 4096 4096 NT_STATUS_OK
ReadX 12064 40960 4096 4096 NT_STATUS_OK
ReadX 12064 45056 4096 4096 NT_STATUS_OK
ReadX 12064 49152 4096 4096 NT_STATUS_OK
ReadX 12064 53248 4096 4096 NT_STATUS_OK
ReadX 12064 57344 4096 4096 NT_STATUS_OK
ReadX 12064 61440 4096 4096 NT_STATUS_OK
ReadX 12064 65536 4096 4096 NT_STATUS_OK
ReadX 12064 69632 4096 4096 NT_STATUS_OK
ReadX 12064 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12064 1004 NT_STATUS_OK
WriteX 12064 0 4096 4096 NT_STATUS_OK
Close 12064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12065 NT_STATUS_OK
SET_FILE_INFORMATION 12065 1004 NT_STATUS_OK
Close 12065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12066 NT_STATUS_OK
ReadX 12066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12059 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12070 NT_STATUS_OK
WriteX 12070 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12070 258 NT_STATUS_OK
WriteX 12070 0 65536 65536 NT_STATUS_OK
WriteX 12070 65536 8866 8866 NT_STATUS_OK
Close 12070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 0 4096 4096 NT_STATUS_OK
WriteX 12071 0 4096 4096 NT_STATUS_OK
Flush 12071 NT_STATUS_OK
SET_FILE_INFORMATION 12071 1004 NT_STATUS_OK
WriteX 12071 0 4096 4096 NT_STATUS_OK
Flush 12071 NT_STATUS_OK
Close 12071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12072 NT_STATUS_OK
ReadX 12072 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 0 4096 4096 NT_STATUS_OK
Close 12073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 4096 4096 NT_STATUS_OK
Close 12074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12075 NT_STATUS_OK
ReadX 12075 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12076 NT_STATUS_OK
Close 12076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12066 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12078 NT_STATUS_OK
Close 12078 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12081 NT_STATUS_OK
WriteX 12081 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12081 258 NT_STATUS_OK
WriteX 12081 0 65536 65536 NT_STATUS_OK
WriteX 12081 65536 9298 9298 NT_STATUS_OK
Close 12081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12082 NT_STATUS_OK
ReadX 12082 0 4096 4096 NT_STATUS_OK
WriteX 12082 0 4096 4096 NT_STATUS_OK
Flush 12082 NT_STATUS_OK
SET_FILE_INFORMATION 12082 1004 NT_STATUS_OK
WriteX 12082 0 4096 4096 NT_STATUS_OK
Flush 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12083 NT_STATUS_OK
SET_FILE_INFORMATION 12083 1004 NT_STATUS_OK
Close 12083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12084 NT_STATUS_OK
ReadX 12084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12085 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12088 0 4096 4096 NT_STATUS_OK
Close 12088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12089 NT_STATUS_OK
ReadX 12089 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12089 4096 4096 4096 NT_STATUS_OK
ReadX 12089 8192 4096 4096 NT_STATUS_OK
ReadX 12089 12288 4096 4096 NT_STATUS_OK
ReadX 12089 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12090 NT_STATUS_OK
ReadX 12090 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12091 NT_STATUS_OK
ReadX 12091 0 4096 4096 NT_STATUS_OK
Close 12091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12092 NT_STATUS_OK
ReadX 12092 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12092 1004 NT_STATUS_OK
WriteX 12092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12093 NT_STATUS_OK
Close 12093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12089 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12095 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12098 NT_STATUS_OK
WriteX 12098 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 258 NT_STATUS_OK
WriteX 12098 0 65536 65536 NT_STATUS_OK
WriteX 12098 65536 11540 11540 NT_STATUS_OK
Close 12098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
WriteX 12099 0 4096 4096 NT_STATUS_OK
Flush 12099 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
WriteX 12099 0 4096 4096 NT_STATUS_OK
Flush 12099 NT_STATUS_OK
Close 12099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12100 NT_STATUS_OK
SET_FILE_INFORMATION 12100 1004 NT_STATUS_OK
Close 12100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12101 NT_STATUS_OK
ReadX 12101 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12102 NT_STATUS_OK
Close 12102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12104 NT_STATUS_OK
ReadX 12104 61440 4096 4096 NT_STATUS_OK
ReadX 12104 126976 4096 4096 NT_STATUS_OK
WriteX 12104 0 65536 65536 NT_STATUS_OK
WriteX 12104 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12105 NT_STATUS_OK
ReadX 12105 61440 4096 4096 NT_STATUS_OK
ReadX 12105 126976 4096 4096 NT_STATUS_OK
ReadX 12105 192512 4096 4096 NT_STATUS_OK
ReadX 12105 258048 4096 4096 NT_STATUS_OK
WriteX 12105 0 65536 65536 NT_STATUS_OK
WriteX 12105 65536 65536 65536 NT_STATUS_OK
WriteX 12105 131072 65536 65536 NT_STATUS_OK
WriteX 12105 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12106 NT_STATUS_OK
ReadX 12106 61440 4096 4096 NT_STATUS_OK
ReadX 12106 126976 4096 4096 NT_STATUS_OK
ReadX 12106 192512 4096 4096 NT_STATUS_OK
ReadX 12106 258048 4096 4096 NT_STATUS_OK
ReadX 12106 323584 4096 4096 NT_STATUS_OK
ReadX 12106 389120 4096 4096 NT_STATUS_OK
ReadX 12106 454656 4096 4096 NT_STATUS_OK
ReadX 12106 520192 4096 4096 NT_STATUS_OK
WriteX 12106 0 65536 65536 NT_STATUS_OK
WriteX 12106 65536 65536 65536 NT_STATUS_OK
WriteX 12106 131072 65536 65536 NT_STATUS_OK
WriteX 12106 196608 65536 65536 NT_STATUS_OK
WriteX 12106 262144 65536 65536 NT_STATUS_OK
WriteX 12106 327680 65536 65536 NT_STATUS_OK
WriteX 12106 393216 65536 65536 NT_STATUS_OK
WriteX 12106 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
ReadX 12107 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12108 NT_STATUS_OK
WriteX 12108 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12108 258 NT_STATUS_OK
WriteX 12108 0 53 53 NT_STATUS_OK
Close 12108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12109 NT_STATUS_OK
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12101 NT_STATUS_OK
Close 12047 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Close 12106 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12107 8192 4096 4096 NT_STATUS_OK
ReadX 12107 12288 4096 4096 NT_STATUS_OK
WriteX 12111 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12111 258 NT_STATUS_OK
ReadX 12107 16384 4096 4096 NT_STATUS_OK
ReadX 12107 20480 4096 4096 NT_STATUS_OK
WriteX 12111 0 15360 15360 NT_STATUS_OK
Close 12111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12112 NT_STATUS_OK
ReadX 12112 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12112 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12112 1004 NT_STATUS_OK
WriteX 12112 0 4096 4096 NT_STATUS_OK
Close 12112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12113 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12115 4096 4096 4096 NT_STATUS_OK
ReadX 12115 8192 4096 4096 NT_STATUS_OK
ReadX 12115 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12118 NT_STATUS_OK
ReadX 12118 0 4096 4096 NT_STATUS_OK
ReadX 12118 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12119 NT_STATUS_OK
ReadX 12119 0 4096 4096 NT_STATUS_OK
ReadX 12119 4096 4096 4096 NT_STATUS_OK
ReadX 12119 8192 4096 4096 NT_STATUS_OK
Close 12118 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12120 NT_STATUS_OK
WriteX 12120 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12120 258 NT_STATUS_OK
WriteX 12120 0 15360 15360 NT_STATUS_OK
Close 12120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12121 NT_STATUS_OK
ReadX 12121 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12121 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12121 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12107 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12122 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12124 NT_STATUS_OK
ReadX 12124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12125 NT_STATUS_OK
SET_FILE_INFORMATION 12125 1004 NT_STATUS_OK
Close 12125 NT_STATUS_OK
WriteX 12121 0 4096 4096 NT_STATUS_OK
Close 12121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12126 NT_STATUS_OK
Close 12126 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12128 NT_STATUS_OK
ReadX 12128 0 4096 4096 NT_STATUS_OK
ReadX 12128 4096 4096 4096 NT_STATUS_OK
ReadX 12128 8192 4096 4096 NT_STATUS_OK
ReadX 12128 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12128 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12128 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12129 NT_STATUS_OK
ReadX 12129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12130 NT_STATUS_OK
WriteX 12130 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12130 258 NT_STATUS_OK
WriteX 12130 0 53 53 NT_STATUS_OK
Close 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12129 4096 4096 4096 NT_STATUS_OK
ReadX 12129 8192 4096 4096 NT_STATUS_OK
ReadX 12129 12288 4096 4096 NT_STATUS_OK
WriteX 12133 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12133 258 NT_STATUS_OK
WriteX 12133 0 12006 12006 NT_STATUS_OK
Close 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12134 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12134 1004 NT_STATUS_OK
WriteX 12134 0 4096 4096 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12135 NT_STATUS_OK
Close 12135 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12137 NT_STATUS_OK
ReadX 12137 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12138 NT_STATUS_OK
Close 12138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12137 4096 4096 4096 NT_STATUS_OK
ReadX 12137 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12140 NT_STATUS_OK
WriteX 12140 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12140 258 NT_STATUS_OK
WriteX 12140 0 11991 11991 NT_STATUS_OK
Close 12140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12141 NT_STATUS_OK
ReadX 12141 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12141 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12141 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12142 NT_STATUS_OK
Close 12142 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12144 NT_STATUS_OK
ReadX 12144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12145 NT_STATUS_OK
SET_FILE_INFORMATION 12145 1004 NT_STATUS_OK
Close 12145 NT_STATUS_OK
WriteX 12141 0 4096 4096 NT_STATUS_OK
Close 12141 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12146 NT_STATUS_OK
Close 12146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12148 NT_STATUS_OK
ReadX 12148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12149 NT_STATUS_OK
Close 12149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12148 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
ReadX 12148 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
WriteX 12148 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12148 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12148 1004 NT_STATUS_OK
Close 12124 NT_STATUS_OK
WriteX 12128 0 19054 19054 NT_STATUS_OK
WriteX 12148 0 12288 12288 NT_STATUS_OK
Close 12144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Close 12148 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12153 NT_STATUS_OK
Close 12153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 61440 61440 NT_STATUS_OK
ReadX 12155 61440 4096 4096 NT_STATUS_OK
ReadX 12155 65536 61440 61440 NT_STATUS_OK
ReadX 12155 126976 4096 4096 NT_STATUS_OK
ReadX 12155 131072 61440 61440 NT_STATUS_OK
ReadX 12155 192512 4096 4096 NT_STATUS_OK
ReadX 12155 196608 61440 61440 NT_STATUS_OK
ReadX 12155 258048 4096 4096 NT_STATUS_OK
ReadX 12155 262144 61440 61440 NT_STATUS_OK
ReadX 12155 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12156 NT_STATUS_OK
ReadX 12156 0 61440 61440 NT_STATUS_OK
ReadX 12156 61440 4096 4096 NT_STATUS_OK
ReadX 12156 65536 61440 61440 NT_STATUS_OK
ReadX 12156 126976 4096 4096 NT_STATUS_OK
ReadX 12156 131072 61440 61440 NT_STATUS_OK
ReadX 12156 192512 4096 4096 NT_STATUS_OK
ReadX 12156 196608 61440 61440 NT_STATUS_OK
ReadX 12156 258048 4096 4096 NT_STATUS_OK
ReadX 12156 262144 61440 61440 NT_STATUS_OK
ReadX 12156 323584 4096 4096 NT_STATUS_OK
ReadX 12156 327680 61440 61440 NT_STATUS_OK
ReadX 12156 389120 4096 4096 NT_STATUS_OK
ReadX 12156 393216 61440 61440 NT_STATUS_OK
ReadX 12156 454656 4096 4096 NT_STATUS_OK
ReadX 12156 458752 61440 61440 NT_STATUS_OK
ReadX 12156 520192 4096 4096 NT_STATUS_OK
ReadX 12156 524288 61440 61440 NT_STATUS_OK
ReadX 12156 585728 4096 4096 NT_STATUS_OK
ReadX 12156 589824 61440 61440 NT_STATUS_OK
ReadX 12156 651264 4096 4096 NT_STATUS_OK
ReadX 12156 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12157 NT_STATUS_OK
ReadX 12157 0 61440 61440 NT_STATUS_OK
ReadX 12157 61440 4096 4096 NT_STATUS_OK
ReadX 12157 65536 61440 61440 NT_STATUS_OK
ReadX 12157 126976 4096 4096 NT_STATUS_OK
ReadX 12157 131072 61440 61440 NT_STATUS_OK
ReadX 12157 192512 4096 4096 NT_STATUS_OK
ReadX 12157 196608 61440 61440 NT_STATUS_OK
ReadX 12157 258048 4096 4096 NT_STATUS_OK
ReadX 12157 262144 61440 61440 NT_STATUS_OK
ReadX 12157 323584 4096 4096 NT_STATUS_OK
ReadX 12157 327680 61440 61440 NT_STATUS_OK
ReadX 12157 389120 4096 4096 NT_STATUS_OK
ReadX 12157 393216 61440 61440 NT_STATUS_OK
ReadX 12157 454656 4096 4096 NT_STATUS_OK
ReadX 12157 458752 61440 61440 NT_STATUS_OK
ReadX 12157 520192 4096 4096 NT_STATUS_OK
ReadX 12157 524288 61440 61440 NT_STATUS_OK
ReadX 12157 585728 4096 4096 NT_STATUS_OK
ReadX 12157 589824 61440 61440 NT_STATUS_OK
ReadX 12157 651264 4096 4096 NT_STATUS_OK
ReadX 12157 655360 61440 61440 NT_STATUS_OK
ReadX 12157 716800 4096 4096 NT_STATUS_OK
ReadX 12157 720896 61440 61440 NT_STATUS_OK
ReadX 12157 782336 4096 4096 NT_STATUS_OK
ReadX 12157 786432 61440 61440 NT_STATUS_OK
ReadX 12157 847872 4096 4096 NT_STATUS_OK
ReadX 12157 851968 61440 61440 NT_STATUS_OK
ReadX 12157 913408 4096 4096 NT_STATUS_OK
ReadX 12157 917504 61440 61440 NT_STATUS_OK
ReadX 12157 978944 4096 4096 NT_STATUS_OK
ReadX 12157 983040 61440 61440 NT_STATUS_OK
ReadX 12157 1044480 4096 4096 NT_STATUS_OK
ReadX 12157 1048576 61440 61440 NT_STATUS_OK
ReadX 12157 1110016 4096 4096 NT_STATUS_OK
ReadX 12157 1114112 61440 61440 NT_STATUS_OK
ReadX 12157 1175552 4096 4096 NT_STATUS_OK
ReadX 12157 1179648 61440 61440 NT_STATUS_OK
ReadX 12157 1241088 4096 4096 NT_STATUS_OK
ReadX 12157 1245184 61440 61440 NT_STATUS_OK
ReadX 12157 1306624 4096 4096 NT_STATUS_OK
ReadX 12157 1310720 61440 61440 NT_STATUS_OK
ReadX 12157 1372160 4096 4096 NT_STATUS_OK
ReadX 12157 1376256 61440 61440 NT_STATUS_OK
ReadX 12157 1437696 4096 4096 NT_STATUS_OK
ReadX 12157 1441792 61440 61440 NT_STATUS_OK
ReadX 12157 1503232 4096 4096 NT_STATUS_OK
ReadX 12157 1507328 61440 61440 NT_STATUS_OK
ReadX 12157 1568768 4096 4096 NT_STATUS_OK
ReadX 12157 1572864 61440 61440 NT_STATUS_OK
ReadX 12157 1634304 4096 4096 NT_STATUS_OK
ReadX 12157 1638400 61440 61440 NT_STATUS_OK
ReadX 12157 1699840 4096 4096 NT_STATUS_OK
ReadX 12157 1703936 61440 61440 NT_STATUS_OK
ReadX 12157 1765376 4096 4096 NT_STATUS_OK
ReadX 12157 1769472 61440 61440 NT_STATUS_OK
ReadX 12157 1830912 4096 4096 NT_STATUS_OK
ReadX 12157 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12159 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12160 NT_STATUS_OK
ReadX 12160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12162 NT_STATUS_OK
ReadX 12162 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12164 NT_STATUS_OK
QUERY_FILE_INFORMATION 12164 1004 NT_STATUS_OK
WriteX 12164 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12164 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12166 NT_STATUS_OK
WriteX 12166 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12166 258 NT_STATUS_OK
WriteX 12166 0 491 491 NT_STATUS_OK
Close 12166 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12167 NT_STATUS_OK
ReadX 12167 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12164 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12169 NT_STATUS_OK
Close 12169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12170 NT_STATUS_OK
WriteX 12170 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12170 258 NT_STATUS_OK
WriteX 12170 0 543 543 NT_STATUS_OK
Close 12170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12171 NT_STATUS_OK
ReadX 12171 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Close 12156 NT_STATUS_OK
Close 12157 NT_STATUS_OK
Close 12171 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Close 12160 NT_STATUS_OK
Close 12161 NT_STATUS_OK
Close 12162 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12174 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12175 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12176 NT_STATUS_OK
ReadX 12176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12177 NT_STATUS_OK
ReadX 12177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12183 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12184 NT_STATUS_OK
QUERY_FILE_INFORMATION 12184 1004 NT_STATUS_OK
WriteX 12184 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12184 258 NT_STATUS_OK
WriteX 12184 0 2048 2048 NT_STATUS_OK
Close 12184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12185 NT_STATUS_OK
ReadX 12185 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12185 0 4096 4096 NT_STATUS_OK
Flush 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12185 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12190 NT_STATUS_OK
WriteX 12190 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12190 258 NT_STATUS_OK
WriteX 12190 0 2048 2048 NT_STATUS_OK
Close 12190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12191 NT_STATUS_OK
ReadX 12191 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12196 NT_STATUS_OK
WriteX 12196 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12196 258 NT_STATUS_OK
WriteX 12196 0 2048 2048 NT_STATUS_OK
Close 12196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12197 NT_STATUS_OK
ReadX 12197 0 2048 2048 NT_STATUS_OK
ReadX 12175 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12191 0 4096 4096 NT_STATUS_OK
WriteX 12175 0 8192 8192 NT_STATUS_OK
WriteX 12176 0 4096 4096 NT_STATUS_OK
WriteX 12177 0 4096 4096 NT_STATUS_OK
ReadX 12191 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12200 NT_STATUS_OK
ReadX 12200 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12201 NT_STATUS_OK
QUERY_FILE_INFORMATION 12201 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12200 NT_STATUS_OK
Close 12176 NT_STATUS_OK
Close 12177 NT_STATUS_OK
Close 12178 NT_STATUS_OK
Close 12191 NT_STATUS_OK
Close 12175 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12203 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12203 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12204 NT_STATUS_OK
ReadX 12204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12206 NT_STATUS_OK
ReadX 12206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12208 NT_STATUS_OK
ReadX 12208 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12209 NT_STATUS_OK
ReadX 12209 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12211 NT_STATUS_OK
ReadX 12211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12212 NT_STATUS_OK
ReadX 12212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12213 NT_STATUS_OK
ReadX 12213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12216 NT_STATUS_OK
ReadX 12216 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12221 NT_STATUS_OK
QUERY_FILE_INFORMATION 12221 1004 NT_STATUS_OK
WriteX 12221 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12221 258 NT_STATUS_OK
WriteX 12221 0 2048 2048 NT_STATUS_OK
Close 12221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12222 NT_STATUS_OK
ReadX 12222 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12229 NT_STATUS_OK
QUERY_FILE_INFORMATION 12229 1004 NT_STATUS_OK
WriteX 12229 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12229 258 NT_STATUS_OK
WriteX 12229 0 2048 2048 NT_STATUS_OK
Close 12229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12230 NT_STATUS_OK
ReadX 12230 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12222 0 4096 4096 NT_STATUS_OK
Flush 12222 NT_STATUS_OK
WriteX 12230 0 4096 4096 NT_STATUS_OK
Flush 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12222 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12224 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12231 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12232 NT_STATUS_OK
WriteX 12232 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 258 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12234 NT_STATUS_OK
Close 12234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12235 NT_STATUS_OK
WriteX 12235 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12235 258 NT_STATUS_OK
WriteX 12235 0 4096 4096 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12236 0 4096 4096 NT_STATUS_OK
Close 12233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12216 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12213 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12211 NT_STATUS_OK
Close 12204 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Close 12208 NT_STATUS_OK
Close 12209 NT_STATUS_OK
Close 12206 NT_STATUS_OK
Close 12207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12243 NT_STATUS_OK
WriteX 12243 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12243 258 NT_STATUS_OK
WriteX 12243 0 2048 2048 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12246 NT_STATUS_OK
ReadX 12246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12248 NT_STATUS_OK
ReadX 12248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12252 NT_STATUS_OK
ReadX 12252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12253 NT_STATUS_OK
ReadX 12253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12254 NT_STATUS_OK
ReadX 12254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12255 NT_STATUS_OK
ReadX 12255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12256 NT_STATUS_OK
ReadX 12256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12257 NT_STATUS_OK
ReadX 12257 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12258 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12244 NT_STATUS_OK
Close 12256 NT_STATUS_OK
Close 12251 NT_STATUS_OK
Close 12252 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Close 12257 NT_STATUS_OK
Close 12245 NT_STATUS_OK
Close 12246 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Close 12247 NT_STATUS_OK
Close 12248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12260 NT_STATUS_OK
QUERY_FILE_INFORMATION 12260 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12263 NT_STATUS_OK
ReadX 12263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12264 NT_STATUS_OK
ReadX 12264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12270 NT_STATUS_OK
ReadX 12270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12271 NT_STATUS_OK
ReadX 12271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12272 NT_STATUS_OK
ReadX 12272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12279 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12280 NT_STATUS_OK
QUERY_FILE_INFORMATION 12280 1004 NT_STATUS_OK
WriteX 12280 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12280 258 NT_STATUS_OK
WriteX 12280 0 2048 2048 NT_STATUS_OK
Close 12280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12281 NT_STATUS_OK
ReadX 12281 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12283 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12287 NT_STATUS_OK
ReadX 12287 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12292 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 1004 NT_STATUS_OK
WriteX 12292 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12292 258 NT_STATUS_OK
WriteX 12292 0 2048 2048 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12294 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12295 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12299 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12299 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12300 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 1004 NT_STATUS_OK
WriteX 12300 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 2048 2048 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12281 0 4096 4096 NT_STATUS_OK
Flush 12281 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
Flush 12293 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12281 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12293 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12283 4096 16384 16384 NT_STATUS_OK
ReadX 12263 4096 16384 16384 NT_STATUS_OK
ReadX 12295 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 2048 2048 NT_STATUS_OK
WriteX 12303 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12304 NT_STATUS_OK
QUERY_FILE_INFORMATION 12304 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12287 NT_STATUS_OK
Close 12275 NT_STATUS_OK
Close 12267 NT_STATUS_OK
Close 12283 NT_STATUS_OK
Close 12284 NT_STATUS_OK
Close 12285 NT_STATUS_OK
Close 12286 NT_STATUS_OK
Close 12274 NT_STATUS_OK
Close 12295 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Close 12272 NT_STATUS_OK
Close 12273 NT_STATUS_OK
Close 12270 NT_STATUS_OK
Close 12271 NT_STATUS_OK
Close 12263 NT_STATUS_OK
Close 12264 NT_STATUS_OK
Close 12265 NT_STATUS_OK
Close 12266 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12306 NT_STATUS_OK
QUERY_FILE_INFORMATION 12306 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12308 NT_STATUS_OK
QUERY_FILE_INFORMATION 12308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12314 NT_STATUS_OK
ReadX 12314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12311 4096 16384 16384 NT_STATUS_OK
WriteX 12311 0 4096 4096 NT_STATUS_OK
WriteX 12312 0 4096 4096 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12316 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12316 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12317 NT_STATUS_OK
ReadX 12317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12319 NT_STATUS_OK
ReadX 12319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12324 NT_STATUS_OK
ReadX 12324 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12325 NT_STATUS_OK
ReadX 12325 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12326 NT_STATUS_OK
ReadX 12326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12328 NT_STATUS_OK
ReadX 12328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12329 NT_STATUS_OK
ReadX 12329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 8192 8192 NT_STATUS_OK
ReadX 12317 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12331 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12331 0 4096 4096 NT_STATUS_OK
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 4096 4096 NT_STATUS_OK
WriteX 12317 0 4096 4096 NT_STATUS_OK
WriteX 12318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12332 0 4096 4096 NT_STATUS_OK
ReadX 12332 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12311 0 4096 4096 NT_STATUS_OK
WriteX 12312 0 4096 4096 NT_STATUS_OK
WriteX 12313 0 4096 4096 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12336 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12337 NT_STATUS_OK
QUERY_FILE_INFORMATION 12337 1004 NT_STATUS_OK
WriteX 12337 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12337 258 NT_STATUS_OK
WriteX 12337 0 2048 2048 NT_STATUS_OK
Close 12337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12339 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 0 4096 4096 NT_STATUS_OK
ReadX 12340 4096 4096 4096 NT_STATUS_OK
WriteX 12340 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12338 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12342 NT_STATUS_OK
ReadX 12342 0 4096 4096 NT_STATUS_OK
ReadX 12342 4096 4096 4096 NT_STATUS_OK
WriteX 12342 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12343 NT_STATUS_OK
QUERY_FILE_INFORMATION 12343 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Close 12315 NT_STATUS_OK
Close 12311 NT_STATUS_OK
Close 12312 NT_STATUS_OK
Close 12313 NT_STATUS_OK
Close 12314 NT_STATUS_OK
Close 12323 NT_STATUS_OK
Close 12328 NT_STATUS_OK
Close 12324 NT_STATUS_OK
Close 12325 NT_STATUS_OK
Close 12326 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Close 12317 NT_STATUS_OK
Close 12318 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Close 12322 NT_STATUS_OK
Close 12319 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Close 12342 NT_STATUS_OK
Close 12331 NT_STATUS_OK
Close 12332 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12345 0 4096 4096 NT_STATUS_OK
ReadX 12345 4096 4096 4096 NT_STATUS_OK
ReadX 12345 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12346 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12348 NT_STATUS_OK
ReadX 12348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12349 NT_STATUS_OK
ReadX 12349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12352 NT_STATUS_OK
ReadX 12352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12353 NT_STATUS_OK
ReadX 12353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12354 NT_STATUS_OK
ReadX 12354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12355 NT_STATUS_OK
ReadX 12355 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12356 NT_STATUS_OK
ReadX 12356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12357 NT_STATUS_OK
ReadX 12357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 4096 4096 NT_STATUS_OK
ReadX 12346 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12363 NT_STATUS_OK
QUERY_FILE_INFORMATION 12363 1004 NT_STATUS_OK
WriteX 12363 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12363 258 NT_STATUS_OK
WriteX 12363 0 2048 2048 NT_STATUS_OK
Close 12363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12364 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12368 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12369 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 1004 NT_STATUS_OK
WriteX 12369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 258 NT_STATUS_OK
WriteX 12369 0 2048 2048 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12353 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12371 NT_STATUS_OK
QUERY_FILE_INFORMATION 12371 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12357 NT_STATUS_OK
Close 12352 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Close 12346 NT_STATUS_OK
Close 12347 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Close 12348 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Close 12353 NT_STATUS_OK
Close 12354 NT_STATUS_OK
Close 12355 NT_STATUS_OK
Close 12356 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12373 NT_STATUS_OK
QUERY_FILE_INFORMATION 12373 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12375 NT_STATUS_OK
ReadX 12375 61440 4096 4096 NT_STATUS_OK
ReadX 12375 126976 4096 4096 NT_STATUS_OK
WriteX 12375 0 65536 65536 NT_STATUS_OK
WriteX 12375 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12376 NT_STATUS_OK
ReadX 12376 61440 4096 4096 NT_STATUS_OK
ReadX 12376 126976 4096 4096 NT_STATUS_OK
ReadX 12376 192512 4096 4096 NT_STATUS_OK
ReadX 12376 258048 4096 4096 NT_STATUS_OK
WriteX 12376 0 65536 65536 NT_STATUS_OK
WriteX 12376 65536 65536 65536 NT_STATUS_OK
WriteX 12376 131072 65536 65536 NT_STATUS_OK
WriteX 12376 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 61440 4096 4096 NT_STATUS_OK
ReadX 12377 126976 4096 4096 NT_STATUS_OK
ReadX 12377 192512 4096 4096 NT_STATUS_OK
ReadX 12377 258048 4096 4096 NT_STATUS_OK
ReadX 12377 323584 4096 4096 NT_STATUS_OK
ReadX 12377 389120 4096 4096 NT_STATUS_OK
ReadX 12377 454656 4096 4096 NT_STATUS_OK
ReadX 12377 520192 4096 4096 NT_STATUS_OK
WriteX 12377 0 65536 65536 NT_STATUS_OK
WriteX 12377 65536 65536 65536 NT_STATUS_OK
WriteX 12377 131072 65536 65536 NT_STATUS_OK
WriteX 12377 196608 65536 65536 NT_STATUS_OK
WriteX 12377 262144 65536 65536 NT_STATUS_OK
WriteX 12377 327680 65536 65536 NT_STATUS_OK
WriteX 12377 393216 65536 65536 NT_STATUS_OK
WriteX 12377 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12378 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12378 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12378 8192 4096 4096 NT_STATUS_OK
ReadX 12378 12288 4096 4096 NT_STATUS_OK
ReadX 12378 16384 4096 4096 NT_STATUS_OK
ReadX 12378 20480 4096 4096 NT_STATUS_OK
ReadX 12378 24576 4096 4096 NT_STATUS_OK
ReadX 12378 28672 4096 4096 NT_STATUS_OK
ReadX 12378 32768 4096 4096 NT_STATUS_OK
ReadX 12378 36864 4096 4096 NT_STATUS_OK
ReadX 12378 40960 4096 4096 NT_STATUS_OK
ReadX 12378 45056 4096 4096 NT_STATUS_OK
ReadX 12378 49152 4096 4096 NT_STATUS_OK
ReadX 12378 53248 4096 4096 NT_STATUS_OK
ReadX 12378 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12378 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12379 NT_STATUS_OK
Close 12379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12375 NT_STATUS_OK
Close 12376 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12381 NT_STATUS_OK
WriteX 12381 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12381 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12381 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12381 1004 NT_STATUS_OK
WriteX 12381 0 57088 57088 NT_STATUS_OK
WriteX 12381 0 4096 4096 NT_STATUS_OK
Flush 12381 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12382 NT_STATUS_OK
SET_FILE_INFORMATION 12382 1004 NT_STATUS_OK
Close 12382 NT_STATUS_OK
SET_FILE_INFORMATION 12381 1004 NT_STATUS_OK
WriteX 12381 0 4096 4096 NT_STATUS_OK
Close 12381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12383 NT_STATUS_OK
Close 12383 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12385 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12386 NT_STATUS_OK
WriteX 12386 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12386 0 51456 51456 NT_STATUS_OK
WriteX 12386 0 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
WriteX 12386 0 8192 8192 NT_STATUS_OK
Flush 12386 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12386 1004 NT_STATUS_OK
WriteX 12386 0 4096 4096 NT_STATUS_OK
Close 12386 NT_STATUS_OK
Close 12385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12388 NT_STATUS_OK
Close 12388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12390 NT_STATUS_OK
ReadX 12390 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12390 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12395 NT_STATUS_OK
WriteX 12395 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12395 258 NT_STATUS_OK
WriteX 12395 0 53077 53077 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12396 NT_STATUS_OK
WriteX 12396 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12396 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12396 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
WriteX 12396 0 65536 65536 NT_STATUS_OK
WriteX 12396 65536 1856 1856 NT_STATUS_OK
WriteX 12396 0 4096 4096 NT_STATUS_OK
Flush 12396 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12396 1004 NT_STATUS_OK
WriteX 12396 0 4096 4096 NT_STATUS_OK
Close 12396 NT_STATUS_OK
Close 12390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12398 NT_STATUS_OK
Close 12398 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12405 NT_STATUS_OK
WriteX 12405 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12405 258 NT_STATUS_OK
WriteX 12405 0 7983 7983 NT_STATUS_OK
Close 12405 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12407 NT_STATUS_OK
Close 12407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12410 NT_STATUS_OK
WriteX 12410 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12410 258 NT_STATUS_OK
WriteX 12410 0 65536 65536 NT_STATUS_OK
WriteX 12410 65536 65536 65536 NT_STATUS_OK
WriteX 12410 131072 65536 65536 NT_STATUS_OK
WriteX 12410 196608 65536 65536 NT_STATUS_OK
WriteX 12410 262144 65536 65536 NT_STATUS_OK
WriteX 12410 327680 65536 65536 NT_STATUS_OK
WriteX 12410 393216 65536 65536 NT_STATUS_OK
WriteX 12410 458752 46731 46731 NT_STATUS_OK
Close 12410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12411 NT_STATUS_OK
WriteX 12411 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12400 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12411 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12411 1004 NT_STATUS_OK
WriteX 12411 0 65536 65536 NT_STATUS_OK
WriteX 12411 65536 22848 22848 NT_STATUS_OK
WriteX 12411 0 4096 4096 NT_STATUS_OK
Flush 12411 NT_STATUS_OK
SET_FILE_INFORMATION 12411 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12411 1004 NT_STATUS_OK
WriteX 12411 0 4096 4096 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Close 12400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12415 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12416 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12416 1004 NT_STATUS_OK
ReadX 12416 8192 4096 4096 NT_STATUS_OK
ReadX 12416 12288 4096 4096 NT_STATUS_OK
ReadX 12416 16384 4096 4096 NT_STATUS_OK
ReadX 12416 20480 4096 4096 NT_STATUS_OK
ReadX 12416 24576 4096 4096 NT_STATUS_OK
ReadX 12416 28672 4096 4096 NT_STATUS_OK
ReadX 12416 32768 4096 4096 NT_STATUS_OK
ReadX 12416 36864 4096 4096 NT_STATUS_OK
ReadX 12416 40960 4096 4096 NT_STATUS_OK
ReadX 12416 45056 4096 4096 NT_STATUS_OK
ReadX 12416 49152 4096 4096 NT_STATUS_OK
ReadX 12416 53248 4096 4096 NT_STATUS_OK
ReadX 12416 57344 4096 4096 NT_STATUS_OK
ReadX 12416 61440 4096 4096 NT_STATUS_OK
ReadX 12416 65536 4096 4096 NT_STATUS_OK
ReadX 12416 69632 4096 4096 NT_STATUS_OK
ReadX 12416 73728 4096 4096 NT_STATUS_OK
ReadX 12416 77824 4096 4096 NT_STATUS_OK
ReadX 12416 81920 4096 4096 NT_STATUS_OK
ReadX 12416 86016 4096 4096 NT_STATUS_OK
ReadX 12416 90112 4096 4096 NT_STATUS_OK
ReadX 12416 94208 4096 4096 NT_STATUS_OK
ReadX 12416 98304 4096 4096 NT_STATUS_OK
ReadX 12416 102400 4096 4096 NT_STATUS_OK
ReadX 12416 106496 4096 4096 NT_STATUS_OK
ReadX 12416 110592 4096 4096 NT_STATUS_OK
ReadX 12416 114688 4096 4096 NT_STATUS_OK
ReadX 12416 118784 4096 4096 NT_STATUS_OK
ReadX 12416 122880 4096 4096 NT_STATUS_OK
ReadX 12416 126976 4096 4096 NT_STATUS_OK
ReadX 12416 131072 4096 4096 NT_STATUS_OK
ReadX 12416 135168 4096 4096 NT_STATUS_OK
ReadX 12416 139264 4096 4096 NT_STATUS_OK
ReadX 12416 143360 4096 4096 NT_STATUS_OK
ReadX 12416 147456 4096 4096 NT_STATUS_OK
ReadX 12416 151552 4096 4096 NT_STATUS_OK
ReadX 12416 155648 4096 4096 NT_STATUS_OK
ReadX 12416 159744 4096 4096 NT_STATUS_OK
ReadX 12416 163840 4096 4096 NT_STATUS_OK
ReadX 12416 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12416 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12417 NT_STATUS_OK
Close 12417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12419 NT_STATUS_OK
WriteX 12419 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12419 258 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12420 NT_STATUS_OK
SET_FILE_INFORMATION 12420 1004 NT_STATUS_OK
Close 12420 NT_STATUS_OK
WriteX 12419 0 42388 42388 NT_STATUS_OK
Close 12419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12421 NT_STATUS_OK
Close 12421 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12423 NT_STATUS_OK
ReadX 12423 0 4096 4096 NT_STATUS_OK
ReadX 12423 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12424 NT_STATUS_OK
WriteX 12424 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 258 NT_STATUS_OK
SET_FILE_INFORMATION 12424 1004 NT_STATUS_OK
WriteX 12424 0 42652 42652 NT_STATUS_OK
Close 12424 NT_STATUS_OK
Close 12423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12426 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12428 NT_STATUS_OK
ReadX 12428 0 4096 4096 NT_STATUS_OK
ReadX 12428 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12433 NT_STATUS_OK
WriteX 12433 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12433 258 NT_STATUS_OK
WriteX 12433 0 65536 65536 NT_STATUS_OK
WriteX 12433 65536 49 49 NT_STATUS_OK
Close 12433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 61440 61440 NT_STATUS_OK
ReadX 12434 61440 4096 4096 NT_STATUS_OK
ReadX 12434 65536 61440 61440 NT_STATUS_OK
ReadX 12434 126976 4096 4096 NT_STATUS_OK
ReadX 12434 131072 61440 61440 NT_STATUS_OK
ReadX 12434 192512 4096 4096 NT_STATUS_OK
ReadX 12434 196608 61440 61440 NT_STATUS_OK
ReadX 12434 258048 4096 4096 NT_STATUS_OK
ReadX 12434 262144 61440 61440 NT_STATUS_OK
ReadX 12434 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12435 NT_STATUS_OK
ReadX 12435 0 61440 61440 NT_STATUS_OK
ReadX 12435 61440 4096 4096 NT_STATUS_OK
ReadX 12435 65536 61440 61440 NT_STATUS_OK
ReadX 12435 126976 4096 4096 NT_STATUS_OK
ReadX 12435 131072 61440 61440 NT_STATUS_OK
ReadX 12435 192512 4096 4096 NT_STATUS_OK
ReadX 12435 196608 61440 61440 NT_STATUS_OK
ReadX 12435 258048 4096 4096 NT_STATUS_OK
ReadX 12435 262144 61440 61440 NT_STATUS_OK
ReadX 12435 323584 4096 4096 NT_STATUS_OK
ReadX 12435 327680 61440 61440 NT_STATUS_OK
ReadX 12435 389120 4096 4096 NT_STATUS_OK
ReadX 12435 393216 61440 61440 NT_STATUS_OK
ReadX 12435 454656 4096 4096 NT_STATUS_OK
ReadX 12435 458752 61440 61440 NT_STATUS_OK
ReadX 12435 520192 4096 4096 NT_STATUS_OK
ReadX 12435 524288 61440 61440 NT_STATUS_OK
ReadX 12435 585728 4096 4096 NT_STATUS_OK
ReadX 12435 589824 61440 61440 NT_STATUS_OK
ReadX 12435 651264 4096 4096 NT_STATUS_OK
ReadX 12435 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12436 NT_STATUS_OK
ReadX 12436 0 61440 61440 NT_STATUS_OK
ReadX 12436 61440 4096 4096 NT_STATUS_OK
ReadX 12436 65536 61440 61440 NT_STATUS_OK
ReadX 12436 126976 4096 4096 NT_STATUS_OK
ReadX 12436 131072 61440 61440 NT_STATUS_OK
ReadX 12436 192512 4096 4096 NT_STATUS_OK
ReadX 12436 196608 61440 61440 NT_STATUS_OK
ReadX 12436 258048 4096 4096 NT_STATUS_OK
ReadX 12436 262144 61440 61440 NT_STATUS_OK
ReadX 12436 323584 4096 4096 NT_STATUS_OK
ReadX 12436 327680 61440 61440 NT_STATUS_OK
ReadX 12436 389120 4096 4096 NT_STATUS_OK
ReadX 12436 393216 61440 61440 NT_STATUS_OK
ReadX 12436 454656 4096 4096 NT_STATUS_OK
ReadX 12436 458752 61440 61440 NT_STATUS_OK
ReadX 12436 520192 4096 4096 NT_STATUS_OK
ReadX 12436 524288 61440 61440 NT_STATUS_OK
ReadX 12436 585728 4096 4096 NT_STATUS_OK
ReadX 12436 589824 61440 61440 NT_STATUS_OK
ReadX 12436 651264 4096 4096 NT_STATUS_OK
ReadX 12436 655360 61440 61440 NT_STATUS_OK
ReadX 12436 716800 4096 4096 NT_STATUS_OK
ReadX 12436 720896 61440 61440 NT_STATUS_OK
ReadX 12436 782336 4096 4096 NT_STATUS_OK
ReadX 12436 786432 61440 61440 NT_STATUS_OK
ReadX 12436 847872 4096 4096 NT_STATUS_OK
ReadX 12436 851968 61440 61440 NT_STATUS_OK
ReadX 12436 913408 4096 4096 NT_STATUS_OK
ReadX 12436 917504 61440 61440 NT_STATUS_OK
ReadX 12436 978944 4096 4096 NT_STATUS_OK
ReadX 12436 983040 61440 61440 NT_STATUS_OK
ReadX 12436 1044480 4096 4096 NT_STATUS_OK
ReadX 12436 1048576 61440 61440 NT_STATUS_OK
ReadX 12436 1110016 4096 4096 NT_STATUS_OK
ReadX 12436 1114112 61440 61440 NT_STATUS_OK
ReadX 12436 1175552 4096 4096 NT_STATUS_OK
ReadX 12436 1179648 61440 61440 NT_STATUS_OK
ReadX 12436 1241088 4096 4096 NT_STATUS_OK
ReadX 12436 1245184 61440 61440 NT_STATUS_OK
ReadX 12436 1306624 4096 4096 NT_STATUS_OK
ReadX 12436 1310720 61440 61440 NT_STATUS_OK
ReadX 12436 1372160 4096 4096 NT_STATUS_OK
ReadX 12436 1376256 61440 61440 NT_STATUS_OK
ReadX 12436 1437696 4096 4096 NT_STATUS_OK
ReadX 12436 1441792 61440 61440 NT_STATUS_OK
ReadX 12436 1503232 4096 4096 NT_STATUS_OK
ReadX 12436 1507328 61440 61440 NT_STATUS_OK
ReadX 12436 1568768 4096 4096 NT_STATUS_OK
ReadX 12436 1572864 61440 61440 NT_STATUS_OK
ReadX 12436 1634304 4096 4096 NT_STATUS_OK
ReadX 12436 1638400 61440 61440 NT_STATUS_OK
ReadX 12436 1699840 4096 4096 NT_STATUS_OK
ReadX 12436 1703936 61440 61440 NT_STATUS_OK
ReadX 12436 1765376 4096 4096 NT_STATUS_OK
ReadX 12436 1769472 61440 61440 NT_STATUS_OK
ReadX 12436 1830912 4096 4096 NT_STATUS_OK
ReadX 12436 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12438 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 1005 NT_STATUS_OK
ReadX 12438 2156 24 24 NT_STATUS_OK
ReadX 12438 2139 276 276 NT_STATUS_OK
ReadX 12438 2136 14 14 NT_STATUS_OK
ReadX 12438 2136 7 7 NT_STATUS_OK
ReadX 12438 2138 12 12 NT_STATUS_OK
ReadX 12438 2137 8 8 NT_STATUS_OK
ReadX 12438 2135 15 15 NT_STATUS_OK
ReadX 12438 0 16 16 NT_STATUS_OK
ReadX 12438 16 2048 2048 NT_STATUS_OK
ReadX 12438 2064 2048 2048 NT_STATUS_OK
ReadX 12438 257 2048 2048 NT_STATUS_OK
ReadX 12438 385 2048 2048 NT_STATUS_OK
ReadX 12438 513 2048 2048 NT_STATUS_OK
ReadX 12438 641 2048 2048 NT_STATUS_OK
ReadX 12438 769 2048 2048 NT_STATUS_OK
ReadX 12438 897 2048 2048 NT_STATUS_OK
ReadX 12438 1025 2048 2048 NT_STATUS_OK
ReadX 12438 1153 2048 2048 NT_STATUS_OK
ReadX 12438 1281 2048 2048 NT_STATUS_OK
ReadX 12438 1409 2048 2048 NT_STATUS_OK
ReadX 12438 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12440 NT_STATUS_OK
Close 12440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12434 NT_STATUS_OK
Close 12435 NT_STATUS_OK
Close 12436 NT_STATUS_OK
Close 12428 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12443 NT_STATUS_OK
WriteX 12443 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12443 258 NT_STATUS_OK
WriteX 12443 0 10575 10575 NT_STATUS_OK
Flush 12443 NT_STATUS_OK
Close 12443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 4096 4096 NT_STATUS_OK
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12448 NT_STATUS_OK
LockX 12448 2147483538 1 NT_STATUS_OK
UnlockX 12448 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1005 NT_STATUS_OK
ReadX 12448 0 512 512 NT_STATUS_OK
ReadX 12448 512 512 512 NT_STATUS_OK
ReadX 12448 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12448 1004 NT_STATUS_OK
Close 12448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12449 NT_STATUS_OK
QUERY_FILE_INFORMATION 12449 1005 NT_STATUS_OK
ReadX 12449 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12450 NT_STATUS_OK
LockX 12450 2147483538 1 NT_STATUS_OK
UnlockX 12450 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12450 1005 NT_STATUS_OK
ReadX 12450 0 512 512 NT_STATUS_OK
ReadX 12450 512 512 512 NT_STATUS_OK
ReadX 12450 1024 512 512 NT_STATUS_OK
ReadX 12450 288 20 20 NT_STATUS_OK
ReadX 12450 308 2084 2084 NT_STATUS_OK
ReadX 12450 388 2084 2084 NT_STATUS_OK
ReadX 12450 388 2084 2084 NT_STATUS_OK
ReadX 12437 2157 1386 1386 NT_STATUS_OK
ReadX 12450 2472 399 399 NT_STATUS_OK
ReadX 12450 3072 1536 1536 NT_STATUS_OK
ReadX 12450 544 149 149 NT_STATUS_OK
ReadX 12450 693 485 485 NT_STATUS_OK
Close 12450 NT_STATUS_OK
ReadX 12437 2157 4096 4096 NT_STATUS_OK
ReadX 12437 6253 4096 4096 NT_STATUS_OK
ReadX 12437 10349 4096 4096 NT_STATUS_OK
ReadX 12437 14445 4096 4096 NT_STATUS_OK
ReadX 12437 18541 4096 4096 NT_STATUS_OK
ReadX 12437 22637 256 256 NT_STATUS_OK
ReadX 12437 22893 4096 4096 NT_STATUS_OK
ReadX 12437 26989 4096 4096 NT_STATUS_OK
ReadX 12437 31085 4096 4096 NT_STATUS_OK
ReadX 12437 35181 4096 4096 NT_STATUS_OK
ReadX 12437 39277 4096 4096 NT_STATUS_OK
ReadX 12437 43373 4096 4096 NT_STATUS_OK
ReadX 12437 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12437 2157 1024 1024 NT_STATUS_OK
ReadX 12437 1667 4688 4688 NT_STATUS_OK
ReadX 12437 6355 3516 3516 NT_STATUS_OK
ReadX 12437 9871 16384 16384 NT_STATUS_OK
ReadX 12437 26255 3771 3771 NT_STATUS_OK
ReadX 12437 30026 2048 2048 NT_STATUS_OK
ReadX 12437 32074 1024 1024 NT_STATUS_OK
ReadX 12437 33098 6652 6652 NT_STATUS_OK
ReadX 12437 39750 16384 16384 NT_STATUS_OK
ReadX 12437 56134 10496 10496 NT_STATUS_OK
ReadX 12437 66630 1784 1784 NT_STATUS_OK
ReadX 12437 68414 90 90 NT_STATUS_OK
ReadX 12437 68504 273 273 NT_STATUS_OK
ReadX 12437 68777 1600 1600 NT_STATUS_OK
ReadX 12437 70377 640 640 NT_STATUS_OK
ReadX 12437 71017 1280 1280 NT_STATUS_OK
ReadX 12437 72297 8464 8464 NT_STATUS_OK
ReadX 12437 80761 158 158 NT_STATUS_OK
ReadX 12437 80919 912 912 NT_STATUS_OK
ReadX 12437 81831 1980 1980 NT_STATUS_OK
ReadX 12437 83811 2256 2256 NT_STATUS_OK
ReadX 12437 86067 400 400 NT_STATUS_OK
ReadX 12437 86467 252 252 NT_STATUS_OK
ReadX 12437 86719 42 42 NT_STATUS_OK
ReadX 12437 86761 725 725 NT_STATUS_OK
ReadX 12437 2009 512 512 NT_STATUS_OK
ReadX 12437 3895 9 9 NT_STATUS_OK
ReadX 12437 3781 46 46 NT_STATUS_OK
ReadX 12437 4059 92 92 NT_STATUS_OK
ReadX 12437 3781 92 92 NT_STATUS_OK
ReadX 12437 3986 184 184 NT_STATUS_OK
ReadX 12437 3987 16384 16384 NT_STATUS_OK
ReadX 12437 3902 16384 16384 NT_STATUS_OK
ReadX 12437 3781 10240 10240 NT_STATUS_OK
ReadX 12437 3821 16384 16384 NT_STATUS_OK
ReadX 12437 3891 935 935 NT_STATUS_OK
ReadX 12437 4060 10240 10240 NT_STATUS_OK
ReadX 12437 4059 184 184 NT_STATUS_OK
ReadX 12437 256 184 184 NT_STATUS_OK
ReadX 12437 256 1026 1026 NT_STATUS_OK
ReadX 12437 3901 326 326 NT_STATUS_OK
ReadX 12437 3899 652 652 NT_STATUS_OK
ReadX 12437 256 2 2 NT_STATUS_OK
ReadX 12437 258 4948 4948 NT_STATUS_OK
Close 12437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12452 NT_STATUS_OK
Close 12452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12455 NT_STATUS_OK
WriteX 12455 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 258 NT_STATUS_OK
WriteX 12455 0 65536 65536 NT_STATUS_OK
WriteX 12455 65536 65536 65536 NT_STATUS_OK
WriteX 12455 131072 65536 65536 NT_STATUS_OK
WriteX 12455 196608 65536 65536 NT_STATUS_OK
WriteX 12455 262144 65536 65536 NT_STATUS_OK
WriteX 12455 327680 65536 65536 NT_STATUS_OK
WriteX 12455 393216 65536 65536 NT_STATUS_OK
WriteX 12455 458752 65536 65536 NT_STATUS_OK
WriteX 12455 524288 65536 65536 NT_STATUS_OK
WriteX 12455 589824 35257 35257 NT_STATUS_OK
Close 12455 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12457 NT_STATUS_OK
Close 12457 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12460 NT_STATUS_OK
WriteX 12460 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12460 258 NT_STATUS_OK
WriteX 12460 0 65536 65536 NT_STATUS_OK
WriteX 12460 65536 65536 65536 NT_STATUS_OK
WriteX 12460 131072 65536 65536 NT_STATUS_OK
WriteX 12460 196608 65536 65536 NT_STATUS_OK
WriteX 12460 262144 65536 65536 NT_STATUS_OK
WriteX 12460 327680 65536 65536 NT_STATUS_OK
WriteX 12460 393216 65536 65536 NT_STATUS_OK
WriteX 12460 458752 65536 65536 NT_STATUS_OK
WriteX 12460 524288 65536 65536 NT_STATUS_OK
WriteX 12460 589824 57598 57598 NT_STATUS_OK
Close 12460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12462 NT_STATUS_OK
WriteX 12462 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12462 258 NT_STATUS_OK
WriteX 12462 0 12543 12543 NT_STATUS_OK
Flush 12462 NT_STATUS_OK
Close 12462 NT_STATUS_OK
Close 12446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12464 NT_STATUS_OK
Close 12464 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12468 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 1005 NT_STATUS_OK
ReadX 12468 1938 24 24 NT_STATUS_OK
ReadX 12468 1920 276 276 NT_STATUS_OK
ReadX 12468 1918 14 14 NT_STATUS_OK
ReadX 12468 1918 7 7 NT_STATUS_OK
ReadX 12468 1919 12 12 NT_STATUS_OK
ReadX 12468 1919 8 8 NT_STATUS_OK
ReadX 12468 1917 15 15 NT_STATUS_OK
ReadX 12468 0 16 16 NT_STATUS_OK
ReadX 12468 16 2048 2048 NT_STATUS_OK
ReadX 12468 2064 2048 2048 NT_STATUS_OK
ReadX 12468 257 2048 2048 NT_STATUS_OK
ReadX 12468 385 2048 2048 NT_STATUS_OK
ReadX 12468 513 2048 2048 NT_STATUS_OK
ReadX 12468 641 2048 2048 NT_STATUS_OK
ReadX 12468 769 2048 2048 NT_STATUS_OK
ReadX 12468 897 2048 2048 NT_STATUS_OK
ReadX 12468 1025 2048 2048 NT_STATUS_OK
ReadX 12468 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12470 NT_STATUS_OK
Close 12470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12473 NT_STATUS_OK
WriteX 12473 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12473 258 NT_STATUS_OK
WriteX 12473 0 11588 11588 NT_STATUS_OK
Flush 12473 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12474 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12478 NT_STATUS_OK
WriteX 12478 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12478 258 NT_STATUS_OK
WriteX 12478 0 11615 11615 NT_STATUS_OK
Flush 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12480 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12482 NT_STATUS_OK
ReadX 12482 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12484 NT_STATUS_OK
Close 12484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12487 NT_STATUS_OK
WriteX 12487 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12487 258 NT_STATUS_OK
WriteX 12487 0 65536 65536 NT_STATUS_OK
WriteX 12487 65536 16050 16050 NT_STATUS_OK
Close 12487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12467 1939 64 64 NT_STATUS_OK
ReadX 12467 128 248 248 NT_STATUS_OK
ReadX 12467 128 568 568 NT_STATUS_OK
ReadX 12467 3872 1536 1536 NT_STATUS_OK
ReadX 12467 3456 2560 2560 NT_STATUS_OK
ReadX 12467 3136 512 512 NT_STATUS_OK
ReadX 12467 2880 4096 4096 NT_STATUS_OK
ReadX 12467 3264 3072 3072 NT_STATUS_OK
ReadX 12467 320 4096 4096 NT_STATUS_OK
ReadX 12467 1024 4096 4096 NT_STATUS_OK
ReadX 12467 3616 4096 4096 NT_STATUS_OK
ReadX 12467 1939 64 64 NT_STATUS_OK
ReadX 12467 128 248 248 NT_STATUS_OK
ReadX 12467 128 608 608 NT_STATUS_OK
ReadX 12467 2858 1024 1024 NT_STATUS_OK
ReadX 12467 2810 4096 4096 NT_STATUS_OK
ReadX 12467 2826 4096 4096 NT_STATUS_OK
ReadX 12467 2580 2048 2048 NT_STATUS_OK
ReadX 12467 2800 2560 2560 NT_STATUS_OK
ReadX 12467 2100 4096 4096 NT_STATUS_OK
ReadX 12467 2084 4096 4096 NT_STATUS_OK
ReadX 12467 868 4096 4096 NT_STATUS_OK
ReadX 12467 2324 4096 4096 NT_STATUS_OK
ReadX 12467 884 4096 4096 NT_STATUS_OK
ReadX 12467 2604 1024 1024 NT_STATUS_OK
ReadX 12467 580 4096 4096 NT_STATUS_OK
ReadX 12467 596 4096 4096 NT_STATUS_OK
ReadX 12467 2752 4096 4096 NT_STATUS_OK
ReadX 12467 2842 1024 1024 NT_STATUS_OK
ReadX 12467 660 4096 4096 NT_STATUS_OK
ReadX 12467 2720 4096 4096 NT_STATUS_OK
ReadX 12467 2736 4096 4096 NT_STATUS_OK
ReadX 12467 628 4096 4096 NT_STATUS_OK
ReadX 12467 2704 4096 4096 NT_STATUS_OK
ReadX 12467 1556 4096 4096 NT_STATUS_OK
ReadX 12467 576 4096 4096 NT_STATUS_OK
ReadX 12467 3168 1536 1536 NT_STATUS_OK
ReadX 12467 832 4096 4096 NT_STATUS_OK
ReadX 12467 1088 4096 4096 NT_STATUS_OK
ReadX 12467 1344 4096 4096 NT_STATUS_OK
ReadX 12467 1600 4096 4096 NT_STATUS_OK
ReadX 12467 1856 4096 4096 NT_STATUS_OK
ReadX 12467 2112 4096 4096 NT_STATUS_OK
ReadX 12467 1892 4096 4096 NT_STATUS_OK
ReadX 12467 820 4096 4096 NT_STATUS_OK
ReadX 12467 788 4096 4096 NT_STATUS_OK
ReadX 12467 1604 4096 4096 NT_STATUS_OK
ReadX 12467 3648 4096 4096 NT_STATUS_OK
ReadX 12467 2608 4096 4096 NT_STATUS_OK
ReadX 12467 548 4096 4096 NT_STATUS_OK
ReadX 12467 740 4096 4096 NT_STATUS_OK
ReadX 12467 1344 4096 4096 NT_STATUS_OK
ReadX 12467 3392 4096 4096 NT_STATUS_OK
ReadX 12467 3904 4096 4096 NT_STATUS_OK
ReadX 12467 644 4096 4096 NT_STATUS_OK
ReadX 12467 676 4096 4096 NT_STATUS_OK
ReadX 12467 2688 4096 4096 NT_STATUS_OK
ReadX 12467 320 4096 4096 NT_STATUS_OK
ReadX 12467 900 4096 4096 NT_STATUS_OK
ReadX 12467 1908 4096 4096 NT_STATUS_OK
ReadX 12467 852 4096 4096 NT_STATUS_OK
ReadX 12467 724 4096 4096 NT_STATUS_OK
ReadX 12467 2292 4096 4096 NT_STATUS_OK
ReadX 12467 612 4096 4096 NT_STATUS_OK
ReadX 12467 388 4096 4096 NT_STATUS_OK
ReadX 12467 2368 4096 4096 NT_STATUS_OK
ReadX 12467 2624 4096 4096 NT_STATUS_OK
ReadX 12467 500 4096 4096 NT_STATUS_OK
ReadX 12467 356 4096 4096 NT_STATUS_OK
ReadX 12467 1024 4096 4096 NT_STATUS_OK
ReadX 12467 576 4096 4096 NT_STATUS_OK
ReadX 12467 340 4096 4096 NT_STATUS_OK
ReadX 12467 420 4096 4096 NT_STATUS_OK
ReadX 12467 1600 4096 4096 NT_STATUS_OK
ReadX 12467 404 4096 4096 NT_STATUS_OK
ReadX 12467 1428 4096 4096 NT_STATUS_OK
ReadX 12467 2656 4096 4096 NT_STATUS_OK
ReadX 12467 2624 4096 4096 NT_STATUS_OK
ReadX 12467 452 4096 4096 NT_STATUS_OK
ReadX 12467 692 4096 4096 NT_STATUS_OK
ReadX 12467 564 4096 4096 NT_STATUS_OK
ReadX 12467 372 4096 4096 NT_STATUS_OK
ReadX 12467 468 4096 4096 NT_STATUS_OK
ReadX 12467 484 4096 4096 NT_STATUS_OK
ReadX 12467 1088 4096 4096 NT_STATUS_OK
ReadX 12467 1924 4096 4096 NT_STATUS_OK
ReadX 12467 2768 4096 4096 NT_STATUS_OK
ReadX 12467 832 4096 4096 NT_STATUS_OK
ReadX 12467 836 4096 4096 NT_STATUS_OK
ReadX 12467 1856 4096 4096 NT_STATUS_OK
ReadX 12467 2640 4096 4096 NT_STATUS_OK
ReadX 12467 436 4096 4096 NT_STATUS_OK
ReadX 12467 1828 4096 4096 NT_STATUS_OK
ReadX 12467 804 4096 4096 NT_STATUS_OK
ReadX 12467 1860 4096 4096 NT_STATUS_OK
ReadX 12467 1812 4096 4096 NT_STATUS_OK
ReadX 12467 756 4096 4096 NT_STATUS_OK
ReadX 12467 1636 4096 4096 NT_STATUS_OK
ReadX 12467 772 4096 4096 NT_STATUS_OK
ReadX 12467 2036 4096 4096 NT_STATUS_OK
ReadX 12467 1220 4096 4096 NT_STATUS_OK
ReadX 12467 1652 4096 4096 NT_STATUS_OK
ReadX 12467 2588 4096 4096 NT_STATUS_OK
ReadX 12467 916 4096 4096 NT_STATUS_OK
ReadX 12467 260 4096 4096 NT_STATUS_OK
ReadX 12467 932 4096 4096 NT_STATUS_OK
ReadX 12467 2624 4096 4096 NT_STATUS_OK
ReadX 12467 308 4096 4096 NT_STATUS_OK
ReadX 12467 292 4096 4096 NT_STATUS_OK
ReadX 12467 1140 4096 4096 NT_STATUS_OK
ReadX 12467 276 4096 4096 NT_STATUS_OK
ReadX 12467 2020 4096 4096 NT_STATUS_OK
ReadX 12467 2880 4096 4096 NT_STATUS_OK
ReadX 12467 516 4096 4096 NT_STATUS_OK
ReadX 12467 1844 4096 4096 NT_STATUS_OK
ReadX 12467 1124 4096 4096 NT_STATUS_OK
ReadX 12467 3136 4096 4096 NT_STATUS_OK
ReadX 12467 324 4096 4096 NT_STATUS_OK
ReadX 12467 1156 4096 4096 NT_STATUS_OK
ReadX 12467 1172 4096 4096 NT_STATUS_OK
ReadX 12467 2112 4096 4096 NT_STATUS_OK
ReadX 12467 2368 4096 4096 NT_STATUS_OK
ReadX 12467 964 4096 4096 NT_STATUS_OK
ReadX 12467 980 4096 4096 NT_STATUS_OK
ReadX 12467 1012 4096 4096 NT_STATUS_OK
ReadX 12467 532 4096 4096 NT_STATUS_OK
ReadX 12467 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12467 1620 4096 4096 NT_STATUS_OK
ReadX 12467 1604 4096 4096 NT_STATUS_OK
ReadX 12467 2116 4096 4096 NT_STATUS_OK
ReadX 12467 2132 4096 4096 NT_STATUS_OK
ReadX 12467 2148 4096 4096 NT_STATUS_OK
ReadX 12467 2276 4096 4096 NT_STATUS_OK
ReadX 12467 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12489 NT_STATUS_OK
Close 12489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12492 NT_STATUS_OK
QUERY_FILE_INFORMATION 12447 1004 NT_STATUS_OK
Close 12447 NT_STATUS_OK
WriteX 12492 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12492 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12449 1004 NT_STATUS_OK
Close 12449 NT_STATUS_OK
WriteX 12492 0 65536 65536 NT_STATUS_OK
WriteX 12492 65536 64850 64850 NT_STATUS_OK
Close 12492 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12494 NT_STATUS_OK
WriteX 12494 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 258 NT_STATUS_OK
ReadX 12467 2068 4096 4096 NT_STATUS_OK
ReadX 12467 1588 4096 4096 NT_STATUS_OK
ReadX 12467 1572 4096 4096 NT_STATUS_OK
WriteX 12494 0 18630 18630 NT_STATUS_OK
Flush 12494 NT_STATUS_OK
Close 12494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12496 NT_STATUS_OK
Close 12496 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12498 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12467 612 4096 4096 NT_STATUS_OK
ReadX 12467 564 4096 4096 NT_STATUS_OK
ReadX 12467 1876 4096 4096 NT_STATUS_OK
ReadX 12467 628 4096 4096 NT_STATUS_OK
ReadX 12467 740 4096 4096 NT_STATUS_OK
ReadX 12467 724 4096 4096 NT_STATUS_OK
ReadX 12467 644 4096 4096 NT_STATUS_OK
ReadX 12467 2324 4096 4096 NT_STATUS_OK
ReadX 12467 660 4096 4096 NT_STATUS_OK
ReadX 12467 852 4096 4096 NT_STATUS_OK
ReadX 12467 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12467 2368 4096 4096 NT_STATUS_OK
ReadX 12467 1024 4096 4096 NT_STATUS_OK
ReadX 12467 320 4096 4096 NT_STATUS_OK
ReadX 12467 580 4096 4096 NT_STATUS_OK
ReadX 12467 3136 512 512 NT_STATUS_OK
ReadX 12467 2880 4096 4096 NT_STATUS_OK
Close 12467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 61440 4096 4096 NT_STATUS_OK
ReadX 12499 126976 4096 4096 NT_STATUS_OK
WriteX 12499 0 65536 65536 NT_STATUS_OK
WriteX 12499 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12500 NT_STATUS_OK
ReadX 12500 61440 4096 4096 NT_STATUS_OK
ReadX 12500 126976 4096 4096 NT_STATUS_OK
ReadX 12500 192512 4096 4096 NT_STATUS_OK
ReadX 12500 258048 4096 4096 NT_STATUS_OK
WriteX 12500 0 65536 65536 NT_STATUS_OK
WriteX 12500 65536 65536 65536 NT_STATUS_OK
WriteX 12500 131072 65536 65536 NT_STATUS_OK
WriteX 12500 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 61440 4096 4096 NT_STATUS_OK
ReadX 12501 126976 4096 4096 NT_STATUS_OK
ReadX 12501 192512 4096 4096 NT_STATUS_OK
ReadX 12501 258048 4096 4096 NT_STATUS_OK
ReadX 12501 323584 4096 4096 NT_STATUS_OK
ReadX 12501 389120 4096 4096 NT_STATUS_OK
ReadX 12501 454656 4096 4096 NT_STATUS_OK
ReadX 12501 520192 4096 4096 NT_STATUS_OK
WriteX 12501 0 65536 65536 NT_STATUS_OK
WriteX 12501 65536 65536 65536 NT_STATUS_OK
WriteX 12501 131072 65536 65536 NT_STATUS_OK
WriteX 12501 196608 65536 65536 NT_STATUS_OK
WriteX 12501 262144 65536 65536 NT_STATUS_OK
WriteX 12501 327680 65536 65536 NT_STATUS_OK
WriteX 12501 393216 65536 65536 NT_STATUS_OK
WriteX 12501 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12502 NT_STATUS_OK
ReadX 12502 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12503 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12504 NT_STATUS_OK
WriteX 12504 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12504 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12502 0 8192 8192 NT_STATUS_OK
Flush 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12502 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12502 0 8192 8192 NT_STATUS_OK
Flush 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12502 0 8192 8192 NT_STATUS_OK
Flush 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12502 0 8192 8192 NT_STATUS_OK
Flush 12502 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12506 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12498 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12499 NT_STATUS_OK
Close 12500 NT_STATUS_OK
Close 12501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12509 NT_STATUS_OK
WriteX 12509 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12509 258 NT_STATUS_OK
WriteX 12509 0 62591 62591 NT_STATUS_OK
Close 12509 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12511 NT_STATUS_OK
Close 12511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12514 NT_STATUS_OK
WriteX 12514 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12514 258 NT_STATUS_OK
WriteX 12514 0 10845 10845 NT_STATUS_OK
Close 12514 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12516 NT_STATUS_OK
Close 12516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12519 NT_STATUS_OK
WriteX 12519 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12519 258 NT_STATUS_OK
WriteX 12519 0 30118 30118 NT_STATUS_OK
Close 12519 NT_STATUS_OK
WriteX 12502 0 4096 4096 NT_STATUS_OK
WriteX 12504 0 64 64 NT_STATUS_OK
Close 12504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12502 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 61440 61440 NT_STATUS_OK
ReadX 12521 61440 4096 4096 NT_STATUS_OK
ReadX 12521 65536 61440 61440 NT_STATUS_OK
ReadX 12521 126976 4096 4096 NT_STATUS_OK
ReadX 12521 131072 61440 61440 NT_STATUS_OK
ReadX 12521 192512 4096 4096 NT_STATUS_OK
ReadX 12521 196608 61440 61440 NT_STATUS_OK
ReadX 12521 258048 4096 4096 NT_STATUS_OK
ReadX 12521 262144 61440 61440 NT_STATUS_OK
ReadX 12521 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 61440 61440 NT_STATUS_OK
ReadX 12522 61440 4096 4096 NT_STATUS_OK
ReadX 12522 65536 61440 61440 NT_STATUS_OK
ReadX 12522 126976 4096 4096 NT_STATUS_OK
ReadX 12522 131072 61440 61440 NT_STATUS_OK
ReadX 12522 192512 4096 4096 NT_STATUS_OK
ReadX 12522 196608 61440 61440 NT_STATUS_OK
ReadX 12522 258048 4096 4096 NT_STATUS_OK
ReadX 12522 262144 61440 61440 NT_STATUS_OK
ReadX 12522 323584 4096 4096 NT_STATUS_OK
ReadX 12522 327680 61440 61440 NT_STATUS_OK
ReadX 12522 389120 4096 4096 NT_STATUS_OK
ReadX 12522 393216 61440 61440 NT_STATUS_OK
ReadX 12522 454656 4096 4096 NT_STATUS_OK
ReadX 12522 458752 61440 61440 NT_STATUS_OK
ReadX 12522 520192 4096 4096 NT_STATUS_OK
ReadX 12522 524288 61440 61440 NT_STATUS_OK
ReadX 12522 585728 4096 4096 NT_STATUS_OK
ReadX 12522 589824 61440 61440 NT_STATUS_OK
ReadX 12522 651264 4096 4096 NT_STATUS_OK
ReadX 12522 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 61440 61440 NT_STATUS_OK
ReadX 12523 61440 4096 4096 NT_STATUS_OK
ReadX 12523 65536 61440 61440 NT_STATUS_OK
ReadX 12523 126976 4096 4096 NT_STATUS_OK
ReadX 12523 131072 61440 61440 NT_STATUS_OK
ReadX 12523 192512 4096 4096 NT_STATUS_OK
ReadX 12523 196608 61440 61440 NT_STATUS_OK
ReadX 12523 258048 4096 4096 NT_STATUS_OK
ReadX 12523 262144 61440 61440 NT_STATUS_OK
ReadX 12523 323584 4096 4096 NT_STATUS_OK
ReadX 12523 327680 61440 61440 NT_STATUS_OK
ReadX 12523 389120 4096 4096 NT_STATUS_OK
ReadX 12523 393216 61440 61440 NT_STATUS_OK
ReadX 12523 454656 4096 4096 NT_STATUS_OK
ReadX 12523 458752 61440 61440 NT_STATUS_OK
ReadX 12523 520192 4096 4096 NT_STATUS_OK
ReadX 12523 524288 61440 61440 NT_STATUS_OK
ReadX 12523 585728 4096 4096 NT_STATUS_OK
ReadX 12523 589824 61440 61440 NT_STATUS_OK
ReadX 12523 651264 4096 4096 NT_STATUS_OK
ReadX 12523 655360 61440 61440 NT_STATUS_OK
ReadX 12523 716800 4096 4096 NT_STATUS_OK
ReadX 12523 720896 61440 61440 NT_STATUS_OK
ReadX 12523 782336 4096 4096 NT_STATUS_OK
ReadX 12523 786432 61440 61440 NT_STATUS_OK
ReadX 12523 847872 4096 4096 NT_STATUS_OK
ReadX 12523 851968 61440 61440 NT_STATUS_OK
ReadX 12523 913408 4096 4096 NT_STATUS_OK
ReadX 12523 917504 61440 61440 NT_STATUS_OK
ReadX 12523 978944 4096 4096 NT_STATUS_OK
ReadX 12523 983040 61440 61440 NT_STATUS_OK
ReadX 12523 1044480 4096 4096 NT_STATUS_OK
ReadX 12523 1048576 61440 61440 NT_STATUS_OK
ReadX 12523 1110016 4096 4096 NT_STATUS_OK
ReadX 12523 1114112 61440 61440 NT_STATUS_OK
ReadX 12523 1175552 4096 4096 NT_STATUS_OK
ReadX 12523 1179648 61440 61440 NT_STATUS_OK
ReadX 12523 1241088 4096 4096 NT_STATUS_OK
ReadX 12523 1245184 61440 61440 NT_STATUS_OK
ReadX 12523 1306624 4096 4096 NT_STATUS_OK
ReadX 12523 1310720 61440 61440 NT_STATUS_OK
ReadX 12523 1372160 4096 4096 NT_STATUS_OK
ReadX 12523 1376256 61440 61440 NT_STATUS_OK
ReadX 12523 1437696 4096 4096 NT_STATUS_OK
ReadX 12523 1441792 61440 61440 NT_STATUS_OK
ReadX 12523 1503232 4096 4096 NT_STATUS_OK
ReadX 12523 1507328 61440 61440 NT_STATUS_OK
ReadX 12523 1568768 4096 4096 NT_STATUS_OK
ReadX 12523 1572864 61440 61440 NT_STATUS_OK
ReadX 12523 1634304 4096 4096 NT_STATUS_OK
ReadX 12523 1638400 61440 61440 NT_STATUS_OK
ReadX 12523 1699840 4096 4096 NT_STATUS_OK
ReadX 12523 1703936 61440 61440 NT_STATUS_OK
ReadX 12523 1765376 4096 4096 NT_STATUS_OK
ReadX 12523 1769472 61440 61440 NT_STATUS_OK
ReadX 12523 1830912 4096 4096 NT_STATUS_OK
ReadX 12523 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12524 NT_STATUS_OK
Close 12524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
ReadX 12528 4096 4096 4096 NT_STATUS_OK
ReadX 12528 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12529 NT_STATUS_OK
Close 12529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12532 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12532 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12533 NT_STATUS_OK
Close 12533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12532 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12536 NT_STATUS_OK
ReadX 12536 0 8192 8192 NT_STATUS_OK
ReadX 12536 8192 8192 8192 NT_STATUS_OK
ReadX 12536 16384 8192 8192 NT_STATUS_OK
ReadX 12536 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12538 NT_STATUS_OK
Close 12538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12536 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12541 NT_STATUS_OK
WriteX 12541 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12541 258 NT_STATUS_OK
WriteX 12541 0 10438 10438 NT_STATUS_OK
Close 12541 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12542 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12543 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12544 NT_STATUS_OK
Close 12544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12545 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12546 NT_STATUS_OK
Close 12546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12547 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12549 NT_STATUS_OK
Close 12549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
ReadX 12550 4096 4096 4096 NT_STATUS_OK
ReadX 12550 8192 4096 4096 NT_STATUS_OK
ReadX 12550 12288 8192 8192 NT_STATUS_OK
ReadX 12550 20480 8192 8192 NT_STATUS_OK
ReadX 12550 28672 8192 8192 NT_STATUS_OK
ReadX 12550 36864 8192 8192 NT_STATUS_OK
ReadX 12550 45056 8192 8192 NT_STATUS_OK
ReadX 12550 53248 8192 8192 NT_STATUS_OK
ReadX 12550 61440 8192 8192 NT_STATUS_OK
ReadX 12550 69632 8192 8192 NT_STATUS_OK
ReadX 12550 77824 8192 8192 NT_STATUS_OK
ReadX 12550 86016 8192 8192 NT_STATUS_OK
ReadX 12550 94208 8192 8192 NT_STATUS_OK
ReadX 12550 102400 8192 8192 NT_STATUS_OK
ReadX 12550 110592 8192 8192 NT_STATUS_OK
ReadX 12550 118784 8192 8192 NT_STATUS_OK
ReadX 12550 126976 8192 8192 NT_STATUS_OK
ReadX 12550 135168 8192 8192 NT_STATUS_OK
ReadX 12550 143360 8192 8192 NT_STATUS_OK
ReadX 12550 151552 8192 8192 NT_STATUS_OK
ReadX 12550 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12552 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12555 NT_STATUS_OK
WriteX 12555 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12555 258 NT_STATUS_OK
WriteX 12555 0 28489 28489 NT_STATUS_OK
Close 12555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12556 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12558 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12558 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12559 NT_STATUS_OK
Close 12559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12562 NT_STATUS_OK
ReadX 12562 0 8192 8192 NT_STATUS_OK
ReadX 12562 8192 8192 8192 NT_STATUS_OK
ReadX 12562 16384 8192 8192 NT_STATUS_OK
ReadX 12562 24576 8192 8192 NT_STATUS_OK
ReadX 12562 32768 16384 16384 NT_STATUS_OK
ReadX 12562 49152 8192 8192 NT_STATUS_OK
ReadX 12562 57344 8192 8192 NT_STATUS_OK
ReadX 12562 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12564 NT_STATUS_OK
Close 12564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12562 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12567 NT_STATUS_OK
WriteX 12567 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 258 NT_STATUS_OK
WriteX 12567 0 29253 29253 NT_STATUS_OK
Close 12567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12568 NT_STATUS_OK
Close 12568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12571 NT_STATUS_OK
Close 12571 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12574 NT_STATUS_OK
WriteX 12574 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12574 258 NT_STATUS_OK
WriteX 12574 0 30183 30183 NT_STATUS_OK
Close 12574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12575 NT_STATUS_OK
Close 12575 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12577 NT_STATUS_OK
WriteX 12577 0 510 510 NT_STATUS_OK
WriteX 12577 510 512 512 NT_STATUS_OK
WriteX 12577 1022 510 510 NT_STATUS_OK
WriteX 12577 1532 510 510 NT_STATUS_OK
WriteX 12577 2042 168 168 NT_STATUS_OK
Close 12577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12578 NT_STATUS_OK
Close 12578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
WriteX 12580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 61440 4096 4096 NT_STATUS_OK
ReadX 12581 126976 4096 4096 NT_STATUS_OK
WriteX 12581 0 65536 65536 NT_STATUS_OK
WriteX 12581 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12582 NT_STATUS_OK
ReadX 12582 61440 4096 4096 NT_STATUS_OK
ReadX 12582 126976 4096 4096 NT_STATUS_OK
ReadX 12582 192512 4096 4096 NT_STATUS_OK
ReadX 12582 258048 4096 4096 NT_STATUS_OK
WriteX 12582 0 65536 65536 NT_STATUS_OK
WriteX 12582 65536 65536 65536 NT_STATUS_OK
WriteX 12582 131072 65536 65536 NT_STATUS_OK
WriteX 12582 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 61440 4096 4096 NT_STATUS_OK
ReadX 12583 126976 4096 4096 NT_STATUS_OK
ReadX 12583 192512 4096 4096 NT_STATUS_OK
ReadX 12583 258048 4096 4096 NT_STATUS_OK
ReadX 12583 323584 4096 4096 NT_STATUS_OK
ReadX 12583 389120 4096 4096 NT_STATUS_OK
ReadX 12583 454656 4096 4096 NT_STATUS_OK
ReadX 12583 520192 4096 4096 NT_STATUS_OK
WriteX 12583 0 65536 65536 NT_STATUS_OK
WriteX 12583 65536 65536 65536 NT_STATUS_OK
WriteX 12583 131072 65536 65536 NT_STATUS_OK
WriteX 12583 196608 65536 65536 NT_STATUS_OK
WriteX 12583 262144 65536 65536 NT_STATUS_OK
WriteX 12583 327680 65536 65536 NT_STATUS_OK
WriteX 12583 393216 65536 65536 NT_STATUS_OK
WriteX 12583 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12584 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Close 12581 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Close 12583 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12590 NT_STATUS_OK
Close 12590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12593 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12599 NT_STATUS_OK
Close 12599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12602 NT_STATUS_OK
Close 12602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12604 NT_STATUS_OK
Close 12604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12608 NT_STATUS_OK
Close 12608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12613 NT_STATUS_OK
Close 12613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12618 NT_STATUS_OK
Close 12618 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12623 NT_STATUS_OK
Close 12623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12628 NT_STATUS_OK
Close 12628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12638 NT_STATUS_OK
Close 12638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12643 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12649 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12652 NT_STATUS_OK
WriteX 12652 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12652 0 65536 65536 NT_STATUS_OK
WriteX 12652 65536 65536 65536 NT_STATUS_OK
WriteX 12652 131072 65536 65536 NT_STATUS_OK
WriteX 12652 196608 65536 65536 NT_STATUS_OK
WriteX 12652 262144 26634 26634 NT_STATUS_OK
Close 12652 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12657 NT_STATUS_OK
Close 12657 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12658 NT_STATUS_OK
Close 12658 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
Close 12659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
ReadX 12660 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12661 NT_STATUS_OK
Close 12661 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12665 NT_STATUS_OK
Close 12665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12668 NT_STATUS_OK
Close 12668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12670 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12674 NT_STATUS_OK
Close 12674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12677 NT_STATUS_OK
Close 12677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12679 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12683 NT_STATUS_OK
Close 12683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12688 NT_STATUS_OK
Close 12688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12693 NT_STATUS_OK
Close 12693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12703 NT_STATUS_OK
Close 12703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12708 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12712 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12717 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12722 NT_STATUS_OK
Close 12722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12725 NT_STATUS_OK
Close 12725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12737 NT_STATUS_OK
Close 12737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 4096 4096 NT_STATUS_OK
Close 12739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12740 NT_STATUS_OK
ReadX 12740 0 4096 4096 NT_STATUS_OK
Close 12740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12741 NT_STATUS_OK
ReadX 12741 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12751 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12752 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
Close 12753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
Close 12754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12741 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12784 0 4096 4096 NT_STATUS_OK
Close 12784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 0 4096 4096 NT_STATUS_OK
ReadX 12786 4096 4096 4096 NT_STATUS_OK
ReadX 12786 8192 4096 4096 NT_STATUS_OK
ReadX 12786 12288 4096 4096 NT_STATUS_OK
ReadX 12786 16384 4096 4096 NT_STATUS_OK
ReadX 12786 20480 4096 4096 NT_STATUS_OK
ReadX 12786 24576 4096 4096 NT_STATUS_OK
ReadX 12786 28672 4096 4096 NT_STATUS_OK
ReadX 12786 32768 4096 4096 NT_STATUS_OK
ReadX 12786 36864 4096 4096 NT_STATUS_OK
ReadX 12786 40960 4096 4096 NT_STATUS_OK
ReadX 12786 45056 4096 4096 NT_STATUS_OK
ReadX 12786 49152 4096 4096 NT_STATUS_OK
ReadX 12786 53248 4096 4096 NT_STATUS_OK
ReadX 12786 57344 4096 4096 NT_STATUS_OK
ReadX 12786 61440 4096 4096 NT_STATUS_OK
ReadX 12786 65536 4096 4096 NT_STATUS_OK
ReadX 12786 69632 4096 4096 NT_STATUS_OK
ReadX 12786 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12786 1004 NT_STATUS_OK
WriteX 12786 0 4096 4096 NT_STATUS_OK
Close 12786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12787 NT_STATUS_OK
SET_FILE_INFORMATION 12787 1004 NT_STATUS_OK
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12788 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12792 NT_STATUS_OK
WriteX 12792 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12792 258 NT_STATUS_OK
WriteX 12792 0 65536 65536 NT_STATUS_OK
WriteX 12792 65536 19979 19979 NT_STATUS_OK
Close 12792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
QUERY_FILE_INFORMATION 12793 1004 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
SET_FILE_INFORMATION 12793 1004 NT_STATUS_OK
WriteX 12793 0 4096 4096 NT_STATUS_OK
Flush 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
Close 12794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
Close 12796 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
Close 12797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12798 1004 NT_STATUS_OK
WriteX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12799 NT_STATUS_OK
Close 12799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Close 12788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12801 NT_STATUS_OK
Close 12801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12804 NT_STATUS_OK
WriteX 12804 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12804 258 NT_STATUS_OK
WriteX 12804 0 65536 65536 NT_STATUS_OK
WriteX 12804 65536 17654 17654 NT_STATUS_OK
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12805 NT_STATUS_OK
ReadX 12805 0 4096 4096 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
QUERY_FILE_INFORMATION 12805 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
SET_FILE_INFORMATION 12805 1004 NT_STATUS_OK
WriteX 12805 0 4096 4096 NT_STATUS_OK
Flush 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12806 NT_STATUS_OK
SET_FILE_INFORMATION 12806 1004 NT_STATUS_OK
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12807 NT_STATUS_OK
ReadX 12807 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12808 NT_STATUS_OK
Close 12808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12810 NT_STATUS_OK
ReadX 12810 0 4096 4096 NT_STATUS_OK
ReadX 12810 4096 4096 4096 NT_STATUS_OK
ReadX 12810 8192 4096 4096 NT_STATUS_OK
ReadX 12810 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12810 16384 4096 4096 NT_STATUS_OK
ReadX 12810 20480 4096 4096 NT_STATUS_OK
ReadX 12810 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
Close 12811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 4096 4096 NT_STATUS_OK
Close 12812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12813 NT_STATUS_OK
ReadX 12813 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12813 1004 NT_STATUS_OK
WriteX 12813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12814 NT_STATUS_OK
Close 12814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12813 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12819 NT_STATUS_OK
WriteX 12819 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12819 258 NT_STATUS_OK
WriteX 12819 0 65536 65536 NT_STATUS_OK
WriteX 12819 65536 19490 19490 NT_STATUS_OK
Close 12819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 0 4096 4096 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
QUERY_FILE_INFORMATION 12820 1004 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
SET_FILE_INFORMATION 12820 1004 NT_STATUS_OK
WriteX 12820 0 4096 4096 NT_STATUS_OK
Flush 12820 NT_STATUS_OK
Close 12820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12821 NT_STATUS_OK
SET_FILE_INFORMATION 12821 1004 NT_STATUS_OK
Close 12821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12822 NT_STATUS_OK
ReadX 12822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12823 NT_STATUS_OK
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12825 0 4096 4096 NT_STATUS_OK
Close 12825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12826 NT_STATUS_OK
ReadX 12826 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12827 NT_STATUS_OK
ReadX 12827 0 4096 4096 NT_STATUS_OK
ReadX 12827 4096 4096 4096 NT_STATUS_OK
ReadX 12827 8192 4096 4096 NT_STATUS_OK
ReadX 12827 12288 4096 4096 NT_STATUS_OK
ReadX 12827 16384 4096 4096 NT_STATUS_OK
ReadX 12827 20480 4096 4096 NT_STATUS_OK
ReadX 12827 24576 4096 4096 NT_STATUS_OK
ReadX 12827 28672 4096 4096 NT_STATUS_OK
ReadX 12827 32768 4096 4096 NT_STATUS_OK
ReadX 12827 36864 4096 4096 NT_STATUS_OK
ReadX 12827 40960 4096 4096 NT_STATUS_OK
ReadX 12827 45056 4096 4096 NT_STATUS_OK
ReadX 12827 49152 4096 4096 NT_STATUS_OK
ReadX 12827 53248 4096 4096 NT_STATUS_OK
ReadX 12827 57344 4096 4096 NT_STATUS_OK
ReadX 12827 61440 4096 4096 NT_STATUS_OK
ReadX 12827 65536 4096 4096 NT_STATUS_OK
ReadX 12827 69632 4096 4096 NT_STATUS_OK
ReadX 12827 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12827 1004 NT_STATUS_OK
WriteX 12827 0 4096 4096 NT_STATUS_OK
Close 12827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12828 NT_STATUS_OK
SET_FILE_INFORMATION 12828 1004 NT_STATUS_OK
Close 12828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12829 NT_STATUS_OK
ReadX 12829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12830 NT_STATUS_OK
Close 12830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12822 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12833 NT_STATUS_OK
WriteX 12833 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12833 258 NT_STATUS_OK
WriteX 12833 0 65536 65536 NT_STATUS_OK
WriteX 12833 65536 8866 8866 NT_STATUS_OK
Close 12833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 0 4096 4096 NT_STATUS_OK
WriteX 12834 0 4096 4096 NT_STATUS_OK
Flush 12834 NT_STATUS_OK
SET_FILE_INFORMATION 12834 1004 NT_STATUS_OK
WriteX 12834 0 4096 4096 NT_STATUS_OK
Flush 12834 NT_STATUS_OK
Close 12834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12835 NT_STATUS_OK
ReadX 12835 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 0 4096 4096 NT_STATUS_OK
Close 12836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 4096 4096 NT_STATUS_OK
Close 12837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12838 NT_STATUS_OK
ReadX 12838 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12838 1004 NT_STATUS_OK
WriteX 12838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12839 NT_STATUS_OK
Close 12839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12838 NT_STATUS_OK
Close 12829 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12841 NT_STATUS_OK
Close 12841 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12844 NT_STATUS_OK
WriteX 12844 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12844 258 NT_STATUS_OK
WriteX 12844 0 65536 65536 NT_STATUS_OK
WriteX 12844 65536 9298 9298 NT_STATUS_OK
Close 12844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12845 NT_STATUS_OK
ReadX 12845 0 4096 4096 NT_STATUS_OK
WriteX 12845 0 4096 4096 NT_STATUS_OK
Flush 12845 NT_STATUS_OK
SET_FILE_INFORMATION 12845 1004 NT_STATUS_OK
WriteX 12845 0 4096 4096 NT_STATUS_OK
Flush 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12846 NT_STATUS_OK
SET_FILE_INFORMATION 12846 1004 NT_STATUS_OK
Close 12846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12847 NT_STATUS_OK
ReadX 12847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12848 NT_STATUS_OK
Close 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12851 0 4096 4096 NT_STATUS_OK
Close 12851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12852 NT_STATUS_OK
ReadX 12852 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12852 4096 4096 4096 NT_STATUS_OK
ReadX 12852 8192 4096 4096 NT_STATUS_OK
ReadX 12852 12288 4096 4096 NT_STATUS_OK
ReadX 12852 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12853 NT_STATUS_OK
ReadX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12854 NT_STATUS_OK
ReadX 12854 0 4096 4096 NT_STATUS_OK
Close 12854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12855 NT_STATUS_OK
ReadX 12855 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12855 1004 NT_STATUS_OK
WriteX 12855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12856 NT_STATUS_OK
Close 12856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12852 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12858 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12861 NT_STATUS_OK
WriteX 12861 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12861 258 NT_STATUS_OK
WriteX 12861 0 65536 65536 NT_STATUS_OK
WriteX 12861 65536 11540 11540 NT_STATUS_OK
Close 12861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
WriteX 12862 0 4096 4096 NT_STATUS_OK
Flush 12862 NT_STATUS_OK
SET_FILE_INFORMATION 12862 1004 NT_STATUS_OK
WriteX 12862 0 4096 4096 NT_STATUS_OK
Flush 12862 NT_STATUS_OK
Close 12862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12863 NT_STATUS_OK
SET_FILE_INFORMATION 12863 1004 NT_STATUS_OK
Close 12863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12864 NT_STATUS_OK
ReadX 12864 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12865 NT_STATUS_OK
Close 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12867 NT_STATUS_OK
ReadX 12867 61440 4096 4096 NT_STATUS_OK
ReadX 12867 126976 4096 4096 NT_STATUS_OK
WriteX 12867 0 65536 65536 NT_STATUS_OK
WriteX 12867 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12868 NT_STATUS_OK
ReadX 12868 61440 4096 4096 NT_STATUS_OK
ReadX 12868 126976 4096 4096 NT_STATUS_OK
ReadX 12868 192512 4096 4096 NT_STATUS_OK
ReadX 12868 258048 4096 4096 NT_STATUS_OK
WriteX 12868 0 65536 65536 NT_STATUS_OK
WriteX 12868 65536 65536 65536 NT_STATUS_OK
WriteX 12868 131072 65536 65536 NT_STATUS_OK
WriteX 12868 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12869 NT_STATUS_OK
ReadX 12869 61440 4096 4096 NT_STATUS_OK
ReadX 12869 126976 4096 4096 NT_STATUS_OK
ReadX 12869 192512 4096 4096 NT_STATUS_OK
ReadX 12869 258048 4096 4096 NT_STATUS_OK
ReadX 12869 323584 4096 4096 NT_STATUS_OK
ReadX 12869 389120 4096 4096 NT_STATUS_OK
ReadX 12869 454656 4096 4096 NT_STATUS_OK
ReadX 12869 520192 4096 4096 NT_STATUS_OK
WriteX 12869 0 65536 65536 NT_STATUS_OK
WriteX 12869 65536 65536 65536 NT_STATUS_OK
WriteX 12869 131072 65536 65536 NT_STATUS_OK
WriteX 12869 196608 65536 65536 NT_STATUS_OK
WriteX 12869 262144 65536 65536 NT_STATUS_OK
WriteX 12869 327680 65536 65536 NT_STATUS_OK
WriteX 12869 393216 65536 65536 NT_STATUS_OK
WriteX 12869 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 4096 4096 NT_STATUS_OK
ReadX 12870 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12871 NT_STATUS_OK
WriteX 12871 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12871 258 NT_STATUS_OK
WriteX 12871 0 53 53 NT_STATUS_OK
Close 12871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12872 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12864 NT_STATUS_OK
Close 12810 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Close 12868 NT_STATUS_OK
Close 12869 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12870 8192 4096 4096 NT_STATUS_OK
ReadX 12870 12288 4096 4096 NT_STATUS_OK
WriteX 12874 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12874 258 NT_STATUS_OK
ReadX 12870 16384 4096 4096 NT_STATUS_OK
ReadX 12870 20480 4096 4096 NT_STATUS_OK
WriteX 12874 0 15360 15360 NT_STATUS_OK
Close 12874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12875 NT_STATUS_OK
ReadX 12875 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12875 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12875 1004 NT_STATUS_OK
WriteX 12875 0 4096 4096 NT_STATUS_OK
Close 12875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12878 NT_STATUS_OK
ReadX 12878 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12879 NT_STATUS_OK
Close 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12878 4096 4096 4096 NT_STATUS_OK
ReadX 12878 8192 4096 4096 NT_STATUS_OK
ReadX 12878 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12881 NT_STATUS_OK
ReadX 12881 0 4096 4096 NT_STATUS_OK
ReadX 12881 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12882 NT_STATUS_OK
ReadX 12882 0 4096 4096 NT_STATUS_OK
ReadX 12882 4096 4096 4096 NT_STATUS_OK
ReadX 12882 8192 4096 4096 NT_STATUS_OK
Close 12881 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12883 NT_STATUS_OK
WriteX 12883 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12883 258 NT_STATUS_OK
WriteX 12883 0 15360 15360 NT_STATUS_OK
Close 12883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12884 NT_STATUS_OK
ReadX 12884 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12884 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12884 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12870 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12887 NT_STATUS_OK
ReadX 12887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12888 NT_STATUS_OK
SET_FILE_INFORMATION 12888 1004 NT_STATUS_OK
Close 12888 NT_STATUS_OK
WriteX 12884 0 4096 4096 NT_STATUS_OK
Close 12884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12889 NT_STATUS_OK
Close 12889 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12891 NT_STATUS_OK
ReadX 12891 0 4096 4096 NT_STATUS_OK
ReadX 12891 4096 4096 4096 NT_STATUS_OK
ReadX 12891 8192 4096 4096 NT_STATUS_OK
ReadX 12891 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12891 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12891 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12892 NT_STATUS_OK
ReadX 12892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12893 NT_STATUS_OK
WriteX 12893 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12893 258 NT_STATUS_OK
WriteX 12893 0 53 53 NT_STATUS_OK
Close 12893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12894 NT_STATUS_OK
Close 12894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12892 4096 4096 4096 NT_STATUS_OK
ReadX 12892 8192 4096 4096 NT_STATUS_OK
ReadX 12892 12288 4096 4096 NT_STATUS_OK
WriteX 12896 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12896 258 NT_STATUS_OK
WriteX 12896 0 12006 12006 NT_STATUS_OK
Close 12896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12897 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12897 1004 NT_STATUS_OK
WriteX 12897 0 4096 4096 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12898 NT_STATUS_OK
Close 12898 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12900 NT_STATUS_OK
ReadX 12900 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12901 NT_STATUS_OK
Close 12901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12900 4096 4096 4096 NT_STATUS_OK
ReadX 12900 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12903 NT_STATUS_OK
WriteX 12903 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12903 258 NT_STATUS_OK
WriteX 12903 0 11991 11991 NT_STATUS_OK
Close 12903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12904 NT_STATUS_OK
ReadX 12904 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12904 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12904 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12905 NT_STATUS_OK
Close 12905 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12907 NT_STATUS_OK
ReadX 12907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12908 NT_STATUS_OK
SET_FILE_INFORMATION 12908 1004 NT_STATUS_OK
Close 12908 NT_STATUS_OK
WriteX 12904 0 4096 4096 NT_STATUS_OK
Close 12904 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12909 NT_STATUS_OK
Close 12909 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12911 NT_STATUS_OK
ReadX 12911 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12912 NT_STATUS_OK
Close 12912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12911 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12911 1004 NT_STATUS_OK
ReadX 12911 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12911 1004 NT_STATUS_OK
WriteX 12911 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12911 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12911 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12911 1004 NT_STATUS_OK
Close 12887 NT_STATUS_OK
WriteX 12891 0 19054 19054 NT_STATUS_OK
WriteX 12911 0 12288 12288 NT_STATUS_OK
Close 12907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12914 NT_STATUS_OK
Close 12914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Close 12911 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12916 NT_STATUS_OK
Close 12916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 61440 61440 NT_STATUS_OK
ReadX 12918 61440 4096 4096 NT_STATUS_OK
ReadX 12918 65536 61440 61440 NT_STATUS_OK
ReadX 12918 126976 4096 4096 NT_STATUS_OK
ReadX 12918 131072 61440 61440 NT_STATUS_OK
ReadX 12918 192512 4096 4096 NT_STATUS_OK
ReadX 12918 196608 61440 61440 NT_STATUS_OK
ReadX 12918 258048 4096 4096 NT_STATUS_OK
ReadX 12918 262144 61440 61440 NT_STATUS_OK
ReadX 12918 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12919 NT_STATUS_OK
ReadX 12919 0 61440 61440 NT_STATUS_OK
ReadX 12919 61440 4096 4096 NT_STATUS_OK
ReadX 12919 65536 61440 61440 NT_STATUS_OK
ReadX 12919 126976 4096 4096 NT_STATUS_OK
ReadX 12919 131072 61440 61440 NT_STATUS_OK
ReadX 12919 192512 4096 4096 NT_STATUS_OK
ReadX 12919 196608 61440 61440 NT_STATUS_OK
ReadX 12919 258048 4096 4096 NT_STATUS_OK
ReadX 12919 262144 61440 61440 NT_STATUS_OK
ReadX 12919 323584 4096 4096 NT_STATUS_OK
ReadX 12919 327680 61440 61440 NT_STATUS_OK
ReadX 12919 389120 4096 4096 NT_STATUS_OK
ReadX 12919 393216 61440 61440 NT_STATUS_OK
ReadX 12919 454656 4096 4096 NT_STATUS_OK
ReadX 12919 458752 61440 61440 NT_STATUS_OK
ReadX 12919 520192 4096 4096 NT_STATUS_OK
ReadX 12919 524288 61440 61440 NT_STATUS_OK
ReadX 12919 585728 4096 4096 NT_STATUS_OK
ReadX 12919 589824 61440 61440 NT_STATUS_OK
ReadX 12919 651264 4096 4096 NT_STATUS_OK
ReadX 12919 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12920 NT_STATUS_OK
ReadX 12920 0 61440 61440 NT_STATUS_OK
ReadX 12920 61440 4096 4096 NT_STATUS_OK
ReadX 12920 65536 61440 61440 NT_STATUS_OK
ReadX 12920 126976 4096 4096 NT_STATUS_OK
ReadX 12920 131072 61440 61440 NT_STATUS_OK
ReadX 12920 192512 4096 4096 NT_STATUS_OK
ReadX 12920 196608 61440 61440 NT_STATUS_OK
ReadX 12920 258048 4096 4096 NT_STATUS_OK
ReadX 12920 262144 61440 61440 NT_STATUS_OK
ReadX 12920 323584 4096 4096 NT_STATUS_OK
ReadX 12920 327680 61440 61440 NT_STATUS_OK
ReadX 12920 389120 4096 4096 NT_STATUS_OK
ReadX 12920 393216 61440 61440 NT_STATUS_OK
ReadX 12920 454656 4096 4096 NT_STATUS_OK
ReadX 12920 458752 61440 61440 NT_STATUS_OK
ReadX 12920 520192 4096 4096 NT_STATUS_OK
ReadX 12920 524288 61440 61440 NT_STATUS_OK
ReadX 12920 585728 4096 4096 NT_STATUS_OK
ReadX 12920 589824 61440 61440 NT_STATUS_OK
ReadX 12920 651264 4096 4096 NT_STATUS_OK
ReadX 12920 655360 61440 61440 NT_STATUS_OK
ReadX 12920 716800 4096 4096 NT_STATUS_OK
ReadX 12920 720896 61440 61440 NT_STATUS_OK
ReadX 12920 782336 4096 4096 NT_STATUS_OK
ReadX 12920 786432 61440 61440 NT_STATUS_OK
ReadX 12920 847872 4096 4096 NT_STATUS_OK
ReadX 12920 851968 61440 61440 NT_STATUS_OK
ReadX 12920 913408 4096 4096 NT_STATUS_OK
ReadX 12920 917504 61440 61440 NT_STATUS_OK
ReadX 12920 978944 4096 4096 NT_STATUS_OK
ReadX 12920 983040 61440 61440 NT_STATUS_OK
ReadX 12920 1044480 4096 4096 NT_STATUS_OK
ReadX 12920 1048576 61440 61440 NT_STATUS_OK
ReadX 12920 1110016 4096 4096 NT_STATUS_OK
ReadX 12920 1114112 61440 61440 NT_STATUS_OK
ReadX 12920 1175552 4096 4096 NT_STATUS_OK
ReadX 12920 1179648 61440 61440 NT_STATUS_OK
ReadX 12920 1241088 4096 4096 NT_STATUS_OK
ReadX 12920 1245184 61440 61440 NT_STATUS_OK
ReadX 12920 1306624 4096 4096 NT_STATUS_OK
ReadX 12920 1310720 61440 61440 NT_STATUS_OK
ReadX 12920 1372160 4096 4096 NT_STATUS_OK
ReadX 12920 1376256 61440 61440 NT_STATUS_OK
ReadX 12920 1437696 4096 4096 NT_STATUS_OK
ReadX 12920 1441792 61440 61440 NT_STATUS_OK
ReadX 12920 1503232 4096 4096 NT_STATUS_OK
ReadX 12920 1507328 61440 61440 NT_STATUS_OK
ReadX 12920 1568768 4096 4096 NT_STATUS_OK
ReadX 12920 1572864 61440 61440 NT_STATUS_OK
ReadX 12920 1634304 4096 4096 NT_STATUS_OK
ReadX 12920 1638400 61440 61440 NT_STATUS_OK
ReadX 12920 1699840 4096 4096 NT_STATUS_OK
ReadX 12920 1703936 61440 61440 NT_STATUS_OK
ReadX 12920 1765376 4096 4096 NT_STATUS_OK
ReadX 12920 1769472 61440 61440 NT_STATUS_OK
ReadX 12920 1830912 4096 4096 NT_STATUS_OK
ReadX 12920 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12922 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12923 NT_STATUS_OK
ReadX 12923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12924 NT_STATUS_OK
ReadX 12924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12925 NT_STATUS_OK
ReadX 12925 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12927 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 1004 NT_STATUS_OK
WriteX 12927 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12927 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12928 NT_STATUS_OK
Close 12928 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12929 NT_STATUS_OK
WriteX 12929 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12929 258 NT_STATUS_OK
WriteX 12929 0 491 491 NT_STATUS_OK
Close 12929 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12930 NT_STATUS_OK
ReadX 12930 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12927 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12932 NT_STATUS_OK
Close 12932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12933 NT_STATUS_OK
WriteX 12933 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12933 258 NT_STATUS_OK
WriteX 12933 0 543 543 NT_STATUS_OK
Close 12933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12934 NT_STATUS_OK
ReadX 12934 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Close 12919 NT_STATUS_OK
Close 12920 NT_STATUS_OK
Close 12934 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Close 12923 NT_STATUS_OK
Close 12924 NT_STATUS_OK
Close 12925 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12937 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12938 NT_STATUS_OK
ReadX 12938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12939 NT_STATUS_OK
ReadX 12939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12940 NT_STATUS_OK
ReadX 12940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12946 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12947 NT_STATUS_OK
QUERY_FILE_INFORMATION 12947 1004 NT_STATUS_OK
WriteX 12947 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12947 258 NT_STATUS_OK
WriteX 12947 0 2048 2048 NT_STATUS_OK
Close 12947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12948 NT_STATUS_OK
ReadX 12948 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12948 0 4096 4096 NT_STATUS_OK
Flush 12948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12948 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12953 NT_STATUS_OK
WriteX 12953 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12953 258 NT_STATUS_OK
WriteX 12953 0 2048 2048 NT_STATUS_OK
Close 12953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12954 NT_STATUS_OK
ReadX 12954 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12959 NT_STATUS_OK
WriteX 12959 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12959 258 NT_STATUS_OK
WriteX 12959 0 2048 2048 NT_STATUS_OK
Close 12959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12960 NT_STATUS_OK
ReadX 12960 0 2048 2048 NT_STATUS_OK
ReadX 12938 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12954 0 4096 4096 NT_STATUS_OK
WriteX 12938 0 8192 8192 NT_STATUS_OK
WriteX 12939 0 4096 4096 NT_STATUS_OK
WriteX 12940 0 4096 4096 NT_STATUS_OK
ReadX 12954 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12963 NT_STATUS_OK
ReadX 12963 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12964 NT_STATUS_OK
QUERY_FILE_INFORMATION 12964 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Close 12939 NT_STATUS_OK
Close 12940 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Close 12954 NT_STATUS_OK
Close 12938 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12966 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12966 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12967 NT_STATUS_OK
ReadX 12967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12970 NT_STATUS_OK
ReadX 12970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12971 NT_STATUS_OK
ReadX 12971 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12972 NT_STATUS_OK
ReadX 12972 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12974 NT_STATUS_OK
ReadX 12974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12975 NT_STATUS_OK
ReadX 12975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12976 NT_STATUS_OK
ReadX 12976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12977 NT_STATUS_OK
ReadX 12977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12978 NT_STATUS_OK
ReadX 12978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12979 NT_STATUS_OK
ReadX 12979 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12984 1004 NT_STATUS_OK
WriteX 12984 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12984 258 NT_STATUS_OK
WriteX 12984 0 2048 2048 NT_STATUS_OK
Close 12984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12985 NT_STATUS_OK
ReadX 12985 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12992 NT_STATUS_OK
QUERY_FILE_INFORMATION 12992 1004 NT_STATUS_OK
WriteX 12992 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12992 258 NT_STATUS_OK
WriteX 12992 0 2048 2048 NT_STATUS_OK
Close 12992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12993 NT_STATUS_OK
ReadX 12993 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12985 0 4096 4096 NT_STATUS_OK
Flush 12985 NT_STATUS_OK
WriteX 12993 0 4096 4096 NT_STATUS_OK
Flush 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12985 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12987 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12994 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12995 NT_STATUS_OK
WriteX 12995 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 258 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12997 NT_STATUS_OK
Close 12997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12998 NT_STATUS_OK
WriteX 12998 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12998 258 NT_STATUS_OK
WriteX 12998 0 4096 4096 NT_STATUS_OK
Close 12998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12999 0 4096 4096 NT_STATUS_OK
Close 12996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12979 NT_STATUS_OK
Close 12973 NT_STATUS_OK
Close 12987 NT_STATUS_OK
Close 12976 NT_STATUS_OK
Close 12977 NT_STATUS_OK
Close 12978 NT_STATUS_OK
Close 12974 NT_STATUS_OK
Close 12967 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Close 12971 NT_STATUS_OK
Close 12972 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Close 12970 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13002 NT_STATUS_OK
Close 13002 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13004 NT_STATUS_OK
ReadX 13004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13006 NT_STATUS_OK
WriteX 13006 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13006 258 NT_STATUS_OK
WriteX 13006 0 2048 2048 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13009 NT_STATUS_OK
ReadX 13009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13011 NT_STATUS_OK
ReadX 13011 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13012 NT_STATUS_OK
ReadX 13012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13015 NT_STATUS_OK
ReadX 13015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13016 NT_STATUS_OK
ReadX 13016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13017 NT_STATUS_OK
ReadX 13017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13018 NT_STATUS_OK
ReadX 13018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13019 NT_STATUS_OK
ReadX 13019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13020 NT_STATUS_OK
ReadX 13020 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13021 NT_STATUS_OK
QUERY_FILE_INFORMATION 13021 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13021 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Close 13007 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Close 13014 NT_STATUS_OK
Close 13015 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Close 13018 NT_STATUS_OK
Close 13020 NT_STATUS_OK
Close 13008 NT_STATUS_OK
Close 13009 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Close 13010 NT_STATUS_OK
Close 13011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13023 NT_STATUS_OK
QUERY_FILE_INFORMATION 13023 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13026 NT_STATUS_OK
ReadX 13026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13027 NT_STATUS_OK
ReadX 13027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13032 NT_STATUS_OK
ReadX 13032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13033 NT_STATUS_OK
ReadX 13033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13034 NT_STATUS_OK
ReadX 13034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13035 NT_STATUS_OK
ReadX 13035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13042 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13043 NT_STATUS_OK
QUERY_FILE_INFORMATION 13043 1004 NT_STATUS_OK
WriteX 13043 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13043 258 NT_STATUS_OK
WriteX 13043 0 2048 2048 NT_STATUS_OK
Close 13043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13044 NT_STATUS_OK
ReadX 13044 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13046 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13050 NT_STATUS_OK
ReadX 13050 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13055 NT_STATUS_OK
QUERY_FILE_INFORMATION 13055 1004 NT_STATUS_OK
WriteX 13055 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13055 258 NT_STATUS_OK
WriteX 13055 0 2048 2048 NT_STATUS_OK
Close 13055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13057 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13062 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13062 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13063 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 1004 NT_STATUS_OK
WriteX 13063 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 258 NT_STATUS_OK
WriteX 13063 0 2048 2048 NT_STATUS_OK
Close 13063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13044 0 4096 4096 NT_STATUS_OK
Flush 13044 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
Flush 13056 NT_STATUS_OK
WriteX 13064 0 4096 4096 NT_STATUS_OK
Flush 13064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13044 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13056 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13064 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13046 4096 16384 16384 NT_STATUS_OK
ReadX 13026 4096 16384 16384 NT_STATUS_OK
ReadX 13058 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 2048 2048 NT_STATUS_OK
WriteX 13066 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13067 NT_STATUS_OK
QUERY_FILE_INFORMATION 13067 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13066 NT_STATUS_OK
Close 13050 NT_STATUS_OK
Close 13038 NT_STATUS_OK
Close 13030 NT_STATUS_OK
Close 13046 NT_STATUS_OK
Close 13047 NT_STATUS_OK
Close 13048 NT_STATUS_OK
Close 13049 NT_STATUS_OK
Close 13037 NT_STATUS_OK
Close 13058 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Close 13035 NT_STATUS_OK
Close 13036 NT_STATUS_OK
Close 13033 NT_STATUS_OK
Close 13034 NT_STATUS_OK
Close 13026 NT_STATUS_OK
Close 13027 NT_STATUS_OK
Close 13028 NT_STATUS_OK
Close 13029 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13069 NT_STATUS_OK
QUERY_FILE_INFORMATION 13069 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13071 NT_STATUS_OK
QUERY_FILE_INFORMATION 13071 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13074 4096 16384 16384 NT_STATUS_OK
WriteX 13074 0 4096 4096 NT_STATUS_OK
WriteX 13075 0 4096 4096 NT_STATUS_OK
WriteX 13076 0 4096 4096 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13079 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13080 NT_STATUS_OK
ReadX 13080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13082 NT_STATUS_OK
ReadX 13082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13087 NT_STATUS_OK
ReadX 13087 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13088 NT_STATUS_OK
ReadX 13088 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13089 NT_STATUS_OK
ReadX 13089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13090 NT_STATUS_OK
ReadX 13090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13091 NT_STATUS_OK
ReadX 13091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13092 NT_STATUS_OK
ReadX 13092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13093 NT_STATUS_OK
ReadX 13093 0 8192 8192 NT_STATUS_OK
ReadX 13080 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13094 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13094 0 4096 4096 NT_STATUS_OK
ReadX 13094 4096 4096 4096 NT_STATUS_OK
ReadX 13094 8192 4096 4096 NT_STATUS_OK
WriteX 13080 0 4096 4096 NT_STATUS_OK
WriteX 13081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13095 0 4096 4096 NT_STATUS_OK
ReadX 13095 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13074 0 4096 4096 NT_STATUS_OK
WriteX 13075 0 4096 4096 NT_STATUS_OK
WriteX 13076 0 4096 4096 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13099 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13100 NT_STATUS_OK
QUERY_FILE_INFORMATION 13100 1004 NT_STATUS_OK
WriteX 13100 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13100 258 NT_STATUS_OK
WriteX 13100 0 2048 2048 NT_STATUS_OK
Close 13100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13101 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13102 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 0 4096 4096 NT_STATUS_OK
ReadX 13103 4096 4096 4096 NT_STATUS_OK
WriteX 13103 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13101 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13105 NT_STATUS_OK
ReadX 13105 0 4096 4096 NT_STATUS_OK
ReadX 13105 4096 4096 4096 NT_STATUS_OK
WriteX 13105 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13106 NT_STATUS_OK
QUERY_FILE_INFORMATION 13106 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13093 NT_STATUS_OK
Close 13078 NT_STATUS_OK
Close 13074 NT_STATUS_OK
Close 13075 NT_STATUS_OK
Close 13076 NT_STATUS_OK
Close 13077 NT_STATUS_OK
Close 13086 NT_STATUS_OK
Close 13091 NT_STATUS_OK
Close 13087 NT_STATUS_OK
Close 13088 NT_STATUS_OK
Close 13089 NT_STATUS_OK
Close 13090 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Close 13080 NT_STATUS_OK
Close 13081 NT_STATUS_OK
Close 13084 NT_STATUS_OK
Close 13085 NT_STATUS_OK
Close 13082 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Close 13105 NT_STATUS_OK
Close 13094 NT_STATUS_OK
Close 13095 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13108 0 4096 4096 NT_STATUS_OK
ReadX 13108 4096 4096 4096 NT_STATUS_OK
ReadX 13108 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13111 NT_STATUS_OK
ReadX 13111 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13112 NT_STATUS_OK
ReadX 13112 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13115 NT_STATUS_OK
ReadX 13115 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13116 NT_STATUS_OK
ReadX 13116 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13117 NT_STATUS_OK
ReadX 13117 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13118 NT_STATUS_OK
ReadX 13118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13119 NT_STATUS_OK
ReadX 13119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13120 NT_STATUS_OK
ReadX 13120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 4096 4096 NT_STATUS_OK
ReadX 13109 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13126 NT_STATUS_OK
QUERY_FILE_INFORMATION 13126 1004 NT_STATUS_OK
WriteX 13126 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13126 258 NT_STATUS_OK
WriteX 13126 0 2048 2048 NT_STATUS_OK
Close 13126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13127 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13131 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13132 NT_STATUS_OK
QUERY_FILE_INFORMATION 13132 1004 NT_STATUS_OK
WriteX 13132 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13132 258 NT_STATUS_OK
WriteX 13132 0 2048 2048 NT_STATUS_OK
Close 13132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13133 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13116 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13134 NT_STATUS_OK
QUERY_FILE_INFORMATION 13134 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13120 NT_STATUS_OK
Close 13115 NT_STATUS_OK
Close 13121 NT_STATUS_OK
Close 13109 NT_STATUS_OK
Close 13110 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Close 13111 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Close 13116 NT_STATUS_OK
Close 13117 NT_STATUS_OK
Close 13118 NT_STATUS_OK
Close 13119 NT_STATUS_OK
Close 13108 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13133 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13136 NT_STATUS_OK
QUERY_FILE_INFORMATION 13136 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13138 NT_STATUS_OK
ReadX 13138 61440 4096 4096 NT_STATUS_OK
ReadX 13138 126976 4096 4096 NT_STATUS_OK
WriteX 13138 0 65536 65536 NT_STATUS_OK
WriteX 13138 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13139 NT_STATUS_OK
ReadX 13139 61440 4096 4096 NT_STATUS_OK
ReadX 13139 126976 4096 4096 NT_STATUS_OK
ReadX 13139 192512 4096 4096 NT_STATUS_OK
ReadX 13139 258048 4096 4096 NT_STATUS_OK
WriteX 13139 0 65536 65536 NT_STATUS_OK
WriteX 13139 65536 65536 65536 NT_STATUS_OK
WriteX 13139 131072 65536 65536 NT_STATUS_OK
WriteX 13139 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 61440 4096 4096 NT_STATUS_OK
ReadX 13140 126976 4096 4096 NT_STATUS_OK
ReadX 13140 192512 4096 4096 NT_STATUS_OK
ReadX 13140 258048 4096 4096 NT_STATUS_OK
ReadX 13140 323584 4096 4096 NT_STATUS_OK
ReadX 13140 389120 4096 4096 NT_STATUS_OK
ReadX 13140 454656 4096 4096 NT_STATUS_OK
ReadX 13140 520192 4096 4096 NT_STATUS_OK
WriteX 13140 0 65536 65536 NT_STATUS_OK
WriteX 13140 65536 65536 65536 NT_STATUS_OK
WriteX 13140 131072 65536 65536 NT_STATUS_OK
WriteX 13140 196608 65536 65536 NT_STATUS_OK
WriteX 13140 262144 65536 65536 NT_STATUS_OK
WriteX 13140 327680 65536 65536 NT_STATUS_OK
WriteX 13140 393216 65536 65536 NT_STATUS_OK
WriteX 13140 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13141 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13141 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13141 8192 4096 4096 NT_STATUS_OK
ReadX 13141 12288 4096 4096 NT_STATUS_OK
ReadX 13141 16384 4096 4096 NT_STATUS_OK
ReadX 13141 20480 4096 4096 NT_STATUS_OK
ReadX 13141 24576 4096 4096 NT_STATUS_OK
ReadX 13141 28672 4096 4096 NT_STATUS_OK
ReadX 13141 32768 4096 4096 NT_STATUS_OK
ReadX 13141 36864 4096 4096 NT_STATUS_OK
ReadX 13141 40960 4096 4096 NT_STATUS_OK
ReadX 13141 45056 4096 4096 NT_STATUS_OK
ReadX 13141 49152 4096 4096 NT_STATUS_OK
ReadX 13141 53248 4096 4096 NT_STATUS_OK
ReadX 13141 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13141 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13142 NT_STATUS_OK
Close 13142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13138 NT_STATUS_OK
Close 13139 NT_STATUS_OK
Close 13140 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13144 NT_STATUS_OK
WriteX 13144 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13144 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13144 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13144 1004 NT_STATUS_OK
WriteX 13144 0 57088 57088 NT_STATUS_OK
WriteX 13144 0 4096 4096 NT_STATUS_OK
Flush 13144 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13145 NT_STATUS_OK
SET_FILE_INFORMATION 13145 1004 NT_STATUS_OK
Close 13145 NT_STATUS_OK
SET_FILE_INFORMATION 13144 1004 NT_STATUS_OK
WriteX 13144 0 4096 4096 NT_STATUS_OK
Close 13144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13146 NT_STATUS_OK
Close 13146 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13148 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13149 NT_STATUS_OK
WriteX 13149 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13149 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13149 1004 NT_STATUS_OK
WriteX 13149 0 51456 51456 NT_STATUS_OK
WriteX 13149 0 4096 4096 NT_STATUS_OK
Flush 13149 NT_STATUS_OK
SET_FILE_INFORMATION 13149 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13149 1004 NT_STATUS_OK
WriteX 13149 0 4096 4096 NT_STATUS_OK
Close 13149 NT_STATUS_OK
Close 13148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13153 NT_STATUS_OK
ReadX 13153 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13153 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13158 NT_STATUS_OK
WriteX 13158 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13158 258 NT_STATUS_OK
WriteX 13158 0 53077 53077 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13159 NT_STATUS_OK
WriteX 13159 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13159 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13159 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13159 1004 NT_STATUS_OK
WriteX 13159 0 65536 65536 NT_STATUS_OK
WriteX 13159 65536 1856 1856 NT_STATUS_OK
WriteX 13159 0 4096 4096 NT_STATUS_OK
Flush 13159 NT_STATUS_OK
SET_FILE_INFORMATION 13159 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13159 1004 NT_STATUS_OK
WriteX 13159 0 4096 4096 NT_STATUS_OK
Close 13159 NT_STATUS_OK
Close 13153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13168 NT_STATUS_OK
WriteX 13168 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 258 NT_STATUS_OK
WriteX 13168 0 7983 7983 NT_STATUS_OK
Close 13168 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13170 NT_STATUS_OK
Close 13170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13173 NT_STATUS_OK
WriteX 13173 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13173 258 NT_STATUS_OK
WriteX 13173 0 65536 65536 NT_STATUS_OK
WriteX 13173 65536 65536 65536 NT_STATUS_OK
WriteX 13173 131072 65536 65536 NT_STATUS_OK
WriteX 13173 196608 65536 65536 NT_STATUS_OK
WriteX 13173 262144 65536 65536 NT_STATUS_OK
WriteX 13173 327680 65536 65536 NT_STATUS_OK
WriteX 13173 393216 65536 65536 NT_STATUS_OK
WriteX 13173 458752 46731 46731 NT_STATUS_OK
Close 13173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13174 NT_STATUS_OK
WriteX 13174 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13174 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13163 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13174 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13174 1004 NT_STATUS_OK
WriteX 13174 0 65536 65536 NT_STATUS_OK
WriteX 13174 65536 22848 22848 NT_STATUS_OK
WriteX 13174 0 4096 4096 NT_STATUS_OK
Flush 13174 NT_STATUS_OK
SET_FILE_INFORMATION 13174 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13174 1004 NT_STATUS_OK
WriteX 13174 0 4096 4096 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Close 13163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13176 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13178 NT_STATUS_OK
ReadX 13178 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13178 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13179 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13179 1004 NT_STATUS_OK
ReadX 13179 8192 4096 4096 NT_STATUS_OK
ReadX 13179 12288 4096 4096 NT_STATUS_OK
ReadX 13179 16384 4096 4096 NT_STATUS_OK
ReadX 13179 20480 4096 4096 NT_STATUS_OK
ReadX 13179 24576 4096 4096 NT_STATUS_OK
ReadX 13179 28672 4096 4096 NT_STATUS_OK
ReadX 13179 32768 4096 4096 NT_STATUS_OK
ReadX 13179 36864 4096 4096 NT_STATUS_OK
ReadX 13179 40960 4096 4096 NT_STATUS_OK
ReadX 13179 45056 4096 4096 NT_STATUS_OK
ReadX 13179 49152 4096 4096 NT_STATUS_OK
ReadX 13179 53248 4096 4096 NT_STATUS_OK
ReadX 13179 57344 4096 4096 NT_STATUS_OK
ReadX 13179 61440 4096 4096 NT_STATUS_OK
ReadX 13179 65536 4096 4096 NT_STATUS_OK
ReadX 13179 69632 4096 4096 NT_STATUS_OK
ReadX 13179 73728 4096 4096 NT_STATUS_OK
ReadX 13179 77824 4096 4096 NT_STATUS_OK
ReadX 13179 81920 4096 4096 NT_STATUS_OK
ReadX 13179 86016 4096 4096 NT_STATUS_OK
ReadX 13179 90112 4096 4096 NT_STATUS_OK
ReadX 13179 94208 4096 4096 NT_STATUS_OK
ReadX 13179 98304 4096 4096 NT_STATUS_OK
ReadX 13179 102400 4096 4096 NT_STATUS_OK
ReadX 13179 106496 4096 4096 NT_STATUS_OK
ReadX 13179 110592 4096 4096 NT_STATUS_OK
ReadX 13179 114688 4096 4096 NT_STATUS_OK
ReadX 13179 118784 4096 4096 NT_STATUS_OK
ReadX 13179 122880 4096 4096 NT_STATUS_OK
ReadX 13179 126976 4096 4096 NT_STATUS_OK
ReadX 13179 131072 4096 4096 NT_STATUS_OK
ReadX 13179 135168 4096 4096 NT_STATUS_OK
ReadX 13179 139264 4096 4096 NT_STATUS_OK
ReadX 13179 143360 4096 4096 NT_STATUS_OK
ReadX 13179 147456 4096 4096 NT_STATUS_OK
ReadX 13179 151552 4096 4096 NT_STATUS_OK
ReadX 13179 155648 4096 4096 NT_STATUS_OK
ReadX 13179 159744 4096 4096 NT_STATUS_OK
ReadX 13179 163840 4096 4096 NT_STATUS_OK
ReadX 13179 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13179 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13180 NT_STATUS_OK
Close 13180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13182 NT_STATUS_OK
WriteX 13182 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13182 258 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13183 NT_STATUS_OK
SET_FILE_INFORMATION 13183 1004 NT_STATUS_OK
Close 13183 NT_STATUS_OK
WriteX 13182 0 42388 42388 NT_STATUS_OK
Close 13182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13184 NT_STATUS_OK
Close 13184 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13186 NT_STATUS_OK
ReadX 13186 0 4096 4096 NT_STATUS_OK
ReadX 13186 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13187 NT_STATUS_OK
WriteX 13187 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 258 NT_STATUS_OK
SET_FILE_INFORMATION 13187 1004 NT_STATUS_OK
WriteX 13187 0 42652 42652 NT_STATUS_OK
Close 13187 NT_STATUS_OK
Close 13186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13189 NT_STATUS_OK
Close 13189 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13191 NT_STATUS_OK
ReadX 13191 0 4096 4096 NT_STATUS_OK
ReadX 13191 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13196 NT_STATUS_OK
WriteX 13196 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13196 258 NT_STATUS_OK
WriteX 13196 0 65536 65536 NT_STATUS_OK
WriteX 13196 65536 49 49 NT_STATUS_OK
Close 13196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 61440 61440 NT_STATUS_OK
ReadX 13197 61440 4096 4096 NT_STATUS_OK
ReadX 13197 65536 61440 61440 NT_STATUS_OK
ReadX 13197 126976 4096 4096 NT_STATUS_OK
ReadX 13197 131072 61440 61440 NT_STATUS_OK
ReadX 13197 192512 4096 4096 NT_STATUS_OK
ReadX 13197 196608 61440 61440 NT_STATUS_OK
ReadX 13197 258048 4096 4096 NT_STATUS_OK
ReadX 13197 262144 61440 61440 NT_STATUS_OK
ReadX 13197 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13198 NT_STATUS_OK
ReadX 13198 0 61440 61440 NT_STATUS_OK
ReadX 13198 61440 4096 4096 NT_STATUS_OK
ReadX 13198 65536 61440 61440 NT_STATUS_OK
ReadX 13198 126976 4096 4096 NT_STATUS_OK
ReadX 13198 131072 61440 61440 NT_STATUS_OK
ReadX 13198 192512 4096 4096 NT_STATUS_OK
ReadX 13198 196608 61440 61440 NT_STATUS_OK
ReadX 13198 258048 4096 4096 NT_STATUS_OK
ReadX 13198 262144 61440 61440 NT_STATUS_OK
ReadX 13198 323584 4096 4096 NT_STATUS_OK
ReadX 13198 327680 61440 61440 NT_STATUS_OK
ReadX 13198 389120 4096 4096 NT_STATUS_OK
ReadX 13198 393216 61440 61440 NT_STATUS_OK
ReadX 13198 454656 4096 4096 NT_STATUS_OK
ReadX 13198 458752 61440 61440 NT_STATUS_OK
ReadX 13198 520192 4096 4096 NT_STATUS_OK
ReadX 13198 524288 61440 61440 NT_STATUS_OK
ReadX 13198 585728 4096 4096 NT_STATUS_OK
ReadX 13198 589824 61440 61440 NT_STATUS_OK
ReadX 13198 651264 4096 4096 NT_STATUS_OK
ReadX 13198 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13199 NT_STATUS_OK
ReadX 13199 0 61440 61440 NT_STATUS_OK
ReadX 13199 61440 4096 4096 NT_STATUS_OK
ReadX 13199 65536 61440 61440 NT_STATUS_OK
ReadX 13199 126976 4096 4096 NT_STATUS_OK
ReadX 13199 131072 61440 61440 NT_STATUS_OK
ReadX 13199 192512 4096 4096 NT_STATUS_OK
ReadX 13199 196608 61440 61440 NT_STATUS_OK
ReadX 13199 258048 4096 4096 NT_STATUS_OK
ReadX 13199 262144 61440 61440 NT_STATUS_OK
ReadX 13199 323584 4096 4096 NT_STATUS_OK
ReadX 13199 327680 61440 61440 NT_STATUS_OK
ReadX 13199 389120 4096 4096 NT_STATUS_OK
ReadX 13199 393216 61440 61440 NT_STATUS_OK
ReadX 13199 454656 4096 4096 NT_STATUS_OK
ReadX 13199 458752 61440 61440 NT_STATUS_OK
ReadX 13199 520192 4096 4096 NT_STATUS_OK
ReadX 13199 524288 61440 61440 NT_STATUS_OK
ReadX 13199 585728 4096 4096 NT_STATUS_OK
ReadX 13199 589824 61440 61440 NT_STATUS_OK
ReadX 13199 651264 4096 4096 NT_STATUS_OK
ReadX 13199 655360 61440 61440 NT_STATUS_OK
ReadX 13199 716800 4096 4096 NT_STATUS_OK
ReadX 13199 720896 61440 61440 NT_STATUS_OK
ReadX 13199 782336 4096 4096 NT_STATUS_OK
ReadX 13199 786432 61440 61440 NT_STATUS_OK
ReadX 13199 847872 4096 4096 NT_STATUS_OK
ReadX 13199 851968 61440 61440 NT_STATUS_OK
ReadX 13199 913408 4096 4096 NT_STATUS_OK
ReadX 13199 917504 61440 61440 NT_STATUS_OK
ReadX 13199 978944 4096 4096 NT_STATUS_OK
ReadX 13199 983040 61440 61440 NT_STATUS_OK
ReadX 13199 1044480 4096 4096 NT_STATUS_OK
ReadX 13199 1048576 61440 61440 NT_STATUS_OK
ReadX 13199 1110016 4096 4096 NT_STATUS_OK
ReadX 13199 1114112 61440 61440 NT_STATUS_OK
ReadX 13199 1175552 4096 4096 NT_STATUS_OK
ReadX 13199 1179648 61440 61440 NT_STATUS_OK
ReadX 13199 1241088 4096 4096 NT_STATUS_OK
ReadX 13199 1245184 61440 61440 NT_STATUS_OK
ReadX 13199 1306624 4096 4096 NT_STATUS_OK
ReadX 13199 1310720 61440 61440 NT_STATUS_OK
ReadX 13199 1372160 4096 4096 NT_STATUS_OK
ReadX 13199 1376256 61440 61440 NT_STATUS_OK
ReadX 13199 1437696 4096 4096 NT_STATUS_OK
ReadX 13199 1441792 61440 61440 NT_STATUS_OK
ReadX 13199 1503232 4096 4096 NT_STATUS_OK
ReadX 13199 1507328 61440 61440 NT_STATUS_OK
ReadX 13199 1568768 4096 4096 NT_STATUS_OK
ReadX 13199 1572864 61440 61440 NT_STATUS_OK
ReadX 13199 1634304 4096 4096 NT_STATUS_OK
ReadX 13199 1638400 61440 61440 NT_STATUS_OK
ReadX 13199 1699840 4096 4096 NT_STATUS_OK
ReadX 13199 1703936 61440 61440 NT_STATUS_OK
ReadX 13199 1765376 4096 4096 NT_STATUS_OK
ReadX 13199 1769472 61440 61440 NT_STATUS_OK
ReadX 13199 1830912 4096 4096 NT_STATUS_OK
ReadX 13199 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13201 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 1005 NT_STATUS_OK
ReadX 13201 2156 24 24 NT_STATUS_OK
ReadX 13201 2139 276 276 NT_STATUS_OK
ReadX 13201 2136 14 14 NT_STATUS_OK
ReadX 13201 2136 7 7 NT_STATUS_OK
ReadX 13201 2138 12 12 NT_STATUS_OK
ReadX 13201 2137 8 8 NT_STATUS_OK
ReadX 13201 2135 15 15 NT_STATUS_OK
ReadX 13201 0 16 16 NT_STATUS_OK
ReadX 13201 16 2048 2048 NT_STATUS_OK
ReadX 13201 2064 2048 2048 NT_STATUS_OK
ReadX 13201 257 2048 2048 NT_STATUS_OK
ReadX 13201 385 2048 2048 NT_STATUS_OK
ReadX 13201 513 2048 2048 NT_STATUS_OK
ReadX 13201 641 2048 2048 NT_STATUS_OK
ReadX 13201 769 2048 2048 NT_STATUS_OK
ReadX 13201 897 2048 2048 NT_STATUS_OK
ReadX 13201 1025 2048 2048 NT_STATUS_OK
ReadX 13201 1153 2048 2048 NT_STATUS_OK
ReadX 13201 1281 2048 2048 NT_STATUS_OK
ReadX 13201 1409 2048 2048 NT_STATUS_OK
ReadX 13201 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13203 NT_STATUS_OK
Close 13203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13197 NT_STATUS_OK
Close 13198 NT_STATUS_OK
Close 13199 NT_STATUS_OK
Close 13191 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13206 NT_STATUS_OK
WriteX 13206 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13206 258 NT_STATUS_OK
WriteX 13206 0 10575 10575 NT_STATUS_OK
Flush 13206 NT_STATUS_OK
Close 13206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 4096 4096 NT_STATUS_OK
Close 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13211 NT_STATUS_OK
LockX 13211 2147483538 1 NT_STATUS_OK
UnlockX 13211 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13211 1005 NT_STATUS_OK
ReadX 13211 0 512 512 NT_STATUS_OK
ReadX 13211 512 512 512 NT_STATUS_OK
ReadX 13211 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13211 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13211 1004 NT_STATUS_OK
Close 13211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13212 NT_STATUS_OK
QUERY_FILE_INFORMATION 13212 1005 NT_STATUS_OK
ReadX 13212 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13213 NT_STATUS_OK
LockX 13213 2147483538 1 NT_STATUS_OK
UnlockX 13213 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13213 1005 NT_STATUS_OK
ReadX 13213 0 512 512 NT_STATUS_OK
ReadX 13213 512 512 512 NT_STATUS_OK
ReadX 13213 1024 512 512 NT_STATUS_OK
ReadX 13213 288 20 20 NT_STATUS_OK
ReadX 13213 308 2084 2084 NT_STATUS_OK
ReadX 13213 388 2084 2084 NT_STATUS_OK
ReadX 13213 388 2084 2084 NT_STATUS_OK
ReadX 13200 2157 1386 1386 NT_STATUS_OK
ReadX 13213 2472 399 399 NT_STATUS_OK
ReadX 13213 3072 1536 1536 NT_STATUS_OK
ReadX 13213 544 149 149 NT_STATUS_OK
ReadX 13213 693 485 485 NT_STATUS_OK
Close 13213 NT_STATUS_OK
ReadX 13200 2157 4096 4096 NT_STATUS_OK
ReadX 13200 6253 4096 4096 NT_STATUS_OK
ReadX 13200 10349 4096 4096 NT_STATUS_OK
ReadX 13200 14445 4096 4096 NT_STATUS_OK
ReadX 13200 18541 4096 4096 NT_STATUS_OK
ReadX 13200 22637 256 256 NT_STATUS_OK
ReadX 13200 22893 4096 4096 NT_STATUS_OK
ReadX 13200 26989 4096 4096 NT_STATUS_OK
ReadX 13200 31085 4096 4096 NT_STATUS_OK
ReadX 13200 35181 4096 4096 NT_STATUS_OK
ReadX 13200 39277 4096 4096 NT_STATUS_OK
ReadX 13200 43373 4096 4096 NT_STATUS_OK
ReadX 13200 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13200 2157 1024 1024 NT_STATUS_OK
ReadX 13200 1667 4688 4688 NT_STATUS_OK
ReadX 13200 6355 3516 3516 NT_STATUS_OK
ReadX 13200 9871 16384 16384 NT_STATUS_OK
ReadX 13200 26255 3771 3771 NT_STATUS_OK
ReadX 13200 30026 2048 2048 NT_STATUS_OK
ReadX 13200 32074 1024 1024 NT_STATUS_OK
ReadX 13200 33098 6652 6652 NT_STATUS_OK
ReadX 13200 39750 16384 16384 NT_STATUS_OK
ReadX 13200 56134 10496 10496 NT_STATUS_OK
ReadX 13200 66630 1784 1784 NT_STATUS_OK
ReadX 13200 68414 90 90 NT_STATUS_OK
ReadX 13200 68504 273 273 NT_STATUS_OK
ReadX 13200 68777 1600 1600 NT_STATUS_OK
ReadX 13200 70377 640 640 NT_STATUS_OK
ReadX 13200 71017 1280 1280 NT_STATUS_OK
ReadX 13200 72297 8464 8464 NT_STATUS_OK
ReadX 13200 80761 158 158 NT_STATUS_OK
ReadX 13200 80919 912 912 NT_STATUS_OK
ReadX 13200 81831 1980 1980 NT_STATUS_OK
ReadX 13200 83811 2256 2256 NT_STATUS_OK
ReadX 13200 86067 400 400 NT_STATUS_OK
ReadX 13200 86467 252 252 NT_STATUS_OK
ReadX 13200 86719 42 42 NT_STATUS_OK
ReadX 13200 86761 725 725 NT_STATUS_OK
ReadX 13200 2009 512 512 NT_STATUS_OK
ReadX 13200 3895 9 9 NT_STATUS_OK
ReadX 13200 3781 46 46 NT_STATUS_OK
ReadX 13200 4059 92 92 NT_STATUS_OK
ReadX 13200 3781 92 92 NT_STATUS_OK
ReadX 13200 3986 184 184 NT_STATUS_OK
ReadX 13200 3987 16384 16384 NT_STATUS_OK
ReadX 13200 3902 16384 16384 NT_STATUS_OK
ReadX 13200 3781 10240 10240 NT_STATUS_OK
ReadX 13200 3821 16384 16384 NT_STATUS_OK
ReadX 13200 3891 935 935 NT_STATUS_OK
ReadX 13200 4060 10240 10240 NT_STATUS_OK
ReadX 13200 4059 184 184 NT_STATUS_OK
ReadX 13200 256 184 184 NT_STATUS_OK
ReadX 13200 256 1026 1026 NT_STATUS_OK
ReadX 13200 3901 326 326 NT_STATUS_OK
ReadX 13200 3899 652 652 NT_STATUS_OK
ReadX 13200 256 2 2 NT_STATUS_OK
ReadX 13200 258 4948 4948 NT_STATUS_OK
Close 13200 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13215 NT_STATUS_OK
Close 13215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13218 NT_STATUS_OK
WriteX 13218 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13218 258 NT_STATUS_OK
WriteX 13218 0 65536 65536 NT_STATUS_OK
WriteX 13218 65536 65536 65536 NT_STATUS_OK
WriteX 13218 131072 65536 65536 NT_STATUS_OK
WriteX 13218 196608 65536 65536 NT_STATUS_OK
WriteX 13218 262144 65536 65536 NT_STATUS_OK
WriteX 13218 327680 65536 65536 NT_STATUS_OK
WriteX 13218 393216 65536 65536 NT_STATUS_OK
WriteX 13218 458752 65536 65536 NT_STATUS_OK
WriteX 13218 524288 65536 65536 NT_STATUS_OK
WriteX 13218 589824 35257 35257 NT_STATUS_OK
Close 13218 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13220 NT_STATUS_OK
Close 13220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13223 NT_STATUS_OK
WriteX 13223 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13223 258 NT_STATUS_OK
WriteX 13223 0 65536 65536 NT_STATUS_OK
WriteX 13223 65536 65536 65536 NT_STATUS_OK
WriteX 13223 131072 65536 65536 NT_STATUS_OK
WriteX 13223 196608 65536 65536 NT_STATUS_OK
WriteX 13223 262144 65536 65536 NT_STATUS_OK
WriteX 13223 327680 65536 65536 NT_STATUS_OK
WriteX 13223 393216 65536 65536 NT_STATUS_OK
WriteX 13223 458752 65536 65536 NT_STATUS_OK
WriteX 13223 524288 65536 65536 NT_STATUS_OK
WriteX 13223 589824 57598 57598 NT_STATUS_OK
Close 13223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13225 NT_STATUS_OK
WriteX 13225 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 258 NT_STATUS_OK
WriteX 13225 0 12543 12543 NT_STATUS_OK
Flush 13225 NT_STATUS_OK
Close 13225 NT_STATUS_OK
Close 13209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13227 NT_STATUS_OK
Close 13227 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13230 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13231 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 1005 NT_STATUS_OK
ReadX 13231 1938 24 24 NT_STATUS_OK
ReadX 13231 1920 276 276 NT_STATUS_OK
ReadX 13231 1918 14 14 NT_STATUS_OK
ReadX 13231 1918 7 7 NT_STATUS_OK
ReadX 13231 1919 12 12 NT_STATUS_OK
ReadX 13231 1919 8 8 NT_STATUS_OK
ReadX 13231 1917 15 15 NT_STATUS_OK
ReadX 13231 0 16 16 NT_STATUS_OK
ReadX 13231 16 2048 2048 NT_STATUS_OK
ReadX 13231 2064 2048 2048 NT_STATUS_OK
ReadX 13231 257 2048 2048 NT_STATUS_OK
ReadX 13231 385 2048 2048 NT_STATUS_OK
ReadX 13231 513 2048 2048 NT_STATUS_OK
ReadX 13231 641 2048 2048 NT_STATUS_OK
ReadX 13231 769 2048 2048 NT_STATUS_OK
ReadX 13231 897 2048 2048 NT_STATUS_OK
ReadX 13231 1025 2048 2048 NT_STATUS_OK
ReadX 13231 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13233 NT_STATUS_OK
Close 13233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13236 NT_STATUS_OK
WriteX 13236 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13236 258 NT_STATUS_OK
WriteX 13236 0 11588 11588 NT_STATUS_OK
Flush 13236 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13237 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
Close 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13241 NT_STATUS_OK
WriteX 13241 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13241 258 NT_STATUS_OK
WriteX 13241 0 11615 11615 NT_STATUS_OK
Flush 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13243 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13245 NT_STATUS_OK
ReadX 13245 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13247 NT_STATUS_OK
Close 13247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13250 NT_STATUS_OK
WriteX 13250 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13250 258 NT_STATUS_OK
WriteX 13250 0 65536 65536 NT_STATUS_OK
WriteX 13250 65536 16050 16050 NT_STATUS_OK
Close 13250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13230 1939 64 64 NT_STATUS_OK
ReadX 13230 128 248 248 NT_STATUS_OK
ReadX 13230 128 568 568 NT_STATUS_OK
ReadX 13230 3872 1536 1536 NT_STATUS_OK
ReadX 13230 3456 2560 2560 NT_STATUS_OK
ReadX 13230 3136 512 512 NT_STATUS_OK
ReadX 13230 2880 4096 4096 NT_STATUS_OK
ReadX 13230 3264 3072 3072 NT_STATUS_OK
ReadX 13230 320 4096 4096 NT_STATUS_OK
ReadX 13230 1024 4096 4096 NT_STATUS_OK
ReadX 13230 3616 4096 4096 NT_STATUS_OK
ReadX 13230 1939 64 64 NT_STATUS_OK
ReadX 13230 128 248 248 NT_STATUS_OK
ReadX 13230 128 608 608 NT_STATUS_OK
ReadX 13230 2858 1024 1024 NT_STATUS_OK
ReadX 13230 2810 4096 4096 NT_STATUS_OK
ReadX 13230 2826 4096 4096 NT_STATUS_OK
ReadX 13230 2580 2048 2048 NT_STATUS_OK
ReadX 13230 2800 2560 2560 NT_STATUS_OK
ReadX 13230 2100 4096 4096 NT_STATUS_OK
ReadX 13230 2084 4096 4096 NT_STATUS_OK
ReadX 13230 868 4096 4096 NT_STATUS_OK
ReadX 13230 2324 4096 4096 NT_STATUS_OK
ReadX 13230 884 4096 4096 NT_STATUS_OK
ReadX 13230 2604 1024 1024 NT_STATUS_OK
ReadX 13230 580 4096 4096 NT_STATUS_OK
ReadX 13230 596 4096 4096 NT_STATUS_OK
ReadX 13230 2752 4096 4096 NT_STATUS_OK
ReadX 13230 2842 1024 1024 NT_STATUS_OK
ReadX 13230 660 4096 4096 NT_STATUS_OK
ReadX 13230 2720 4096 4096 NT_STATUS_OK
ReadX 13230 2736 4096 4096 NT_STATUS_OK
ReadX 13230 628 4096 4096 NT_STATUS_OK
ReadX 13230 2704 4096 4096 NT_STATUS_OK
ReadX 13230 1556 4096 4096 NT_STATUS_OK
ReadX 13230 576 4096 4096 NT_STATUS_OK
ReadX 13230 3168 1536 1536 NT_STATUS_OK
ReadX 13230 832 4096 4096 NT_STATUS_OK
ReadX 13230 1088 4096 4096 NT_STATUS_OK
ReadX 13230 1344 4096 4096 NT_STATUS_OK
ReadX 13230 1600 4096 4096 NT_STATUS_OK
ReadX 13230 1856 4096 4096 NT_STATUS_OK
ReadX 13230 2112 4096 4096 NT_STATUS_OK
ReadX 13230 1892 4096 4096 NT_STATUS_OK
ReadX 13230 820 4096 4096 NT_STATUS_OK
ReadX 13230 788 4096 4096 NT_STATUS_OK
ReadX 13230 1604 4096 4096 NT_STATUS_OK
ReadX 13230 3648 4096 4096 NT_STATUS_OK
ReadX 13230 2608 4096 4096 NT_STATUS_OK
ReadX 13230 548 4096 4096 NT_STATUS_OK
ReadX 13230 740 4096 4096 NT_STATUS_OK
ReadX 13230 1344 4096 4096 NT_STATUS_OK
ReadX 13230 3392 4096 4096 NT_STATUS_OK
ReadX 13230 3904 4096 4096 NT_STATUS_OK
ReadX 13230 644 4096 4096 NT_STATUS_OK
ReadX 13230 676 4096 4096 NT_STATUS_OK
ReadX 13230 2688 4096 4096 NT_STATUS_OK
ReadX 13230 320 4096 4096 NT_STATUS_OK
ReadX 13230 900 4096 4096 NT_STATUS_OK
ReadX 13230 1908 4096 4096 NT_STATUS_OK
ReadX 13230 852 4096 4096 NT_STATUS_OK
ReadX 13230 724 4096 4096 NT_STATUS_OK
ReadX 13230 2292 4096 4096 NT_STATUS_OK
ReadX 13230 612 4096 4096 NT_STATUS_OK
ReadX 13230 388 4096 4096 NT_STATUS_OK
ReadX 13230 2368 4096 4096 NT_STATUS_OK
ReadX 13230 2624 4096 4096 NT_STATUS_OK
ReadX 13230 500 4096 4096 NT_STATUS_OK
ReadX 13230 356 4096 4096 NT_STATUS_OK
ReadX 13230 1024 4096 4096 NT_STATUS_OK
ReadX 13230 576 4096 4096 NT_STATUS_OK
ReadX 13230 340 4096 4096 NT_STATUS_OK
ReadX 13230 420 4096 4096 NT_STATUS_OK
ReadX 13230 1600 4096 4096 NT_STATUS_OK
ReadX 13230 404 4096 4096 NT_STATUS_OK
ReadX 13230 1428 4096 4096 NT_STATUS_OK
ReadX 13230 2656 4096 4096 NT_STATUS_OK
ReadX 13230 2624 4096 4096 NT_STATUS_OK
ReadX 13230 452 4096 4096 NT_STATUS_OK
ReadX 13230 692 4096 4096 NT_STATUS_OK
ReadX 13230 564 4096 4096 NT_STATUS_OK
ReadX 13230 372 4096 4096 NT_STATUS_OK
ReadX 13230 468 4096 4096 NT_STATUS_OK
ReadX 13230 484 4096 4096 NT_STATUS_OK
ReadX 13230 1088 4096 4096 NT_STATUS_OK
ReadX 13230 1924 4096 4096 NT_STATUS_OK
ReadX 13230 2768 4096 4096 NT_STATUS_OK
ReadX 13230 832 4096 4096 NT_STATUS_OK
ReadX 13230 836 4096 4096 NT_STATUS_OK
ReadX 13230 1856 4096 4096 NT_STATUS_OK
ReadX 13230 2640 4096 4096 NT_STATUS_OK
ReadX 13230 436 4096 4096 NT_STATUS_OK
ReadX 13230 1828 4096 4096 NT_STATUS_OK
ReadX 13230 804 4096 4096 NT_STATUS_OK
ReadX 13230 1860 4096 4096 NT_STATUS_OK
ReadX 13230 1812 4096 4096 NT_STATUS_OK
ReadX 13230 756 4096 4096 NT_STATUS_OK
ReadX 13230 1636 4096 4096 NT_STATUS_OK
ReadX 13230 772 4096 4096 NT_STATUS_OK
ReadX 13230 2036 4096 4096 NT_STATUS_OK
ReadX 13230 1220 4096 4096 NT_STATUS_OK
ReadX 13230 1652 4096 4096 NT_STATUS_OK
ReadX 13230 2588 4096 4096 NT_STATUS_OK
ReadX 13230 916 4096 4096 NT_STATUS_OK
ReadX 13230 260 4096 4096 NT_STATUS_OK
ReadX 13230 932 4096 4096 NT_STATUS_OK
ReadX 13230 2624 4096 4096 NT_STATUS_OK
ReadX 13230 308 4096 4096 NT_STATUS_OK
ReadX 13230 292 4096 4096 NT_STATUS_OK
ReadX 13230 1140 4096 4096 NT_STATUS_OK
ReadX 13230 276 4096 4096 NT_STATUS_OK
ReadX 13230 2020 4096 4096 NT_STATUS_OK
ReadX 13230 2880 4096 4096 NT_STATUS_OK
ReadX 13230 516 4096 4096 NT_STATUS_OK
ReadX 13230 1844 4096 4096 NT_STATUS_OK
ReadX 13230 1124 4096 4096 NT_STATUS_OK
ReadX 13230 3136 4096 4096 NT_STATUS_OK
ReadX 13230 324 4096 4096 NT_STATUS_OK
ReadX 13230 1156 4096 4096 NT_STATUS_OK
ReadX 13230 1172 4096 4096 NT_STATUS_OK
ReadX 13230 2112 4096 4096 NT_STATUS_OK
ReadX 13230 2368 4096 4096 NT_STATUS_OK
ReadX 13230 964 4096 4096 NT_STATUS_OK
ReadX 13230 980 4096 4096 NT_STATUS_OK
ReadX 13230 1012 4096 4096 NT_STATUS_OK
ReadX 13230 532 4096 4096 NT_STATUS_OK
ReadX 13230 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13230 1620 4096 4096 NT_STATUS_OK
ReadX 13230 1604 4096 4096 NT_STATUS_OK
ReadX 13230 2116 4096 4096 NT_STATUS_OK
ReadX 13230 2132 4096 4096 NT_STATUS_OK
ReadX 13230 2148 4096 4096 NT_STATUS_OK
ReadX 13230 2276 4096 4096 NT_STATUS_OK
ReadX 13230 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13252 NT_STATUS_OK
Close 13252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13255 NT_STATUS_OK
QUERY_FILE_INFORMATION 13210 1004 NT_STATUS_OK
Close 13210 NT_STATUS_OK
WriteX 13255 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13255 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13212 1004 NT_STATUS_OK
Close 13212 NT_STATUS_OK
WriteX 13255 0 65536 65536 NT_STATUS_OK
WriteX 13255 65536 64850 64850 NT_STATUS_OK
Close 13255 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13257 NT_STATUS_OK
WriteX 13257 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 258 NT_STATUS_OK
ReadX 13230 2068 4096 4096 NT_STATUS_OK
ReadX 13230 1588 4096 4096 NT_STATUS_OK
ReadX 13230 1572 4096 4096 NT_STATUS_OK
WriteX 13257 0 18630 18630 NT_STATUS_OK
Flush 13257 NT_STATUS_OK
Close 13257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13259 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13261 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13230 612 4096 4096 NT_STATUS_OK
ReadX 13230 564 4096 4096 NT_STATUS_OK
ReadX 13230 1876 4096 4096 NT_STATUS_OK
ReadX 13230 628 4096 4096 NT_STATUS_OK
ReadX 13230 740 4096 4096 NT_STATUS_OK
ReadX 13230 724 4096 4096 NT_STATUS_OK
ReadX 13230 644 4096 4096 NT_STATUS_OK
ReadX 13230 2324 4096 4096 NT_STATUS_OK
ReadX 13230 660 4096 4096 NT_STATUS_OK
ReadX 13230 852 4096 4096 NT_STATUS_OK
ReadX 13230 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13230 2368 4096 4096 NT_STATUS_OK
ReadX 13230 1024 4096 4096 NT_STATUS_OK
ReadX 13230 320 4096 4096 NT_STATUS_OK
ReadX 13230 580 4096 4096 NT_STATUS_OK
ReadX 13230 3136 512 512 NT_STATUS_OK
ReadX 13230 2880 4096 4096 NT_STATUS_OK
Close 13230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 61440 4096 4096 NT_STATUS_OK
ReadX 13262 126976 4096 4096 NT_STATUS_OK
WriteX 13262 0 65536 65536 NT_STATUS_OK
WriteX 13262 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13263 NT_STATUS_OK
ReadX 13263 61440 4096 4096 NT_STATUS_OK
ReadX 13263 126976 4096 4096 NT_STATUS_OK
ReadX 13263 192512 4096 4096 NT_STATUS_OK
ReadX 13263 258048 4096 4096 NT_STATUS_OK
WriteX 13263 0 65536 65536 NT_STATUS_OK
WriteX 13263 65536 65536 65536 NT_STATUS_OK
WriteX 13263 131072 65536 65536 NT_STATUS_OK
WriteX 13263 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 61440 4096 4096 NT_STATUS_OK
ReadX 13264 126976 4096 4096 NT_STATUS_OK
ReadX 13264 192512 4096 4096 NT_STATUS_OK
ReadX 13264 258048 4096 4096 NT_STATUS_OK
ReadX 13264 323584 4096 4096 NT_STATUS_OK
ReadX 13264 389120 4096 4096 NT_STATUS_OK
ReadX 13264 454656 4096 4096 NT_STATUS_OK
ReadX 13264 520192 4096 4096 NT_STATUS_OK
WriteX 13264 0 65536 65536 NT_STATUS_OK
WriteX 13264 65536 65536 65536 NT_STATUS_OK
WriteX 13264 131072 65536 65536 NT_STATUS_OK
WriteX 13264 196608 65536 65536 NT_STATUS_OK
WriteX 13264 262144 65536 65536 NT_STATUS_OK
WriteX 13264 327680 65536 65536 NT_STATUS_OK
WriteX 13264 393216 65536 65536 NT_STATUS_OK
WriteX 13264 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13266 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13267 NT_STATUS_OK
WriteX 13267 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13267 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13265 0 8192 8192 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13265 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13265 0 8192 8192 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13265 0 8192 8192 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13265 0 8192 8192 NT_STATUS_OK
Flush 13265 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13269 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13261 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13262 NT_STATUS_OK
Close 13263 NT_STATUS_OK
Close 13264 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13272 NT_STATUS_OK
WriteX 13272 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13272 258 NT_STATUS_OK
WriteX 13272 0 62591 62591 NT_STATUS_OK
Close 13272 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13274 NT_STATUS_OK
Close 13274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13277 NT_STATUS_OK
WriteX 13277 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13277 258 NT_STATUS_OK
WriteX 13277 0 10845 10845 NT_STATUS_OK
Close 13277 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13279 NT_STATUS_OK
Close 13279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13282 NT_STATUS_OK
WriteX 13282 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13282 258 NT_STATUS_OK
WriteX 13282 0 30118 30118 NT_STATUS_OK
Close 13282 NT_STATUS_OK
WriteX 13265 0 4096 4096 NT_STATUS_OK
WriteX 13267 0 64 64 NT_STATUS_OK
Close 13267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13265 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 61440 61440 NT_STATUS_OK
ReadX 13284 61440 4096 4096 NT_STATUS_OK
ReadX 13284 65536 61440 61440 NT_STATUS_OK
ReadX 13284 126976 4096 4096 NT_STATUS_OK
ReadX 13284 131072 61440 61440 NT_STATUS_OK
ReadX 13284 192512 4096 4096 NT_STATUS_OK
ReadX 13284 196608 61440 61440 NT_STATUS_OK
ReadX 13284 258048 4096 4096 NT_STATUS_OK
ReadX 13284 262144 61440 61440 NT_STATUS_OK
ReadX 13284 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 61440 61440 NT_STATUS_OK
ReadX 13285 61440 4096 4096 NT_STATUS_OK
ReadX 13285 65536 61440 61440 NT_STATUS_OK
ReadX 13285 126976 4096 4096 NT_STATUS_OK
ReadX 13285 131072 61440 61440 NT_STATUS_OK
ReadX 13285 192512 4096 4096 NT_STATUS_OK
ReadX 13285 196608 61440 61440 NT_STATUS_OK
ReadX 13285 258048 4096 4096 NT_STATUS_OK
ReadX 13285 262144 61440 61440 NT_STATUS_OK
ReadX 13285 323584 4096 4096 NT_STATUS_OK
ReadX 13285 327680 61440 61440 NT_STATUS_OK
ReadX 13285 389120 4096 4096 NT_STATUS_OK
ReadX 13285 393216 61440 61440 NT_STATUS_OK
ReadX 13285 454656 4096 4096 NT_STATUS_OK
ReadX 13285 458752 61440 61440 NT_STATUS_OK
Close 13284 NT_STATUS_OK
ReadX 13285 520192 4096 4096 NT_STATUS_OK
ReadX 13285 524288 61440 61440 NT_STATUS_OK
ReadX 13285 585728 4096 4096 NT_STATUS_OK
ReadX 13285 589824 61440 61440 NT_STATUS_OK
ReadX 13285 651264 4096 4096 NT_STATUS_OK
ReadX 13285 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 61440 61440 NT_STATUS_OK
ReadX 13286 61440 4096 4096 NT_STATUS_OK
ReadX 13286 65536 61440 61440 NT_STATUS_OK
ReadX 13286 126976 4096 4096 NT_STATUS_OK
ReadX 13286 131072 61440 61440 NT_STATUS_OK
ReadX 13286 192512 4096 4096 NT_STATUS_OK
ReadX 13286 196608 61440 61440 NT_STATUS_OK
ReadX 13286 258048 4096 4096 NT_STATUS_OK
ReadX 13286 262144 61440 61440 NT_STATUS_OK
ReadX 13286 323584 4096 4096 NT_STATUS_OK
ReadX 13286 327680 61440 61440 NT_STATUS_OK
ReadX 13286 389120 4096 4096 NT_STATUS_OK
ReadX 13286 393216 61440 61440 NT_STATUS_OK
ReadX 13286 454656 4096 4096 NT_STATUS_OK
ReadX 13286 458752 61440 61440 NT_STATUS_OK
ReadX 13286 520192 4096 4096 NT_STATUS_OK
ReadX 13286 524288 61440 61440 NT_STATUS_OK
ReadX 13286 585728 4096 4096 NT_STATUS_OK
ReadX 13286 589824 61440 61440 NT_STATUS_OK
ReadX 13286 651264 4096 4096 NT_STATUS_OK
ReadX 13286 655360 61440 61440 NT_STATUS_OK
ReadX 13286 716800 4096 4096 NT_STATUS_OK
ReadX 13286 720896 61440 61440 NT_STATUS_OK
ReadX 13286 782336 4096 4096 NT_STATUS_OK
ReadX 13286 786432 61440 61440 NT_STATUS_OK
ReadX 13286 847872 4096 4096 NT_STATUS_OK
ReadX 13286 851968 61440 61440 NT_STATUS_OK
ReadX 13286 913408 4096 4096 NT_STATUS_OK
ReadX 13286 917504 61440 61440 NT_STATUS_OK
ReadX 13286 978944 4096 4096 NT_STATUS_OK
ReadX 13286 983040 61440 61440 NT_STATUS_OK
ReadX 13286 1044480 4096 4096 NT_STATUS_OK
ReadX 13286 1048576 61440 61440 NT_STATUS_OK
ReadX 13286 1110016 4096 4096 NT_STATUS_OK
ReadX 13286 1114112 61440 61440 NT_STATUS_OK
ReadX 13286 1175552 4096 4096 NT_STATUS_OK
ReadX 13286 1179648 61440 61440 NT_STATUS_OK
ReadX 13286 1241088 4096 4096 NT_STATUS_OK
ReadX 13286 1245184 61440 61440 NT_STATUS_OK
ReadX 13286 1306624 4096 4096 NT_STATUS_OK
ReadX 13286 1310720 61440 61440 NT_STATUS_OK
ReadX 13286 1372160 4096 4096 NT_STATUS_OK
ReadX 13286 1376256 61440 61440 NT_STATUS_OK
ReadX 13286 1437696 4096 4096 NT_STATUS_OK
ReadX 13286 1441792 61440 61440 NT_STATUS_OK
ReadX 13286 1503232 4096 4096 NT_STATUS_OK
ReadX 13286 1507328 61440 61440 NT_STATUS_OK
ReadX 13286 1568768 4096 4096 NT_STATUS_OK
ReadX 13286 1572864 61440 61440 NT_STATUS_OK
ReadX 13286 1634304 4096 4096 NT_STATUS_OK
ReadX 13286 1638400 61440 61440 NT_STATUS_OK
ReadX 13286 1699840 4096 4096 NT_STATUS_OK
ReadX 13286 1703936 61440 61440 NT_STATUS_OK
ReadX 13286 1765376 4096 4096 NT_STATUS_OK
ReadX 13286 1769472 61440 61440 NT_STATUS_OK
ReadX 13286 1830912 4096 4096 NT_STATUS_OK
ReadX 13286 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13287 NT_STATUS_OK
Close 13287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
ReadX 13291 4096 4096 4096 NT_STATUS_OK
ReadX 13291 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13292 NT_STATUS_OK
Close 13292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13295 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13295 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13296 NT_STATUS_OK
Close 13296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13295 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13298 NT_STATUS_OK
ReadX 13298 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13299 NT_STATUS_OK
ReadX 13299 0 8192 8192 NT_STATUS_OK
ReadX 13299 8192 8192 8192 NT_STATUS_OK
ReadX 13299 16384 8192 8192 NT_STATUS_OK
ReadX 13299 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13301 NT_STATUS_OK
Close 13301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13299 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13304 NT_STATUS_OK
WriteX 13304 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13304 258 NT_STATUS_OK
WriteX 13304 0 10438 10438 NT_STATUS_OK
Close 13304 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13305 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13306 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13307 NT_STATUS_OK
Close 13307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13308 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13309 NT_STATUS_OK
Close 13309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13310 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13312 NT_STATUS_OK
Close 13312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
ReadX 13313 4096 4096 4096 NT_STATUS_OK
ReadX 13313 8192 4096 4096 NT_STATUS_OK
ReadX 13313 12288 8192 8192 NT_STATUS_OK
ReadX 13313 20480 8192 8192 NT_STATUS_OK
ReadX 13313 28672 8192 8192 NT_STATUS_OK
ReadX 13313 36864 8192 8192 NT_STATUS_OK
ReadX 13313 45056 8192 8192 NT_STATUS_OK
ReadX 13313 53248 8192 8192 NT_STATUS_OK
ReadX 13313 61440 8192 8192 NT_STATUS_OK
ReadX 13313 69632 8192 8192 NT_STATUS_OK
ReadX 13313 77824 8192 8192 NT_STATUS_OK
ReadX 13313 86016 8192 8192 NT_STATUS_OK
ReadX 13313 94208 8192 8192 NT_STATUS_OK
ReadX 13313 102400 8192 8192 NT_STATUS_OK
ReadX 13313 110592 8192 8192 NT_STATUS_OK
ReadX 13313 118784 8192 8192 NT_STATUS_OK
ReadX 13313 126976 8192 8192 NT_STATUS_OK
ReadX 13313 135168 8192 8192 NT_STATUS_OK
ReadX 13313 143360 8192 8192 NT_STATUS_OK
ReadX 13313 151552 8192 8192 NT_STATUS_OK
ReadX 13313 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13315 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13318 NT_STATUS_OK
WriteX 13318 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13318 258 NT_STATUS_OK
WriteX 13318 0 28489 28489 NT_STATUS_OK
Close 13318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13319 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13321 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13321 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13322 NT_STATUS_OK
Close 13322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13325 NT_STATUS_OK
ReadX 13325 0 8192 8192 NT_STATUS_OK
ReadX 13325 8192 8192 8192 NT_STATUS_OK
ReadX 13325 16384 8192 8192 NT_STATUS_OK
ReadX 13325 24576 8192 8192 NT_STATUS_OK
ReadX 13325 32768 16384 16384 NT_STATUS_OK
ReadX 13325 49152 8192 8192 NT_STATUS_OK
ReadX 13325 57344 8192 8192 NT_STATUS_OK
ReadX 13325 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13327 NT_STATUS_OK
Close 13327 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13325 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13330 NT_STATUS_OK
WriteX 13330 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 258 NT_STATUS_OK
WriteX 13330 0 29253 29253 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13331 NT_STATUS_OK
Close 13331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13334 NT_STATUS_OK
Close 13334 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13337 NT_STATUS_OK
WriteX 13337 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13337 258 NT_STATUS_OK
WriteX 13337 0 30183 30183 NT_STATUS_OK
Close 13337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13338 NT_STATUS_OK
Close 13338 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13340 NT_STATUS_OK
WriteX 13340 0 510 510 NT_STATUS_OK
WriteX 13340 510 512 512 NT_STATUS_OK
WriteX 13340 1022 510 510 NT_STATUS_OK
WriteX 13340 1532 510 510 NT_STATUS_OK
WriteX 13340 2042 168 168 NT_STATUS_OK
Close 13340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13341 NT_STATUS_OK
Close 13341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
WriteX 13343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 61440 4096 4096 NT_STATUS_OK
ReadX 13344 126976 4096 4096 NT_STATUS_OK
WriteX 13344 0 65536 65536 NT_STATUS_OK
WriteX 13344 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 61440 4096 4096 NT_STATUS_OK
ReadX 13345 126976 4096 4096 NT_STATUS_OK
ReadX 13345 192512 4096 4096 NT_STATUS_OK
ReadX 13345 258048 4096 4096 NT_STATUS_OK
WriteX 13345 0 65536 65536 NT_STATUS_OK
WriteX 13345 65536 65536 65536 NT_STATUS_OK
WriteX 13345 131072 65536 65536 NT_STATUS_OK
WriteX 13345 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 61440 4096 4096 NT_STATUS_OK
ReadX 13346 126976 4096 4096 NT_STATUS_OK
ReadX 13346 192512 4096 4096 NT_STATUS_OK
ReadX 13346 258048 4096 4096 NT_STATUS_OK
ReadX 13346 323584 4096 4096 NT_STATUS_OK
ReadX 13346 389120 4096 4096 NT_STATUS_OK
ReadX 13346 454656 4096 4096 NT_STATUS_OK
ReadX 13346 520192 4096 4096 NT_STATUS_OK
WriteX 13346 0 65536 65536 NT_STATUS_OK
WriteX 13346 65536 65536 65536 NT_STATUS_OK
WriteX 13346 131072 65536 65536 NT_STATUS_OK
WriteX 13346 196608 65536 65536 NT_STATUS_OK
WriteX 13346 262144 65536 65536 NT_STATUS_OK
WriteX 13346 327680 65536 65536 NT_STATUS_OK
WriteX 13346 393216 65536 65536 NT_STATUS_OK
WriteX 13346 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13347 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13344 NT_STATUS_OK
Close 13345 NT_STATUS_OK
Close 13346 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13353 NT_STATUS_OK
Close 13353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13356 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13362 NT_STATUS_OK
Close 13362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13365 NT_STATUS_OK
Close 13365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13367 NT_STATUS_OK
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13371 NT_STATUS_OK
Close 13371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13376 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13381 NT_STATUS_OK
Close 13381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13386 NT_STATUS_OK
Close 13386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13391 NT_STATUS_OK
Close 13391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13401 NT_STATUS_OK
Close 13401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13406 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13412 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13415 NT_STATUS_OK
WriteX 13415 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13415 0 65536 65536 NT_STATUS_OK
WriteX 13415 65536 65536 65536 NT_STATUS_OK
WriteX 13415 131072 65536 65536 NT_STATUS_OK
WriteX 13415 196608 65536 65536 NT_STATUS_OK
WriteX 13415 262144 26634 26634 NT_STATUS_OK
Close 13415 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13420 NT_STATUS_OK
Close 13420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13421 NT_STATUS_OK
Close 13421 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
Close 13422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
ReadX 13423 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13424 NT_STATUS_OK
Close 13424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13428 NT_STATUS_OK
Close 13428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13431 NT_STATUS_OK
Close 13431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13433 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13437 NT_STATUS_OK
Close 13437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13440 NT_STATUS_OK
Close 13440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13442 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13446 NT_STATUS_OK
Close 13446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13451 NT_STATUS_OK
Close 13451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13456 NT_STATUS_OK
Close 13456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13466 NT_STATUS_OK
Close 13466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13471 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13475 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13480 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13485 NT_STATUS_OK
Close 13485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13488 NT_STATUS_OK
Close 13488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13500 NT_STATUS_OK
Close 13500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 4096 4096 NT_STATUS_OK
Close 13502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13503 NT_STATUS_OK
ReadX 13503 0 4096 4096 NT_STATUS_OK
Close 13503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13504 NT_STATUS_OK
ReadX 13504 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13514 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13515 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
Close 13516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
Close 13517 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13504 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13547 0 4096 4096 NT_STATUS_OK
Close 13547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 0 4096 4096 NT_STATUS_OK
ReadX 13549 4096 4096 4096 NT_STATUS_OK
ReadX 13549 8192 4096 4096 NT_STATUS_OK
ReadX 13549 12288 4096 4096 NT_STATUS_OK
ReadX 13549 16384 4096 4096 NT_STATUS_OK
ReadX 13549 20480 4096 4096 NT_STATUS_OK
ReadX 13549 24576 4096 4096 NT_STATUS_OK
ReadX 13549 28672 4096 4096 NT_STATUS_OK
ReadX 13549 32768 4096 4096 NT_STATUS_OK
ReadX 13549 36864 4096 4096 NT_STATUS_OK
ReadX 13549 40960 4096 4096 NT_STATUS_OK
ReadX 13549 45056 4096 4096 NT_STATUS_OK
ReadX 13549 49152 4096 4096 NT_STATUS_OK
ReadX 13549 53248 4096 4096 NT_STATUS_OK
ReadX 13549 57344 4096 4096 NT_STATUS_OK
ReadX 13549 61440 4096 4096 NT_STATUS_OK
ReadX 13549 65536 4096 4096 NT_STATUS_OK
ReadX 13549 69632 4096 4096 NT_STATUS_OK
ReadX 13549 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13549 1004 NT_STATUS_OK
WriteX 13549 0 4096 4096 NT_STATUS_OK
Close 13549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13550 NT_STATUS_OK
SET_FILE_INFORMATION 13550 1004 NT_STATUS_OK
Close 13550 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13551 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13555 NT_STATUS_OK
WriteX 13555 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13555 258 NT_STATUS_OK
WriteX 13555 0 65536 65536 NT_STATUS_OK
WriteX 13555 65536 19979 19979 NT_STATUS_OK
Close 13555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
QUERY_FILE_INFORMATION 13556 1004 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
SET_FILE_INFORMATION 13556 1004 NT_STATUS_OK
WriteX 13556 0 4096 4096 NT_STATUS_OK
Flush 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
Close 13557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
Close 13559 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 4096 4096 NT_STATUS_OK
Close 13560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13561 1004 NT_STATUS_OK
WriteX 13561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13562 NT_STATUS_OK
Close 13562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13564 NT_STATUS_OK
Close 13564 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13567 NT_STATUS_OK
WriteX 13567 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13567 258 NT_STATUS_OK
WriteX 13567 0 65536 65536 NT_STATUS_OK
WriteX 13567 65536 17654 17654 NT_STATUS_OK
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13568 NT_STATUS_OK
ReadX 13568 0 4096 4096 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
QUERY_FILE_INFORMATION 13568 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
SET_FILE_INFORMATION 13568 1004 NT_STATUS_OK
WriteX 13568 0 4096 4096 NT_STATUS_OK
Flush 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13569 NT_STATUS_OK
SET_FILE_INFORMATION 13569 1004 NT_STATUS_OK
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13570 NT_STATUS_OK
ReadX 13570 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13571 NT_STATUS_OK
Close 13571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13573 NT_STATUS_OK
ReadX 13573 0 4096 4096 NT_STATUS_OK
ReadX 13573 4096 4096 4096 NT_STATUS_OK
ReadX 13573 8192 4096 4096 NT_STATUS_OK
ReadX 13573 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13573 16384 4096 4096 NT_STATUS_OK
ReadX 13573 20480 4096 4096 NT_STATUS_OK
ReadX 13573 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
Close 13574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 4096 4096 NT_STATUS_OK
Close 13575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13576 NT_STATUS_OK
ReadX 13576 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13576 1004 NT_STATUS_OK
WriteX 13576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13577 NT_STATUS_OK
Close 13577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13576 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13582 NT_STATUS_OK
WriteX 13582 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13582 258 NT_STATUS_OK
WriteX 13582 0 65536 65536 NT_STATUS_OK
WriteX 13582 65536 19490 19490 NT_STATUS_OK
Close 13582 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 0 4096 4096 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
QUERY_FILE_INFORMATION 13583 1004 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
SET_FILE_INFORMATION 13583 1004 NT_STATUS_OK
WriteX 13583 0 4096 4096 NT_STATUS_OK
Flush 13583 NT_STATUS_OK
Close 13583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13584 NT_STATUS_OK
SET_FILE_INFORMATION 13584 1004 NT_STATUS_OK
Close 13584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13585 NT_STATUS_OK
ReadX 13585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13586 NT_STATUS_OK
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13588 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13588 0 4096 4096 NT_STATUS_OK
Close 13588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13589 NT_STATUS_OK
ReadX 13589 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13589 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13590 NT_STATUS_OK
ReadX 13590 0 4096 4096 NT_STATUS_OK
ReadX 13590 4096 4096 4096 NT_STATUS_OK
ReadX 13590 8192 4096 4096 NT_STATUS_OK
ReadX 13590 12288 4096 4096 NT_STATUS_OK
ReadX 13590 16384 4096 4096 NT_STATUS_OK
ReadX 13590 20480 4096 4096 NT_STATUS_OK
ReadX 13590 24576 4096 4096 NT_STATUS_OK
ReadX 13590 28672 4096 4096 NT_STATUS_OK
ReadX 13590 32768 4096 4096 NT_STATUS_OK
ReadX 13590 36864 4096 4096 NT_STATUS_OK
ReadX 13590 40960 4096 4096 NT_STATUS_OK
ReadX 13590 45056 4096 4096 NT_STATUS_OK
ReadX 13590 49152 4096 4096 NT_STATUS_OK
ReadX 13590 53248 4096 4096 NT_STATUS_OK
ReadX 13590 57344 4096 4096 NT_STATUS_OK
ReadX 13590 61440 4096 4096 NT_STATUS_OK
ReadX 13590 65536 4096 4096 NT_STATUS_OK
ReadX 13590 69632 4096 4096 NT_STATUS_OK
ReadX 13590 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13590 1004 NT_STATUS_OK
WriteX 13590 0 4096 4096 NT_STATUS_OK
Close 13590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13591 NT_STATUS_OK
SET_FILE_INFORMATION 13591 1004 NT_STATUS_OK
Close 13591 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13592 NT_STATUS_OK
ReadX 13592 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13593 NT_STATUS_OK
Close 13593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13585 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13596 NT_STATUS_OK
WriteX 13596 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13596 258 NT_STATUS_OK
WriteX 13596 0 65536 65536 NT_STATUS_OK
WriteX 13596 65536 8866 8866 NT_STATUS_OK
Close 13596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 0 4096 4096 NT_STATUS_OK
WriteX 13597 0 4096 4096 NT_STATUS_OK
Flush 13597 NT_STATUS_OK
SET_FILE_INFORMATION 13597 1004 NT_STATUS_OK
WriteX 13597 0 4096 4096 NT_STATUS_OK
Flush 13597 NT_STATUS_OK
Close 13597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13598 NT_STATUS_OK
ReadX 13598 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 0 4096 4096 NT_STATUS_OK
Close 13599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 4096 4096 NT_STATUS_OK
Close 13600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13601 NT_STATUS_OK
ReadX 13601 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13601 1004 NT_STATUS_OK
WriteX 13601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13602 NT_STATUS_OK
Close 13602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13601 NT_STATUS_OK
Close 13592 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13604 NT_STATUS_OK
Close 13604 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13607 NT_STATUS_OK
WriteX 13607 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13607 258 NT_STATUS_OK
WriteX 13607 0 65536 65536 NT_STATUS_OK
WriteX 13607 65536 9298 9298 NT_STATUS_OK
Close 13607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13608 NT_STATUS_OK
ReadX 13608 0 4096 4096 NT_STATUS_OK
WriteX 13608 0 4096 4096 NT_STATUS_OK
Flush 13608 NT_STATUS_OK
SET_FILE_INFORMATION 13608 1004 NT_STATUS_OK
WriteX 13608 0 4096 4096 NT_STATUS_OK
Flush 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13609 NT_STATUS_OK
SET_FILE_INFORMATION 13609 1004 NT_STATUS_OK
Close 13609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13610 NT_STATUS_OK
ReadX 13610 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13611 NT_STATUS_OK
Close 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13614 0 4096 4096 NT_STATUS_OK
Close 13614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13615 NT_STATUS_OK
ReadX 13615 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13615 4096 4096 4096 NT_STATUS_OK
ReadX 13615 8192 4096 4096 NT_STATUS_OK
ReadX 13615 12288 4096 4096 NT_STATUS_OK
ReadX 13615 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13616 NT_STATUS_OK
ReadX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13617 NT_STATUS_OK
ReadX 13617 0 4096 4096 NT_STATUS_OK
Close 13617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13618 NT_STATUS_OK
ReadX 13618 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13618 1004 NT_STATUS_OK
WriteX 13618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13619 NT_STATUS_OK
Close 13619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13615 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13621 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13624 NT_STATUS_OK
WriteX 13624 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13624 258 NT_STATUS_OK
WriteX 13624 0 65536 65536 NT_STATUS_OK
WriteX 13624 65536 11540 11540 NT_STATUS_OK
Close 13624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
WriteX 13625 0 4096 4096 NT_STATUS_OK
Flush 13625 NT_STATUS_OK
SET_FILE_INFORMATION 13625 1004 NT_STATUS_OK
WriteX 13625 0 4096 4096 NT_STATUS_OK
Flush 13625 NT_STATUS_OK
Close 13625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13626 NT_STATUS_OK
SET_FILE_INFORMATION 13626 1004 NT_STATUS_OK
Close 13626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13627 NT_STATUS_OK
ReadX 13627 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13628 NT_STATUS_OK
Close 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13630 NT_STATUS_OK
ReadX 13630 61440 4096 4096 NT_STATUS_OK
ReadX 13630 126976 4096 4096 NT_STATUS_OK
WriteX 13630 0 65536 65536 NT_STATUS_OK
WriteX 13630 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13631 NT_STATUS_OK
ReadX 13631 61440 4096 4096 NT_STATUS_OK
ReadX 13631 126976 4096 4096 NT_STATUS_OK
ReadX 13631 192512 4096 4096 NT_STATUS_OK
ReadX 13631 258048 4096 4096 NT_STATUS_OK
WriteX 13631 0 65536 65536 NT_STATUS_OK
WriteX 13631 65536 65536 65536 NT_STATUS_OK
WriteX 13631 131072 65536 65536 NT_STATUS_OK
WriteX 13631 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13632 NT_STATUS_OK
ReadX 13632 61440 4096 4096 NT_STATUS_OK
ReadX 13632 126976 4096 4096 NT_STATUS_OK
ReadX 13632 192512 4096 4096 NT_STATUS_OK
ReadX 13632 258048 4096 4096 NT_STATUS_OK
ReadX 13632 323584 4096 4096 NT_STATUS_OK
ReadX 13632 389120 4096 4096 NT_STATUS_OK
ReadX 13632 454656 4096 4096 NT_STATUS_OK
ReadX 13632 520192 4096 4096 NT_STATUS_OK
WriteX 13632 0 65536 65536 NT_STATUS_OK
WriteX 13632 65536 65536 65536 NT_STATUS_OK
WriteX 13632 131072 65536 65536 NT_STATUS_OK
WriteX 13632 196608 65536 65536 NT_STATUS_OK
WriteX 13632 262144 65536 65536 NT_STATUS_OK
WriteX 13632 327680 65536 65536 NT_STATUS_OK
WriteX 13632 393216 65536 65536 NT_STATUS_OK
WriteX 13632 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 4096 4096 NT_STATUS_OK
ReadX 13633 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13634 NT_STATUS_OK
WriteX 13634 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13634 258 NT_STATUS_OK
WriteX 13634 0 53 53 NT_STATUS_OK
Close 13634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13635 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13627 NT_STATUS_OK
Close 13573 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Close 13631 NT_STATUS_OK
Close 13632 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13633 8192 4096 4096 NT_STATUS_OK
ReadX 13633 12288 4096 4096 NT_STATUS_OK
WriteX 13637 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13637 258 NT_STATUS_OK
ReadX 13633 16384 4096 4096 NT_STATUS_OK
ReadX 13633 20480 4096 4096 NT_STATUS_OK
WriteX 13637 0 15360 15360 NT_STATUS_OK
Close 13637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13638 NT_STATUS_OK
ReadX 13638 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13638 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13638 1004 NT_STATUS_OK
WriteX 13638 0 4096 4096 NT_STATUS_OK
Close 13638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13641 NT_STATUS_OK
ReadX 13641 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13642 NT_STATUS_OK
Close 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13641 4096 4096 4096 NT_STATUS_OK
ReadX 13641 8192 4096 4096 NT_STATUS_OK
ReadX 13641 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13644 NT_STATUS_OK
ReadX 13644 0 4096 4096 NT_STATUS_OK
ReadX 13644 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13645 NT_STATUS_OK
ReadX 13645 0 4096 4096 NT_STATUS_OK
ReadX 13645 4096 4096 4096 NT_STATUS_OK
ReadX 13645 8192 4096 4096 NT_STATUS_OK
Close 13644 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13646 NT_STATUS_OK
WriteX 13646 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13646 258 NT_STATUS_OK
WriteX 13646 0 15360 15360 NT_STATUS_OK
Close 13646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13647 NT_STATUS_OK
ReadX 13647 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13647 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13647 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13633 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13650 NT_STATUS_OK
ReadX 13650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13651 NT_STATUS_OK
SET_FILE_INFORMATION 13651 1004 NT_STATUS_OK
Close 13651 NT_STATUS_OK
WriteX 13647 0 4096 4096 NT_STATUS_OK
Close 13647 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13652 NT_STATUS_OK
Close 13652 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13654 NT_STATUS_OK
ReadX 13654 0 4096 4096 NT_STATUS_OK
ReadX 13654 4096 4096 4096 NT_STATUS_OK
ReadX 13654 8192 4096 4096 NT_STATUS_OK
ReadX 13654 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13654 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13654 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13655 NT_STATUS_OK
ReadX 13655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13656 NT_STATUS_OK
WriteX 13656 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13656 258 NT_STATUS_OK
WriteX 13656 0 53 53 NT_STATUS_OK
Close 13656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13657 NT_STATUS_OK
Close 13657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13655 4096 4096 4096 NT_STATUS_OK
ReadX 13655 8192 4096 4096 NT_STATUS_OK
ReadX 13655 12288 4096 4096 NT_STATUS_OK
WriteX 13659 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13659 258 NT_STATUS_OK
WriteX 13659 0 12006 12006 NT_STATUS_OK
Close 13659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13660 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13660 1004 NT_STATUS_OK
WriteX 13660 0 4096 4096 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13661 NT_STATUS_OK
Close 13661 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13663 NT_STATUS_OK
ReadX 13663 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13664 NT_STATUS_OK
Close 13664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13663 4096 4096 4096 NT_STATUS_OK
ReadX 13663 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13666 NT_STATUS_OK
WriteX 13666 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13666 258 NT_STATUS_OK
WriteX 13666 0 11991 11991 NT_STATUS_OK
Close 13666 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13667 NT_STATUS_OK
ReadX 13667 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13667 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13667 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13668 NT_STATUS_OK
Close 13668 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13670 NT_STATUS_OK
ReadX 13670 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13671 NT_STATUS_OK
SET_FILE_INFORMATION 13671 1004 NT_STATUS_OK
Close 13671 NT_STATUS_OK
WriteX 13667 0 4096 4096 NT_STATUS_OK
Close 13667 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13672 NT_STATUS_OK
Close 13672 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13674 NT_STATUS_OK
ReadX 13674 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13675 NT_STATUS_OK
Close 13675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13674 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13674 1004 NT_STATUS_OK
ReadX 13674 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13674 1004 NT_STATUS_OK
WriteX 13674 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13674 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13674 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13674 1004 NT_STATUS_OK
Close 13650 NT_STATUS_OK
WriteX 13654 0 19054 19054 NT_STATUS_OK
WriteX 13674 0 12288 12288 NT_STATUS_OK
Close 13670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13677 NT_STATUS_OK
Close 13677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Close 13674 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13679 NT_STATUS_OK
Close 13679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 61440 61440 NT_STATUS_OK
ReadX 13681 61440 4096 4096 NT_STATUS_OK
ReadX 13681 65536 61440 61440 NT_STATUS_OK
ReadX 13681 126976 4096 4096 NT_STATUS_OK
ReadX 13681 131072 61440 61440 NT_STATUS_OK
ReadX 13681 192512 4096 4096 NT_STATUS_OK
ReadX 13681 196608 61440 61440 NT_STATUS_OK
ReadX 13681 258048 4096 4096 NT_STATUS_OK
ReadX 13681 262144 61440 61440 NT_STATUS_OK
ReadX 13681 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13682 NT_STATUS_OK
ReadX 13682 0 61440 61440 NT_STATUS_OK
ReadX 13682 61440 4096 4096 NT_STATUS_OK
ReadX 13682 65536 61440 61440 NT_STATUS_OK
ReadX 13682 126976 4096 4096 NT_STATUS_OK
ReadX 13682 131072 61440 61440 NT_STATUS_OK
ReadX 13682 192512 4096 4096 NT_STATUS_OK
ReadX 13682 196608 61440 61440 NT_STATUS_OK
ReadX 13682 258048 4096 4096 NT_STATUS_OK
ReadX 13682 262144 61440 61440 NT_STATUS_OK
ReadX 13682 323584 4096 4096 NT_STATUS_OK
ReadX 13682 327680 61440 61440 NT_STATUS_OK
ReadX 13682 389120 4096 4096 NT_STATUS_OK
ReadX 13682 393216 61440 61440 NT_STATUS_OK
ReadX 13682 454656 4096 4096 NT_STATUS_OK
ReadX 13682 458752 61440 61440 NT_STATUS_OK
ReadX 13682 520192 4096 4096 NT_STATUS_OK
ReadX 13682 524288 61440 61440 NT_STATUS_OK
ReadX 13682 585728 4096 4096 NT_STATUS_OK
ReadX 13682 589824 61440 61440 NT_STATUS_OK
ReadX 13682 651264 4096 4096 NT_STATUS_OK
ReadX 13682 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13683 NT_STATUS_OK
ReadX 13683 0 61440 61440 NT_STATUS_OK
ReadX 13683 61440 4096 4096 NT_STATUS_OK
ReadX 13683 65536 61440 61440 NT_STATUS_OK
ReadX 13683 126976 4096 4096 NT_STATUS_OK
ReadX 13683 131072 61440 61440 NT_STATUS_OK
ReadX 13683 192512 4096 4096 NT_STATUS_OK
ReadX 13683 196608 61440 61440 NT_STATUS_OK
ReadX 13683 258048 4096 4096 NT_STATUS_OK
ReadX 13683 262144 61440 61440 NT_STATUS_OK
ReadX 13683 323584 4096 4096 NT_STATUS_OK
ReadX 13683 327680 61440 61440 NT_STATUS_OK
ReadX 13683 389120 4096 4096 NT_STATUS_OK
ReadX 13683 393216 61440 61440 NT_STATUS_OK
ReadX 13683 454656 4096 4096 NT_STATUS_OK
ReadX 13683 458752 61440 61440 NT_STATUS_OK
ReadX 13683 520192 4096 4096 NT_STATUS_OK
ReadX 13683 524288 61440 61440 NT_STATUS_OK
ReadX 13683 585728 4096 4096 NT_STATUS_OK
ReadX 13683 589824 61440 61440 NT_STATUS_OK
ReadX 13683 651264 4096 4096 NT_STATUS_OK
ReadX 13683 655360 61440 61440 NT_STATUS_OK
ReadX 13683 716800 4096 4096 NT_STATUS_OK
ReadX 13683 720896 61440 61440 NT_STATUS_OK
ReadX 13683 782336 4096 4096 NT_STATUS_OK
ReadX 13683 786432 61440 61440 NT_STATUS_OK
ReadX 13683 847872 4096 4096 NT_STATUS_OK
ReadX 13683 851968 61440 61440 NT_STATUS_OK
ReadX 13683 913408 4096 4096 NT_STATUS_OK
ReadX 13683 917504 61440 61440 NT_STATUS_OK
ReadX 13683 978944 4096 4096 NT_STATUS_OK
ReadX 13683 983040 61440 61440 NT_STATUS_OK
ReadX 13683 1044480 4096 4096 NT_STATUS_OK
ReadX 13683 1048576 61440 61440 NT_STATUS_OK
ReadX 13683 1110016 4096 4096 NT_STATUS_OK
ReadX 13683 1114112 61440 61440 NT_STATUS_OK
ReadX 13683 1175552 4096 4096 NT_STATUS_OK
ReadX 13683 1179648 61440 61440 NT_STATUS_OK
ReadX 13683 1241088 4096 4096 NT_STATUS_OK
ReadX 13683 1245184 61440 61440 NT_STATUS_OK
ReadX 13683 1306624 4096 4096 NT_STATUS_OK
ReadX 13683 1310720 61440 61440 NT_STATUS_OK
ReadX 13683 1372160 4096 4096 NT_STATUS_OK
ReadX 13683 1376256 61440 61440 NT_STATUS_OK
ReadX 13683 1437696 4096 4096 NT_STATUS_OK
ReadX 13683 1441792 61440 61440 NT_STATUS_OK
ReadX 13683 1503232 4096 4096 NT_STATUS_OK
ReadX 13683 1507328 61440 61440 NT_STATUS_OK
ReadX 13683 1568768 4096 4096 NT_STATUS_OK
ReadX 13683 1572864 61440 61440 NT_STATUS_OK
ReadX 13683 1634304 4096 4096 NT_STATUS_OK
ReadX 13683 1638400 61440 61440 NT_STATUS_OK
ReadX 13683 1699840 4096 4096 NT_STATUS_OK
ReadX 13683 1703936 61440 61440 NT_STATUS_OK
ReadX 13683 1765376 4096 4096 NT_STATUS_OK
ReadX 13683 1769472 61440 61440 NT_STATUS_OK
ReadX 13683 1830912 4096 4096 NT_STATUS_OK
ReadX 13683 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13685 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13686 NT_STATUS_OK
ReadX 13686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13687 NT_STATUS_OK
ReadX 13687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13688 NT_STATUS_OK
ReadX 13688 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13689 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13690 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 1004 NT_STATUS_OK
WriteX 13690 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13690 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13691 NT_STATUS_OK
Close 13691 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13692 NT_STATUS_OK
WriteX 13692 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13692 258 NT_STATUS_OK
WriteX 13692 0 491 491 NT_STATUS_OK
Close 13692 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13693 NT_STATUS_OK
ReadX 13693 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13690 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13695 NT_STATUS_OK
Close 13695 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13696 NT_STATUS_OK
WriteX 13696 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13696 258 NT_STATUS_OK
WriteX 13696 0 543 543 NT_STATUS_OK
Close 13696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13697 NT_STATUS_OK
ReadX 13697 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Close 13682 NT_STATUS_OK
Close 13683 NT_STATUS_OK
Close 13697 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Close 13686 NT_STATUS_OK
Close 13687 NT_STATUS_OK
Close 13688 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13701 NT_STATUS_OK
ReadX 13701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13702 NT_STATUS_OK
ReadX 13702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13703 NT_STATUS_OK
ReadX 13703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13709 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13710 NT_STATUS_OK
QUERY_FILE_INFORMATION 13710 1004 NT_STATUS_OK
WriteX 13710 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13710 258 NT_STATUS_OK
WriteX 13710 0 2048 2048 NT_STATUS_OK
Close 13710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13711 NT_STATUS_OK
ReadX 13711 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13711 0 4096 4096 NT_STATUS_OK
Flush 13711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13711 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13715 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13715 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13716 NT_STATUS_OK
WriteX 13716 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13716 258 NT_STATUS_OK
WriteX 13716 0 2048 2048 NT_STATUS_OK
Close 13716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13717 NT_STATUS_OK
ReadX 13717 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13722 NT_STATUS_OK
WriteX 13722 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13722 258 NT_STATUS_OK
WriteX 13722 0 2048 2048 NT_STATUS_OK
Close 13722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13723 NT_STATUS_OK
ReadX 13723 0 2048 2048 NT_STATUS_OK
ReadX 13701 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13705 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13717 0 4096 4096 NT_STATUS_OK
WriteX 13701 0 8192 8192 NT_STATUS_OK
WriteX 13702 0 4096 4096 NT_STATUS_OK
WriteX 13703 0 4096 4096 NT_STATUS_OK
ReadX 13717 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13726 NT_STATUS_OK
ReadX 13726 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13727 NT_STATUS_OK
QUERY_FILE_INFORMATION 13727 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Close 13702 NT_STATUS_OK
Close 13703 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Close 13717 NT_STATUS_OK
Close 13701 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13729 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13729 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13730 NT_STATUS_OK
ReadX 13730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13733 NT_STATUS_OK
ReadX 13733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13734 NT_STATUS_OK
ReadX 13734 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13735 NT_STATUS_OK
ReadX 13735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13737 NT_STATUS_OK
ReadX 13737 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13738 NT_STATUS_OK
ReadX 13738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13739 NT_STATUS_OK
ReadX 13739 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13740 NT_STATUS_OK
ReadX 13740 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13741 NT_STATUS_OK
ReadX 13741 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13742 NT_STATUS_OK
ReadX 13742 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13747 NT_STATUS_OK
QUERY_FILE_INFORMATION 13747 1004 NT_STATUS_OK
WriteX 13747 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13747 258 NT_STATUS_OK
WriteX 13747 0 2048 2048 NT_STATUS_OK
Close 13747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13748 NT_STATUS_OK
ReadX 13748 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13749 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13754 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13755 NT_STATUS_OK
QUERY_FILE_INFORMATION 13755 1004 NT_STATUS_OK
WriteX 13755 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13755 258 NT_STATUS_OK
WriteX 13755 0 2048 2048 NT_STATUS_OK
Close 13755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13756 NT_STATUS_OK
ReadX 13756 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13748 0 4096 4096 NT_STATUS_OK
Flush 13748 NT_STATUS_OK
WriteX 13756 0 4096 4096 NT_STATUS_OK
Flush 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13748 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13750 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13757 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13758 NT_STATUS_OK
WriteX 13758 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 258 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13760 NT_STATUS_OK
Close 13760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13761 NT_STATUS_OK
WriteX 13761 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13761 258 NT_STATUS_OK
WriteX 13761 0 4096 4096 NT_STATUS_OK
Close 13761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13762 0 4096 4096 NT_STATUS_OK
Close 13759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13742 NT_STATUS_OK
Close 13736 NT_STATUS_OK
Close 13750 NT_STATUS_OK
Close 13739 NT_STATUS_OK
Close 13740 NT_STATUS_OK
Close 13741 NT_STATUS_OK
Close 13737 NT_STATUS_OK
Close 13730 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Close 13734 NT_STATUS_OK
Close 13735 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Close 13733 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13765 NT_STATUS_OK
Close 13765 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13767 NT_STATUS_OK
ReadX 13767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13769 NT_STATUS_OK
WriteX 13769 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13769 258 NT_STATUS_OK
WriteX 13769 0 2048 2048 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13772 NT_STATUS_OK
ReadX 13772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13774 NT_STATUS_OK
ReadX 13774 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13775 NT_STATUS_OK
ReadX 13775 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13778 NT_STATUS_OK
ReadX 13778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13779 NT_STATUS_OK
ReadX 13779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13780 NT_STATUS_OK
ReadX 13780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13781 NT_STATUS_OK
ReadX 13781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13782 NT_STATUS_OK
ReadX 13782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13783 NT_STATUS_OK
ReadX 13783 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13784 NT_STATUS_OK
QUERY_FILE_INFORMATION 13784 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Close 13770 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Close 13777 NT_STATUS_OK
Close 13778 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Close 13781 NT_STATUS_OK
Close 13783 NT_STATUS_OK
Close 13771 NT_STATUS_OK
Close 13772 NT_STATUS_OK
Close 13775 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Close 13773 NT_STATUS_OK
Close 13774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13786 NT_STATUS_OK
QUERY_FILE_INFORMATION 13786 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13788 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13789 NT_STATUS_OK
ReadX 13789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13790 NT_STATUS_OK
ReadX 13790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13795 NT_STATUS_OK
ReadX 13795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13796 NT_STATUS_OK
ReadX 13796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13797 NT_STATUS_OK
ReadX 13797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13798 NT_STATUS_OK
ReadX 13798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13805 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13806 NT_STATUS_OK
QUERY_FILE_INFORMATION 13806 1004 NT_STATUS_OK
WriteX 13806 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13806 258 NT_STATUS_OK
WriteX 13806 0 2048 2048 NT_STATUS_OK
Close 13806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13807 NT_STATUS_OK
ReadX 13807 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13808 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13809 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13813 NT_STATUS_OK
ReadX 13813 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13817 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13818 NT_STATUS_OK
QUERY_FILE_INFORMATION 13818 1004 NT_STATUS_OK
WriteX 13818 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13818 258 NT_STATUS_OK
WriteX 13818 0 2048 2048 NT_STATUS_OK
Close 13818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13820 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13821 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13825 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13825 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13826 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 1004 NT_STATUS_OK
WriteX 13826 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 258 NT_STATUS_OK
WriteX 13826 0 2048 2048 NT_STATUS_OK
Close 13826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13807 0 4096 4096 NT_STATUS_OK
Flush 13807 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
Flush 13819 NT_STATUS_OK
WriteX 13827 0 4096 4096 NT_STATUS_OK
Flush 13827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13807 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13819 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13827 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13809 4096 16384 16384 NT_STATUS_OK
ReadX 13789 4096 16384 16384 NT_STATUS_OK
ReadX 13821 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13828 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 2048 2048 NT_STATUS_OK
WriteX 13829 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13830 NT_STATUS_OK
QUERY_FILE_INFORMATION 13830 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13829 NT_STATUS_OK
Close 13813 NT_STATUS_OK
Close 13801 NT_STATUS_OK
Close 13793 NT_STATUS_OK
Close 13809 NT_STATUS_OK
Close 13810 NT_STATUS_OK
Close 13811 NT_STATUS_OK
Close 13812 NT_STATUS_OK
Close 13800 NT_STATUS_OK
Close 13821 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Close 13798 NT_STATUS_OK
Close 13799 NT_STATUS_OK
Close 13796 NT_STATUS_OK
Close 13797 NT_STATUS_OK
Close 13789 NT_STATUS_OK
Close 13790 NT_STATUS_OK
Close 13791 NT_STATUS_OK
Close 13792 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13832 NT_STATUS_OK
QUERY_FILE_INFORMATION 13832 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13834 NT_STATUS_OK
QUERY_FILE_INFORMATION 13834 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13840 NT_STATUS_OK
ReadX 13840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13837 4096 16384 16384 NT_STATUS_OK
WriteX 13837 0 4096 4096 NT_STATUS_OK
WriteX 13838 0 4096 4096 NT_STATUS_OK
WriteX 13839 0 4096 4096 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13843 NT_STATUS_OK
ReadX 13843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13845 NT_STATUS_OK
ReadX 13845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13846 NT_STATUS_OK
ReadX 13846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13848 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13849 NT_STATUS_OK
ReadX 13849 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13850 NT_STATUS_OK
ReadX 13850 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13851 NT_STATUS_OK
ReadX 13851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13852 NT_STATUS_OK
ReadX 13852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13853 NT_STATUS_OK
ReadX 13853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13854 NT_STATUS_OK
ReadX 13854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13855 NT_STATUS_OK
ReadX 13855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13856 NT_STATUS_OK
ReadX 13856 0 8192 8192 NT_STATUS_OK
ReadX 13843 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13857 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13857 0 4096 4096 NT_STATUS_OK
ReadX 13857 4096 4096 4096 NT_STATUS_OK
ReadX 13857 8192 4096 4096 NT_STATUS_OK
WriteX 13843 0 4096 4096 NT_STATUS_OK
WriteX 13844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13858 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13858 0 4096 4096 NT_STATUS_OK
ReadX 13858 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13837 0 4096 4096 NT_STATUS_OK
WriteX 13838 0 4096 4096 NT_STATUS_OK
WriteX 13839 0 4096 4096 NT_STATUS_OK
WriteX 13840 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13863 NT_STATUS_OK
QUERY_FILE_INFORMATION 13863 1004 NT_STATUS_OK
WriteX 13863 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13863 258 NT_STATUS_OK
WriteX 13863 0 2048 2048 NT_STATUS_OK
Close 13863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13864 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 0 4096 4096 NT_STATUS_OK
ReadX 13866 4096 4096 4096 NT_STATUS_OK
WriteX 13866 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13868 NT_STATUS_OK
ReadX 13868 0 4096 4096 NT_STATUS_OK
ReadX 13868 4096 4096 4096 NT_STATUS_OK
WriteX 13868 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13869 NT_STATUS_OK
QUERY_FILE_INFORMATION 13869 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13856 NT_STATUS_OK
Close 13841 NT_STATUS_OK
Close 13837 NT_STATUS_OK
Close 13838 NT_STATUS_OK
Close 13839 NT_STATUS_OK
Close 13840 NT_STATUS_OK
Close 13849 NT_STATUS_OK
Close 13854 NT_STATUS_OK
Close 13850 NT_STATUS_OK
Close 13851 NT_STATUS_OK
Close 13852 NT_STATUS_OK
Close 13853 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Close 13843 NT_STATUS_OK
Close 13844 NT_STATUS_OK
Close 13847 NT_STATUS_OK
Close 13848 NT_STATUS_OK
Close 13845 NT_STATUS_OK
Close 13846 NT_STATUS_OK
Close 13868 NT_STATUS_OK
Close 13857 NT_STATUS_OK
Close 13858 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13871 0 4096 4096 NT_STATUS_OK
ReadX 13871 4096 4096 4096 NT_STATUS_OK
ReadX 13871 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13872 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13874 NT_STATUS_OK
ReadX 13874 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13875 NT_STATUS_OK
ReadX 13875 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13876 NT_STATUS_OK
ReadX 13876 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13878 NT_STATUS_OK
ReadX 13878 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13879 NT_STATUS_OK
ReadX 13879 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13880 NT_STATUS_OK
ReadX 13880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13881 NT_STATUS_OK
ReadX 13881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13882 NT_STATUS_OK
ReadX 13882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13883 NT_STATUS_OK
ReadX 13883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 4096 4096 NT_STATUS_OK
ReadX 13872 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13889 NT_STATUS_OK
QUERY_FILE_INFORMATION 13889 1004 NT_STATUS_OK
WriteX 13889 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13889 258 NT_STATUS_OK
WriteX 13889 0 2048 2048 NT_STATUS_OK
Close 13889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13890 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13894 NT_STATUS_OK
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13895 NT_STATUS_OK
QUERY_FILE_INFORMATION 13895 1004 NT_STATUS_OK
WriteX 13895 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13895 258 NT_STATUS_OK
WriteX 13895 0 2048 2048 NT_STATUS_OK
Close 13895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13896 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13879 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13897 NT_STATUS_OK
QUERY_FILE_INFORMATION 13897 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13883 NT_STATUS_OK
Close 13878 NT_STATUS_OK
Close 13884 NT_STATUS_OK
Close 13872 NT_STATUS_OK
Close 13873 NT_STATUS_OK
Close 13876 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Close 13874 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Close 13879 NT_STATUS_OK
Close 13880 NT_STATUS_OK
Close 13881 NT_STATUS_OK
Close 13882 NT_STATUS_OK
Close 13871 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13899 NT_STATUS_OK
QUERY_FILE_INFORMATION 13899 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13901 NT_STATUS_OK
ReadX 13901 61440 4096 4096 NT_STATUS_OK
ReadX 13901 126976 4096 4096 NT_STATUS_OK
WriteX 13901 0 65536 65536 NT_STATUS_OK
WriteX 13901 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13902 NT_STATUS_OK
ReadX 13902 61440 4096 4096 NT_STATUS_OK
ReadX 13902 126976 4096 4096 NT_STATUS_OK
ReadX 13902 192512 4096 4096 NT_STATUS_OK
ReadX 13902 258048 4096 4096 NT_STATUS_OK
WriteX 13902 0 65536 65536 NT_STATUS_OK
WriteX 13902 65536 65536 65536 NT_STATUS_OK
WriteX 13902 131072 65536 65536 NT_STATUS_OK
WriteX 13902 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 61440 4096 4096 NT_STATUS_OK
ReadX 13903 126976 4096 4096 NT_STATUS_OK
ReadX 13903 192512 4096 4096 NT_STATUS_OK
ReadX 13903 258048 4096 4096 NT_STATUS_OK
ReadX 13903 323584 4096 4096 NT_STATUS_OK
ReadX 13903 389120 4096 4096 NT_STATUS_OK
ReadX 13903 454656 4096 4096 NT_STATUS_OK
ReadX 13903 520192 4096 4096 NT_STATUS_OK
WriteX 13903 0 65536 65536 NT_STATUS_OK
WriteX 13903 65536 65536 65536 NT_STATUS_OK
WriteX 13903 131072 65536 65536 NT_STATUS_OK
WriteX 13903 196608 65536 65536 NT_STATUS_OK
WriteX 13903 262144 65536 65536 NT_STATUS_OK
WriteX 13903 327680 65536 65536 NT_STATUS_OK
WriteX 13903 393216 65536 65536 NT_STATUS_OK
WriteX 13903 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13904 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13904 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13904 8192 4096 4096 NT_STATUS_OK
ReadX 13904 12288 4096 4096 NT_STATUS_OK
ReadX 13904 16384 4096 4096 NT_STATUS_OK
ReadX 13904 20480 4096 4096 NT_STATUS_OK
ReadX 13904 24576 4096 4096 NT_STATUS_OK
ReadX 13904 28672 4096 4096 NT_STATUS_OK
ReadX 13904 32768 4096 4096 NT_STATUS_OK
ReadX 13904 36864 4096 4096 NT_STATUS_OK
ReadX 13904 40960 4096 4096 NT_STATUS_OK
ReadX 13904 45056 4096 4096 NT_STATUS_OK
ReadX 13904 49152 4096 4096 NT_STATUS_OK
ReadX 13904 53248 4096 4096 NT_STATUS_OK
ReadX 13904 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13904 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13905 NT_STATUS_OK
Close 13905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13901 NT_STATUS_OK
Close 13902 NT_STATUS_OK
Close 13903 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13907 NT_STATUS_OK
WriteX 13907 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13907 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13907 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13907 1004 NT_STATUS_OK
WriteX 13907 0 57088 57088 NT_STATUS_OK
WriteX 13907 0 4096 4096 NT_STATUS_OK
Flush 13907 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13908 NT_STATUS_OK
SET_FILE_INFORMATION 13908 1004 NT_STATUS_OK
Close 13908 NT_STATUS_OK
SET_FILE_INFORMATION 13907 1004 NT_STATUS_OK
WriteX 13907 0 4096 4096 NT_STATUS_OK
Close 13907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13909 NT_STATUS_OK
Close 13909 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13911 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13912 NT_STATUS_OK
WriteX 13912 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13912 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13912 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13912 1004 NT_STATUS_OK
WriteX 13912 0 51456 51456 NT_STATUS_OK
WriteX 13912 0 4096 4096 NT_STATUS_OK
Flush 13912 NT_STATUS_OK
SET_FILE_INFORMATION 13912 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13912 1004 NT_STATUS_OK
WriteX 13912 0 4096 4096 NT_STATUS_OK
Close 13912 NT_STATUS_OK
Close 13911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13916 NT_STATUS_OK
ReadX 13916 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13916 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13921 NT_STATUS_OK
WriteX 13921 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13921 258 NT_STATUS_OK
WriteX 13921 0 53077 53077 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13922 NT_STATUS_OK
WriteX 13922 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13922 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13922 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13922 1004 NT_STATUS_OK
WriteX 13922 0 65536 65536 NT_STATUS_OK
WriteX 13922 65536 1856 1856 NT_STATUS_OK
WriteX 13922 0 4096 4096 NT_STATUS_OK
Flush 13922 NT_STATUS_OK
SET_FILE_INFORMATION 13922 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13922 1004 NT_STATUS_OK
WriteX 13922 0 4096 4096 NT_STATUS_OK
Close 13922 NT_STATUS_OK
Close 13916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13931 NT_STATUS_OK
WriteX 13931 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 258 NT_STATUS_OK
WriteX 13931 0 7983 7983 NT_STATUS_OK
Close 13931 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13933 NT_STATUS_OK
Close 13933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13936 NT_STATUS_OK
WriteX 13936 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13936 258 NT_STATUS_OK
WriteX 13936 0 65536 65536 NT_STATUS_OK
WriteX 13936 65536 65536 65536 NT_STATUS_OK
WriteX 13936 131072 65536 65536 NT_STATUS_OK
WriteX 13936 196608 65536 65536 NT_STATUS_OK
WriteX 13936 262144 65536 65536 NT_STATUS_OK
WriteX 13936 327680 65536 65536 NT_STATUS_OK
WriteX 13936 393216 65536 65536 NT_STATUS_OK
WriteX 13936 458752 46731 46731 NT_STATUS_OK
Close 13936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13937 NT_STATUS_OK
WriteX 13937 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13937 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13926 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13937 1004 NT_STATUS_OK
WriteX 13937 0 65536 65536 NT_STATUS_OK
WriteX 13937 65536 22848 22848 NT_STATUS_OK
WriteX 13937 0 4096 4096 NT_STATUS_OK
Flush 13937 NT_STATUS_OK
SET_FILE_INFORMATION 13937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13937 1004 NT_STATUS_OK
WriteX 13937 0 4096 4096 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Close 13926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13939 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13941 NT_STATUS_OK
ReadX 13941 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13941 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13942 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13942 1004 NT_STATUS_OK
ReadX 13942 8192 4096 4096 NT_STATUS_OK
ReadX 13942 12288 4096 4096 NT_STATUS_OK
ReadX 13942 16384 4096 4096 NT_STATUS_OK
ReadX 13942 20480 4096 4096 NT_STATUS_OK
ReadX 13942 24576 4096 4096 NT_STATUS_OK
ReadX 13942 28672 4096 4096 NT_STATUS_OK
ReadX 13942 32768 4096 4096 NT_STATUS_OK
ReadX 13942 36864 4096 4096 NT_STATUS_OK
ReadX 13942 40960 4096 4096 NT_STATUS_OK
ReadX 13942 45056 4096 4096 NT_STATUS_OK
ReadX 13942 49152 4096 4096 NT_STATUS_OK
ReadX 13942 53248 4096 4096 NT_STATUS_OK
ReadX 13942 57344 4096 4096 NT_STATUS_OK
ReadX 13942 61440 4096 4096 NT_STATUS_OK
ReadX 13942 65536 4096 4096 NT_STATUS_OK
ReadX 13942 69632 4096 4096 NT_STATUS_OK
ReadX 13942 73728 4096 4096 NT_STATUS_OK
ReadX 13942 77824 4096 4096 NT_STATUS_OK
ReadX 13942 81920 4096 4096 NT_STATUS_OK
ReadX 13942 86016 4096 4096 NT_STATUS_OK
ReadX 13942 90112 4096 4096 NT_STATUS_OK
ReadX 13942 94208 4096 4096 NT_STATUS_OK
ReadX 13942 98304 4096 4096 NT_STATUS_OK
ReadX 13942 102400 4096 4096 NT_STATUS_OK
ReadX 13942 106496 4096 4096 NT_STATUS_OK
ReadX 13942 110592 4096 4096 NT_STATUS_OK
ReadX 13942 114688 4096 4096 NT_STATUS_OK
ReadX 13942 118784 4096 4096 NT_STATUS_OK
ReadX 13942 122880 4096 4096 NT_STATUS_OK
ReadX 13942 126976 4096 4096 NT_STATUS_OK
ReadX 13942 131072 4096 4096 NT_STATUS_OK
ReadX 13942 135168 4096 4096 NT_STATUS_OK
ReadX 13942 139264 4096 4096 NT_STATUS_OK
ReadX 13942 143360 4096 4096 NT_STATUS_OK
ReadX 13942 147456 4096 4096 NT_STATUS_OK
ReadX 13942 151552 4096 4096 NT_STATUS_OK
ReadX 13942 155648 4096 4096 NT_STATUS_OK
ReadX 13942 159744 4096 4096 NT_STATUS_OK
ReadX 13942 163840 4096 4096 NT_STATUS_OK
ReadX 13942 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13942 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13943 NT_STATUS_OK
Close 13943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13945 NT_STATUS_OK
WriteX 13945 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13945 258 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13946 NT_STATUS_OK
SET_FILE_INFORMATION 13946 1004 NT_STATUS_OK
Close 13946 NT_STATUS_OK
WriteX 13945 0 42388 42388 NT_STATUS_OK
Close 13945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13947 NT_STATUS_OK
Close 13947 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13949 NT_STATUS_OK
ReadX 13949 0 4096 4096 NT_STATUS_OK
ReadX 13949 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13950 NT_STATUS_OK
WriteX 13950 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 258 NT_STATUS_OK
SET_FILE_INFORMATION 13950 1004 NT_STATUS_OK
WriteX 13950 0 42652 42652 NT_STATUS_OK
Close 13950 NT_STATUS_OK
Close 13949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13952 NT_STATUS_OK
Close 13952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13954 NT_STATUS_OK
ReadX 13954 0 4096 4096 NT_STATUS_OK
ReadX 13954 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13959 NT_STATUS_OK
WriteX 13959 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13959 258 NT_STATUS_OK
WriteX 13959 0 65536 65536 NT_STATUS_OK
WriteX 13959 65536 49 49 NT_STATUS_OK
Close 13959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 61440 61440 NT_STATUS_OK
ReadX 13960 61440 4096 4096 NT_STATUS_OK
ReadX 13960 65536 61440 61440 NT_STATUS_OK
ReadX 13960 126976 4096 4096 NT_STATUS_OK
ReadX 13960 131072 61440 61440 NT_STATUS_OK
ReadX 13960 192512 4096 4096 NT_STATUS_OK
ReadX 13960 196608 61440 61440 NT_STATUS_OK
ReadX 13960 258048 4096 4096 NT_STATUS_OK
ReadX 13960 262144 61440 61440 NT_STATUS_OK
ReadX 13960 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13961 NT_STATUS_OK
ReadX 13961 0 61440 61440 NT_STATUS_OK
ReadX 13961 61440 4096 4096 NT_STATUS_OK
ReadX 13961 65536 61440 61440 NT_STATUS_OK
ReadX 13961 126976 4096 4096 NT_STATUS_OK
ReadX 13961 131072 61440 61440 NT_STATUS_OK
ReadX 13961 192512 4096 4096 NT_STATUS_OK
ReadX 13961 196608 61440 61440 NT_STATUS_OK
ReadX 13961 258048 4096 4096 NT_STATUS_OK
ReadX 13961 262144 61440 61440 NT_STATUS_OK
ReadX 13961 323584 4096 4096 NT_STATUS_OK
ReadX 13961 327680 61440 61440 NT_STATUS_OK
ReadX 13961 389120 4096 4096 NT_STATUS_OK
ReadX 13961 393216 61440 61440 NT_STATUS_OK
ReadX 13961 454656 4096 4096 NT_STATUS_OK
ReadX 13961 458752 61440 61440 NT_STATUS_OK
ReadX 13961 520192 4096 4096 NT_STATUS_OK
ReadX 13961 524288 61440 61440 NT_STATUS_OK
ReadX 13961 585728 4096 4096 NT_STATUS_OK
ReadX 13961 589824 61440 61440 NT_STATUS_OK
ReadX 13961 651264 4096 4096 NT_STATUS_OK
ReadX 13961 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13962 NT_STATUS_OK
ReadX 13962 0 61440 61440 NT_STATUS_OK
ReadX 13962 61440 4096 4096 NT_STATUS_OK
ReadX 13962 65536 61440 61440 NT_STATUS_OK
ReadX 13962 126976 4096 4096 NT_STATUS_OK
ReadX 13962 131072 61440 61440 NT_STATUS_OK
ReadX 13962 192512 4096 4096 NT_STATUS_OK
ReadX 13962 196608 61440 61440 NT_STATUS_OK
ReadX 13962 258048 4096 4096 NT_STATUS_OK
ReadX 13962 262144 61440 61440 NT_STATUS_OK
ReadX 13962 323584 4096 4096 NT_STATUS_OK
ReadX 13962 327680 61440 61440 NT_STATUS_OK
ReadX 13962 389120 4096 4096 NT_STATUS_OK
ReadX 13962 393216 61440 61440 NT_STATUS_OK
ReadX 13962 454656 4096 4096 NT_STATUS_OK
ReadX 13962 458752 61440 61440 NT_STATUS_OK
ReadX 13962 520192 4096 4096 NT_STATUS_OK
ReadX 13962 524288 61440 61440 NT_STATUS_OK
ReadX 13962 585728 4096 4096 NT_STATUS_OK
ReadX 13962 589824 61440 61440 NT_STATUS_OK
ReadX 13962 651264 4096 4096 NT_STATUS_OK
ReadX 13962 655360 61440 61440 NT_STATUS_OK
ReadX 13962 716800 4096 4096 NT_STATUS_OK
ReadX 13962 720896 61440 61440 NT_STATUS_OK
ReadX 13962 782336 4096 4096 NT_STATUS_OK
ReadX 13962 786432 61440 61440 NT_STATUS_OK
ReadX 13962 847872 4096 4096 NT_STATUS_OK
ReadX 13962 851968 61440 61440 NT_STATUS_OK
ReadX 13962 913408 4096 4096 NT_STATUS_OK
ReadX 13962 917504 61440 61440 NT_STATUS_OK
ReadX 13962 978944 4096 4096 NT_STATUS_OK
ReadX 13962 983040 61440 61440 NT_STATUS_OK
ReadX 13962 1044480 4096 4096 NT_STATUS_OK
ReadX 13962 1048576 61440 61440 NT_STATUS_OK
ReadX 13962 1110016 4096 4096 NT_STATUS_OK
ReadX 13962 1114112 61440 61440 NT_STATUS_OK
ReadX 13962 1175552 4096 4096 NT_STATUS_OK
ReadX 13962 1179648 61440 61440 NT_STATUS_OK
ReadX 13962 1241088 4096 4096 NT_STATUS_OK
ReadX 13962 1245184 61440 61440 NT_STATUS_OK
ReadX 13962 1306624 4096 4096 NT_STATUS_OK
ReadX 13962 1310720 61440 61440 NT_STATUS_OK
ReadX 13962 1372160 4096 4096 NT_STATUS_OK
ReadX 13962 1376256 61440 61440 NT_STATUS_OK
ReadX 13962 1437696 4096 4096 NT_STATUS_OK
ReadX 13962 1441792 61440 61440 NT_STATUS_OK
ReadX 13962 1503232 4096 4096 NT_STATUS_OK
ReadX 13962 1507328 61440 61440 NT_STATUS_OK
ReadX 13962 1568768 4096 4096 NT_STATUS_OK
ReadX 13962 1572864 61440 61440 NT_STATUS_OK
ReadX 13962 1634304 4096 4096 NT_STATUS_OK
ReadX 13962 1638400 61440 61440 NT_STATUS_OK
ReadX 13962 1699840 4096 4096 NT_STATUS_OK
ReadX 13962 1703936 61440 61440 NT_STATUS_OK
ReadX 13962 1765376 4096 4096 NT_STATUS_OK
ReadX 13962 1769472 61440 61440 NT_STATUS_OK
ReadX 13962 1830912 4096 4096 NT_STATUS_OK
ReadX 13962 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13964 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 1005 NT_STATUS_OK
ReadX 13964 2156 24 24 NT_STATUS_OK
ReadX 13964 2139 276 276 NT_STATUS_OK
ReadX 13964 2136 14 14 NT_STATUS_OK
ReadX 13964 2136 7 7 NT_STATUS_OK
ReadX 13964 2138 12 12 NT_STATUS_OK
ReadX 13964 2137 8 8 NT_STATUS_OK
ReadX 13964 2135 15 15 NT_STATUS_OK
ReadX 13964 0 16 16 NT_STATUS_OK
ReadX 13964 16 2048 2048 NT_STATUS_OK
ReadX 13964 2064 2048 2048 NT_STATUS_OK
ReadX 13964 257 2048 2048 NT_STATUS_OK
ReadX 13964 385 2048 2048 NT_STATUS_OK
ReadX 13964 513 2048 2048 NT_STATUS_OK
ReadX 13964 641 2048 2048 NT_STATUS_OK
ReadX 13964 769 2048 2048 NT_STATUS_OK
ReadX 13964 897 2048 2048 NT_STATUS_OK
ReadX 13964 1025 2048 2048 NT_STATUS_OK
ReadX 13964 1153 2048 2048 NT_STATUS_OK
ReadX 13964 1281 2048 2048 NT_STATUS_OK
ReadX 13964 1409 2048 2048 NT_STATUS_OK
ReadX 13964 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13966 NT_STATUS_OK
Close 13966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13960 NT_STATUS_OK
Close 13961 NT_STATUS_OK
Close 13962 NT_STATUS_OK
Close 13954 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13969 NT_STATUS_OK
WriteX 13969 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13969 258 NT_STATUS_OK
WriteX 13969 0 10575 10575 NT_STATUS_OK
Flush 13969 NT_STATUS_OK
Close 13969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13972 NT_STATUS_OK
ReadX 13972 0 4096 4096 NT_STATUS_OK
Close 13964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13974 NT_STATUS_OK
LockX 13974 2147483538 1 NT_STATUS_OK
UnlockX 13974 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13974 1005 NT_STATUS_OK
ReadX 13974 0 512 512 NT_STATUS_OK
ReadX 13974 512 512 512 NT_STATUS_OK
ReadX 13974 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13974 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13974 1004 NT_STATUS_OK
Close 13974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13975 NT_STATUS_OK
QUERY_FILE_INFORMATION 13975 1005 NT_STATUS_OK
ReadX 13975 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13976 NT_STATUS_OK
LockX 13976 2147483538 1 NT_STATUS_OK
UnlockX 13976 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13976 1005 NT_STATUS_OK
ReadX 13976 0 512 512 NT_STATUS_OK
ReadX 13976 512 512 512 NT_STATUS_OK
ReadX 13976 1024 512 512 NT_STATUS_OK
ReadX 13976 288 20 20 NT_STATUS_OK
ReadX 13976 308 2084 2084 NT_STATUS_OK
ReadX 13976 388 2084 2084 NT_STATUS_OK
ReadX 13976 388 2084 2084 NT_STATUS_OK
ReadX 13963 2157 1386 1386 NT_STATUS_OK
ReadX 13976 2472 399 399 NT_STATUS_OK
ReadX 13976 3072 1536 1536 NT_STATUS_OK
ReadX 13976 544 149 149 NT_STATUS_OK
ReadX 13976 693 485 485 NT_STATUS_OK
Close 13976 NT_STATUS_OK
ReadX 13963 2157 4096 4096 NT_STATUS_OK
ReadX 13963 6253 4096 4096 NT_STATUS_OK
ReadX 13963 10349 4096 4096 NT_STATUS_OK
ReadX 13963 14445 4096 4096 NT_STATUS_OK
ReadX 13963 18541 4096 4096 NT_STATUS_OK
ReadX 13963 22637 256 256 NT_STATUS_OK
ReadX 13963 22893 4096 4096 NT_STATUS_OK
ReadX 13963 26989 4096 4096 NT_STATUS_OK
ReadX 13963 31085 4096 4096 NT_STATUS_OK
ReadX 13963 35181 4096 4096 NT_STATUS_OK
ReadX 13963 39277 4096 4096 NT_STATUS_OK
ReadX 13963 43373 4096 4096 NT_STATUS_OK
ReadX 13963 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13963 2157 1024 1024 NT_STATUS_OK
ReadX 13963 1667 4688 4688 NT_STATUS_OK
ReadX 13963 6355 3516 3516 NT_STATUS_OK
ReadX 13963 9871 16384 16384 NT_STATUS_OK
ReadX 13963 26255 3771 3771 NT_STATUS_OK
ReadX 13963 30026 2048 2048 NT_STATUS_OK
ReadX 13963 32074 1024 1024 NT_STATUS_OK
ReadX 13963 33098 6652 6652 NT_STATUS_OK
ReadX 13963 39750 16384 16384 NT_STATUS_OK
ReadX 13963 56134 10496 10496 NT_STATUS_OK
ReadX 13963 66630 1784 1784 NT_STATUS_OK
ReadX 13963 68414 90 90 NT_STATUS_OK
ReadX 13963 68504 273 273 NT_STATUS_OK
ReadX 13963 68777 1600 1600 NT_STATUS_OK
ReadX 13963 70377 640 640 NT_STATUS_OK
ReadX 13963 71017 1280 1280 NT_STATUS_OK
ReadX 13963 72297 8464 8464 NT_STATUS_OK
ReadX 13963 80761 158 158 NT_STATUS_OK
ReadX 13963 80919 912 912 NT_STATUS_OK
ReadX 13963 81831 1980 1980 NT_STATUS_OK
ReadX 13963 83811 2256 2256 NT_STATUS_OK
ReadX 13963 86067 400 400 NT_STATUS_OK
ReadX 13963 86467 252 252 NT_STATUS_OK
ReadX 13963 86719 42 42 NT_STATUS_OK
ReadX 13963 86761 725 725 NT_STATUS_OK
ReadX 13963 2009 512 512 NT_STATUS_OK
ReadX 13963 3895 9 9 NT_STATUS_OK
ReadX 13963 3781 46 46 NT_STATUS_OK
ReadX 13963 4059 92 92 NT_STATUS_OK
ReadX 13963 3781 92 92 NT_STATUS_OK
ReadX 13963 3986 184 184 NT_STATUS_OK
ReadX 13963 3987 16384 16384 NT_STATUS_OK
ReadX 13963 3902 16384 16384 NT_STATUS_OK
ReadX 13963 3781 10240 10240 NT_STATUS_OK
ReadX 13963 3821 16384 16384 NT_STATUS_OK
ReadX 13963 3891 935 935 NT_STATUS_OK
ReadX 13963 4060 10240 10240 NT_STATUS_OK
ReadX 13963 4059 184 184 NT_STATUS_OK
ReadX 13963 256 184 184 NT_STATUS_OK
ReadX 13963 256 1026 1026 NT_STATUS_OK
ReadX 13963 3901 326 326 NT_STATUS_OK
ReadX 13963 3899 652 652 NT_STATUS_OK
ReadX 13963 256 2 2 NT_STATUS_OK
ReadX 13963 258 4948 4948 NT_STATUS_OK
Close 13963 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13978 NT_STATUS_OK
Close 13978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13981 NT_STATUS_OK
WriteX 13981 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13981 258 NT_STATUS_OK
WriteX 13981 0 65536 65536 NT_STATUS_OK
WriteX 13981 65536 65536 65536 NT_STATUS_OK
WriteX 13981 131072 65536 65536 NT_STATUS_OK
WriteX 13981 196608 65536 65536 NT_STATUS_OK
WriteX 13981 262144 65536 65536 NT_STATUS_OK
WriteX 13981 327680 65536 65536 NT_STATUS_OK
WriteX 13981 393216 65536 65536 NT_STATUS_OK
WriteX 13981 458752 65536 65536 NT_STATUS_OK
WriteX 13981 524288 65536 65536 NT_STATUS_OK
WriteX 13981 589824 35257 35257 NT_STATUS_OK
Close 13981 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13983 NT_STATUS_OK
Close 13983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13986 NT_STATUS_OK
WriteX 13986 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13986 258 NT_STATUS_OK
WriteX 13986 0 65536 65536 NT_STATUS_OK
WriteX 13986 65536 65536 65536 NT_STATUS_OK
WriteX 13986 131072 65536 65536 NT_STATUS_OK
WriteX 13986 196608 65536 65536 NT_STATUS_OK
WriteX 13986 262144 65536 65536 NT_STATUS_OK
WriteX 13986 327680 65536 65536 NT_STATUS_OK
WriteX 13986 393216 65536 65536 NT_STATUS_OK
WriteX 13986 458752 65536 65536 NT_STATUS_OK
WriteX 13986 524288 65536 65536 NT_STATUS_OK
WriteX 13986 589824 57598 57598 NT_STATUS_OK
Close 13986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13988 NT_STATUS_OK
WriteX 13988 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13988 258 NT_STATUS_OK
WriteX 13988 0 12543 12543 NT_STATUS_OK
Flush 13988 NT_STATUS_OK
Close 13988 NT_STATUS_OK
Close 13972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13990 NT_STATUS_OK
Close 13990 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13994 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 1005 NT_STATUS_OK
ReadX 13994 1938 24 24 NT_STATUS_OK
ReadX 13994 1920 276 276 NT_STATUS_OK
ReadX 13994 1918 14 14 NT_STATUS_OK
ReadX 13994 1918 7 7 NT_STATUS_OK
ReadX 13994 1919 12 12 NT_STATUS_OK
ReadX 13994 1919 8 8 NT_STATUS_OK
ReadX 13994 1917 15 15 NT_STATUS_OK
ReadX 13994 0 16 16 NT_STATUS_OK
ReadX 13994 16 2048 2048 NT_STATUS_OK
ReadX 13994 2064 2048 2048 NT_STATUS_OK
ReadX 13994 257 2048 2048 NT_STATUS_OK
ReadX 13994 385 2048 2048 NT_STATUS_OK
ReadX 13994 513 2048 2048 NT_STATUS_OK
ReadX 13994 641 2048 2048 NT_STATUS_OK
ReadX 13994 769 2048 2048 NT_STATUS_OK
ReadX 13994 897 2048 2048 NT_STATUS_OK
ReadX 13994 1025 2048 2048 NT_STATUS_OK
ReadX 13994 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13996 NT_STATUS_OK
Close 13996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13999 NT_STATUS_OK
WriteX 13999 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13999 258 NT_STATUS_OK
WriteX 13999 0 11588 11588 NT_STATUS_OK
Flush 13999 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 14000 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
Close 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 14004 NT_STATUS_OK
WriteX 14004 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14004 258 NT_STATUS_OK
WriteX 14004 0 11615 11615 NT_STATUS_OK
Flush 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 14002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 14006 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 14008 NT_STATUS_OK
ReadX 14008 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 14010 NT_STATUS_OK
Close 14010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 14013 NT_STATUS_OK
WriteX 14013 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14013 258 NT_STATUS_OK
WriteX 14013 0 65536 65536 NT_STATUS_OK
WriteX 14013 65536 16050 16050 NT_STATUS_OK
Close 14013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13993 1939 64 64 NT_STATUS_OK
ReadX 13993 128 248 248 NT_STATUS_OK
ReadX 13993 128 568 568 NT_STATUS_OK
ReadX 13993 3872 1536 1536 NT_STATUS_OK
ReadX 13993 3456 2560 2560 NT_STATUS_OK
ReadX 13993 3136 512 512 NT_STATUS_OK
ReadX 13993 2880 4096 4096 NT_STATUS_OK
ReadX 13993 3264 3072 3072 NT_STATUS_OK
ReadX 13993 320 4096 4096 NT_STATUS_OK
ReadX 13993 1024 4096 4096 NT_STATUS_OK
ReadX 13993 3616 4096 4096 NT_STATUS_OK
ReadX 13993 1939 64 64 NT_STATUS_OK
ReadX 13993 128 248 248 NT_STATUS_OK
ReadX 13993 128 608 608 NT_STATUS_OK
ReadX 13993 2858 1024 1024 NT_STATUS_OK
ReadX 13993 2810 4096 4096 NT_STATUS_OK
ReadX 13993 2826 4096 4096 NT_STATUS_OK
ReadX 13993 2580 2048 2048 NT_STATUS_OK
ReadX 13993 2800 2560 2560 NT_STATUS_OK
ReadX 13993 2100 4096 4096 NT_STATUS_OK
ReadX 13993 2084 4096 4096 NT_STATUS_OK
ReadX 13993 868 4096 4096 NT_STATUS_OK
ReadX 13993 2324 4096 4096 NT_STATUS_OK
ReadX 13993 884 4096 4096 NT_STATUS_OK
ReadX 13993 2604 1024 1024 NT_STATUS_OK
ReadX 13993 580 4096 4096 NT_STATUS_OK
ReadX 13993 596 4096 4096 NT_STATUS_OK
ReadX 13993 2752 4096 4096 NT_STATUS_OK
ReadX 13993 2842 1024 1024 NT_STATUS_OK
ReadX 13993 660 4096 4096 NT_STATUS_OK
ReadX 13993 2720 4096 4096 NT_STATUS_OK
ReadX 13993 2736 4096 4096 NT_STATUS_OK
ReadX 13993 628 4096 4096 NT_STATUS_OK
ReadX 13993 2704 4096 4096 NT_STATUS_OK
ReadX 13993 1556 4096 4096 NT_STATUS_OK
ReadX 13993 576 4096 4096 NT_STATUS_OK
ReadX 13993 3168 1536 1536 NT_STATUS_OK
ReadX 13993 832 4096 4096 NT_STATUS_OK
ReadX 13993 1088 4096 4096 NT_STATUS_OK
ReadX 13993 1344 4096 4096 NT_STATUS_OK
ReadX 13993 1600 4096 4096 NT_STATUS_OK
ReadX 13993 1856 4096 4096 NT_STATUS_OK
ReadX 13993 2112 4096 4096 NT_STATUS_OK
ReadX 13993 1892 4096 4096 NT_STATUS_OK
ReadX 13993 820 4096 4096 NT_STATUS_OK
ReadX 13993 788 4096 4096 NT_STATUS_OK
ReadX 13993 1604 4096 4096 NT_STATUS_OK
ReadX 13993 3648 4096 4096 NT_STATUS_OK
ReadX 13993 2608 4096 4096 NT_STATUS_OK
ReadX 13993 548 4096 4096 NT_STATUS_OK
ReadX 13993 740 4096 4096 NT_STATUS_OK
ReadX 13993 1344 4096 4096 NT_STATUS_OK
ReadX 13993 3392 4096 4096 NT_STATUS_OK
ReadX 13993 3904 4096 4096 NT_STATUS_OK
ReadX 13993 644 4096 4096 NT_STATUS_OK
ReadX 13993 676 4096 4096 NT_STATUS_OK
ReadX 13993 2688 4096 4096 NT_STATUS_OK
ReadX 13993 320 4096 4096 NT_STATUS_OK
ReadX 13993 900 4096 4096 NT_STATUS_OK
ReadX 13993 1908 4096 4096 NT_STATUS_OK
ReadX 13993 852 4096 4096 NT_STATUS_OK
ReadX 13993 724 4096 4096 NT_STATUS_OK
ReadX 13993 2292 4096 4096 NT_STATUS_OK
ReadX 13993 612 4096 4096 NT_STATUS_OK
ReadX 13993 388 4096 4096 NT_STATUS_OK
ReadX 13993 2368 4096 4096 NT_STATUS_OK
ReadX 13993 2624 4096 4096 NT_STATUS_OK
ReadX 13993 500 4096 4096 NT_STATUS_OK
ReadX 13993 356 4096 4096 NT_STATUS_OK
ReadX 13993 1024 4096 4096 NT_STATUS_OK
ReadX 13993 576 4096 4096 NT_STATUS_OK
ReadX 13993 340 4096 4096 NT_STATUS_OK
ReadX 13993 420 4096 4096 NT_STATUS_OK
ReadX 13993 1600 4096 4096 NT_STATUS_OK
ReadX 13993 404 4096 4096 NT_STATUS_OK
ReadX 13993 1428 4096 4096 NT_STATUS_OK
ReadX 13993 2656 4096 4096 NT_STATUS_OK
ReadX 13993 2624 4096 4096 NT_STATUS_OK
ReadX 13993 452 4096 4096 NT_STATUS_OK
ReadX 13993 692 4096 4096 NT_STATUS_OK
ReadX 13993 564 4096 4096 NT_STATUS_OK
ReadX 13993 372 4096 4096 NT_STATUS_OK
ReadX 13993 468 4096 4096 NT_STATUS_OK
ReadX 13993 484 4096 4096 NT_STATUS_OK
ReadX 13993 1088 4096 4096 NT_STATUS_OK
ReadX 13993 1924 4096 4096 NT_STATUS_OK
ReadX 13993 2768 4096 4096 NT_STATUS_OK
ReadX 13993 832 4096 4096 NT_STATUS_OK
ReadX 13993 836 4096 4096 NT_STATUS_OK
ReadX 13993 1856 4096 4096 NT_STATUS_OK
ReadX 13993 2640 4096 4096 NT_STATUS_OK
ReadX 13993 436 4096 4096 NT_STATUS_OK
ReadX 13993 1828 4096 4096 NT_STATUS_OK
ReadX 13993 804 4096 4096 NT_STATUS_OK
ReadX 13993 1860 4096 4096 NT_STATUS_OK
ReadX 13993 1812 4096 4096 NT_STATUS_OK
ReadX 13993 756 4096 4096 NT_STATUS_OK
ReadX 13993 1636 4096 4096 NT_STATUS_OK
ReadX 13993 772 4096 4096 NT_STATUS_OK
ReadX 13993 2036 4096 4096 NT_STATUS_OK
ReadX 13993 1220 4096 4096 NT_STATUS_OK
ReadX 13993 1652 4096 4096 NT_STATUS_OK
ReadX 13993 2588 4096 4096 NT_STATUS_OK
ReadX 13993 916 4096 4096 NT_STATUS_OK
ReadX 13993 260 4096 4096 NT_STATUS_OK
ReadX 13993 932 4096 4096 NT_STATUS_OK
ReadX 13993 2624 4096 4096 NT_STATUS_OK
ReadX 13993 308 4096 4096 NT_STATUS_OK
ReadX 13993 292 4096 4096 NT_STATUS_OK
ReadX 13993 1140 4096 4096 NT_STATUS_OK
ReadX 13993 276 4096 4096 NT_STATUS_OK
ReadX 13993 2020 4096 4096 NT_STATUS_OK
ReadX 13993 2880 4096 4096 NT_STATUS_OK
ReadX 13993 516 4096 4096 NT_STATUS_OK
ReadX 13993 1844 4096 4096 NT_STATUS_OK
ReadX 13993 1124 4096 4096 NT_STATUS_OK
ReadX 13993 3136 4096 4096 NT_STATUS_OK
ReadX 13993 324 4096 4096 NT_STATUS_OK
ReadX 13993 1156 4096 4096 NT_STATUS_OK
ReadX 13993 1172 4096 4096 NT_STATUS_OK
ReadX 13993 2112 4096 4096 NT_STATUS_OK
ReadX 13993 2368 4096 4096 NT_STATUS_OK
ReadX 13993 964 4096 4096 NT_STATUS_OK
ReadX 13993 980 4096 4096 NT_STATUS_OK
ReadX 13993 1012 4096 4096 NT_STATUS_OK
ReadX 13993 532 4096 4096 NT_STATUS_OK
ReadX 13993 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13993 1620 4096 4096 NT_STATUS_OK
ReadX 13993 1604 4096 4096 NT_STATUS_OK
ReadX 13993 2116 4096 4096 NT_STATUS_OK
ReadX 13993 2132 4096 4096 NT_STATUS_OK
ReadX 13993 2148 4096 4096 NT_STATUS_OK
ReadX 13993 2276 4096 4096 NT_STATUS_OK
ReadX 13993 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 14015 NT_STATUS_OK
Close 14015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 14018 NT_STATUS_OK
QUERY_FILE_INFORMATION 13973 1004 NT_STATUS_OK
Close 13973 NT_STATUS_OK
WriteX 14018 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14018 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13975 1004 NT_STATUS_OK
Close 13975 NT_STATUS_OK
WriteX 14018 0 65536 65536 NT_STATUS_OK
WriteX 14018 65536 64850 64850 NT_STATUS_OK
Close 14018 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 14020 NT_STATUS_OK
WriteX 14020 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14020 258 NT_STATUS_OK
ReadX 13993 2068 4096 4096 NT_STATUS_OK
ReadX 13993 1588 4096 4096 NT_STATUS_OK
ReadX 13993 1572 4096 4096 NT_STATUS_OK
WriteX 14020 0 18630 18630 NT_STATUS_OK
Flush 14020 NT_STATUS_OK
Close 14020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 14008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 14022 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 14024 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13993 612 4096 4096 NT_STATUS_OK
ReadX 13993 564 4096 4096 NT_STATUS_OK
ReadX 13993 1876 4096 4096 NT_STATUS_OK
ReadX 13993 628 4096 4096 NT_STATUS_OK
ReadX 13993 740 4096 4096 NT_STATUS_OK
ReadX 13993 724 4096 4096 NT_STATUS_OK
ReadX 13993 644 4096 4096 NT_STATUS_OK
ReadX 13993 2324 4096 4096 NT_STATUS_OK
ReadX 13993 660 4096 4096 NT_STATUS_OK
ReadX 13993 852 4096 4096 NT_STATUS_OK
ReadX 13993 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13993 2368 4096 4096 NT_STATUS_OK
ReadX 13993 1024 4096 4096 NT_STATUS_OK
ReadX 13993 320 4096 4096 NT_STATUS_OK
ReadX 13993 580 4096 4096 NT_STATUS_OK
ReadX 13993 3136 512 512 NT_STATUS_OK
ReadX 13993 2880 4096 4096 NT_STATUS_OK
Close 13993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 61440 4096 4096 NT_STATUS_OK
ReadX 14025 126976 4096 4096 NT_STATUS_OK
WriteX 14025 0 65536 65536 NT_STATUS_OK
WriteX 14025 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14026 NT_STATUS_OK
ReadX 14026 61440 4096 4096 NT_STATUS_OK
ReadX 14026 126976 4096 4096 NT_STATUS_OK
ReadX 14026 192512 4096 4096 NT_STATUS_OK
ReadX 14026 258048 4096 4096 NT_STATUS_OK
WriteX 14026 0 65536 65536 NT_STATUS_OK
WriteX 14026 65536 65536 65536 NT_STATUS_OK
WriteX 14026 131072 65536 65536 NT_STATUS_OK
WriteX 14026 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 61440 4096 4096 NT_STATUS_OK
ReadX 14027 126976 4096 4096 NT_STATUS_OK
ReadX 14027 192512 4096 4096 NT_STATUS_OK
ReadX 14027 258048 4096 4096 NT_STATUS_OK
ReadX 14027 323584 4096 4096 NT_STATUS_OK
ReadX 14027 389120 4096 4096 NT_STATUS_OK
ReadX 14027 454656 4096 4096 NT_STATUS_OK
ReadX 14027 520192 4096 4096 NT_STATUS_OK
WriteX 14027 0 65536 65536 NT_STATUS_OK
WriteX 14027 65536 65536 65536 NT_STATUS_OK
WriteX 14027 131072 65536 65536 NT_STATUS_OK
WriteX 14027 196608 65536 65536 NT_STATUS_OK
WriteX 14027 262144 65536 65536 NT_STATUS_OK
WriteX 14027 327680 65536 65536 NT_STATUS_OK
WriteX 14027 393216 65536 65536 NT_STATUS_OK
WriteX 14027 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 14029 NT_STATUS_OK
Close 14029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 14030 NT_STATUS_OK
WriteX 14030 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14030 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14028 0 8192 8192 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14028 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14028 0 8192 8192 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14028 0 8192 8192 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 14028 0 8192 8192 NT_STATUS_OK
Flush 14028 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 14032 NT_STATUS_OK
Close 14032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 14024 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 14025 NT_STATUS_OK
Close 14026 NT_STATUS_OK
Close 14027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 14035 NT_STATUS_OK
WriteX 14035 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14035 258 NT_STATUS_OK
WriteX 14035 0 62591 62591 NT_STATUS_OK
Close 14035 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 14037 NT_STATUS_OK
Close 14037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 14040 NT_STATUS_OK
WriteX 14040 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14040 258 NT_STATUS_OK
WriteX 14040 0 10845 10845 NT_STATUS_OK
Close 14040 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 14042 NT_STATUS_OK
Close 14042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 14045 NT_STATUS_OK
WriteX 14045 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14045 258 NT_STATUS_OK
WriteX 14045 0 30118 30118 NT_STATUS_OK
Close 14045 NT_STATUS_OK
WriteX 14028 0 4096 4096 NT_STATUS_OK
WriteX 14030 0 64 64 NT_STATUS_OK
Close 14030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 14028 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 61440 61440 NT_STATUS_OK
ReadX 14047 61440 4096 4096 NT_STATUS_OK
ReadX 14047 65536 61440 61440 NT_STATUS_OK
ReadX 14047 126976 4096 4096 NT_STATUS_OK
ReadX 14047 131072 61440 61440 NT_STATUS_OK
ReadX 14047 192512 4096 4096 NT_STATUS_OK
ReadX 14047 196608 61440 61440 NT_STATUS_OK
ReadX 14047 258048 4096 4096 NT_STATUS_OK
ReadX 14047 262144 61440 61440 NT_STATUS_OK
ReadX 14047 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 61440 61440 NT_STATUS_OK
ReadX 14048 61440 4096 4096 NT_STATUS_OK
ReadX 14048 65536 61440 61440 NT_STATUS_OK
ReadX 14048 126976 4096 4096 NT_STATUS_OK
ReadX 14048 131072 61440 61440 NT_STATUS_OK
ReadX 14048 192512 4096 4096 NT_STATUS_OK
ReadX 14048 196608 61440 61440 NT_STATUS_OK
ReadX 14048 258048 4096 4096 NT_STATUS_OK
ReadX 14048 262144 61440 61440 NT_STATUS_OK
ReadX 14048 323584 4096 4096 NT_STATUS_OK
ReadX 14048 327680 61440 61440 NT_STATUS_OK
ReadX 14048 389120 4096 4096 NT_STATUS_OK
ReadX 14048 393216 61440 61440 NT_STATUS_OK
ReadX 14048 454656 4096 4096 NT_STATUS_OK
ReadX 14048 458752 61440 61440 NT_STATUS_OK
ReadX 14048 520192 4096 4096 NT_STATUS_OK
ReadX 14048 524288 61440 61440 NT_STATUS_OK
ReadX 14048 585728 4096 4096 NT_STATUS_OK
ReadX 14048 589824 61440 61440 NT_STATUS_OK
ReadX 14048 651264 4096 4096 NT_STATUS_OK
ReadX 14048 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 61440 61440 NT_STATUS_OK
ReadX 14049 61440 4096 4096 NT_STATUS_OK
ReadX 14049 65536 61440 61440 NT_STATUS_OK
ReadX 14049 126976 4096 4096 NT_STATUS_OK
ReadX 14049 131072 61440 61440 NT_STATUS_OK
ReadX 14049 192512 4096 4096 NT_STATUS_OK
ReadX 14049 196608 61440 61440 NT_STATUS_OK
ReadX 14049 258048 4096 4096 NT_STATUS_OK
ReadX 14049 262144 61440 61440 NT_STATUS_OK
ReadX 14049 323584 4096 4096 NT_STATUS_OK
ReadX 14049 327680 61440 61440 NT_STATUS_OK
ReadX 14049 389120 4096 4096 NT_STATUS_OK
ReadX 14049 393216 61440 61440 NT_STATUS_OK
ReadX 14049 454656 4096 4096 NT_STATUS_OK
ReadX 14049 458752 61440 61440 NT_STATUS_OK
ReadX 14049 520192 4096 4096 NT_STATUS_OK
ReadX 14049 524288 61440 61440 NT_STATUS_OK
ReadX 14049 585728 4096 4096 NT_STATUS_OK
ReadX 14049 589824 61440 61440 NT_STATUS_OK
ReadX 14049 651264 4096 4096 NT_STATUS_OK
ReadX 14049 655360 61440 61440 NT_STATUS_OK
ReadX 14049 716800 4096 4096 NT_STATUS_OK
ReadX 14049 720896 61440 61440 NT_STATUS_OK
ReadX 14049 782336 4096 4096 NT_STATUS_OK
ReadX 14049 786432 61440 61440 NT_STATUS_OK
ReadX 14049 847872 4096 4096 NT_STATUS_OK
ReadX 14049 851968 61440 61440 NT_STATUS_OK
ReadX 14049 913408 4096 4096 NT_STATUS_OK
ReadX 14049 917504 61440 61440 NT_STATUS_OK
ReadX 14049 978944 4096 4096 NT_STATUS_OK
ReadX 14049 983040 61440 61440 NT_STATUS_OK
ReadX 14049 1044480 4096 4096 NT_STATUS_OK
ReadX 14049 1048576 61440 61440 NT_STATUS_OK
ReadX 14049 1110016 4096 4096 NT_STATUS_OK
ReadX 14049 1114112 61440 61440 NT_STATUS_OK
ReadX 14049 1175552 4096 4096 NT_STATUS_OK
ReadX 14049 1179648 61440 61440 NT_STATUS_OK
ReadX 14049 1241088 4096 4096 NT_STATUS_OK
ReadX 14049 1245184 61440 61440 NT_STATUS_OK
ReadX 14049 1306624 4096 4096 NT_STATUS_OK
ReadX 14049 1310720 61440 61440 NT_STATUS_OK
ReadX 14049 1372160 4096 4096 NT_STATUS_OK
ReadX 14049 1376256 61440 61440 NT_STATUS_OK
ReadX 14049 1437696 4096 4096 NT_STATUS_OK
ReadX 14049 1441792 61440 61440 NT_STATUS_OK
ReadX 14049 1503232 4096 4096 NT_STATUS_OK
ReadX 14049 1507328 61440 61440 NT_STATUS_OK
ReadX 14049 1568768 4096 4096 NT_STATUS_OK
ReadX 14049 1572864 61440 61440 NT_STATUS_OK
ReadX 14049 1634304 4096 4096 NT_STATUS_OK
ReadX 14049 1638400 61440 61440 NT_STATUS_OK
ReadX 14049 1699840 4096 4096 NT_STATUS_OK
ReadX 14049 1703936 61440 61440 NT_STATUS_OK
ReadX 14049 1765376 4096 4096 NT_STATUS_OK
ReadX 14049 1769472 61440 61440 NT_STATUS_OK
ReadX 14049 1830912 4096 4096 NT_STATUS_OK
ReadX 14049 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14050 NT_STATUS_OK
Close 14050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 4096 4096 NT_STATUS_OK
ReadX 14054 4096 4096 4096 NT_STATUS_OK
ReadX 14054 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14055 NT_STATUS_OK
Close 14055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Close 14054 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 14058 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14058 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14059 NT_STATUS_OK
Close 14059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14057 NT_STATUS_OK
Close 14058 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14061 NT_STATUS_OK
ReadX 14061 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 14062 NT_STATUS_OK
ReadX 14062 0 8192 8192 NT_STATUS_OK
ReadX 14062 8192 8192 8192 NT_STATUS_OK
ReadX 14062 16384 8192 8192 NT_STATUS_OK
ReadX 14062 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 14064 NT_STATUS_OK
Close 14064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 14062 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 14067 NT_STATUS_OK
WriteX 14067 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14067 258 NT_STATUS_OK
WriteX 14067 0 10438 10438 NT_STATUS_OK
Close 14067 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 14068 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 14069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 14070 NT_STATUS_OK
Close 14070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 14071 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 14072 NT_STATUS_OK
Close 14072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 14073 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 14074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 14075 NT_STATUS_OK
Close 14075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
ReadX 14076 4096 4096 4096 NT_STATUS_OK
ReadX 14076 8192 4096 4096 NT_STATUS_OK
ReadX 14076 12288 8192 8192 NT_STATUS_OK
ReadX 14076 20480 8192 8192 NT_STATUS_OK
ReadX 14076 28672 8192 8192 NT_STATUS_OK
ReadX 14076 36864 8192 8192 NT_STATUS_OK
ReadX 14076 45056 8192 8192 NT_STATUS_OK
ReadX 14076 53248 8192 8192 NT_STATUS_OK
ReadX 14076 61440 8192 8192 NT_STATUS_OK
ReadX 14076 69632 8192 8192 NT_STATUS_OK
ReadX 14076 77824 8192 8192 NT_STATUS_OK
ReadX 14076 86016 8192 8192 NT_STATUS_OK
ReadX 14076 94208 8192 8192 NT_STATUS_OK
ReadX 14076 102400 8192 8192 NT_STATUS_OK
ReadX 14076 110592 8192 8192 NT_STATUS_OK
ReadX 14076 118784 8192 8192 NT_STATUS_OK
ReadX 14076 126976 8192 8192 NT_STATUS_OK
ReadX 14076 135168 8192 8192 NT_STATUS_OK
ReadX 14076 143360 8192 8192 NT_STATUS_OK
ReadX 14076 151552 8192 8192 NT_STATUS_OK
ReadX 14076 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 14078 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 14081 NT_STATUS_OK
WriteX 14081 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14081 258 NT_STATUS_OK
WriteX 14081 0 26637 26637 NT_STATUS_OK
WriteX 14081 0 28489 28489 NT_STATUS_OK
Close 14081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 14082 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 14084 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14084 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 14085 NT_STATUS_OK
Close 14085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 14088 NT_STATUS_OK
ReadX 14088 0 8192 8192 NT_STATUS_OK
ReadX 14088 8192 8192 8192 NT_STATUS_OK
ReadX 14088 16384 8192 8192 NT_STATUS_OK
ReadX 14088 24576 8192 8192 NT_STATUS_OK
ReadX 14088 32768 16384 16384 NT_STATUS_OK
ReadX 14088 49152 8192 8192 NT_STATUS_OK
ReadX 14088 57344 8192 8192 NT_STATUS_OK
ReadX 14088 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14090 NT_STATUS_OK
Close 14090 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 14088 NT_STATUS_OK
Close 14087 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 14093 NT_STATUS_OK
WriteX 14093 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 258 NT_STATUS_OK
WriteX 14093 0 29253 29253 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 14094 NT_STATUS_OK
Close 14094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 14095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 14095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9722 NT_STATUS_OK
Close 9722 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9725 NT_STATUS_OK
WriteX 9725 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9725 258 NT_STATUS_OK
WriteX 9725 0 30183 30183 NT_STATUS_OK
Close 9725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9726 NT_STATUS_OK
Close 9726 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9728 NT_STATUS_OK
WriteX 9728 0 510 510 NT_STATUS_OK
WriteX 9728 510 512 512 NT_STATUS_OK
WriteX 9728 1022 510 510 NT_STATUS_OK
WriteX 9728 1532 510 510 NT_STATUS_OK
WriteX 9728 2042 168 168 NT_STATUS_OK
Close 9728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9729 NT_STATUS_OK
Close 9729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9731 NT_STATUS_OK
ReadX 9731 0 4096 4096 NT_STATUS_OK
WriteX 9731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9732 NT_STATUS_OK
ReadX 9732 61440 4096 4096 NT_STATUS_OK
ReadX 9732 126976 4096 4096 NT_STATUS_OK
WriteX 9732 0 65536 65536 NT_STATUS_OK
WriteX 9732 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9733 NT_STATUS_OK
ReadX 9733 61440 4096 4096 NT_STATUS_OK
ReadX 9733 126976 4096 4096 NT_STATUS_OK
ReadX 9733 192512 4096 4096 NT_STATUS_OK
ReadX 9733 258048 4096 4096 NT_STATUS_OK
WriteX 9733 0 65536 65536 NT_STATUS_OK
WriteX 9733 65536 65536 65536 NT_STATUS_OK
WriteX 9733 131072 65536 65536 NT_STATUS_OK
WriteX 9733 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9734 NT_STATUS_OK
ReadX 9734 61440 4096 4096 NT_STATUS_OK
ReadX 9734 126976 4096 4096 NT_STATUS_OK
ReadX 9734 192512 4096 4096 NT_STATUS_OK
ReadX 9734 258048 4096 4096 NT_STATUS_OK
ReadX 9734 323584 4096 4096 NT_STATUS_OK
ReadX 9734 389120 4096 4096 NT_STATUS_OK
ReadX 9734 454656 4096 4096 NT_STATUS_OK
ReadX 9734 520192 4096 4096 NT_STATUS_OK
WriteX 9734 0 65536 65536 NT_STATUS_OK
WriteX 9734 65536 65536 65536 NT_STATUS_OK
WriteX 9734 131072 65536 65536 NT_STATUS_OK
WriteX 9734 196608 65536 65536 NT_STATUS_OK
WriteX 9734 262144 65536 65536 NT_STATUS_OK
WriteX 9734 327680 65536 65536 NT_STATUS_OK
WriteX 9734 393216 65536 65536 NT_STATUS_OK
WriteX 9734 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9735 NT_STATUS_OK
Close 9735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9731 NT_STATUS_OK
Close 9732 NT_STATUS_OK
Close 9733 NT_STATUS_OK
Close 9734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9737 NT_STATUS_OK
Close 9737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9741 NT_STATUS_OK
Close 9741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9744 NT_STATUS_OK
Close 9744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9746 NT_STATUS_OK
Close 9746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9750 NT_STATUS_OK
Close 9750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9753 NT_STATUS_OK
Close 9753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9755 NT_STATUS_OK
Close 9755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9759 NT_STATUS_OK
Close 9759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9764 NT_STATUS_OK
Close 9764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9769 NT_STATUS_OK
Close 9769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9774 NT_STATUS_OK
Close 9774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9779 NT_STATUS_OK
Close 9779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9784 NT_STATUS_OK
Close 9784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 9789 NT_STATUS_OK
Close 9789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 9794 NT_STATUS_OK
Close 9794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 9797 NT_STATUS_OK
Close 9797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9800 NT_STATUS_OK
Close 9800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 9803 NT_STATUS_OK
WriteX 9803 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9803 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 9803 0 65536 65536 NT_STATUS_OK
WriteX 9803 65536 65536 65536 NT_STATUS_OK
WriteX 9803 131072 65536 65536 NT_STATUS_OK
WriteX 9803 196608 65536 65536 NT_STATUS_OK
WriteX 9803 262144 26634 26634 NT_STATUS_OK
Close 9803 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9808 NT_STATUS_OK
Close 9808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9809 NT_STATUS_OK
Close 9809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9810 NT_STATUS_OK
ReadX 9810 0 4096 4096 NT_STATUS_OK
Close 9810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 9811 NT_STATUS_OK
ReadX 9811 0 4096 4096 NT_STATUS_OK
ReadX 9811 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9812 NT_STATUS_OK
Close 9812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 9811 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9816 NT_STATUS_OK
Close 9816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9819 NT_STATUS_OK
Close 9819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 9821 NT_STATUS_OK
Close 9821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9825 NT_STATUS_OK
Close 9825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 9828 NT_STATUS_OK
Close 9828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9830 NT_STATUS_OK
Close 9830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9834 NT_STATUS_OK
Close 9834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9839 NT_STATUS_OK
Close 9839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9844 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 9849 NT_STATUS_OK
Close 9849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9854 NT_STATUS_OK
Close 9854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 9859 NT_STATUS_OK
Close 9859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9863 NT_STATUS_OK
Close 9863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9868 NT_STATUS_OK
Close 9868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 9873 NT_STATUS_OK
Close 9873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 9876 NT_STATUS_OK
Close 9876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 9878 NT_STATUS_OK
Close 9878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9888 NT_STATUS_OK
Close 9888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9889 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 0 4096 4096 NT_STATUS_OK
Close 9890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9891 NT_STATUS_OK
ReadX 9891 0 4096 4096 NT_STATUS_OK
Close 9891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 9892 NT_STATUS_OK
ReadX 9892 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9902 NT_STATUS_OK
Close 9902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9904 NT_STATUS_OK
ReadX 9904 0 4096 4096 NT_STATUS_OK
Close 9904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9905 NT_STATUS_OK
ReadX 9905 0 4096 4096 NT_STATUS_OK
Close 9905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 9906 NT_STATUS_OK
ReadX 9906 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 9892 NT_STATUS_OK
Close 9906 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9935 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9935 0 4096 4096 NT_STATUS_OK
Close 9935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9936 NT_STATUS_OK
ReadX 9936 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9937 NT_STATUS_OK
ReadX 9937 0 4096 4096 NT_STATUS_OK
ReadX 9937 4096 4096 4096 NT_STATUS_OK
ReadX 9937 8192 4096 4096 NT_STATUS_OK
ReadX 9937 12288 4096 4096 NT_STATUS_OK
ReadX 9937 16384 4096 4096 NT_STATUS_OK
ReadX 9937 20480 4096 4096 NT_STATUS_OK
ReadX 9937 24576 4096 4096 NT_STATUS_OK
ReadX 9937 28672 4096 4096 NT_STATUS_OK
ReadX 9937 32768 4096 4096 NT_STATUS_OK
ReadX 9937 36864 4096 4096 NT_STATUS_OK
ReadX 9937 40960 4096 4096 NT_STATUS_OK
ReadX 9937 45056 4096 4096 NT_STATUS_OK
ReadX 9937 49152 4096 4096 NT_STATUS_OK
ReadX 9937 53248 4096 4096 NT_STATUS_OK
ReadX 9937 57344 4096 4096 NT_STATUS_OK
ReadX 9937 61440 4096 4096 NT_STATUS_OK
ReadX 9937 65536 4096 4096 NT_STATUS_OK
ReadX 9937 69632 4096 4096 NT_STATUS_OK
ReadX 9937 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9937 1004 NT_STATUS_OK
WriteX 9937 0 4096 4096 NT_STATUS_OK
Close 9937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9938 NT_STATUS_OK
SET_FILE_INFORMATION 9938 1004 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9940 NT_STATUS_OK
Close 9940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9943 NT_STATUS_OK
WriteX 9943 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9943 258 NT_STATUS_OK
WriteX 9943 0 65536 65536 NT_STATUS_OK
WriteX 9943 65536 19979 19979 NT_STATUS_OK
Close 9943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9944 NT_STATUS_OK
ReadX 9944 0 4096 4096 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
QUERY_FILE_INFORMATION 9944 1004 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
SET_FILE_INFORMATION 9944 1004 NT_STATUS_OK
WriteX 9944 0 4096 4096 NT_STATUS_OK
Flush 9944 NT_STATUS_OK
Close 9944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9945 NT_STATUS_OK
ReadX 9945 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 9946 NT_STATUS_OK
ReadX 9946 0 4096 4096 NT_STATUS_OK
Close 9945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9947 NT_STATUS_OK
ReadX 9947 0 4096 4096 NT_STATUS_OK
Close 9947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9948 NT_STATUS_OK
ReadX 9948 0 4096 4096 NT_STATUS_OK
Close 9948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9949 NT_STATUS_OK
ReadX 9949 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9949 1004 NT_STATUS_OK
WriteX 9949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 9950 NT_STATUS_OK
Close 9950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 9946 NT_STATUS_OK
Close 9949 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9952 NT_STATUS_OK
Close 9952 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9955 NT_STATUS_OK
WriteX 9955 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9955 258 NT_STATUS_OK
WriteX 9955 0 65536 65536 NT_STATUS_OK
WriteX 9955 65536 17654 17654 NT_STATUS_OK
Close 9955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9956 NT_STATUS_OK
ReadX 9956 0 4096 4096 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
QUERY_FILE_INFORMATION 9956 1004 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
SET_FILE_INFORMATION 9956 1004 NT_STATUS_OK
WriteX 9956 0 4096 4096 NT_STATUS_OK
Flush 9956 NT_STATUS_OK
Close 9956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9957 NT_STATUS_OK
SET_FILE_INFORMATION 9957 1004 NT_STATUS_OK
Close 9957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9958 NT_STATUS_OK
ReadX 9958 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 9959 NT_STATUS_OK
Close 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 9961 NT_STATUS_OK
ReadX 9961 0 4096 4096 NT_STATUS_OK
ReadX 9961 4096 4096 4096 NT_STATUS_OK
ReadX 9961 8192 4096 4096 NT_STATUS_OK
ReadX 9961 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9961 16384 4096 4096 NT_STATUS_OK
ReadX 9961 20480 4096 4096 NT_STATUS_OK
ReadX 9961 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9962 NT_STATUS_OK
ReadX 9962 0 4096 4096 NT_STATUS_OK
Close 9962 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9963 NT_STATUS_OK
ReadX 9963 0 4096 4096 NT_STATUS_OK
Close 9963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9964 NT_STATUS_OK
ReadX 9964 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9964 1004 NT_STATUS_OK
WriteX 9964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 9965 NT_STATUS_OK
Close 9965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 9967 NT_STATUS_OK
Close 9967 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 9970 NT_STATUS_OK
WriteX 9970 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9970 258 NT_STATUS_OK
WriteX 9970 0 65536 65536 NT_STATUS_OK
WriteX 9970 65536 19490 19490 NT_STATUS_OK
Close 9970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9971 NT_STATUS_OK
ReadX 9971 0 4096 4096 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
QUERY_FILE_INFORMATION 9971 1004 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
SET_FILE_INFORMATION 9971 1004 NT_STATUS_OK
WriteX 9971 0 4096 4096 NT_STATUS_OK
Flush 9971 NT_STATUS_OK
Close 9971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9972 NT_STATUS_OK
SET_FILE_INFORMATION 9972 1004 NT_STATUS_OK
Close 9972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 9973 NT_STATUS_OK
ReadX 9973 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 9974 NT_STATUS_OK
Close 9974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9976 0 4096 4096 NT_STATUS_OK
Close 9976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9977 NT_STATUS_OK
ReadX 9977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9978 NT_STATUS_OK
ReadX 9978 0 4096 4096 NT_STATUS_OK
ReadX 9978 4096 4096 4096 NT_STATUS_OK
ReadX 9978 8192 4096 4096 NT_STATUS_OK
ReadX 9978 12288 4096 4096 NT_STATUS_OK
ReadX 9978 16384 4096 4096 NT_STATUS_OK
ReadX 9978 20480 4096 4096 NT_STATUS_OK
ReadX 9978 24576 4096 4096 NT_STATUS_OK
ReadX 9978 28672 4096 4096 NT_STATUS_OK
ReadX 9978 32768 4096 4096 NT_STATUS_OK
ReadX 9978 36864 4096 4096 NT_STATUS_OK
ReadX 9978 40960 4096 4096 NT_STATUS_OK
ReadX 9978 45056 4096 4096 NT_STATUS_OK
ReadX 9978 49152 4096 4096 NT_STATUS_OK
ReadX 9978 53248 4096 4096 NT_STATUS_OK
ReadX 9978 57344 4096 4096 NT_STATUS_OK
ReadX 9978 61440 4096 4096 NT_STATUS_OK
ReadX 9978 65536 4096 4096 NT_STATUS_OK
ReadX 9978 69632 4096 4096 NT_STATUS_OK
ReadX 9978 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9978 1004 NT_STATUS_OK
WriteX 9978 0 4096 4096 NT_STATUS_OK
Close 9978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9979 NT_STATUS_OK
SET_FILE_INFORMATION 9979 1004 NT_STATUS_OK
Close 9979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 9980 NT_STATUS_OK
ReadX 9980 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9981 NT_STATUS_OK
Close 9981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 9973 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9984 NT_STATUS_OK
WriteX 9984 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9984 258 NT_STATUS_OK
WriteX 9984 0 65536 65536 NT_STATUS_OK
WriteX 9984 65536 8866 8866 NT_STATUS_OK
Close 9984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9985 NT_STATUS_OK
ReadX 9985 0 4096 4096 NT_STATUS_OK
WriteX 9985 0 4096 4096 NT_STATUS_OK
Flush 9985 NT_STATUS_OK
SET_FILE_INFORMATION 9985 1004 NT_STATUS_OK
WriteX 9985 0 4096 4096 NT_STATUS_OK
Flush 9985 NT_STATUS_OK
Close 9985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9986 NT_STATUS_OK
ReadX 9986 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 9986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9987 NT_STATUS_OK
ReadX 9987 0 4096 4096 NT_STATUS_OK
Close 9987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9988 NT_STATUS_OK
ReadX 9988 0 4096 4096 NT_STATUS_OK
Close 9988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9989 NT_STATUS_OK
ReadX 9989 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9989 1004 NT_STATUS_OK
WriteX 9989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 9990 NT_STATUS_OK
Close 9990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 9989 NT_STATUS_OK
Close 9980 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 9992 NT_STATUS_OK
Close 9992 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 9995 NT_STATUS_OK
WriteX 9995 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9995 258 NT_STATUS_OK
WriteX 9995 0 65536 65536 NT_STATUS_OK
WriteX 9995 65536 9298 9298 NT_STATUS_OK
Close 9995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9996 NT_STATUS_OK
ReadX 9996 0 4096 4096 NT_STATUS_OK
WriteX 9996 0 4096 4096 NT_STATUS_OK
Flush 9996 NT_STATUS_OK
SET_FILE_INFORMATION 9996 1004 NT_STATUS_OK
WriteX 9996 0 4096 4096 NT_STATUS_OK
Flush 9996 NT_STATUS_OK
Close 9996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9997 NT_STATUS_OK
SET_FILE_INFORMATION 9997 1004 NT_STATUS_OK
Close 9997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 9998 NT_STATUS_OK
ReadX 9998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 9999 NT_STATUS_OK
Close 9999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10002 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10002 0 4096 4096 NT_STATUS_OK
Close 10002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10003 NT_STATUS_OK
ReadX 10003 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10003 4096 4096 4096 NT_STATUS_OK
ReadX 10003 8192 4096 4096 NT_STATUS_OK
ReadX 10003 12288 4096 4096 NT_STATUS_OK
ReadX 10003 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 9998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10004 NT_STATUS_OK
ReadX 10004 0 4096 4096 NT_STATUS_OK
Close 10004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10005 NT_STATUS_OK
ReadX 10005 0 4096 4096 NT_STATUS_OK
Close 10005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10006 NT_STATUS_OK
ReadX 10006 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10006 1004 NT_STATUS_OK
WriteX 10006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10003 NT_STATUS_OK
Close 10006 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10009 NT_STATUS_OK
Close 10009 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10012 NT_STATUS_OK
WriteX 10012 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10012 258 NT_STATUS_OK
WriteX 10012 0 65536 65536 NT_STATUS_OK
WriteX 10012 65536 11540 11540 NT_STATUS_OK
Close 10012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10013 NT_STATUS_OK
ReadX 10013 0 4096 4096 NT_STATUS_OK
WriteX 10013 0 4096 4096 NT_STATUS_OK
Flush 10013 NT_STATUS_OK
SET_FILE_INFORMATION 10013 1004 NT_STATUS_OK
WriteX 10013 0 4096 4096 NT_STATUS_OK
Flush 10013 NT_STATUS_OK
Close 10013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10014 NT_STATUS_OK
SET_FILE_INFORMATION 10014 1004 NT_STATUS_OK
Close 10014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10015 NT_STATUS_OK
ReadX 10015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10016 NT_STATUS_OK
Close 10016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10018 NT_STATUS_OK
ReadX 10018 61440 4096 4096 NT_STATUS_OK
ReadX 10018 126976 4096 4096 NT_STATUS_OK
WriteX 10018 0 65536 65536 NT_STATUS_OK
WriteX 10018 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10019 NT_STATUS_OK
ReadX 10019 61440 4096 4096 NT_STATUS_OK
ReadX 10019 126976 4096 4096 NT_STATUS_OK
ReadX 10019 192512 4096 4096 NT_STATUS_OK
ReadX 10019 258048 4096 4096 NT_STATUS_OK
WriteX 10019 0 65536 65536 NT_STATUS_OK
WriteX 10019 65536 65536 65536 NT_STATUS_OK
WriteX 10019 131072 65536 65536 NT_STATUS_OK
WriteX 10019 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10020 NT_STATUS_OK
ReadX 10020 61440 4096 4096 NT_STATUS_OK
ReadX 10020 126976 4096 4096 NT_STATUS_OK
ReadX 10020 192512 4096 4096 NT_STATUS_OK
ReadX 10020 258048 4096 4096 NT_STATUS_OK
ReadX 10020 323584 4096 4096 NT_STATUS_OK
ReadX 10020 389120 4096 4096 NT_STATUS_OK
ReadX 10020 454656 4096 4096 NT_STATUS_OK
ReadX 10020 520192 4096 4096 NT_STATUS_OK
WriteX 10020 0 65536 65536 NT_STATUS_OK
WriteX 10020 65536 65536 65536 NT_STATUS_OK
WriteX 10020 131072 65536 65536 NT_STATUS_OK
WriteX 10020 196608 65536 65536 NT_STATUS_OK
WriteX 10020 262144 65536 65536 NT_STATUS_OK
WriteX 10020 327680 65536 65536 NT_STATUS_OK
WriteX 10020 393216 65536 65536 NT_STATUS_OK
WriteX 10020 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10021 NT_STATUS_OK
ReadX 10021 0 4096 4096 NT_STATUS_OK
ReadX 10021 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10022 NT_STATUS_OK
WriteX 10022 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10022 258 NT_STATUS_OK
WriteX 10022 0 53 53 NT_STATUS_OK
Close 10022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10023 NT_STATUS_OK
Close 10023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10015 NT_STATUS_OK
Close 9961 NT_STATUS_OK
Close 10018 NT_STATUS_OK
Close 10019 NT_STATUS_OK
Close 10020 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10021 8192 4096 4096 NT_STATUS_OK
ReadX 10021 12288 4096 4096 NT_STATUS_OK
WriteX 10025 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10025 258 NT_STATUS_OK
ReadX 10021 16384 4096 4096 NT_STATUS_OK
ReadX 10021 20480 4096 4096 NT_STATUS_OK
WriteX 10025 0 15360 15360 NT_STATUS_OK
Close 10025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10026 NT_STATUS_OK
ReadX 10026 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10026 1004 NT_STATUS_OK
WriteX 10026 0 4096 4096 NT_STATUS_OK
Close 10026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10029 NT_STATUS_OK
ReadX 10029 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10030 NT_STATUS_OK
Close 10030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10029 4096 4096 4096 NT_STATUS_OK
ReadX 10029 8192 4096 4096 NT_STATUS_OK
ReadX 10029 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10032 NT_STATUS_OK
ReadX 10032 0 4096 4096 NT_STATUS_OK
ReadX 10032 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10033 NT_STATUS_OK
ReadX 10033 0 4096 4096 NT_STATUS_OK
ReadX 10033 4096 4096 4096 NT_STATUS_OK
ReadX 10033 8192 4096 4096 NT_STATUS_OK
Close 10032 NT_STATUS_OK
Close 10033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10034 NT_STATUS_OK
WriteX 10034 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10034 258 NT_STATUS_OK
WriteX 10034 0 15360 15360 NT_STATUS_OK
Close 10034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10035 NT_STATUS_OK
ReadX 10035 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10035 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10035 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10036 NT_STATUS_OK
Close 10036 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10038 NT_STATUS_OK
ReadX 10038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10039 NT_STATUS_OK
SET_FILE_INFORMATION 10039 1004 NT_STATUS_OK
Close 10039 NT_STATUS_OK
WriteX 10035 0 4096 4096 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10040 NT_STATUS_OK
Close 10040 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10042 NT_STATUS_OK
ReadX 10042 0 4096 4096 NT_STATUS_OK
ReadX 10042 4096 4096 4096 NT_STATUS_OK
ReadX 10042 8192 4096 4096 NT_STATUS_OK
ReadX 10042 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10042 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10042 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10043 NT_STATUS_OK
ReadX 10043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10044 NT_STATUS_OK
WriteX 10044 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10044 258 NT_STATUS_OK
WriteX 10044 0 53 53 NT_STATUS_OK
Close 10044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10045 NT_STATUS_OK
Close 10045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10043 4096 4096 4096 NT_STATUS_OK
ReadX 10043 8192 4096 4096 NT_STATUS_OK
ReadX 10043 12288 4096 4096 NT_STATUS_OK
WriteX 10047 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10047 258 NT_STATUS_OK
WriteX 10047 0 12006 12006 NT_STATUS_OK
Close 10047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10048 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10048 1004 NT_STATUS_OK
WriteX 10048 0 4096 4096 NT_STATUS_OK
Close 10048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10049 NT_STATUS_OK
Close 10049 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10051 NT_STATUS_OK
ReadX 10051 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10052 NT_STATUS_OK
Close 10052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10051 4096 4096 4096 NT_STATUS_OK
ReadX 10051 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10054 NT_STATUS_OK
WriteX 10054 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10054 258 NT_STATUS_OK
WriteX 10054 0 11991 11991 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10055 NT_STATUS_OK
ReadX 10055 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10055 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10055 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10056 NT_STATUS_OK
Close 10056 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10058 NT_STATUS_OK
ReadX 10058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10059 NT_STATUS_OK
SET_FILE_INFORMATION 10059 1004 NT_STATUS_OK
Close 10059 NT_STATUS_OK
WriteX 10055 0 4096 4096 NT_STATUS_OK
Close 10055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10060 NT_STATUS_OK
Close 10060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10062 NT_STATUS_OK
ReadX 10062 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10063 NT_STATUS_OK
Close 10063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10062 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
ReadX 10062 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
WriteX 10062 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10062 1004 NT_STATUS_OK
Close 10038 NT_STATUS_OK
WriteX 10042 0 19054 19054 NT_STATUS_OK
WriteX 10062 0 12288 12288 NT_STATUS_OK
Close 10058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10065 NT_STATUS_OK
Close 10065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10042 NT_STATUS_OK
Close 10062 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10067 NT_STATUS_OK
Close 10067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10069 NT_STATUS_OK
ReadX 10069 0 61440 61440 NT_STATUS_OK
ReadX 10069 61440 4096 4096 NT_STATUS_OK
ReadX 10069 65536 61440 61440 NT_STATUS_OK
ReadX 10069 126976 4096 4096 NT_STATUS_OK
ReadX 10069 131072 61440 61440 NT_STATUS_OK
ReadX 10069 192512 4096 4096 NT_STATUS_OK
ReadX 10069 196608 61440 61440 NT_STATUS_OK
ReadX 10069 258048 4096 4096 NT_STATUS_OK
ReadX 10069 262144 61440 61440 NT_STATUS_OK
ReadX 10069 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10070 NT_STATUS_OK
ReadX 10070 0 61440 61440 NT_STATUS_OK
ReadX 10070 61440 4096 4096 NT_STATUS_OK
ReadX 10070 65536 61440 61440 NT_STATUS_OK
ReadX 10070 126976 4096 4096 NT_STATUS_OK
ReadX 10070 131072 61440 61440 NT_STATUS_OK
ReadX 10070 192512 4096 4096 NT_STATUS_OK
ReadX 10070 196608 61440 61440 NT_STATUS_OK
ReadX 10070 258048 4096 4096 NT_STATUS_OK
ReadX 10070 262144 61440 61440 NT_STATUS_OK
ReadX 10070 323584 4096 4096 NT_STATUS_OK
ReadX 10070 327680 61440 61440 NT_STATUS_OK
ReadX 10070 389120 4096 4096 NT_STATUS_OK
ReadX 10070 393216 61440 61440 NT_STATUS_OK
ReadX 10070 454656 4096 4096 NT_STATUS_OK
ReadX 10070 458752 61440 61440 NT_STATUS_OK
ReadX 10070 520192 4096 4096 NT_STATUS_OK
ReadX 10070 524288 61440 61440 NT_STATUS_OK
ReadX 10070 585728 4096 4096 NT_STATUS_OK
ReadX 10070 589824 61440 61440 NT_STATUS_OK
ReadX 10070 651264 4096 4096 NT_STATUS_OK
ReadX 10070 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10071 NT_STATUS_OK
ReadX 10071 0 61440 61440 NT_STATUS_OK
ReadX 10071 61440 4096 4096 NT_STATUS_OK
ReadX 10071 65536 61440 61440 NT_STATUS_OK
ReadX 10071 126976 4096 4096 NT_STATUS_OK
ReadX 10071 131072 61440 61440 NT_STATUS_OK
ReadX 10071 192512 4096 4096 NT_STATUS_OK
ReadX 10071 196608 61440 61440 NT_STATUS_OK
ReadX 10071 258048 4096 4096 NT_STATUS_OK
ReadX 10071 262144 61440 61440 NT_STATUS_OK
ReadX 10071 323584 4096 4096 NT_STATUS_OK
ReadX 10071 327680 61440 61440 NT_STATUS_OK
ReadX 10071 389120 4096 4096 NT_STATUS_OK
ReadX 10071 393216 61440 61440 NT_STATUS_OK
ReadX 10071 454656 4096 4096 NT_STATUS_OK
ReadX 10071 458752 61440 61440 NT_STATUS_OK
ReadX 10071 520192 4096 4096 NT_STATUS_OK
ReadX 10071 524288 61440 61440 NT_STATUS_OK
ReadX 10071 585728 4096 4096 NT_STATUS_OK
ReadX 10071 589824 61440 61440 NT_STATUS_OK
ReadX 10071 651264 4096 4096 NT_STATUS_OK
ReadX 10071 655360 61440 61440 NT_STATUS_OK
ReadX 10071 716800 4096 4096 NT_STATUS_OK
ReadX 10071 720896 61440 61440 NT_STATUS_OK
ReadX 10071 782336 4096 4096 NT_STATUS_OK
ReadX 10071 786432 61440 61440 NT_STATUS_OK
ReadX 10071 847872 4096 4096 NT_STATUS_OK
ReadX 10071 851968 61440 61440 NT_STATUS_OK
ReadX 10071 913408 4096 4096 NT_STATUS_OK
ReadX 10071 917504 61440 61440 NT_STATUS_OK
ReadX 10071 978944 4096 4096 NT_STATUS_OK
ReadX 10071 983040 61440 61440 NT_STATUS_OK
ReadX 10071 1044480 4096 4096 NT_STATUS_OK
ReadX 10071 1048576 61440 61440 NT_STATUS_OK
ReadX 10071 1110016 4096 4096 NT_STATUS_OK
ReadX 10071 1114112 61440 61440 NT_STATUS_OK
ReadX 10071 1175552 4096 4096 NT_STATUS_OK
ReadX 10071 1179648 61440 61440 NT_STATUS_OK
ReadX 10071 1241088 4096 4096 NT_STATUS_OK
ReadX 10071 1245184 61440 61440 NT_STATUS_OK
ReadX 10071 1306624 4096 4096 NT_STATUS_OK
ReadX 10071 1310720 61440 61440 NT_STATUS_OK
ReadX 10071 1372160 4096 4096 NT_STATUS_OK
ReadX 10071 1376256 61440 61440 NT_STATUS_OK
ReadX 10071 1437696 4096 4096 NT_STATUS_OK
ReadX 10071 1441792 61440 61440 NT_STATUS_OK
ReadX 10071 1503232 4096 4096 NT_STATUS_OK
ReadX 10071 1507328 61440 61440 NT_STATUS_OK
ReadX 10071 1568768 4096 4096 NT_STATUS_OK
ReadX 10071 1572864 61440 61440 NT_STATUS_OK
ReadX 10071 1634304 4096 4096 NT_STATUS_OK
ReadX 10071 1638400 61440 61440 NT_STATUS_OK
ReadX 10071 1699840 4096 4096 NT_STATUS_OK
ReadX 10071 1703936 61440 61440 NT_STATUS_OK
ReadX 10071 1765376 4096 4096 NT_STATUS_OK
ReadX 10071 1769472 61440 61440 NT_STATUS_OK
ReadX 10071 1830912 4096 4096 NT_STATUS_OK
ReadX 10071 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10072 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10074 NT_STATUS_OK
ReadX 10074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10075 NT_STATUS_OK
ReadX 10075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10076 NT_STATUS_OK
ReadX 10076 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10077 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10078 NT_STATUS_OK
QUERY_FILE_INFORMATION 10078 1004 NT_STATUS_OK
WriteX 10078 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10078 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10079 NT_STATUS_OK
Close 10079 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10080 NT_STATUS_OK
WriteX 10080 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10080 258 NT_STATUS_OK
WriteX 10080 0 491 491 NT_STATUS_OK
Close 10080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10081 NT_STATUS_OK
ReadX 10081 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10078 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10083 NT_STATUS_OK
Close 10083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10084 NT_STATUS_OK
WriteX 10084 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10084 258 NT_STATUS_OK
WriteX 10084 0 543 543 NT_STATUS_OK
Close 10084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10085 NT_STATUS_OK
ReadX 10085 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10069 NT_STATUS_OK
Close 10070 NT_STATUS_OK
Close 10071 NT_STATUS_OK
Close 10085 NT_STATUS_OK
Close 10073 NT_STATUS_OK
Close 10074 NT_STATUS_OK
Close 10075 NT_STATUS_OK
Close 10076 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10089 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10090 NT_STATUS_OK
ReadX 10090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10091 NT_STATUS_OK
ReadX 10091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10092 NT_STATUS_OK
ReadX 10092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10093 NT_STATUS_OK
ReadX 10093 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10097 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10098 NT_STATUS_OK
QUERY_FILE_INFORMATION 10098 1004 NT_STATUS_OK
WriteX 10098 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10098 258 NT_STATUS_OK
WriteX 10098 0 2048 2048 NT_STATUS_OK
Close 10098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10099 NT_STATUS_OK
ReadX 10099 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10099 0 4096 4096 NT_STATUS_OK
Flush 10099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10099 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10103 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10104 NT_STATUS_OK
WriteX 10104 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10104 258 NT_STATUS_OK
WriteX 10104 0 2048 2048 NT_STATUS_OK
Close 10104 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10105 NT_STATUS_OK
ReadX 10105 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10109 NT_STATUS_OK
Close 10109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10110 NT_STATUS_OK
WriteX 10110 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10110 258 NT_STATUS_OK
WriteX 10110 0 2048 2048 NT_STATUS_OK
Close 10110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10111 NT_STATUS_OK
ReadX 10111 0 2048 2048 NT_STATUS_OK
ReadX 10089 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10093 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10105 0 4096 4096 NT_STATUS_OK
WriteX 10089 0 8192 8192 NT_STATUS_OK
WriteX 10090 0 4096 4096 NT_STATUS_OK
WriteX 10091 0 4096 4096 NT_STATUS_OK
ReadX 10105 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10114 NT_STATUS_OK
ReadX 10114 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10115 NT_STATUS_OK
QUERY_FILE_INFORMATION 10115 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10114 NT_STATUS_OK
Close 10090 NT_STATUS_OK
Close 10091 NT_STATUS_OK
Close 10092 NT_STATUS_OK
Close 10105 NT_STATUS_OK
Close 10089 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10117 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10117 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10118 NT_STATUS_OK
ReadX 10118 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10119 NT_STATUS_OK
ReadX 10119 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10120 NT_STATUS_OK
ReadX 10120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10121 NT_STATUS_OK
ReadX 10121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10122 NT_STATUS_OK
ReadX 10122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10123 NT_STATUS_OK
ReadX 10123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10124 NT_STATUS_OK
ReadX 10124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10125 NT_STATUS_OK
ReadX 10125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10126 NT_STATUS_OK
ReadX 10126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10127 NT_STATUS_OK
ReadX 10127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10134 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10135 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 1004 NT_STATUS_OK
WriteX 10135 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10135 258 NT_STATUS_OK
WriteX 10135 0 2048 2048 NT_STATUS_OK
Close 10135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10136 NT_STATUS_OK
ReadX 10136 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10137 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10138 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10138 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10142 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10143 NT_STATUS_OK
QUERY_FILE_INFORMATION 10143 1004 NT_STATUS_OK
WriteX 10143 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10143 258 NT_STATUS_OK
WriteX 10143 0 2048 2048 NT_STATUS_OK
Close 10143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10136 0 4096 4096 NT_STATUS_OK
Flush 10136 NT_STATUS_OK
WriteX 10144 0 4096 4096 NT_STATUS_OK
Flush 10144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10136 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10144 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10138 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10146 NT_STATUS_OK
WriteX 10146 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10146 258 NT_STATUS_OK
WriteX 10146 0 4096 4096 NT_STATUS_OK
Close 10146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10147 NT_STATUS_OK
ReadX 10147 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10148 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10149 NT_STATUS_OK
WriteX 10149 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10149 258 NT_STATUS_OK
WriteX 10149 0 4096 4096 NT_STATUS_OK
Close 10149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10150 NT_STATUS_OK
ReadX 10150 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10150 0 4096 4096 NT_STATUS_OK
Close 10147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Close 10124 NT_STATUS_OK
Close 10138 NT_STATUS_OK
Close 10127 NT_STATUS_OK
Close 10128 NT_STATUS_OK
Close 10129 NT_STATUS_OK
Close 10125 NT_STATUS_OK
Close 10118 NT_STATUS_OK
Close 10119 NT_STATUS_OK
Close 10122 NT_STATUS_OK
Close 10123 NT_STATUS_OK
Close 10120 NT_STATUS_OK
Close 10121 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10153 NT_STATUS_OK
Close 10153 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10155 NT_STATUS_OK
ReadX 10155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10156 NT_STATUS_OK
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10157 NT_STATUS_OK
WriteX 10157 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10157 258 NT_STATUS_OK
WriteX 10157 0 2048 2048 NT_STATUS_OK
Close 10157 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10158 NT_STATUS_OK
ReadX 10158 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10159 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10163 NT_STATUS_OK
ReadX 10163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10164 NT_STATUS_OK
ReadX 10164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10165 NT_STATUS_OK
ReadX 10165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10166 NT_STATUS_OK
ReadX 10166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10169 NT_STATUS_OK
ReadX 10169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10170 NT_STATUS_OK
ReadX 10170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10171 NT_STATUS_OK
ReadX 10171 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10172 NT_STATUS_OK
QUERY_FILE_INFORMATION 10172 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10172 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10155 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10170 NT_STATUS_OK
Close 10165 NT_STATUS_OK
Close 10166 NT_STATUS_OK
Close 10167 NT_STATUS_OK
Close 10168 NT_STATUS_OK
Close 10169 NT_STATUS_OK
Close 10171 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10163 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10174 NT_STATUS_OK
QUERY_FILE_INFORMATION 10174 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10181 NT_STATUS_OK
ReadX 10181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10184 NT_STATUS_OK
ReadX 10184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10188 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10189 NT_STATUS_OK
ReadX 10189 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10194 NT_STATUS_OK
QUERY_FILE_INFORMATION 10194 1004 NT_STATUS_OK
WriteX 10194 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10194 258 NT_STATUS_OK
WriteX 10194 0 2048 2048 NT_STATUS_OK
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10195 NT_STATUS_OK
ReadX 10195 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10197 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10206 NT_STATUS_OK
QUERY_FILE_INFORMATION 10206 1004 NT_STATUS_OK
WriteX 10206 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10206 258 NT_STATUS_OK
WriteX 10206 0 2048 2048 NT_STATUS_OK
Close 10206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10207 NT_STATUS_OK
ReadX 10207 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10213 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10214 NT_STATUS_OK
QUERY_FILE_INFORMATION 10214 1004 NT_STATUS_OK
WriteX 10214 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10214 258 NT_STATUS_OK
WriteX 10214 0 2048 2048 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10195 0 4096 4096 NT_STATUS_OK
Flush 10195 NT_STATUS_OK
WriteX 10207 0 4096 4096 NT_STATUS_OK
Flush 10207 NT_STATUS_OK
WriteX 10215 0 4096 4096 NT_STATUS_OK
Flush 10215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10195 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10207 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10215 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10197 4096 16384 16384 NT_STATUS_OK
ReadX 10177 4096 16384 16384 NT_STATUS_OK
ReadX 10209 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10216 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 2048 2048 NT_STATUS_OK
WriteX 10217 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10218 NT_STATUS_OK
QUERY_FILE_INFORMATION 10218 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Close 10201 NT_STATUS_OK
Close 10189 NT_STATUS_OK
Close 10181 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10209 NT_STATUS_OK
Close 10183 NT_STATUS_OK
Close 10186 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10184 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Close 10180 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10220 NT_STATUS_OK
QUERY_FILE_INFORMATION 10220 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10222 NT_STATUS_OK
QUERY_FILE_INFORMATION 10222 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10229 NT_STATUS_OK
ReadX 10229 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10225 4096 16384 16384 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10226 0 4096 4096 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
WriteX 10228 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10230 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10240 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10244 NT_STATUS_OK
ReadX 10244 0 8192 8192 NT_STATUS_OK
ReadX 10231 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10245 0 4096 4096 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
ReadX 10245 8192 4096 4096 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
WriteX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10246 0 4096 4096 NT_STATUS_OK
ReadX 10246 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10226 0 4096 4096 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
WriteX 10228 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10250 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10251 NT_STATUS_OK
QUERY_FILE_INFORMATION 10251 1004 NT_STATUS_OK
WriteX 10251 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10251 258 NT_STATUS_OK
WriteX 10251 0 2048 2048 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10253 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
ReadX 10254 4096 4096 4096 NT_STATUS_OK
WriteX 10254 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10252 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
ReadX 10256 4096 4096 4096 NT_STATUS_OK
WriteX 10256 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10257 NT_STATUS_OK
QUERY_FILE_INFORMATION 10257 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Close 10229 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Close 10240 NT_STATUS_OK
Close 10241 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10259 0 4096 4096 NT_STATUS_OK
ReadX 10259 4096 4096 4096 NT_STATUS_OK
ReadX 10259 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10264 NT_STATUS_OK
ReadX 10264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10265 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10272 NT_STATUS_OK
ReadX 10272 0 4096 4096 NT_STATUS_OK
ReadX 10260 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10277 NT_STATUS_OK
QUERY_FILE_INFORMATION 10277 1004 NT_STATUS_OK
WriteX 10277 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10277 258 NT_STATUS_OK
WriteX 10277 0 2048 2048 NT_STATUS_OK
Close 10277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10278 NT_STATUS_OK
ReadX 10278 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10278 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10282 NT_STATUS_OK
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10283 NT_STATUS_OK
QUERY_FILE_INFORMATION 10283 1004 NT_STATUS_OK
WriteX 10283 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10283 258 NT_STATUS_OK
WriteX 10283 0 2048 2048 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10284 NT_STATUS_OK
ReadX 10284 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10284 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10267 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10285 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Close 10272 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10264 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10287 NT_STATUS_OK
QUERY_FILE_INFORMATION 10287 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 61440 4096 4096 NT_STATUS_OK
ReadX 10289 126976 4096 4096 NT_STATUS_OK
WriteX 10289 0 65536 65536 NT_STATUS_OK
WriteX 10289 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 61440 4096 4096 NT_STATUS_OK
ReadX 10290 126976 4096 4096 NT_STATUS_OK
ReadX 10290 192512 4096 4096 NT_STATUS_OK
ReadX 10290 258048 4096 4096 NT_STATUS_OK
WriteX 10290 0 65536 65536 NT_STATUS_OK
WriteX 10290 65536 65536 65536 NT_STATUS_OK
WriteX 10290 131072 65536 65536 NT_STATUS_OK
WriteX 10290 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 61440 4096 4096 NT_STATUS_OK
ReadX 10291 126976 4096 4096 NT_STATUS_OK
ReadX 10291 192512 4096 4096 NT_STATUS_OK
ReadX 10291 258048 4096 4096 NT_STATUS_OK
ReadX 10291 323584 4096 4096 NT_STATUS_OK
ReadX 10291 389120 4096 4096 NT_STATUS_OK
ReadX 10291 454656 4096 4096 NT_STATUS_OK
ReadX 10291 520192 4096 4096 NT_STATUS_OK
WriteX 10291 0 65536 65536 NT_STATUS_OK
WriteX 10291 65536 65536 65536 NT_STATUS_OK
WriteX 10291 131072 65536 65536 NT_STATUS_OK
WriteX 10291 196608 65536 65536 NT_STATUS_OK
WriteX 10291 262144 65536 65536 NT_STATUS_OK
WriteX 10291 327680 65536 65536 NT_STATUS_OK
WriteX 10291 393216 65536 65536 NT_STATUS_OK
WriteX 10291 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10292 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10292 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10292 8192 4096 4096 NT_STATUS_OK
ReadX 10292 12288 4096 4096 NT_STATUS_OK
ReadX 10292 16384 4096 4096 NT_STATUS_OK
ReadX 10292 20480 4096 4096 NT_STATUS_OK
ReadX 10292 24576 4096 4096 NT_STATUS_OK
ReadX 10292 28672 4096 4096 NT_STATUS_OK
ReadX 10292 32768 4096 4096 NT_STATUS_OK
ReadX 10292 36864 4096 4096 NT_STATUS_OK
ReadX 10292 40960 4096 4096 NT_STATUS_OK
ReadX 10292 45056 4096 4096 NT_STATUS_OK
ReadX 10292 49152 4096 4096 NT_STATUS_OK
ReadX 10292 53248 4096 4096 NT_STATUS_OK
ReadX 10292 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10292 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10293 NT_STATUS_OK
Close 10293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10295 NT_STATUS_OK
WriteX 10295 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10295 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10295 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
WriteX 10295 0 57088 57088 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
Flush 10295 NT_STATUS_OK
Close 10292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10296 NT_STATUS_OK
SET_FILE_INFORMATION 10296 1004 NT_STATUS_OK
Close 10296 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
WriteX 10295 0 4096 4096 NT_STATUS_OK
Close 10295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10297 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10299 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10300 NT_STATUS_OK
WriteX 10300 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
WriteX 10300 0 51456 51456 NT_STATUS_OK
WriteX 10300 0 4096 4096 NT_STATUS_OK
Flush 10300 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
WriteX 10300 0 4096 4096 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10302 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10304 NT_STATUS_OK
ReadX 10304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10304 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10306 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10309 NT_STATUS_OK
WriteX 10309 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10309 258 NT_STATUS_OK
WriteX 10309 0 53077 53077 NT_STATUS_OK
Close 10309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10310 NT_STATUS_OK
WriteX 10310 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10310 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10310 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10310 1004 NT_STATUS_OK
WriteX 10310 0 65536 65536 NT_STATUS_OK
WriteX 10310 65536 1856 1856 NT_STATUS_OK
WriteX 10310 0 4096 4096 NT_STATUS_OK
Flush 10310 NT_STATUS_OK
SET_FILE_INFORMATION 10310 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10310 1004 NT_STATUS_OK
WriteX 10310 0 4096 4096 NT_STATUS_OK
Close 10310 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10312 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10316 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10319 NT_STATUS_OK
WriteX 10319 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10319 258 NT_STATUS_OK
WriteX 10319 0 7983 7983 NT_STATUS_OK
Close 10319 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10321 NT_STATUS_OK
Close 10321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10324 NT_STATUS_OK
WriteX 10324 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 258 NT_STATUS_OK
WriteX 10324 0 65536 65536 NT_STATUS_OK
WriteX 10324 65536 65536 65536 NT_STATUS_OK
WriteX 10324 131072 65536 65536 NT_STATUS_OK
WriteX 10324 196608 65536 65536 NT_STATUS_OK
WriteX 10324 262144 65536 65536 NT_STATUS_OK
WriteX 10324 327680 65536 65536 NT_STATUS_OK
WriteX 10324 393216 65536 65536 NT_STATUS_OK
WriteX 10324 458752 46731 46731 NT_STATUS_OK
Close 10324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10325 NT_STATUS_OK
WriteX 10325 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10325 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10314 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10325 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
WriteX 10325 0 65536 65536 NT_STATUS_OK
WriteX 10325 65536 22848 22848 NT_STATUS_OK
WriteX 10325 0 4096 4096 NT_STATUS_OK
Flush 10325 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10325 1004 NT_STATUS_OK
WriteX 10325 0 4096 4096 NT_STATUS_OK
Close 10325 NT_STATUS_OK
Close 10314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10327 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10329 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10330 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10330 1004 NT_STATUS_OK
ReadX 10330 8192 4096 4096 NT_STATUS_OK
ReadX 10330 12288 4096 4096 NT_STATUS_OK
ReadX 10330 16384 4096 4096 NT_STATUS_OK
ReadX 10330 20480 4096 4096 NT_STATUS_OK
ReadX 10330 24576 4096 4096 NT_STATUS_OK
ReadX 10330 28672 4096 4096 NT_STATUS_OK
ReadX 10330 32768 4096 4096 NT_STATUS_OK
ReadX 10330 36864 4096 4096 NT_STATUS_OK
ReadX 10330 40960 4096 4096 NT_STATUS_OK
ReadX 10330 45056 4096 4096 NT_STATUS_OK
ReadX 10330 49152 4096 4096 NT_STATUS_OK
ReadX 10330 53248 4096 4096 NT_STATUS_OK
ReadX 10330 57344 4096 4096 NT_STATUS_OK
ReadX 10330 61440 4096 4096 NT_STATUS_OK
ReadX 10330 65536 4096 4096 NT_STATUS_OK
ReadX 10330 69632 4096 4096 NT_STATUS_OK
ReadX 10330 73728 4096 4096 NT_STATUS_OK
ReadX 10330 77824 4096 4096 NT_STATUS_OK
ReadX 10330 81920 4096 4096 NT_STATUS_OK
ReadX 10330 86016 4096 4096 NT_STATUS_OK
ReadX 10330 90112 4096 4096 NT_STATUS_OK
ReadX 10330 94208 4096 4096 NT_STATUS_OK
ReadX 10330 98304 4096 4096 NT_STATUS_OK
ReadX 10330 102400 4096 4096 NT_STATUS_OK
ReadX 10330 106496 4096 4096 NT_STATUS_OK
ReadX 10330 110592 4096 4096 NT_STATUS_OK
ReadX 10330 114688 4096 4096 NT_STATUS_OK
ReadX 10330 118784 4096 4096 NT_STATUS_OK
ReadX 10330 122880 4096 4096 NT_STATUS_OK
ReadX 10330 126976 4096 4096 NT_STATUS_OK
ReadX 10330 131072 4096 4096 NT_STATUS_OK
ReadX 10330 135168 4096 4096 NT_STATUS_OK
ReadX 10330 139264 4096 4096 NT_STATUS_OK
ReadX 10330 143360 4096 4096 NT_STATUS_OK
ReadX 10330 147456 4096 4096 NT_STATUS_OK
ReadX 10330 151552 4096 4096 NT_STATUS_OK
ReadX 10330 155648 4096 4096 NT_STATUS_OK
ReadX 10330 159744 4096 4096 NT_STATUS_OK
ReadX 10330 163840 4096 4096 NT_STATUS_OK
ReadX 10330 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10330 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10331 NT_STATUS_OK
Close 10331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10333 NT_STATUS_OK
WriteX 10333 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10333 258 NT_STATUS_OK
Close 10330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10334 NT_STATUS_OK
SET_FILE_INFORMATION 10334 1004 NT_STATUS_OK
Close 10334 NT_STATUS_OK
WriteX 10333 0 42388 42388 NT_STATUS_OK
Close 10333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10335 NT_STATUS_OK
Close 10335 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 4096 4096 NT_STATUS_OK
ReadX 10337 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10338 NT_STATUS_OK
WriteX 10338 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 258 NT_STATUS_OK
SET_FILE_INFORMATION 10338 1004 NT_STATUS_OK
WriteX 10338 0 42652 42652 NT_STATUS_OK
Close 10338 NT_STATUS_OK
Close 10337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10340 NT_STATUS_OK
Close 10340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10342 NT_STATUS_OK
ReadX 10342 0 4096 4096 NT_STATUS_OK
ReadX 10342 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10344 NT_STATUS_OK
Close 10344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10347 NT_STATUS_OK
WriteX 10347 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10347 258 NT_STATUS_OK
WriteX 10347 0 65536 65536 NT_STATUS_OK
WriteX 10347 65536 49 49 NT_STATUS_OK
Close 10347 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 61440 61440 NT_STATUS_OK
ReadX 10348 61440 4096 4096 NT_STATUS_OK
ReadX 10348 65536 61440 61440 NT_STATUS_OK
ReadX 10348 126976 4096 4096 NT_STATUS_OK
ReadX 10348 131072 61440 61440 NT_STATUS_OK
ReadX 10348 192512 4096 4096 NT_STATUS_OK
ReadX 10348 196608 61440 61440 NT_STATUS_OK
ReadX 10348 258048 4096 4096 NT_STATUS_OK
ReadX 10348 262144 61440 61440 NT_STATUS_OK
ReadX 10348 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 61440 61440 NT_STATUS_OK
ReadX 10349 61440 4096 4096 NT_STATUS_OK
ReadX 10349 65536 61440 61440 NT_STATUS_OK
ReadX 10349 126976 4096 4096 NT_STATUS_OK
ReadX 10349 131072 61440 61440 NT_STATUS_OK
ReadX 10349 192512 4096 4096 NT_STATUS_OK
ReadX 10349 196608 61440 61440 NT_STATUS_OK
ReadX 10349 258048 4096 4096 NT_STATUS_OK
ReadX 10349 262144 61440 61440 NT_STATUS_OK
ReadX 10349 323584 4096 4096 NT_STATUS_OK
ReadX 10349 327680 61440 61440 NT_STATUS_OK
ReadX 10349 389120 4096 4096 NT_STATUS_OK
ReadX 10349 393216 61440 61440 NT_STATUS_OK
ReadX 10349 454656 4096 4096 NT_STATUS_OK
ReadX 10349 458752 61440 61440 NT_STATUS_OK
ReadX 10349 520192 4096 4096 NT_STATUS_OK
ReadX 10349 524288 61440 61440 NT_STATUS_OK
ReadX 10349 585728 4096 4096 NT_STATUS_OK
ReadX 10349 589824 61440 61440 NT_STATUS_OK
ReadX 10349 651264 4096 4096 NT_STATUS_OK
ReadX 10349 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10350 NT_STATUS_OK
ReadX 10350 0 61440 61440 NT_STATUS_OK
ReadX 10350 61440 4096 4096 NT_STATUS_OK
ReadX 10350 65536 61440 61440 NT_STATUS_OK
ReadX 10350 126976 4096 4096 NT_STATUS_OK
ReadX 10350 131072 61440 61440 NT_STATUS_OK
ReadX 10350 192512 4096 4096 NT_STATUS_OK
ReadX 10350 196608 61440 61440 NT_STATUS_OK
ReadX 10350 258048 4096 4096 NT_STATUS_OK
ReadX 10350 262144 61440 61440 NT_STATUS_OK
ReadX 10350 323584 4096 4096 NT_STATUS_OK
ReadX 10350 327680 61440 61440 NT_STATUS_OK
ReadX 10350 389120 4096 4096 NT_STATUS_OK
ReadX 10350 393216 61440 61440 NT_STATUS_OK
ReadX 10350 454656 4096 4096 NT_STATUS_OK
ReadX 10350 458752 61440 61440 NT_STATUS_OK
ReadX 10350 520192 4096 4096 NT_STATUS_OK
ReadX 10350 524288 61440 61440 NT_STATUS_OK
ReadX 10350 585728 4096 4096 NT_STATUS_OK
ReadX 10350 589824 61440 61440 NT_STATUS_OK
ReadX 10350 651264 4096 4096 NT_STATUS_OK
ReadX 10350 655360 61440 61440 NT_STATUS_OK
ReadX 10350 716800 4096 4096 NT_STATUS_OK
ReadX 10350 720896 61440 61440 NT_STATUS_OK
ReadX 10350 782336 4096 4096 NT_STATUS_OK
ReadX 10350 786432 61440 61440 NT_STATUS_OK
ReadX 10350 847872 4096 4096 NT_STATUS_OK
ReadX 10350 851968 61440 61440 NT_STATUS_OK
ReadX 10350 913408 4096 4096 NT_STATUS_OK
ReadX 10350 917504 61440 61440 NT_STATUS_OK
ReadX 10350 978944 4096 4096 NT_STATUS_OK
ReadX 10350 983040 61440 61440 NT_STATUS_OK
ReadX 10350 1044480 4096 4096 NT_STATUS_OK
ReadX 10350 1048576 61440 61440 NT_STATUS_OK
ReadX 10350 1110016 4096 4096 NT_STATUS_OK
ReadX 10350 1114112 61440 61440 NT_STATUS_OK
ReadX 10350 1175552 4096 4096 NT_STATUS_OK
ReadX 10350 1179648 61440 61440 NT_STATUS_OK
ReadX 10350 1241088 4096 4096 NT_STATUS_OK
ReadX 10350 1245184 61440 61440 NT_STATUS_OK
ReadX 10350 1306624 4096 4096 NT_STATUS_OK
ReadX 10350 1310720 61440 61440 NT_STATUS_OK
ReadX 10350 1372160 4096 4096 NT_STATUS_OK
ReadX 10350 1376256 61440 61440 NT_STATUS_OK
ReadX 10350 1437696 4096 4096 NT_STATUS_OK
ReadX 10350 1441792 61440 61440 NT_STATUS_OK
ReadX 10350 1503232 4096 4096 NT_STATUS_OK
ReadX 10350 1507328 61440 61440 NT_STATUS_OK
ReadX 10350 1568768 4096 4096 NT_STATUS_OK
ReadX 10350 1572864 61440 61440 NT_STATUS_OK
ReadX 10350 1634304 4096 4096 NT_STATUS_OK
ReadX 10350 1638400 61440 61440 NT_STATUS_OK
ReadX 10350 1699840 4096 4096 NT_STATUS_OK
ReadX 10350 1703936 61440 61440 NT_STATUS_OK
ReadX 10350 1765376 4096 4096 NT_STATUS_OK
ReadX 10350 1769472 61440 61440 NT_STATUS_OK
ReadX 10350 1830912 4096 4096 NT_STATUS_OK
ReadX 10350 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10352 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1005 NT_STATUS_OK
ReadX 10352 2156 24 24 NT_STATUS_OK
ReadX 10352 2139 276 276 NT_STATUS_OK
ReadX 10352 2136 14 14 NT_STATUS_OK
ReadX 10352 2136 7 7 NT_STATUS_OK
ReadX 10352 2138 12 12 NT_STATUS_OK
ReadX 10352 2137 8 8 NT_STATUS_OK
ReadX 10352 2135 15 15 NT_STATUS_OK
ReadX 10352 0 16 16 NT_STATUS_OK
ReadX 10352 16 2048 2048 NT_STATUS_OK
ReadX 10352 2064 2048 2048 NT_STATUS_OK
ReadX 10352 257 2048 2048 NT_STATUS_OK
ReadX 10352 385 2048 2048 NT_STATUS_OK
ReadX 10352 513 2048 2048 NT_STATUS_OK
ReadX 10352 641 2048 2048 NT_STATUS_OK
ReadX 10352 769 2048 2048 NT_STATUS_OK
ReadX 10352 897 2048 2048 NT_STATUS_OK
ReadX 10352 1025 2048 2048 NT_STATUS_OK
ReadX 10352 1153 2048 2048 NT_STATUS_OK
ReadX 10352 1281 2048 2048 NT_STATUS_OK
ReadX 10352 1409 2048 2048 NT_STATUS_OK
ReadX 10352 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10354 NT_STATUS_OK
Close 10354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10348 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10350 NT_STATUS_OK
Close 10342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10357 NT_STATUS_OK
WriteX 10357 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10357 258 NT_STATUS_OK
WriteX 10357 0 10575 10575 NT_STATUS_OK
Flush 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10358 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
Close 10352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10362 NT_STATUS_OK
LockX 10362 2147483538 1 NT_STATUS_OK
UnlockX 10362 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1005 NT_STATUS_OK
ReadX 10362 0 512 512 NT_STATUS_OK
ReadX 10362 512 512 512 NT_STATUS_OK
ReadX 10362 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1004 NT_STATUS_OK
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10363 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 1005 NT_STATUS_OK
ReadX 10363 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10364 NT_STATUS_OK
LockX 10364 2147483538 1 NT_STATUS_OK
UnlockX 10364 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10364 1005 NT_STATUS_OK
ReadX 10364 0 512 512 NT_STATUS_OK
ReadX 10364 512 512 512 NT_STATUS_OK
ReadX 10364 1024 512 512 NT_STATUS_OK
ReadX 10364 288 20 20 NT_STATUS_OK
ReadX 10364 308 2084 2084 NT_STATUS_OK
ReadX 10364 388 2084 2084 NT_STATUS_OK
ReadX 10364 388 2084 2084 NT_STATUS_OK
ReadX 10351 2157 1386 1386 NT_STATUS_OK
ReadX 10364 2472 399 399 NT_STATUS_OK
ReadX 10364 3072 1536 1536 NT_STATUS_OK
ReadX 10364 544 149 149 NT_STATUS_OK
ReadX 10364 693 485 485 NT_STATUS_OK
Close 10364 NT_STATUS_OK
ReadX 10351 2157 4096 4096 NT_STATUS_OK
ReadX 10351 6253 4096 4096 NT_STATUS_OK
ReadX 10351 10349 4096 4096 NT_STATUS_OK
ReadX 10351 14445 4096 4096 NT_STATUS_OK
ReadX 10351 18541 4096 4096 NT_STATUS_OK
ReadX 10351 22637 256 256 NT_STATUS_OK
ReadX 10351 22893 4096 4096 NT_STATUS_OK
ReadX 10351 26989 4096 4096 NT_STATUS_OK
ReadX 10351 31085 4096 4096 NT_STATUS_OK
ReadX 10351 35181 4096 4096 NT_STATUS_OK
ReadX 10351 39277 4096 4096 NT_STATUS_OK
ReadX 10351 43373 4096 4096 NT_STATUS_OK
ReadX 10351 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10351 2157 1024 1024 NT_STATUS_OK
ReadX 10351 1667 4688 4688 NT_STATUS_OK
ReadX 10351 6355 3516 3516 NT_STATUS_OK
ReadX 10351 9871 16384 16384 NT_STATUS_OK
ReadX 10351 26255 3771 3771 NT_STATUS_OK
ReadX 10351 30026 2048 2048 NT_STATUS_OK
ReadX 10351 32074 1024 1024 NT_STATUS_OK
ReadX 10351 33098 6652 6652 NT_STATUS_OK
ReadX 10351 39750 16384 16384 NT_STATUS_OK
ReadX 10351 56134 10496 10496 NT_STATUS_OK
ReadX 10351 66630 1784 1784 NT_STATUS_OK
ReadX 10351 68414 90 90 NT_STATUS_OK
ReadX 10351 68504 273 273 NT_STATUS_OK
ReadX 10351 68777 1600 1600 NT_STATUS_OK
ReadX 10351 70377 640 640 NT_STATUS_OK
ReadX 10351 71017 1280 1280 NT_STATUS_OK
ReadX 10351 72297 8464 8464 NT_STATUS_OK
ReadX 10351 80761 158 158 NT_STATUS_OK
ReadX 10351 80919 912 912 NT_STATUS_OK
ReadX 10351 81831 1980 1980 NT_STATUS_OK
ReadX 10351 83811 2256 2256 NT_STATUS_OK
ReadX 10351 86067 400 400 NT_STATUS_OK
ReadX 10351 86467 252 252 NT_STATUS_OK
ReadX 10351 86719 42 42 NT_STATUS_OK
ReadX 10351 86761 725 725 NT_STATUS_OK
ReadX 10351 2009 512 512 NT_STATUS_OK
ReadX 10351 3895 9 9 NT_STATUS_OK
ReadX 10351 3781 46 46 NT_STATUS_OK
ReadX 10351 4059 92 92 NT_STATUS_OK
ReadX 10351 3781 92 92 NT_STATUS_OK
ReadX 10351 3986 184 184 NT_STATUS_OK
ReadX 10351 3987 16384 16384 NT_STATUS_OK
ReadX 10351 3902 16384 16384 NT_STATUS_OK
ReadX 10351 3781 10240 10240 NT_STATUS_OK
ReadX 10351 3821 16384 16384 NT_STATUS_OK
ReadX 10351 3891 935 935 NT_STATUS_OK
ReadX 10351 4060 10240 10240 NT_STATUS_OK
ReadX 10351 4059 184 184 NT_STATUS_OK
ReadX 10351 256 184 184 NT_STATUS_OK
ReadX 10351 256 1026 1026 NT_STATUS_OK
ReadX 10351 3901 326 326 NT_STATUS_OK
ReadX 10351 3899 652 652 NT_STATUS_OK
ReadX 10351 256 2 2 NT_STATUS_OK
ReadX 10351 258 4948 4948 NT_STATUS_OK
Close 10351 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10366 NT_STATUS_OK
Close 10366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10369 NT_STATUS_OK
WriteX 10369 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10369 258 NT_STATUS_OK
WriteX 10369 0 65536 65536 NT_STATUS_OK
WriteX 10369 65536 65536 65536 NT_STATUS_OK
WriteX 10369 131072 65536 65536 NT_STATUS_OK
WriteX 10369 196608 65536 65536 NT_STATUS_OK
WriteX 10369 262144 65536 65536 NT_STATUS_OK
WriteX 10369 327680 65536 65536 NT_STATUS_OK
WriteX 10369 393216 65536 65536 NT_STATUS_OK
WriteX 10369 458752 65536 65536 NT_STATUS_OK
WriteX 10369 524288 65536 65536 NT_STATUS_OK
WriteX 10369 589824 35257 35257 NT_STATUS_OK
Close 10369 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10371 NT_STATUS_OK
Close 10371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10374 NT_STATUS_OK
WriteX 10374 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10374 258 NT_STATUS_OK
WriteX 10374 0 65536 65536 NT_STATUS_OK
WriteX 10374 65536 65536 65536 NT_STATUS_OK
WriteX 10374 131072 65536 65536 NT_STATUS_OK
WriteX 10374 196608 65536 65536 NT_STATUS_OK
WriteX 10374 262144 65536 65536 NT_STATUS_OK
WriteX 10374 327680 65536 65536 NT_STATUS_OK
WriteX 10374 393216 65536 65536 NT_STATUS_OK
WriteX 10374 458752 65536 65536 NT_STATUS_OK
WriteX 10374 524288 65536 65536 NT_STATUS_OK
WriteX 10374 589824 57598 57598 NT_STATUS_OK
Close 10374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10376 NT_STATUS_OK
WriteX 10376 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10376 258 NT_STATUS_OK
WriteX 10376 0 12543 12543 NT_STATUS_OK
Flush 10376 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10378 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10380 NT_STATUS_OK
ReadX 10380 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10382 NT_STATUS_OK
QUERY_FILE_INFORMATION 10382 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10382 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10382 1005 NT_STATUS_OK
ReadX 10382 1938 24 24 NT_STATUS_OK
ReadX 10382 1920 276 276 NT_STATUS_OK
ReadX 10382 1918 14 14 NT_STATUS_OK
ReadX 10382 1918 7 7 NT_STATUS_OK
ReadX 10382 1919 12 12 NT_STATUS_OK
ReadX 10382 1919 8 8 NT_STATUS_OK
ReadX 10382 1917 15 15 NT_STATUS_OK
ReadX 10382 0 16 16 NT_STATUS_OK
ReadX 10382 16 2048 2048 NT_STATUS_OK
ReadX 10382 2064 2048 2048 NT_STATUS_OK
ReadX 10382 257 2048 2048 NT_STATUS_OK
ReadX 10382 385 2048 2048 NT_STATUS_OK
ReadX 10382 513 2048 2048 NT_STATUS_OK
ReadX 10382 641 2048 2048 NT_STATUS_OK
ReadX 10382 769 2048 2048 NT_STATUS_OK
ReadX 10382 897 2048 2048 NT_STATUS_OK
ReadX 10382 1025 2048 2048 NT_STATUS_OK
ReadX 10382 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10384 NT_STATUS_OK
Close 10384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10387 NT_STATUS_OK
WriteX 10387 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10387 258 NT_STATUS_OK
WriteX 10387 0 11588 11588 NT_STATUS_OK
Flush 10387 NT_STATUS_OK
Close 10387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10388 NT_STATUS_OK
Close 10388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10390 NT_STATUS_OK
ReadX 10390 0 4096 4096 NT_STATUS_OK
Close 10382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10392 NT_STATUS_OK
WriteX 10392 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10392 258 NT_STATUS_OK
WriteX 10392 0 11615 11615 NT_STATUS_OK
Flush 10392 NT_STATUS_OK
Close 10392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10398 NT_STATUS_OK
Close 10398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10401 NT_STATUS_OK
WriteX 10401 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10401 258 NT_STATUS_OK
WriteX 10401 0 65536 65536 NT_STATUS_OK
WriteX 10401 65536 16050 16050 NT_STATUS_OK
Close 10401 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10381 1939 64 64 NT_STATUS_OK
ReadX 10381 128 248 248 NT_STATUS_OK
ReadX 10381 128 568 568 NT_STATUS_OK
ReadX 10381 3872 1536 1536 NT_STATUS_OK
ReadX 10381 3456 2560 2560 NT_STATUS_OK
ReadX 10381 3136 512 512 NT_STATUS_OK
ReadX 10381 2880 4096 4096 NT_STATUS_OK
ReadX 10381 3264 3072 3072 NT_STATUS_OK
ReadX 10381 320 4096 4096 NT_STATUS_OK
ReadX 10381 1024 4096 4096 NT_STATUS_OK
ReadX 10381 3616 4096 4096 NT_STATUS_OK
ReadX 10381 1939 64 64 NT_STATUS_OK
ReadX 10381 128 248 248 NT_STATUS_OK
ReadX 10381 128 608 608 NT_STATUS_OK
ReadX 10381 2858 1024 1024 NT_STATUS_OK
ReadX 10381 2810 4096 4096 NT_STATUS_OK
ReadX 10381 2826 4096 4096 NT_STATUS_OK
ReadX 10381 2580 2048 2048 NT_STATUS_OK
ReadX 10381 2800 2560 2560 NT_STATUS_OK
ReadX 10381 2100 4096 4096 NT_STATUS_OK
ReadX 10381 2084 4096 4096 NT_STATUS_OK
ReadX 10381 868 4096 4096 NT_STATUS_OK
ReadX 10381 2324 4096 4096 NT_STATUS_OK
ReadX 10381 884 4096 4096 NT_STATUS_OK
ReadX 10381 2604 1024 1024 NT_STATUS_OK
ReadX 10381 580 4096 4096 NT_STATUS_OK
ReadX 10381 596 4096 4096 NT_STATUS_OK
ReadX 10381 2752 4096 4096 NT_STATUS_OK
ReadX 10381 2842 1024 1024 NT_STATUS_OK
ReadX 10381 660 4096 4096 NT_STATUS_OK
ReadX 10381 2720 4096 4096 NT_STATUS_OK
ReadX 10381 2736 4096 4096 NT_STATUS_OK
ReadX 10381 628 4096 4096 NT_STATUS_OK
ReadX 10381 2704 4096 4096 NT_STATUS_OK
ReadX 10381 1556 4096 4096 NT_STATUS_OK
ReadX 10381 576 4096 4096 NT_STATUS_OK
ReadX 10381 3168 1536 1536 NT_STATUS_OK
ReadX 10381 832 4096 4096 NT_STATUS_OK
ReadX 10381 1088 4096 4096 NT_STATUS_OK
ReadX 10381 1344 4096 4096 NT_STATUS_OK
ReadX 10381 1600 4096 4096 NT_STATUS_OK
ReadX 10381 1856 4096 4096 NT_STATUS_OK
ReadX 10381 2112 4096 4096 NT_STATUS_OK
ReadX 10381 1892 4096 4096 NT_STATUS_OK
ReadX 10381 820 4096 4096 NT_STATUS_OK
ReadX 10381 788 4096 4096 NT_STATUS_OK
ReadX 10381 1604 4096 4096 NT_STATUS_OK
ReadX 10381 3648 4096 4096 NT_STATUS_OK
ReadX 10381 2608 4096 4096 NT_STATUS_OK
ReadX 10381 548 4096 4096 NT_STATUS_OK
ReadX 10381 740 4096 4096 NT_STATUS_OK
ReadX 10381 1344 4096 4096 NT_STATUS_OK
ReadX 10381 3392 4096 4096 NT_STATUS_OK
ReadX 10381 3904 4096 4096 NT_STATUS_OK
ReadX 10381 644 4096 4096 NT_STATUS_OK
ReadX 10381 676 4096 4096 NT_STATUS_OK
ReadX 10381 2688 4096 4096 NT_STATUS_OK
ReadX 10381 320 4096 4096 NT_STATUS_OK
ReadX 10381 900 4096 4096 NT_STATUS_OK
ReadX 10381 1908 4096 4096 NT_STATUS_OK
ReadX 10381 852 4096 4096 NT_STATUS_OK
ReadX 10381 724 4096 4096 NT_STATUS_OK
ReadX 10381 2292 4096 4096 NT_STATUS_OK
ReadX 10381 612 4096 4096 NT_STATUS_OK
ReadX 10381 388 4096 4096 NT_STATUS_OK
ReadX 10381 2368 4096 4096 NT_STATUS_OK
ReadX 10381 2624 4096 4096 NT_STATUS_OK
ReadX 10381 500 4096 4096 NT_STATUS_OK
ReadX 10381 356 4096 4096 NT_STATUS_OK
ReadX 10381 1024 4096 4096 NT_STATUS_OK
ReadX 10381 576 4096 4096 NT_STATUS_OK
ReadX 10381 340 4096 4096 NT_STATUS_OK
ReadX 10381 420 4096 4096 NT_STATUS_OK
ReadX 10381 1600 4096 4096 NT_STATUS_OK
ReadX 10381 404 4096 4096 NT_STATUS_OK
ReadX 10381 1428 4096 4096 NT_STATUS_OK
ReadX 10381 2656 4096 4096 NT_STATUS_OK
ReadX 10381 2624 4096 4096 NT_STATUS_OK
ReadX 10381 452 4096 4096 NT_STATUS_OK
ReadX 10381 692 4096 4096 NT_STATUS_OK
ReadX 10381 564 4096 4096 NT_STATUS_OK
ReadX 10381 372 4096 4096 NT_STATUS_OK
ReadX 10381 468 4096 4096 NT_STATUS_OK
ReadX 10381 484 4096 4096 NT_STATUS_OK
ReadX 10381 1088 4096 4096 NT_STATUS_OK
ReadX 10381 1924 4096 4096 NT_STATUS_OK
ReadX 10381 2768 4096 4096 NT_STATUS_OK
ReadX 10381 832 4096 4096 NT_STATUS_OK
ReadX 10381 836 4096 4096 NT_STATUS_OK
ReadX 10381 1856 4096 4096 NT_STATUS_OK
ReadX 10381 2640 4096 4096 NT_STATUS_OK
ReadX 10381 436 4096 4096 NT_STATUS_OK
ReadX 10381 1828 4096 4096 NT_STATUS_OK
ReadX 10381 804 4096 4096 NT_STATUS_OK
ReadX 10381 1860 4096 4096 NT_STATUS_OK
ReadX 10381 1812 4096 4096 NT_STATUS_OK
ReadX 10381 756 4096 4096 NT_STATUS_OK
ReadX 10381 1636 4096 4096 NT_STATUS_OK
ReadX 10381 772 4096 4096 NT_STATUS_OK
ReadX 10381 2036 4096 4096 NT_STATUS_OK
ReadX 10381 1220 4096 4096 NT_STATUS_OK
ReadX 10381 1652 4096 4096 NT_STATUS_OK
ReadX 10381 2588 4096 4096 NT_STATUS_OK
ReadX 10381 916 4096 4096 NT_STATUS_OK
ReadX 10381 260 4096 4096 NT_STATUS_OK
ReadX 10381 932 4096 4096 NT_STATUS_OK
ReadX 10381 2624 4096 4096 NT_STATUS_OK
ReadX 10381 308 4096 4096 NT_STATUS_OK
ReadX 10381 292 4096 4096 NT_STATUS_OK
ReadX 10381 1140 4096 4096 NT_STATUS_OK
ReadX 10381 276 4096 4096 NT_STATUS_OK
ReadX 10381 2020 4096 4096 NT_STATUS_OK
ReadX 10381 2880 4096 4096 NT_STATUS_OK
ReadX 10381 516 4096 4096 NT_STATUS_OK
ReadX 10381 1844 4096 4096 NT_STATUS_OK
ReadX 10381 1124 4096 4096 NT_STATUS_OK
ReadX 10381 3136 4096 4096 NT_STATUS_OK
ReadX 10381 324 4096 4096 NT_STATUS_OK
ReadX 10381 1156 4096 4096 NT_STATUS_OK
ReadX 10381 1172 4096 4096 NT_STATUS_OK
ReadX 10381 2112 4096 4096 NT_STATUS_OK
ReadX 10381 2368 4096 4096 NT_STATUS_OK
ReadX 10381 964 4096 4096 NT_STATUS_OK
ReadX 10381 980 4096 4096 NT_STATUS_OK
ReadX 10381 1012 4096 4096 NT_STATUS_OK
ReadX 10381 532 4096 4096 NT_STATUS_OK
ReadX 10381 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10381 1620 4096 4096 NT_STATUS_OK
ReadX 10381 1604 4096 4096 NT_STATUS_OK
ReadX 10381 2116 4096 4096 NT_STATUS_OK
ReadX 10381 2132 4096 4096 NT_STATUS_OK
ReadX 10381 2148 4096 4096 NT_STATUS_OK
ReadX 10381 2276 4096 4096 NT_STATUS_OK
ReadX 10381 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10403 NT_STATUS_OK
Close 10403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10406 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 1004 NT_STATUS_OK
Close 10361 NT_STATUS_OK
WriteX 10406 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10406 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 1004 NT_STATUS_OK
Close 10363 NT_STATUS_OK
WriteX 10406 0 65536 65536 NT_STATUS_OK
WriteX 10406 65536 64850 64850 NT_STATUS_OK
Close 10406 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10408 NT_STATUS_OK
WriteX 10408 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10408 258 NT_STATUS_OK
ReadX 10381 2068 4096 4096 NT_STATUS_OK
ReadX 10381 1588 4096 4096 NT_STATUS_OK
ReadX 10381 1572 4096 4096 NT_STATUS_OK
WriteX 10408 0 18630 18630 NT_STATUS_OK
Flush 10408 NT_STATUS_OK
Close 10408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10410 NT_STATUS_OK
Close 10410 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10412 NT_STATUS_OK
ReadX 10412 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10381 612 4096 4096 NT_STATUS_OK
ReadX 10381 564 4096 4096 NT_STATUS_OK
ReadX 10381 1876 4096 4096 NT_STATUS_OK
ReadX 10381 628 4096 4096 NT_STATUS_OK
ReadX 10381 740 4096 4096 NT_STATUS_OK
ReadX 10381 724 4096 4096 NT_STATUS_OK
ReadX 10381 644 4096 4096 NT_STATUS_OK
ReadX 10381 2324 4096 4096 NT_STATUS_OK
ReadX 10381 660 4096 4096 NT_STATUS_OK
ReadX 10381 852 4096 4096 NT_STATUS_OK
ReadX 10381 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10381 2368 4096 4096 NT_STATUS_OK
ReadX 10381 1024 4096 4096 NT_STATUS_OK
ReadX 10381 320 4096 4096 NT_STATUS_OK
ReadX 10381 580 4096 4096 NT_STATUS_OK
ReadX 10381 3136 512 512 NT_STATUS_OK
ReadX 10381 2880 4096 4096 NT_STATUS_OK
Close 10381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 61440 4096 4096 NT_STATUS_OK
ReadX 10413 126976 4096 4096 NT_STATUS_OK
WriteX 10413 0 65536 65536 NT_STATUS_OK
WriteX 10413 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10414 NT_STATUS_OK
ReadX 10414 61440 4096 4096 NT_STATUS_OK
ReadX 10414 126976 4096 4096 NT_STATUS_OK
ReadX 10414 192512 4096 4096 NT_STATUS_OK
ReadX 10414 258048 4096 4096 NT_STATUS_OK
WriteX 10414 0 65536 65536 NT_STATUS_OK
WriteX 10414 65536 65536 65536 NT_STATUS_OK
WriteX 10414 131072 65536 65536 NT_STATUS_OK
WriteX 10414 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 61440 4096 4096 NT_STATUS_OK
ReadX 10415 126976 4096 4096 NT_STATUS_OK
ReadX 10415 192512 4096 4096 NT_STATUS_OK
ReadX 10415 258048 4096 4096 NT_STATUS_OK
ReadX 10415 323584 4096 4096 NT_STATUS_OK
ReadX 10415 389120 4096 4096 NT_STATUS_OK
ReadX 10415 454656 4096 4096 NT_STATUS_OK
ReadX 10415 520192 4096 4096 NT_STATUS_OK
WriteX 10415 0 65536 65536 NT_STATUS_OK
WriteX 10415 65536 65536 65536 NT_STATUS_OK
WriteX 10415 131072 65536 65536 NT_STATUS_OK
WriteX 10415 196608 65536 65536 NT_STATUS_OK
WriteX 10415 262144 65536 65536 NT_STATUS_OK
WriteX 10415 327680 65536 65536 NT_STATUS_OK
WriteX 10415 393216 65536 65536 NT_STATUS_OK
WriteX 10415 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10417 NT_STATUS_OK
Close 10417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10418 NT_STATUS_OK
WriteX 10418 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10418 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10416 0 8192 8192 NT_STATUS_OK
Flush 10416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10416 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10416 0 8192 8192 NT_STATUS_OK
Flush 10416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10416 0 8192 8192 NT_STATUS_OK
Flush 10416 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10416 0 8192 8192 NT_STATUS_OK
Flush 10416 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10420 NT_STATUS_OK
Close 10420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10380 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Close 10414 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10423 NT_STATUS_OK
WriteX 10423 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10423 258 NT_STATUS_OK
WriteX 10423 0 62591 62591 NT_STATUS_OK
Close 10423 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10425 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10428 NT_STATUS_OK
WriteX 10428 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10428 258 NT_STATUS_OK
WriteX 10428 0 10845 10845 NT_STATUS_OK
Close 10428 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10430 NT_STATUS_OK
Close 10430 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10433 NT_STATUS_OK
WriteX 10433 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10433 258 NT_STATUS_OK
WriteX 10433 0 30118 30118 NT_STATUS_OK
Close 10433 NT_STATUS_OK
WriteX 10416 0 4096 4096 NT_STATUS_OK
WriteX 10418 0 64 64 NT_STATUS_OK
Close 10418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 61440 61440 NT_STATUS_OK
ReadX 10435 61440 4096 4096 NT_STATUS_OK
ReadX 10435 65536 61440 61440 NT_STATUS_OK
ReadX 10435 126976 4096 4096 NT_STATUS_OK
ReadX 10435 131072 61440 61440 NT_STATUS_OK
ReadX 10435 192512 4096 4096 NT_STATUS_OK
ReadX 10435 196608 61440 61440 NT_STATUS_OK
ReadX 10435 258048 4096 4096 NT_STATUS_OK
ReadX 10435 262144 61440 61440 NT_STATUS_OK
ReadX 10435 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 61440 61440 NT_STATUS_OK
ReadX 10436 61440 4096 4096 NT_STATUS_OK
ReadX 10436 65536 61440 61440 NT_STATUS_OK
ReadX 10436 126976 4096 4096 NT_STATUS_OK
ReadX 10436 131072 61440 61440 NT_STATUS_OK
ReadX 10436 192512 4096 4096 NT_STATUS_OK
ReadX 10436 196608 61440 61440 NT_STATUS_OK
ReadX 10436 258048 4096 4096 NT_STATUS_OK
ReadX 10436 262144 61440 61440 NT_STATUS_OK
ReadX 10436 323584 4096 4096 NT_STATUS_OK
ReadX 10436 327680 61440 61440 NT_STATUS_OK
ReadX 10436 389120 4096 4096 NT_STATUS_OK
ReadX 10436 393216 61440 61440 NT_STATUS_OK
ReadX 10436 454656 4096 4096 NT_STATUS_OK
ReadX 10436 458752 61440 61440 NT_STATUS_OK
ReadX 10436 520192 4096 4096 NT_STATUS_OK
ReadX 10436 524288 61440 61440 NT_STATUS_OK
ReadX 10436 585728 4096 4096 NT_STATUS_OK
ReadX 10436 589824 61440 61440 NT_STATUS_OK
ReadX 10436 651264 4096 4096 NT_STATUS_OK
ReadX 10436 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 61440 61440 NT_STATUS_OK
ReadX 10437 61440 4096 4096 NT_STATUS_OK
ReadX 10437 65536 61440 61440 NT_STATUS_OK
ReadX 10437 126976 4096 4096 NT_STATUS_OK
ReadX 10437 131072 61440 61440 NT_STATUS_OK
ReadX 10437 192512 4096 4096 NT_STATUS_OK
ReadX 10437 196608 61440 61440 NT_STATUS_OK
ReadX 10437 258048 4096 4096 NT_STATUS_OK
ReadX 10437 262144 61440 61440 NT_STATUS_OK
ReadX 10437 323584 4096 4096 NT_STATUS_OK
ReadX 10437 327680 61440 61440 NT_STATUS_OK
ReadX 10437 389120 4096 4096 NT_STATUS_OK
ReadX 10437 393216 61440 61440 NT_STATUS_OK
ReadX 10437 454656 4096 4096 NT_STATUS_OK
ReadX 10437 458752 61440 61440 NT_STATUS_OK
ReadX 10437 520192 4096 4096 NT_STATUS_OK
ReadX 10437 524288 61440 61440 NT_STATUS_OK
ReadX 10437 585728 4096 4096 NT_STATUS_OK
ReadX 10437 589824 61440 61440 NT_STATUS_OK
ReadX 10437 651264 4096 4096 NT_STATUS_OK
ReadX 10437 655360 61440 61440 NT_STATUS_OK
ReadX 10437 716800 4096 4096 NT_STATUS_OK
ReadX 10437 720896 61440 61440 NT_STATUS_OK
ReadX 10437 782336 4096 4096 NT_STATUS_OK
ReadX 10437 786432 61440 61440 NT_STATUS_OK
ReadX 10437 847872 4096 4096 NT_STATUS_OK
ReadX 10437 851968 61440 61440 NT_STATUS_OK
ReadX 10437 913408 4096 4096 NT_STATUS_OK
ReadX 10437 917504 61440 61440 NT_STATUS_OK
ReadX 10437 978944 4096 4096 NT_STATUS_OK
ReadX 10437 983040 61440 61440 NT_STATUS_OK
ReadX 10437 1044480 4096 4096 NT_STATUS_OK
ReadX 10437 1048576 61440 61440 NT_STATUS_OK
ReadX 10437 1110016 4096 4096 NT_STATUS_OK
ReadX 10437 1114112 61440 61440 NT_STATUS_OK
ReadX 10437 1175552 4096 4096 NT_STATUS_OK
ReadX 10437 1179648 61440 61440 NT_STATUS_OK
ReadX 10437 1241088 4096 4096 NT_STATUS_OK
ReadX 10437 1245184 61440 61440 NT_STATUS_OK
ReadX 10437 1306624 4096 4096 NT_STATUS_OK
ReadX 10437 1310720 61440 61440 NT_STATUS_OK
ReadX 10437 1372160 4096 4096 NT_STATUS_OK
ReadX 10437 1376256 61440 61440 NT_STATUS_OK
ReadX 10437 1437696 4096 4096 NT_STATUS_OK
ReadX 10437 1441792 61440 61440 NT_STATUS_OK
ReadX 10437 1503232 4096 4096 NT_STATUS_OK
ReadX 10437 1507328 61440 61440 NT_STATUS_OK
ReadX 10437 1568768 4096 4096 NT_STATUS_OK
ReadX 10437 1572864 61440 61440 NT_STATUS_OK
ReadX 10437 1634304 4096 4096 NT_STATUS_OK
ReadX 10437 1638400 61440 61440 NT_STATUS_OK
ReadX 10437 1699840 4096 4096 NT_STATUS_OK
ReadX 10437 1703936 61440 61440 NT_STATUS_OK
ReadX 10437 1765376 4096 4096 NT_STATUS_OK
ReadX 10437 1769472 61440 61440 NT_STATUS_OK
ReadX 10437 1830912 4096 4096 NT_STATUS_OK
ReadX 10437 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10442 NT_STATUS_OK
ReadX 10442 0 4096 4096 NT_STATUS_OK
ReadX 10442 4096 4096 4096 NT_STATUS_OK
ReadX 10442 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10443 NT_STATUS_OK
Close 10443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10445 NT_STATUS_OK
ReadX 10445 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10446 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10447 NT_STATUS_OK
Close 10447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10445 NT_STATUS_OK
Close 10446 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10450 NT_STATUS_OK
ReadX 10450 0 8192 8192 NT_STATUS_OK
ReadX 10450 8192 8192 8192 NT_STATUS_OK
ReadX 10450 16384 8192 8192 NT_STATUS_OK
ReadX 10450 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10452 NT_STATUS_OK
Close 10452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10450 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10455 NT_STATUS_OK
WriteX 10455 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10455 258 NT_STATUS_OK
WriteX 10455 0 10438 10438 NT_STATUS_OK
Close 10455 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10456 NT_STATUS_OK
Close 10456 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10457 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10458 NT_STATUS_OK
Close 10458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10459 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10460 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10461 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
ReadX 10464 4096 4096 4096 NT_STATUS_OK
ReadX 10464 8192 4096 4096 NT_STATUS_OK
ReadX 10464 12288 8192 8192 NT_STATUS_OK
ReadX 10464 20480 8192 8192 NT_STATUS_OK
ReadX 10464 28672 8192 8192 NT_STATUS_OK
ReadX 10464 36864 8192 8192 NT_STATUS_OK
ReadX 10464 45056 8192 8192 NT_STATUS_OK
ReadX 10464 53248 8192 8192 NT_STATUS_OK
ReadX 10464 61440 8192 8192 NT_STATUS_OK
ReadX 10464 69632 8192 8192 NT_STATUS_OK
ReadX 10464 77824 8192 8192 NT_STATUS_OK
ReadX 10464 86016 8192 8192 NT_STATUS_OK
ReadX 10464 94208 8192 8192 NT_STATUS_OK
ReadX 10464 102400 8192 8192 NT_STATUS_OK
ReadX 10464 110592 8192 8192 NT_STATUS_OK
ReadX 10464 118784 8192 8192 NT_STATUS_OK
ReadX 10464 126976 8192 8192 NT_STATUS_OK
ReadX 10464 135168 8192 8192 NT_STATUS_OK
ReadX 10464 143360 8192 8192 NT_STATUS_OK
ReadX 10464 151552 8192 8192 NT_STATUS_OK
ReadX 10464 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10464 NT_STATUS_OK
Close 10457 NT_STATUS_OK
Close 10459 NT_STATUS_OK
Close 10461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10466 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10469 NT_STATUS_OK
WriteX 10469 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10469 258 NT_STATUS_OK
WriteX 10469 0 28489 28489 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10470 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10472 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10472 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10473 NT_STATUS_OK
Close 10473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 8192 8192 NT_STATUS_OK
ReadX 10476 8192 8192 8192 NT_STATUS_OK
ReadX 10476 16384 8192 8192 NT_STATUS_OK
ReadX 10476 24576 8192 8192 NT_STATUS_OK
ReadX 10476 32768 16384 16384 NT_STATUS_OK
ReadX 10476 49152 8192 8192 NT_STATUS_OK
ReadX 10476 57344 8192 8192 NT_STATUS_OK
ReadX 10476 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10478 NT_STATUS_OK
Close 10478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10481 NT_STATUS_OK
WriteX 10481 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10481 258 NT_STATUS_OK
WriteX 10481 0 29253 29253 NT_STATUS_OK
Close 10481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10482 NT_STATUS_OK
Close 10482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10485 NT_STATUS_OK
Close 10485 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10488 NT_STATUS_OK
WriteX 10488 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10488 258 NT_STATUS_OK
WriteX 10488 0 30183 30183 NT_STATUS_OK
Close 10488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10491 NT_STATUS_OK
WriteX 10491 0 510 510 NT_STATUS_OK
WriteX 10491 510 512 512 NT_STATUS_OK
WriteX 10491 1022 510 510 NT_STATUS_OK
WriteX 10491 1532 510 510 NT_STATUS_OK
WriteX 10491 2042 168 168 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10492 NT_STATUS_OK
Close 10492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 4096 4096 NT_STATUS_OK
WriteX 10494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10495 NT_STATUS_OK
ReadX 10495 61440 4096 4096 NT_STATUS_OK
ReadX 10495 126976 4096 4096 NT_STATUS_OK
WriteX 10495 0 65536 65536 NT_STATUS_OK
WriteX 10495 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 61440 4096 4096 NT_STATUS_OK
ReadX 10496 126976 4096 4096 NT_STATUS_OK
ReadX 10496 192512 4096 4096 NT_STATUS_OK
ReadX 10496 258048 4096 4096 NT_STATUS_OK
WriteX 10496 0 65536 65536 NT_STATUS_OK
WriteX 10496 65536 65536 65536 NT_STATUS_OK
WriteX 10496 131072 65536 65536 NT_STATUS_OK
WriteX 10496 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10497 NT_STATUS_OK
ReadX 10497 61440 4096 4096 NT_STATUS_OK
ReadX 10497 126976 4096 4096 NT_STATUS_OK
ReadX 10497 192512 4096 4096 NT_STATUS_OK
ReadX 10497 258048 4096 4096 NT_STATUS_OK
ReadX 10497 323584 4096 4096 NT_STATUS_OK
ReadX 10497 389120 4096 4096 NT_STATUS_OK
ReadX 10497 454656 4096 4096 NT_STATUS_OK
ReadX 10497 520192 4096 4096 NT_STATUS_OK
WriteX 10497 0 65536 65536 NT_STATUS_OK
WriteX 10497 65536 65536 65536 NT_STATUS_OK
WriteX 10497 131072 65536 65536 NT_STATUS_OK
WriteX 10497 196608 65536 65536 NT_STATUS_OK
WriteX 10497 262144 65536 65536 NT_STATUS_OK
WriteX 10497 327680 65536 65536 NT_STATUS_OK
WriteX 10497 393216 65536 65536 NT_STATUS_OK
WriteX 10497 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10495 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Close 10497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10500 NT_STATUS_OK
Close 10500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10504 NT_STATUS_OK
Close 10504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10507 NT_STATUS_OK
Close 10507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10509 NT_STATUS_OK
Close 10509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10513 NT_STATUS_OK
Close 10513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10516 NT_STATUS_OK
Close 10516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10518 NT_STATUS_OK
Close 10518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10522 NT_STATUS_OK
Close 10522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10527 NT_STATUS_OK
Close 10527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10532 NT_STATUS_OK
Close 10532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10537 NT_STATUS_OK
Close 10537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10542 NT_STATUS_OK
Close 10542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10547 NT_STATUS_OK
Close 10547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10557 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10560 NT_STATUS_OK
Close 10560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10563 NT_STATUS_OK
Close 10563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10566 NT_STATUS_OK
WriteX 10566 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10566 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10566 0 65536 65536 NT_STATUS_OK
WriteX 10566 65536 65536 65536 NT_STATUS_OK
WriteX 10566 131072 65536 65536 NT_STATUS_OK
WriteX 10566 196608 65536 65536 NT_STATUS_OK
WriteX 10566 262144 26634 26634 NT_STATUS_OK
Close 10566 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10571 NT_STATUS_OK
Close 10571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10572 NT_STATUS_OK
Close 10572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
Close 10573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10574 NT_STATUS_OK
ReadX 10574 0 4096 4096 NT_STATUS_OK
ReadX 10574 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10574 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10579 NT_STATUS_OK
Close 10579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10582 NT_STATUS_OK
Close 10582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10591 NT_STATUS_OK
Close 10591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10593 NT_STATUS_OK
Close 10593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10597 NT_STATUS_OK
Close 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10602 NT_STATUS_OK
Close 10602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10607 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10612 NT_STATUS_OK
Close 10612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10617 NT_STATUS_OK
Close 10617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10622 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10626 NT_STATUS_OK
Close 10626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10631 NT_STATUS_OK
Close 10631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10636 NT_STATUS_OK
Close 10636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10651 NT_STATUS_OK
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10652 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 4096 4096 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 4096 4096 NT_STATUS_OK
Close 10654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10655 NT_STATUS_OK
ReadX 10655 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10665 NT_STATUS_OK
Close 10665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 0 4096 4096 NT_STATUS_OK
Close 10667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 0 4096 4096 NT_STATUS_OK
Close 10668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10669 NT_STATUS_OK
ReadX 10669 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10655 NT_STATUS_OK
Close 10669 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10698 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10698 0 4096 4096 NT_STATUS_OK
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10700 NT_STATUS_OK
ReadX 10700 0 4096 4096 NT_STATUS_OK
ReadX 10700 4096 4096 4096 NT_STATUS_OK
ReadX 10700 8192 4096 4096 NT_STATUS_OK
ReadX 10700 12288 4096 4096 NT_STATUS_OK
ReadX 10700 16384 4096 4096 NT_STATUS_OK
ReadX 10700 20480 4096 4096 NT_STATUS_OK
ReadX 10700 24576 4096 4096 NT_STATUS_OK
ReadX 10700 28672 4096 4096 NT_STATUS_OK
ReadX 10700 32768 4096 4096 NT_STATUS_OK
ReadX 10700 36864 4096 4096 NT_STATUS_OK
ReadX 10700 40960 4096 4096 NT_STATUS_OK
ReadX 10700 45056 4096 4096 NT_STATUS_OK
ReadX 10700 49152 4096 4096 NT_STATUS_OK
ReadX 10700 53248 4096 4096 NT_STATUS_OK
ReadX 10700 57344 4096 4096 NT_STATUS_OK
ReadX 10700 61440 4096 4096 NT_STATUS_OK
ReadX 10700 65536 4096 4096 NT_STATUS_OK
ReadX 10700 69632 4096 4096 NT_STATUS_OK
ReadX 10700 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
WriteX 10700 0 4096 4096 NT_STATUS_OK
Close 10700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10701 NT_STATUS_OK
SET_FILE_INFORMATION 10701 1004 NT_STATUS_OK
Close 10701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10703 NT_STATUS_OK
Close 10703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10706 NT_STATUS_OK
WriteX 10706 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 258 NT_STATUS_OK
WriteX 10706 0 65536 65536 NT_STATUS_OK
WriteX 10706 65536 19979 19979 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
QUERY_FILE_INFORMATION 10707 1004 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
SET_FILE_INFORMATION 10707 1004 NT_STATUS_OK
WriteX 10707 0 4096 4096 NT_STATUS_OK
Flush 10707 NT_STATUS_OK
Close 10707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10708 NT_STATUS_OK
ReadX 10708 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
Close 10708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
Close 10710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10711 NT_STATUS_OK
ReadX 10711 0 4096 4096 NT_STATUS_OK
Close 10711 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10712 NT_STATUS_OK
ReadX 10712 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10712 1004 NT_STATUS_OK
WriteX 10712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10713 NT_STATUS_OK
Close 10713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10709 NT_STATUS_OK
Close 10712 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10715 NT_STATUS_OK
Close 10715 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10718 NT_STATUS_OK
WriteX 10718 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10718 258 NT_STATUS_OK
WriteX 10718 0 65536 65536 NT_STATUS_OK
WriteX 10718 65536 17654 17654 NT_STATUS_OK
Close 10718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10719 NT_STATUS_OK
ReadX 10719 0 4096 4096 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
QUERY_FILE_INFORMATION 10719 1004 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
SET_FILE_INFORMATION 10719 1004 NT_STATUS_OK
WriteX 10719 0 4096 4096 NT_STATUS_OK
Flush 10719 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10720 NT_STATUS_OK
SET_FILE_INFORMATION 10720 1004 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10721 NT_STATUS_OK
ReadX 10721 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10722 NT_STATUS_OK
Close 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
ReadX 10724 4096 4096 4096 NT_STATUS_OK
ReadX 10724 8192 4096 4096 NT_STATUS_OK
ReadX 10724 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10724 16384 4096 4096 NT_STATUS_OK
ReadX 10724 20480 4096 4096 NT_STATUS_OK
ReadX 10724 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10726 NT_STATUS_OK
ReadX 10726 0 4096 4096 NT_STATUS_OK
Close 10726 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10727 NT_STATUS_OK
ReadX 10727 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10727 1004 NT_STATUS_OK
WriteX 10727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10728 NT_STATUS_OK
Close 10728 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10730 NT_STATUS_OK
Close 10730 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10733 NT_STATUS_OK
WriteX 10733 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10733 258 NT_STATUS_OK
WriteX 10733 0 65536 65536 NT_STATUS_OK
WriteX 10733 65536 19490 19490 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 0 4096 4096 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
QUERY_FILE_INFORMATION 10734 1004 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
SET_FILE_INFORMATION 10734 1004 NT_STATUS_OK
WriteX 10734 0 4096 4096 NT_STATUS_OK
Flush 10734 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10735 NT_STATUS_OK
SET_FILE_INFORMATION 10735 1004 NT_STATUS_OK
Close 10735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10736 NT_STATUS_OK
ReadX 10736 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10737 NT_STATUS_OK
Close 10737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10739 0 4096 4096 NT_STATUS_OK
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10741 NT_STATUS_OK
ReadX 10741 0 4096 4096 NT_STATUS_OK
ReadX 10741 4096 4096 4096 NT_STATUS_OK
ReadX 10741 8192 4096 4096 NT_STATUS_OK
ReadX 10741 12288 4096 4096 NT_STATUS_OK
ReadX 10741 16384 4096 4096 NT_STATUS_OK
ReadX 10741 20480 4096 4096 NT_STATUS_OK
ReadX 10741 24576 4096 4096 NT_STATUS_OK
ReadX 10741 28672 4096 4096 NT_STATUS_OK
ReadX 10741 32768 4096 4096 NT_STATUS_OK
ReadX 10741 36864 4096 4096 NT_STATUS_OK
ReadX 10741 40960 4096 4096 NT_STATUS_OK
ReadX 10741 45056 4096 4096 NT_STATUS_OK
ReadX 10741 49152 4096 4096 NT_STATUS_OK
ReadX 10741 53248 4096 4096 NT_STATUS_OK
ReadX 10741 57344 4096 4096 NT_STATUS_OK
ReadX 10741 61440 4096 4096 NT_STATUS_OK
ReadX 10741 65536 4096 4096 NT_STATUS_OK
ReadX 10741 69632 4096 4096 NT_STATUS_OK
ReadX 10741 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10741 1004 NT_STATUS_OK
WriteX 10741 0 4096 4096 NT_STATUS_OK
Close 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10742 NT_STATUS_OK
SET_FILE_INFORMATION 10742 1004 NT_STATUS_OK
Close 10742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10743 NT_STATUS_OK
ReadX 10743 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10736 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10747 NT_STATUS_OK
WriteX 10747 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10747 258 NT_STATUS_OK
WriteX 10747 0 65536 65536 NT_STATUS_OK
WriteX 10747 65536 8866 8866 NT_STATUS_OK
Close 10747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
WriteX 10748 0 4096 4096 NT_STATUS_OK
Flush 10748 NT_STATUS_OK
SET_FILE_INFORMATION 10748 1004 NT_STATUS_OK
WriteX 10748 0 4096 4096 NT_STATUS_OK
Flush 10748 NT_STATUS_OK
Close 10748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
Close 10750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10751 NT_STATUS_OK
ReadX 10751 0 4096 4096 NT_STATUS_OK
Close 10751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10752 NT_STATUS_OK
ReadX 10752 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10752 1004 NT_STATUS_OK
WriteX 10752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10753 NT_STATUS_OK
Close 10753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10752 NT_STATUS_OK
Close 10743 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10755 NT_STATUS_OK
Close 10755 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10758 NT_STATUS_OK
WriteX 10758 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10758 258 NT_STATUS_OK
WriteX 10758 0 65536 65536 NT_STATUS_OK
WriteX 10758 65536 9298 9298 NT_STATUS_OK
Close 10758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10759 NT_STATUS_OK
ReadX 10759 0 4096 4096 NT_STATUS_OK
WriteX 10759 0 4096 4096 NT_STATUS_OK
Flush 10759 NT_STATUS_OK
SET_FILE_INFORMATION 10759 1004 NT_STATUS_OK
WriteX 10759 0 4096 4096 NT_STATUS_OK
Flush 10759 NT_STATUS_OK
Close 10759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10760 NT_STATUS_OK
SET_FILE_INFORMATION 10760 1004 NT_STATUS_OK
Close 10760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10761 NT_STATUS_OK
ReadX 10761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10762 NT_STATUS_OK
Close 10762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10765 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10765 0 4096 4096 NT_STATUS_OK
Close 10765 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10766 NT_STATUS_OK
ReadX 10766 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10766 4096 4096 4096 NT_STATUS_OK
ReadX 10766 8192 4096 4096 NT_STATUS_OK
ReadX 10766 12288 4096 4096 NT_STATUS_OK
ReadX 10766 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10768 NT_STATUS_OK
ReadX 10768 0 4096 4096 NT_STATUS_OK
Close 10768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10769 NT_STATUS_OK
ReadX 10769 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10769 1004 NT_STATUS_OK
WriteX 10769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10766 NT_STATUS_OK
Close 10769 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10772 NT_STATUS_OK
Close 10772 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10775 NT_STATUS_OK
WriteX 10775 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10775 258 NT_STATUS_OK
WriteX 10775 0 65536 65536 NT_STATUS_OK
WriteX 10775 65536 11540 11540 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10776 NT_STATUS_OK
ReadX 10776 0 4096 4096 NT_STATUS_OK
WriteX 10776 0 4096 4096 NT_STATUS_OK
Flush 10776 NT_STATUS_OK
SET_FILE_INFORMATION 10776 1004 NT_STATUS_OK
WriteX 10776 0 4096 4096 NT_STATUS_OK
Flush 10776 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10777 NT_STATUS_OK
SET_FILE_INFORMATION 10777 1004 NT_STATUS_OK
Close 10777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10778 NT_STATUS_OK
ReadX 10778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10779 NT_STATUS_OK
Close 10779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10781 NT_STATUS_OK
ReadX 10781 61440 4096 4096 NT_STATUS_OK
ReadX 10781 126976 4096 4096 NT_STATUS_OK
WriteX 10781 0 65536 65536 NT_STATUS_OK
WriteX 10781 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10782 NT_STATUS_OK
ReadX 10782 61440 4096 4096 NT_STATUS_OK
ReadX 10782 126976 4096 4096 NT_STATUS_OK
ReadX 10782 192512 4096 4096 NT_STATUS_OK
ReadX 10782 258048 4096 4096 NT_STATUS_OK
WriteX 10782 0 65536 65536 NT_STATUS_OK
WriteX 10782 65536 65536 65536 NT_STATUS_OK
WriteX 10782 131072 65536 65536 NT_STATUS_OK
WriteX 10782 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10783 NT_STATUS_OK
ReadX 10783 61440 4096 4096 NT_STATUS_OK
ReadX 10783 126976 4096 4096 NT_STATUS_OK
ReadX 10783 192512 4096 4096 NT_STATUS_OK
ReadX 10783 258048 4096 4096 NT_STATUS_OK
ReadX 10783 323584 4096 4096 NT_STATUS_OK
ReadX 10783 389120 4096 4096 NT_STATUS_OK
ReadX 10783 454656 4096 4096 NT_STATUS_OK
ReadX 10783 520192 4096 4096 NT_STATUS_OK
WriteX 10783 0 65536 65536 NT_STATUS_OK
WriteX 10783 65536 65536 65536 NT_STATUS_OK
WriteX 10783 131072 65536 65536 NT_STATUS_OK
WriteX 10783 196608 65536 65536 NT_STATUS_OK
WriteX 10783 262144 65536 65536 NT_STATUS_OK
WriteX 10783 327680 65536 65536 NT_STATUS_OK
WriteX 10783 393216 65536 65536 NT_STATUS_OK
WriteX 10783 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10784 NT_STATUS_OK
ReadX 10784 0 4096 4096 NT_STATUS_OK
ReadX 10784 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10785 NT_STATUS_OK
WriteX 10785 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10785 258 NT_STATUS_OK
WriteX 10785 0 53 53 NT_STATUS_OK
Close 10785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10786 NT_STATUS_OK
Close 10786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10778 NT_STATUS_OK
Close 10724 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Close 10782 NT_STATUS_OK
Close 10783 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10784 8192 4096 4096 NT_STATUS_OK
ReadX 10784 12288 4096 4096 NT_STATUS_OK
WriteX 10788 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10788 258 NT_STATUS_OK
ReadX 10784 16384 4096 4096 NT_STATUS_OK
ReadX 10784 20480 4096 4096 NT_STATUS_OK
WriteX 10788 0 15360 15360 NT_STATUS_OK
Close 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10789 NT_STATUS_OK
ReadX 10789 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10789 1004 NT_STATUS_OK
WriteX 10789 0 4096 4096 NT_STATUS_OK
Close 10789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10792 NT_STATUS_OK
ReadX 10792 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10793 NT_STATUS_OK
Close 10793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10792 4096 4096 4096 NT_STATUS_OK
ReadX 10792 8192 4096 4096 NT_STATUS_OK
ReadX 10792 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
ReadX 10795 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10796 NT_STATUS_OK
ReadX 10796 0 4096 4096 NT_STATUS_OK
ReadX 10796 4096 4096 4096 NT_STATUS_OK
ReadX 10796 8192 4096 4096 NT_STATUS_OK
Close 10795 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10797 NT_STATUS_OK
WriteX 10797 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10797 258 NT_STATUS_OK
WriteX 10797 0 15360 15360 NT_STATUS_OK
Close 10797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10798 NT_STATUS_OK
ReadX 10798 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10798 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10798 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10799 NT_STATUS_OK
Close 10799 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10802 NT_STATUS_OK
SET_FILE_INFORMATION 10802 1004 NT_STATUS_OK
Close 10802 NT_STATUS_OK
WriteX 10798 0 4096 4096 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10803 NT_STATUS_OK
Close 10803 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10805 NT_STATUS_OK
ReadX 10805 0 4096 4096 NT_STATUS_OK
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 4096 4096 NT_STATUS_OK
ReadX 10805 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10805 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10805 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10806 NT_STATUS_OK
ReadX 10806 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10807 NT_STATUS_OK
WriteX 10807 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10807 258 NT_STATUS_OK
WriteX 10807 0 53 53 NT_STATUS_OK
Close 10807 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10808 NT_STATUS_OK
Close 10808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10806 4096 4096 4096 NT_STATUS_OK
ReadX 10806 8192 4096 4096 NT_STATUS_OK
ReadX 10806 12288 4096 4096 NT_STATUS_OK
WriteX 10810 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10810 258 NT_STATUS_OK
WriteX 10810 0 12006 12006 NT_STATUS_OK
Close 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10811 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10811 1004 NT_STATUS_OK
WriteX 10811 0 4096 4096 NT_STATUS_OK
Close 10811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10812 NT_STATUS_OK
Close 10812 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10814 NT_STATUS_OK
ReadX 10814 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10815 NT_STATUS_OK
Close 10815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10814 4096 4096 4096 NT_STATUS_OK
ReadX 10814 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10817 NT_STATUS_OK
WriteX 10817 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10817 258 NT_STATUS_OK
WriteX 10817 0 11991 11991 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10818 NT_STATUS_OK
ReadX 10818 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10818 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10818 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10819 NT_STATUS_OK
Close 10819 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10821 NT_STATUS_OK
ReadX 10821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10822 NT_STATUS_OK
SET_FILE_INFORMATION 10822 1004 NT_STATUS_OK
Close 10822 NT_STATUS_OK
WriteX 10818 0 4096 4096 NT_STATUS_OK
Close 10818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10823 NT_STATUS_OK
Close 10823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10825 NT_STATUS_OK
ReadX 10825 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10826 NT_STATUS_OK
Close 10826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10825 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
ReadX 10825 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
WriteX 10825 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10825 1004 NT_STATUS_OK
Close 10801 NT_STATUS_OK
WriteX 10805 0 19054 19054 NT_STATUS_OK
WriteX 10825 0 12288 12288 NT_STATUS_OK
Close 10821 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10828 NT_STATUS_OK
Close 10828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10805 NT_STATUS_OK
Close 10825 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10830 NT_STATUS_OK
Close 10830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 61440 61440 NT_STATUS_OK
ReadX 10832 61440 4096 4096 NT_STATUS_OK
ReadX 10832 65536 61440 61440 NT_STATUS_OK
ReadX 10832 126976 4096 4096 NT_STATUS_OK
ReadX 10832 131072 61440 61440 NT_STATUS_OK
ReadX 10832 192512 4096 4096 NT_STATUS_OK
ReadX 10832 196608 61440 61440 NT_STATUS_OK
ReadX 10832 258048 4096 4096 NT_STATUS_OK
ReadX 10832 262144 61440 61440 NT_STATUS_OK
ReadX 10832 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10833 NT_STATUS_OK
ReadX 10833 0 61440 61440 NT_STATUS_OK
ReadX 10833 61440 4096 4096 NT_STATUS_OK
ReadX 10833 65536 61440 61440 NT_STATUS_OK
ReadX 10833 126976 4096 4096 NT_STATUS_OK
ReadX 10833 131072 61440 61440 NT_STATUS_OK
ReadX 10833 192512 4096 4096 NT_STATUS_OK
ReadX 10833 196608 61440 61440 NT_STATUS_OK
ReadX 10833 258048 4096 4096 NT_STATUS_OK
ReadX 10833 262144 61440 61440 NT_STATUS_OK
ReadX 10833 323584 4096 4096 NT_STATUS_OK
ReadX 10833 327680 61440 61440 NT_STATUS_OK
ReadX 10833 389120 4096 4096 NT_STATUS_OK
ReadX 10833 393216 61440 61440 NT_STATUS_OK
ReadX 10833 454656 4096 4096 NT_STATUS_OK
ReadX 10833 458752 61440 61440 NT_STATUS_OK
ReadX 10833 520192 4096 4096 NT_STATUS_OK
ReadX 10833 524288 61440 61440 NT_STATUS_OK
ReadX 10833 585728 4096 4096 NT_STATUS_OK
ReadX 10833 589824 61440 61440 NT_STATUS_OK
ReadX 10833 651264 4096 4096 NT_STATUS_OK
ReadX 10833 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 61440 61440 NT_STATUS_OK
ReadX 10834 61440 4096 4096 NT_STATUS_OK
ReadX 10834 65536 61440 61440 NT_STATUS_OK
ReadX 10834 126976 4096 4096 NT_STATUS_OK
ReadX 10834 131072 61440 61440 NT_STATUS_OK
ReadX 10834 192512 4096 4096 NT_STATUS_OK
ReadX 10834 196608 61440 61440 NT_STATUS_OK
ReadX 10834 258048 4096 4096 NT_STATUS_OK
ReadX 10834 262144 61440 61440 NT_STATUS_OK
ReadX 10834 323584 4096 4096 NT_STATUS_OK
ReadX 10834 327680 61440 61440 NT_STATUS_OK
ReadX 10834 389120 4096 4096 NT_STATUS_OK
ReadX 10834 393216 61440 61440 NT_STATUS_OK
ReadX 10834 454656 4096 4096 NT_STATUS_OK
ReadX 10834 458752 61440 61440 NT_STATUS_OK
ReadX 10834 520192 4096 4096 NT_STATUS_OK
ReadX 10834 524288 61440 61440 NT_STATUS_OK
ReadX 10834 585728 4096 4096 NT_STATUS_OK
ReadX 10834 589824 61440 61440 NT_STATUS_OK
ReadX 10834 651264 4096 4096 NT_STATUS_OK
ReadX 10834 655360 61440 61440 NT_STATUS_OK
ReadX 10834 716800 4096 4096 NT_STATUS_OK
ReadX 10834 720896 61440 61440 NT_STATUS_OK
ReadX 10834 782336 4096 4096 NT_STATUS_OK
ReadX 10834 786432 61440 61440 NT_STATUS_OK
ReadX 10834 847872 4096 4096 NT_STATUS_OK
ReadX 10834 851968 61440 61440 NT_STATUS_OK
ReadX 10834 913408 4096 4096 NT_STATUS_OK
ReadX 10834 917504 61440 61440 NT_STATUS_OK
ReadX 10834 978944 4096 4096 NT_STATUS_OK
ReadX 10834 983040 61440 61440 NT_STATUS_OK
ReadX 10834 1044480 4096 4096 NT_STATUS_OK
ReadX 10834 1048576 61440 61440 NT_STATUS_OK
ReadX 10834 1110016 4096 4096 NT_STATUS_OK
ReadX 10834 1114112 61440 61440 NT_STATUS_OK
ReadX 10834 1175552 4096 4096 NT_STATUS_OK
ReadX 10834 1179648 61440 61440 NT_STATUS_OK
ReadX 10834 1241088 4096 4096 NT_STATUS_OK
ReadX 10834 1245184 61440 61440 NT_STATUS_OK
ReadX 10834 1306624 4096 4096 NT_STATUS_OK
ReadX 10834 1310720 61440 61440 NT_STATUS_OK
ReadX 10834 1372160 4096 4096 NT_STATUS_OK
ReadX 10834 1376256 61440 61440 NT_STATUS_OK
ReadX 10834 1437696 4096 4096 NT_STATUS_OK
ReadX 10834 1441792 61440 61440 NT_STATUS_OK
ReadX 10834 1503232 4096 4096 NT_STATUS_OK
ReadX 10834 1507328 61440 61440 NT_STATUS_OK
ReadX 10834 1568768 4096 4096 NT_STATUS_OK
ReadX 10834 1572864 61440 61440 NT_STATUS_OK
ReadX 10834 1634304 4096 4096 NT_STATUS_OK
ReadX 10834 1638400 61440 61440 NT_STATUS_OK
ReadX 10834 1699840 4096 4096 NT_STATUS_OK
ReadX 10834 1703936 61440 61440 NT_STATUS_OK
ReadX 10834 1765376 4096 4096 NT_STATUS_OK
ReadX 10834 1769472 61440 61440 NT_STATUS_OK
ReadX 10834 1830912 4096 4096 NT_STATUS_OK
ReadX 10834 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10835 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10840 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10841 NT_STATUS_OK
QUERY_FILE_INFORMATION 10841 1004 NT_STATUS_OK
WriteX 10841 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10841 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10842 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10843 NT_STATUS_OK
WriteX 10843 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10843 258 NT_STATUS_OK
WriteX 10843 0 491 491 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10841 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10846 NT_STATUS_OK
Close 10846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10847 NT_STATUS_OK
WriteX 10847 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10847 258 NT_STATUS_OK
WriteX 10847 0 543 543 NT_STATUS_OK
Close 10847 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10848 NT_STATUS_OK
ReadX 10848 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Close 10833 NT_STATUS_OK
Close 10834 NT_STATUS_OK
Close 10848 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Close 10838 NT_STATUS_OK
Close 10839 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10856 NT_STATUS_OK
ReadX 10856 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10860 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10861 NT_STATUS_OK
QUERY_FILE_INFORMATION 10861 1004 NT_STATUS_OK
WriteX 10861 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10861 258 NT_STATUS_OK
WriteX 10861 0 2048 2048 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10862 NT_STATUS_OK
ReadX 10862 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10862 0 4096 4096 NT_STATUS_OK
Flush 10862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10862 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10866 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10867 NT_STATUS_OK
WriteX 10867 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10867 258 NT_STATUS_OK
WriteX 10867 0 2048 2048 NT_STATUS_OK
Close 10867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10872 NT_STATUS_OK
Close 10872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10873 NT_STATUS_OK
WriteX 10873 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10873 258 NT_STATUS_OK
WriteX 10873 0 2048 2048 NT_STATUS_OK
Close 10873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10874 NT_STATUS_OK
ReadX 10874 0 2048 2048 NT_STATUS_OK
ReadX 10852 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10856 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10868 0 4096 4096 NT_STATUS_OK
WriteX 10852 0 8192 8192 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
WriteX 10854 0 4096 4096 NT_STATUS_OK
ReadX 10868 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10877 NT_STATUS_OK
ReadX 10877 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10878 NT_STATUS_OK
QUERY_FILE_INFORMATION 10878 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10877 NT_STATUS_OK
Close 10853 NT_STATUS_OK
Close 10854 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Close 10852 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10880 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10885 NT_STATUS_OK
ReadX 10885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10887 NT_STATUS_OK
ReadX 10887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10888 NT_STATUS_OK
ReadX 10888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10898 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 1004 NT_STATUS_OK
WriteX 10898 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10898 258 NT_STATUS_OK
WriteX 10898 0 2048 2048 NT_STATUS_OK
Close 10898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10899 NT_STATUS_OK
ReadX 10899 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10901 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10905 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10906 NT_STATUS_OK
QUERY_FILE_INFORMATION 10906 1004 NT_STATUS_OK
WriteX 10906 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10906 258 NT_STATUS_OK
WriteX 10906 0 2048 2048 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10899 0 4096 4096 NT_STATUS_OK
Flush 10899 NT_STATUS_OK
WriteX 10907 0 4096 4096 NT_STATUS_OK
Flush 10907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10899 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10907 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10901 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10909 NT_STATUS_OK
WriteX 10909 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10909 258 NT_STATUS_OK
WriteX 10909 0 4096 4096 NT_STATUS_OK
Close 10909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10910 NT_STATUS_OK
ReadX 10910 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10911 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10912 NT_STATUS_OK
WriteX 10912 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10912 258 NT_STATUS_OK
WriteX 10912 0 4096 4096 NT_STATUS_OK
Close 10912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10913 NT_STATUS_OK
ReadX 10913 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10913 0 4096 4096 NT_STATUS_OK
Close 10910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Close 10890 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10888 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Close 10882 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Close 10886 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10916 NT_STATUS_OK
Close 10916 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10918 NT_STATUS_OK
ReadX 10918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10919 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10920 NT_STATUS_OK
WriteX 10920 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10920 258 NT_STATUS_OK
WriteX 10920 0 2048 2048 NT_STATUS_OK
Close 10920 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10922 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10926 NT_STATUS_OK
ReadX 10926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10929 NT_STATUS_OK
ReadX 10929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10932 NT_STATUS_OK
ReadX 10932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10934 NT_STATUS_OK
ReadX 10934 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10935 NT_STATUS_OK
QUERY_FILE_INFORMATION 10935 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10935 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10918 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10933 NT_STATUS_OK
Close 10928 NT_STATUS_OK
Close 10929 NT_STATUS_OK
Close 10930 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Close 10934 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10926 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10937 NT_STATUS_OK
QUERY_FILE_INFORMATION 10937 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10944 NT_STATUS_OK
ReadX 10944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10947 NT_STATUS_OK
ReadX 10947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10951 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10952 NT_STATUS_OK
ReadX 10952 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10956 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10957 NT_STATUS_OK
QUERY_FILE_INFORMATION 10957 1004 NT_STATUS_OK
WriteX 10957 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10957 258 NT_STATUS_OK
WriteX 10957 0 2048 2048 NT_STATUS_OK
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10958 NT_STATUS_OK
ReadX 10958 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10960 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10969 NT_STATUS_OK
QUERY_FILE_INFORMATION 10969 1004 NT_STATUS_OK
WriteX 10969 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10969 258 NT_STATUS_OK
WriteX 10969 0 2048 2048 NT_STATUS_OK
Close 10969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10970 NT_STATUS_OK
ReadX 10970 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10976 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10977 NT_STATUS_OK
QUERY_FILE_INFORMATION 10977 1004 NT_STATUS_OK
WriteX 10977 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10977 258 NT_STATUS_OK
WriteX 10977 0 2048 2048 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10958 0 4096 4096 NT_STATUS_OK
Flush 10958 NT_STATUS_OK
WriteX 10970 0 4096 4096 NT_STATUS_OK
Flush 10970 NT_STATUS_OK
WriteX 10978 0 4096 4096 NT_STATUS_OK
Flush 10978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10958 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10970 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10978 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10960 4096 16384 16384 NT_STATUS_OK
ReadX 10940 4096 16384 16384 NT_STATUS_OK
ReadX 10972 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10979 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 2048 2048 NT_STATUS_OK
WriteX 10980 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10981 NT_STATUS_OK
QUERY_FILE_INFORMATION 10981 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Close 10964 NT_STATUS_OK
Close 10952 NT_STATUS_OK
Close 10944 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10972 NT_STATUS_OK
Close 10946 NT_STATUS_OK
Close 10949 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10947 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Close 10943 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10983 NT_STATUS_OK
QUERY_FILE_INFORMATION 10983 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10985 NT_STATUS_OK
QUERY_FILE_INFORMATION 10985 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10992 NT_STATUS_OK
ReadX 10992 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10988 4096 16384 16384 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10989 0 4096 4096 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
WriteX 10991 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10993 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11003 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11007 NT_STATUS_OK
ReadX 11007 0 8192 8192 NT_STATUS_OK
ReadX 10994 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11008 0 4096 4096 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
ReadX 11008 8192 4096 4096 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
WriteX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11009 0 4096 4096 NT_STATUS_OK
ReadX 11009 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10989 0 4096 4096 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
WriteX 10991 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11013 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11014 NT_STATUS_OK
QUERY_FILE_INFORMATION 11014 1004 NT_STATUS_OK
WriteX 11014 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11014 258 NT_STATUS_OK
WriteX 11014 0 2048 2048 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11016 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
ReadX 11017 4096 4096 4096 NT_STATUS_OK
WriteX 11017 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11015 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
ReadX 11019 4096 4096 4096 NT_STATUS_OK
WriteX 11019 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11020 NT_STATUS_OK
QUERY_FILE_INFORMATION 11020 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Close 10992 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Close 11003 NT_STATUS_OK
Close 11004 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11022 0 4096 4096 NT_STATUS_OK
ReadX 11022 4096 4096 4096 NT_STATUS_OK
ReadX 11022 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11027 NT_STATUS_OK
ReadX 11027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11028 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11035 NT_STATUS_OK
ReadX 11035 0 4096 4096 NT_STATUS_OK
ReadX 11023 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11040 NT_STATUS_OK
QUERY_FILE_INFORMATION 11040 1004 NT_STATUS_OK
WriteX 11040 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11040 258 NT_STATUS_OK
WriteX 11040 0 2048 2048 NT_STATUS_OK
Close 11040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11041 NT_STATUS_OK
ReadX 11041 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11041 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11045 NT_STATUS_OK
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11046 NT_STATUS_OK
QUERY_FILE_INFORMATION 11046 1004 NT_STATUS_OK
WriteX 11046 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11046 258 NT_STATUS_OK
WriteX 11046 0 2048 2048 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11047 NT_STATUS_OK
ReadX 11047 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11047 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11030 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11048 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11029 NT_STATUS_OK
Close 11035 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11027 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11050 NT_STATUS_OK
QUERY_FILE_INFORMATION 11050 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 61440 4096 4096 NT_STATUS_OK
ReadX 11052 126976 4096 4096 NT_STATUS_OK
WriteX 11052 0 65536 65536 NT_STATUS_OK
WriteX 11052 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 61440 4096 4096 NT_STATUS_OK
ReadX 11053 126976 4096 4096 NT_STATUS_OK
ReadX 11053 192512 4096 4096 NT_STATUS_OK
ReadX 11053 258048 4096 4096 NT_STATUS_OK
WriteX 11053 0 65536 65536 NT_STATUS_OK
WriteX 11053 65536 65536 65536 NT_STATUS_OK
WriteX 11053 131072 65536 65536 NT_STATUS_OK
WriteX 11053 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 61440 4096 4096 NT_STATUS_OK
ReadX 11054 126976 4096 4096 NT_STATUS_OK
ReadX 11054 192512 4096 4096 NT_STATUS_OK
ReadX 11054 258048 4096 4096 NT_STATUS_OK
ReadX 11054 323584 4096 4096 NT_STATUS_OK
ReadX 11054 389120 4096 4096 NT_STATUS_OK
ReadX 11054 454656 4096 4096 NT_STATUS_OK
ReadX 11054 520192 4096 4096 NT_STATUS_OK
WriteX 11054 0 65536 65536 NT_STATUS_OK
WriteX 11054 65536 65536 65536 NT_STATUS_OK
WriteX 11054 131072 65536 65536 NT_STATUS_OK
WriteX 11054 196608 65536 65536 NT_STATUS_OK
WriteX 11054 262144 65536 65536 NT_STATUS_OK
WriteX 11054 327680 65536 65536 NT_STATUS_OK
WriteX 11054 393216 65536 65536 NT_STATUS_OK
WriteX 11054 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11055 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11055 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11055 8192 4096 4096 NT_STATUS_OK
ReadX 11055 12288 4096 4096 NT_STATUS_OK
ReadX 11055 16384 4096 4096 NT_STATUS_OK
ReadX 11055 20480 4096 4096 NT_STATUS_OK
ReadX 11055 24576 4096 4096 NT_STATUS_OK
ReadX 11055 28672 4096 4096 NT_STATUS_OK
ReadX 11055 32768 4096 4096 NT_STATUS_OK
ReadX 11055 36864 4096 4096 NT_STATUS_OK
ReadX 11055 40960 4096 4096 NT_STATUS_OK
ReadX 11055 45056 4096 4096 NT_STATUS_OK
ReadX 11055 49152 4096 4096 NT_STATUS_OK
ReadX 11055 53248 4096 4096 NT_STATUS_OK
ReadX 11055 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11055 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11056 NT_STATUS_OK
Close 11056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11058 NT_STATUS_OK
WriteX 11058 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11058 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11058 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
WriteX 11058 0 57088 57088 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
Flush 11058 NT_STATUS_OK
Close 11055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11059 NT_STATUS_OK
SET_FILE_INFORMATION 11059 1004 NT_STATUS_OK
Close 11059 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
WriteX 11058 0 4096 4096 NT_STATUS_OK
Close 11058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11060 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11062 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11063 NT_STATUS_OK
WriteX 11063 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
WriteX 11063 0 51456 51456 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Flush 11063 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
WriteX 11063 0 4096 4096 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11065 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11067 NT_STATUS_OK
ReadX 11067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11067 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11069 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11072 NT_STATUS_OK
WriteX 11072 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11072 258 NT_STATUS_OK
WriteX 11072 0 53077 53077 NT_STATUS_OK
Close 11072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11073 NT_STATUS_OK
WriteX 11073 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11073 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11073 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11073 1004 NT_STATUS_OK
WriteX 11073 0 65536 65536 NT_STATUS_OK
WriteX 11073 65536 1856 1856 NT_STATUS_OK
WriteX 11073 0 4096 4096 NT_STATUS_OK
Flush 11073 NT_STATUS_OK
SET_FILE_INFORMATION 11073 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11073 1004 NT_STATUS_OK
WriteX 11073 0 4096 4096 NT_STATUS_OK
Close 11073 NT_STATUS_OK
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11075 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11077 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11079 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11082 NT_STATUS_OK
WriteX 11082 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11082 258 NT_STATUS_OK
WriteX 11082 0 7983 7983 NT_STATUS_OK
Close 11082 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11084 NT_STATUS_OK
Close 11084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11087 NT_STATUS_OK
WriteX 11087 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 258 NT_STATUS_OK
WriteX 11087 0 65536 65536 NT_STATUS_OK
WriteX 11087 65536 65536 65536 NT_STATUS_OK
WriteX 11087 131072 65536 65536 NT_STATUS_OK
WriteX 11087 196608 65536 65536 NT_STATUS_OK
WriteX 11087 262144 65536 65536 NT_STATUS_OK
WriteX 11087 327680 65536 65536 NT_STATUS_OK
WriteX 11087 393216 65536 65536 NT_STATUS_OK
WriteX 11087 458752 46731 46731 NT_STATUS_OK
Close 11087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11088 NT_STATUS_OK
WriteX 11088 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11088 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11077 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11088 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
WriteX 11088 0 65536 65536 NT_STATUS_OK
WriteX 11088 65536 22848 22848 NT_STATUS_OK
WriteX 11088 0 4096 4096 NT_STATUS_OK
Flush 11088 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11088 1004 NT_STATUS_OK
WriteX 11088 0 4096 4096 NT_STATUS_OK
Close 11088 NT_STATUS_OK
Close 11077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11090 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11092 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11093 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11093 1004 NT_STATUS_OK
ReadX 11093 8192 4096 4096 NT_STATUS_OK
ReadX 11093 12288 4096 4096 NT_STATUS_OK
ReadX 11093 16384 4096 4096 NT_STATUS_OK
ReadX 11093 20480 4096 4096 NT_STATUS_OK
ReadX 11093 24576 4096 4096 NT_STATUS_OK
ReadX 11093 28672 4096 4096 NT_STATUS_OK
ReadX 11093 32768 4096 4096 NT_STATUS_OK
ReadX 11093 36864 4096 4096 NT_STATUS_OK
ReadX 11093 40960 4096 4096 NT_STATUS_OK
ReadX 11093 45056 4096 4096 NT_STATUS_OK
ReadX 11093 49152 4096 4096 NT_STATUS_OK
ReadX 11093 53248 4096 4096 NT_STATUS_OK
ReadX 11093 57344 4096 4096 NT_STATUS_OK
ReadX 11093 61440 4096 4096 NT_STATUS_OK
ReadX 11093 65536 4096 4096 NT_STATUS_OK
ReadX 11093 69632 4096 4096 NT_STATUS_OK
ReadX 11093 73728 4096 4096 NT_STATUS_OK
ReadX 11093 77824 4096 4096 NT_STATUS_OK
ReadX 11093 81920 4096 4096 NT_STATUS_OK
ReadX 11093 86016 4096 4096 NT_STATUS_OK
ReadX 11093 90112 4096 4096 NT_STATUS_OK
ReadX 11093 94208 4096 4096 NT_STATUS_OK
ReadX 11093 98304 4096 4096 NT_STATUS_OK
ReadX 11093 102400 4096 4096 NT_STATUS_OK
ReadX 11093 106496 4096 4096 NT_STATUS_OK
ReadX 11093 110592 4096 4096 NT_STATUS_OK
ReadX 11093 114688 4096 4096 NT_STATUS_OK
ReadX 11093 118784 4096 4096 NT_STATUS_OK
ReadX 11093 122880 4096 4096 NT_STATUS_OK
ReadX 11093 126976 4096 4096 NT_STATUS_OK
ReadX 11093 131072 4096 4096 NT_STATUS_OK
ReadX 11093 135168 4096 4096 NT_STATUS_OK
ReadX 11093 139264 4096 4096 NT_STATUS_OK
ReadX 11093 143360 4096 4096 NT_STATUS_OK
ReadX 11093 147456 4096 4096 NT_STATUS_OK
ReadX 11093 151552 4096 4096 NT_STATUS_OK
ReadX 11093 155648 4096 4096 NT_STATUS_OK
ReadX 11093 159744 4096 4096 NT_STATUS_OK
ReadX 11093 163840 4096 4096 NT_STATUS_OK
ReadX 11093 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11093 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11094 NT_STATUS_OK
Close 11094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11096 NT_STATUS_OK
WriteX 11096 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11096 258 NT_STATUS_OK
Close 11093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11097 NT_STATUS_OK
SET_FILE_INFORMATION 11097 1004 NT_STATUS_OK
Close 11097 NT_STATUS_OK
WriteX 11096 0 42388 42388 NT_STATUS_OK
Close 11096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11098 NT_STATUS_OK
Close 11098 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 4096 4096 NT_STATUS_OK
ReadX 11100 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11101 NT_STATUS_OK
WriteX 11101 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11101 258 NT_STATUS_OK
SET_FILE_INFORMATION 11101 1004 NT_STATUS_OK
WriteX 11101 0 42652 42652 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Close 11100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11103 NT_STATUS_OK
Close 11103 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11105 NT_STATUS_OK
ReadX 11105 0 4096 4096 NT_STATUS_OK
ReadX 11105 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11107 NT_STATUS_OK
Close 11107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11110 NT_STATUS_OK
WriteX 11110 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11110 258 NT_STATUS_OK
WriteX 11110 0 65536 65536 NT_STATUS_OK
WriteX 11110 65536 49 49 NT_STATUS_OK
Close 11110 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 61440 61440 NT_STATUS_OK
ReadX 11111 61440 4096 4096 NT_STATUS_OK
ReadX 11111 65536 61440 61440 NT_STATUS_OK
ReadX 11111 126976 4096 4096 NT_STATUS_OK
ReadX 11111 131072 61440 61440 NT_STATUS_OK
ReadX 11111 192512 4096 4096 NT_STATUS_OK
ReadX 11111 196608 61440 61440 NT_STATUS_OK
ReadX 11111 258048 4096 4096 NT_STATUS_OK
ReadX 11111 262144 61440 61440 NT_STATUS_OK
ReadX 11111 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 61440 61440 NT_STATUS_OK
ReadX 11112 61440 4096 4096 NT_STATUS_OK
ReadX 11112 65536 61440 61440 NT_STATUS_OK
ReadX 11112 126976 4096 4096 NT_STATUS_OK
ReadX 11112 131072 61440 61440 NT_STATUS_OK
ReadX 11112 192512 4096 4096 NT_STATUS_OK
ReadX 11112 196608 61440 61440 NT_STATUS_OK
ReadX 11112 258048 4096 4096 NT_STATUS_OK
ReadX 11112 262144 61440 61440 NT_STATUS_OK
ReadX 11112 323584 4096 4096 NT_STATUS_OK
ReadX 11112 327680 61440 61440 NT_STATUS_OK
ReadX 11112 389120 4096 4096 NT_STATUS_OK
ReadX 11112 393216 61440 61440 NT_STATUS_OK
ReadX 11112 454656 4096 4096 NT_STATUS_OK
ReadX 11112 458752 61440 61440 NT_STATUS_OK
ReadX 11112 520192 4096 4096 NT_STATUS_OK
ReadX 11112 524288 61440 61440 NT_STATUS_OK
ReadX 11112 585728 4096 4096 NT_STATUS_OK
ReadX 11112 589824 61440 61440 NT_STATUS_OK
ReadX 11112 651264 4096 4096 NT_STATUS_OK
ReadX 11112 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11113 NT_STATUS_OK
ReadX 11113 0 61440 61440 NT_STATUS_OK
ReadX 11113 61440 4096 4096 NT_STATUS_OK
ReadX 11113 65536 61440 61440 NT_STATUS_OK
ReadX 11113 126976 4096 4096 NT_STATUS_OK
ReadX 11113 131072 61440 61440 NT_STATUS_OK
ReadX 11113 192512 4096 4096 NT_STATUS_OK
ReadX 11113 196608 61440 61440 NT_STATUS_OK
ReadX 11113 258048 4096 4096 NT_STATUS_OK
ReadX 11113 262144 61440 61440 NT_STATUS_OK
ReadX 11113 323584 4096 4096 NT_STATUS_OK
ReadX 11113 327680 61440 61440 NT_STATUS_OK
ReadX 11113 389120 4096 4096 NT_STATUS_OK
ReadX 11113 393216 61440 61440 NT_STATUS_OK
ReadX 11113 454656 4096 4096 NT_STATUS_OK
ReadX 11113 458752 61440 61440 NT_STATUS_OK
ReadX 11113 520192 4096 4096 NT_STATUS_OK
ReadX 11113 524288 61440 61440 NT_STATUS_OK
ReadX 11113 585728 4096 4096 NT_STATUS_OK
ReadX 11113 589824 61440 61440 NT_STATUS_OK
ReadX 11113 651264 4096 4096 NT_STATUS_OK
ReadX 11113 655360 61440 61440 NT_STATUS_OK
ReadX 11113 716800 4096 4096 NT_STATUS_OK
ReadX 11113 720896 61440 61440 NT_STATUS_OK
ReadX 11113 782336 4096 4096 NT_STATUS_OK
ReadX 11113 786432 61440 61440 NT_STATUS_OK
ReadX 11113 847872 4096 4096 NT_STATUS_OK
ReadX 11113 851968 61440 61440 NT_STATUS_OK
ReadX 11113 913408 4096 4096 NT_STATUS_OK
ReadX 11113 917504 61440 61440 NT_STATUS_OK
ReadX 11113 978944 4096 4096 NT_STATUS_OK
ReadX 11113 983040 61440 61440 NT_STATUS_OK
ReadX 11113 1044480 4096 4096 NT_STATUS_OK
ReadX 11113 1048576 61440 61440 NT_STATUS_OK
ReadX 11113 1110016 4096 4096 NT_STATUS_OK
ReadX 11113 1114112 61440 61440 NT_STATUS_OK
ReadX 11113 1175552 4096 4096 NT_STATUS_OK
ReadX 11113 1179648 61440 61440 NT_STATUS_OK
ReadX 11113 1241088 4096 4096 NT_STATUS_OK
ReadX 11113 1245184 61440 61440 NT_STATUS_OK
ReadX 11113 1306624 4096 4096 NT_STATUS_OK
ReadX 11113 1310720 61440 61440 NT_STATUS_OK
ReadX 11113 1372160 4096 4096 NT_STATUS_OK
ReadX 11113 1376256 61440 61440 NT_STATUS_OK
ReadX 11113 1437696 4096 4096 NT_STATUS_OK
ReadX 11113 1441792 61440 61440 NT_STATUS_OK
ReadX 11113 1503232 4096 4096 NT_STATUS_OK
ReadX 11113 1507328 61440 61440 NT_STATUS_OK
ReadX 11113 1568768 4096 4096 NT_STATUS_OK
ReadX 11113 1572864 61440 61440 NT_STATUS_OK
ReadX 11113 1634304 4096 4096 NT_STATUS_OK
ReadX 11113 1638400 61440 61440 NT_STATUS_OK
ReadX 11113 1699840 4096 4096 NT_STATUS_OK
ReadX 11113 1703936 61440 61440 NT_STATUS_OK
ReadX 11113 1765376 4096 4096 NT_STATUS_OK
ReadX 11113 1769472 61440 61440 NT_STATUS_OK
ReadX 11113 1830912 4096 4096 NT_STATUS_OK
ReadX 11113 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11114 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11115 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1005 NT_STATUS_OK
ReadX 11115 2156 24 24 NT_STATUS_OK
ReadX 11115 2139 276 276 NT_STATUS_OK
ReadX 11115 2136 14 14 NT_STATUS_OK
ReadX 11115 2136 7 7 NT_STATUS_OK
ReadX 11115 2138 12 12 NT_STATUS_OK
ReadX 11115 2137 8 8 NT_STATUS_OK
ReadX 11115 2135 15 15 NT_STATUS_OK
ReadX 11115 0 16 16 NT_STATUS_OK
ReadX 11115 16 2048 2048 NT_STATUS_OK
ReadX 11115 2064 2048 2048 NT_STATUS_OK
ReadX 11115 257 2048 2048 NT_STATUS_OK
ReadX 11115 385 2048 2048 NT_STATUS_OK
ReadX 11115 513 2048 2048 NT_STATUS_OK
ReadX 11115 641 2048 2048 NT_STATUS_OK
ReadX 11115 769 2048 2048 NT_STATUS_OK
ReadX 11115 897 2048 2048 NT_STATUS_OK
ReadX 11115 1025 2048 2048 NT_STATUS_OK
ReadX 11115 1153 2048 2048 NT_STATUS_OK
ReadX 11115 1281 2048 2048 NT_STATUS_OK
ReadX 11115 1409 2048 2048 NT_STATUS_OK
ReadX 11115 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11117 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11111 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Close 11113 NT_STATUS_OK
Close 11105 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11120 NT_STATUS_OK
WriteX 11120 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11120 258 NT_STATUS_OK
WriteX 11120 0 10575 10575 NT_STATUS_OK
Flush 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11121 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
Close 11115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11125 NT_STATUS_OK
LockX 11125 2147483538 1 NT_STATUS_OK
UnlockX 11125 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1005 NT_STATUS_OK
ReadX 11125 0 512 512 NT_STATUS_OK
ReadX 11125 512 512 512 NT_STATUS_OK
ReadX 11125 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1004 NT_STATUS_OK
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11126 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 1005 NT_STATUS_OK
ReadX 11126 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11127 NT_STATUS_OK
LockX 11127 2147483538 1 NT_STATUS_OK
UnlockX 11127 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11127 1005 NT_STATUS_OK
ReadX 11127 0 512 512 NT_STATUS_OK
ReadX 11127 512 512 512 NT_STATUS_OK
ReadX 11127 1024 512 512 NT_STATUS_OK
ReadX 11127 288 20 20 NT_STATUS_OK
ReadX 11127 308 2084 2084 NT_STATUS_OK
ReadX 11127 388 2084 2084 NT_STATUS_OK
ReadX 11127 388 2084 2084 NT_STATUS_OK
ReadX 11114 2157 1386 1386 NT_STATUS_OK
ReadX 11127 2472 399 399 NT_STATUS_OK
ReadX 11127 3072 1536 1536 NT_STATUS_OK
ReadX 11127 544 149 149 NT_STATUS_OK
ReadX 11127 693 485 485 NT_STATUS_OK
Close 11127 NT_STATUS_OK
ReadX 11114 2157 4096 4096 NT_STATUS_OK
ReadX 11114 6253 4096 4096 NT_STATUS_OK
ReadX 11114 10349 4096 4096 NT_STATUS_OK
ReadX 11114 14445 4096 4096 NT_STATUS_OK
ReadX 11114 18541 4096 4096 NT_STATUS_OK
ReadX 11114 22637 256 256 NT_STATUS_OK
ReadX 11114 22893 4096 4096 NT_STATUS_OK
ReadX 11114 26989 4096 4096 NT_STATUS_OK
ReadX 11114 31085 4096 4096 NT_STATUS_OK
ReadX 11114 35181 4096 4096 NT_STATUS_OK
ReadX 11114 39277 4096 4096 NT_STATUS_OK
ReadX 11114 43373 4096 4096 NT_STATUS_OK
ReadX 11114 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11114 2157 1024 1024 NT_STATUS_OK
ReadX 11114 1667 4688 4688 NT_STATUS_OK
ReadX 11114 6355 3516 3516 NT_STATUS_OK
ReadX 11114 9871 16384 16384 NT_STATUS_OK
ReadX 11114 26255 3771 3771 NT_STATUS_OK
ReadX 11114 30026 2048 2048 NT_STATUS_OK
ReadX 11114 32074 1024 1024 NT_STATUS_OK
ReadX 11114 33098 6652 6652 NT_STATUS_OK
ReadX 11114 39750 16384 16384 NT_STATUS_OK
ReadX 11114 56134 10496 10496 NT_STATUS_OK
ReadX 11114 66630 1784 1784 NT_STATUS_OK
ReadX 11114 68414 90 90 NT_STATUS_OK
ReadX 11114 68504 273 273 NT_STATUS_OK
ReadX 11114 68777 1600 1600 NT_STATUS_OK
ReadX 11114 70377 640 640 NT_STATUS_OK
ReadX 11114 71017 1280 1280 NT_STATUS_OK
ReadX 11114 72297 8464 8464 NT_STATUS_OK
ReadX 11114 80761 158 158 NT_STATUS_OK
ReadX 11114 80919 912 912 NT_STATUS_OK
ReadX 11114 81831 1980 1980 NT_STATUS_OK
ReadX 11114 83811 2256 2256 NT_STATUS_OK
ReadX 11114 86067 400 400 NT_STATUS_OK
ReadX 11114 86467 252 252 NT_STATUS_OK
ReadX 11114 86719 42 42 NT_STATUS_OK
ReadX 11114 86761 725 725 NT_STATUS_OK
ReadX 11114 2009 512 512 NT_STATUS_OK
ReadX 11114 3895 9 9 NT_STATUS_OK
ReadX 11114 3781 46 46 NT_STATUS_OK
ReadX 11114 4059 92 92 NT_STATUS_OK
ReadX 11114 3781 92 92 NT_STATUS_OK
ReadX 11114 3986 184 184 NT_STATUS_OK
ReadX 11114 3987 16384 16384 NT_STATUS_OK
ReadX 11114 3902 16384 16384 NT_STATUS_OK
ReadX 11114 3781 10240 10240 NT_STATUS_OK
ReadX 11114 3821 16384 16384 NT_STATUS_OK
ReadX 11114 3891 935 935 NT_STATUS_OK
ReadX 11114 4060 10240 10240 NT_STATUS_OK
ReadX 11114 4059 184 184 NT_STATUS_OK
ReadX 11114 256 184 184 NT_STATUS_OK
ReadX 11114 256 1026 1026 NT_STATUS_OK
ReadX 11114 3901 326 326 NT_STATUS_OK
ReadX 11114 3899 652 652 NT_STATUS_OK
ReadX 11114 256 2 2 NT_STATUS_OK
ReadX 11114 258 4948 4948 NT_STATUS_OK
Close 11114 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11129 NT_STATUS_OK
Close 11129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11132 NT_STATUS_OK
WriteX 11132 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11132 258 NT_STATUS_OK
WriteX 11132 0 65536 65536 NT_STATUS_OK
WriteX 11132 65536 65536 65536 NT_STATUS_OK
WriteX 11132 131072 65536 65536 NT_STATUS_OK
WriteX 11132 196608 65536 65536 NT_STATUS_OK
WriteX 11132 262144 65536 65536 NT_STATUS_OK
WriteX 11132 327680 65536 65536 NT_STATUS_OK
WriteX 11132 393216 65536 65536 NT_STATUS_OK
WriteX 11132 458752 65536 65536 NT_STATUS_OK
WriteX 11132 524288 65536 65536 NT_STATUS_OK
WriteX 11132 589824 35257 35257 NT_STATUS_OK
Close 11132 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11134 NT_STATUS_OK
Close 11134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11137 NT_STATUS_OK
WriteX 11137 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11137 258 NT_STATUS_OK
WriteX 11137 0 65536 65536 NT_STATUS_OK
WriteX 11137 65536 65536 65536 NT_STATUS_OK
WriteX 11137 131072 65536 65536 NT_STATUS_OK
WriteX 11137 196608 65536 65536 NT_STATUS_OK
WriteX 11137 262144 65536 65536 NT_STATUS_OK
WriteX 11137 327680 65536 65536 NT_STATUS_OK
WriteX 11137 393216 65536 65536 NT_STATUS_OK
WriteX 11137 458752 65536 65536 NT_STATUS_OK
WriteX 11137 524288 65536 65536 NT_STATUS_OK
WriteX 11137 589824 57598 57598 NT_STATUS_OK
Close 11137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11139 NT_STATUS_OK
WriteX 11139 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11139 258 NT_STATUS_OK
WriteX 11139 0 12543 12543 NT_STATUS_OK
Flush 11139 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11141 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11143 NT_STATUS_OK
ReadX 11143 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11144 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11145 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 1005 NT_STATUS_OK
ReadX 11145 1938 24 24 NT_STATUS_OK
ReadX 11145 1920 276 276 NT_STATUS_OK
ReadX 11145 1918 14 14 NT_STATUS_OK
ReadX 11145 1918 7 7 NT_STATUS_OK
ReadX 11145 1919 12 12 NT_STATUS_OK
ReadX 11145 1919 8 8 NT_STATUS_OK
ReadX 11145 1917 15 15 NT_STATUS_OK
ReadX 11145 0 16 16 NT_STATUS_OK
ReadX 11145 16 2048 2048 NT_STATUS_OK
ReadX 11145 2064 2048 2048 NT_STATUS_OK
ReadX 11145 257 2048 2048 NT_STATUS_OK
ReadX 11145 385 2048 2048 NT_STATUS_OK
ReadX 11145 513 2048 2048 NT_STATUS_OK
ReadX 11145 641 2048 2048 NT_STATUS_OK
ReadX 11145 769 2048 2048 NT_STATUS_OK
ReadX 11145 897 2048 2048 NT_STATUS_OK
ReadX 11145 1025 2048 2048 NT_STATUS_OK
ReadX 11145 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11147 NT_STATUS_OK
Close 11147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11150 NT_STATUS_OK
WriteX 11150 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11150 258 NT_STATUS_OK
WriteX 11150 0 11588 11588 NT_STATUS_OK
Flush 11150 NT_STATUS_OK
Close 11150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11151 NT_STATUS_OK
Close 11151 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11153 NT_STATUS_OK
ReadX 11153 0 4096 4096 NT_STATUS_OK
Close 11145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11155 NT_STATUS_OK
WriteX 11155 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11155 258 NT_STATUS_OK
WriteX 11155 0 11615 11615 NT_STATUS_OK
Flush 11155 NT_STATUS_OK
Close 11155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11153 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11157 NT_STATUS_OK
Close 11157 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11161 NT_STATUS_OK
Close 11161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11164 NT_STATUS_OK
WriteX 11164 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11164 258 NT_STATUS_OK
WriteX 11164 0 65536 65536 NT_STATUS_OK
WriteX 11164 65536 16050 16050 NT_STATUS_OK
Close 11164 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11144 1939 64 64 NT_STATUS_OK
ReadX 11144 128 248 248 NT_STATUS_OK
ReadX 11144 128 568 568 NT_STATUS_OK
ReadX 11144 3872 1536 1536 NT_STATUS_OK
ReadX 11144 3456 2560 2560 NT_STATUS_OK
ReadX 11144 3136 512 512 NT_STATUS_OK
ReadX 11144 2880 4096 4096 NT_STATUS_OK
ReadX 11144 3264 3072 3072 NT_STATUS_OK
ReadX 11144 320 4096 4096 NT_STATUS_OK
ReadX 11144 1024 4096 4096 NT_STATUS_OK
ReadX 11144 3616 4096 4096 NT_STATUS_OK
ReadX 11144 1939 64 64 NT_STATUS_OK
ReadX 11144 128 248 248 NT_STATUS_OK
ReadX 11144 128 608 608 NT_STATUS_OK
ReadX 11144 2858 1024 1024 NT_STATUS_OK
ReadX 11144 2810 4096 4096 NT_STATUS_OK
ReadX 11144 2826 4096 4096 NT_STATUS_OK
ReadX 11144 2580 2048 2048 NT_STATUS_OK
ReadX 11144 2800 2560 2560 NT_STATUS_OK
ReadX 11144 2100 4096 4096 NT_STATUS_OK
ReadX 11144 2084 4096 4096 NT_STATUS_OK
ReadX 11144 868 4096 4096 NT_STATUS_OK
ReadX 11144 2324 4096 4096 NT_STATUS_OK
ReadX 11144 884 4096 4096 NT_STATUS_OK
ReadX 11144 2604 1024 1024 NT_STATUS_OK
ReadX 11144 580 4096 4096 NT_STATUS_OK
ReadX 11144 596 4096 4096 NT_STATUS_OK
ReadX 11144 2752 4096 4096 NT_STATUS_OK
ReadX 11144 2842 1024 1024 NT_STATUS_OK
ReadX 11144 660 4096 4096 NT_STATUS_OK
ReadX 11144 2720 4096 4096 NT_STATUS_OK
ReadX 11144 2736 4096 4096 NT_STATUS_OK
ReadX 11144 628 4096 4096 NT_STATUS_OK
ReadX 11144 2704 4096 4096 NT_STATUS_OK
ReadX 11144 1556 4096 4096 NT_STATUS_OK
ReadX 11144 576 4096 4096 NT_STATUS_OK
ReadX 11144 3168 1536 1536 NT_STATUS_OK
ReadX 11144 832 4096 4096 NT_STATUS_OK
ReadX 11144 1088 4096 4096 NT_STATUS_OK
ReadX 11144 1344 4096 4096 NT_STATUS_OK
ReadX 11144 1600 4096 4096 NT_STATUS_OK
ReadX 11144 1856 4096 4096 NT_STATUS_OK
ReadX 11144 2112 4096 4096 NT_STATUS_OK
ReadX 11144 1892 4096 4096 NT_STATUS_OK
ReadX 11144 820 4096 4096 NT_STATUS_OK
ReadX 11144 788 4096 4096 NT_STATUS_OK
ReadX 11144 1604 4096 4096 NT_STATUS_OK
ReadX 11144 3648 4096 4096 NT_STATUS_OK
ReadX 11144 2608 4096 4096 NT_STATUS_OK
ReadX 11144 548 4096 4096 NT_STATUS_OK
ReadX 11144 740 4096 4096 NT_STATUS_OK
ReadX 11144 1344 4096 4096 NT_STATUS_OK
ReadX 11144 3392 4096 4096 NT_STATUS_OK
ReadX 11144 3904 4096 4096 NT_STATUS_OK
ReadX 11144 644 4096 4096 NT_STATUS_OK
ReadX 11144 676 4096 4096 NT_STATUS_OK
ReadX 11144 2688 4096 4096 NT_STATUS_OK
ReadX 11144 320 4096 4096 NT_STATUS_OK
ReadX 11144 900 4096 4096 NT_STATUS_OK
ReadX 11144 1908 4096 4096 NT_STATUS_OK
ReadX 11144 852 4096 4096 NT_STATUS_OK
ReadX 11144 724 4096 4096 NT_STATUS_OK
ReadX 11144 2292 4096 4096 NT_STATUS_OK
ReadX 11144 612 4096 4096 NT_STATUS_OK
ReadX 11144 388 4096 4096 NT_STATUS_OK
ReadX 11144 2368 4096 4096 NT_STATUS_OK
ReadX 11144 2624 4096 4096 NT_STATUS_OK
ReadX 11144 500 4096 4096 NT_STATUS_OK
ReadX 11144 356 4096 4096 NT_STATUS_OK
ReadX 11144 1024 4096 4096 NT_STATUS_OK
ReadX 11144 576 4096 4096 NT_STATUS_OK
ReadX 11144 340 4096 4096 NT_STATUS_OK
ReadX 11144 420 4096 4096 NT_STATUS_OK
ReadX 11144 1600 4096 4096 NT_STATUS_OK
ReadX 11144 404 4096 4096 NT_STATUS_OK
ReadX 11144 1428 4096 4096 NT_STATUS_OK
ReadX 11144 2656 4096 4096 NT_STATUS_OK
ReadX 11144 2624 4096 4096 NT_STATUS_OK
ReadX 11144 452 4096 4096 NT_STATUS_OK
ReadX 11144 692 4096 4096 NT_STATUS_OK
ReadX 11144 564 4096 4096 NT_STATUS_OK
ReadX 11144 372 4096 4096 NT_STATUS_OK
ReadX 11144 468 4096 4096 NT_STATUS_OK
ReadX 11144 484 4096 4096 NT_STATUS_OK
ReadX 11144 1088 4096 4096 NT_STATUS_OK
ReadX 11144 1924 4096 4096 NT_STATUS_OK
ReadX 11144 2768 4096 4096 NT_STATUS_OK
ReadX 11144 832 4096 4096 NT_STATUS_OK
ReadX 11144 836 4096 4096 NT_STATUS_OK
ReadX 11144 1856 4096 4096 NT_STATUS_OK
ReadX 11144 2640 4096 4096 NT_STATUS_OK
ReadX 11144 436 4096 4096 NT_STATUS_OK
ReadX 11144 1828 4096 4096 NT_STATUS_OK
ReadX 11144 804 4096 4096 NT_STATUS_OK
ReadX 11144 1860 4096 4096 NT_STATUS_OK
ReadX 11144 1812 4096 4096 NT_STATUS_OK
ReadX 11144 756 4096 4096 NT_STATUS_OK
ReadX 11144 1636 4096 4096 NT_STATUS_OK
ReadX 11144 772 4096 4096 NT_STATUS_OK
ReadX 11144 2036 4096 4096 NT_STATUS_OK
ReadX 11144 1220 4096 4096 NT_STATUS_OK
ReadX 11144 1652 4096 4096 NT_STATUS_OK
ReadX 11144 2588 4096 4096 NT_STATUS_OK
ReadX 11144 916 4096 4096 NT_STATUS_OK
ReadX 11144 260 4096 4096 NT_STATUS_OK
ReadX 11144 932 4096 4096 NT_STATUS_OK
ReadX 11144 2624 4096 4096 NT_STATUS_OK
ReadX 11144 308 4096 4096 NT_STATUS_OK
ReadX 11144 292 4096 4096 NT_STATUS_OK
ReadX 11144 1140 4096 4096 NT_STATUS_OK
ReadX 11144 276 4096 4096 NT_STATUS_OK
ReadX 11144 2020 4096 4096 NT_STATUS_OK
ReadX 11144 2880 4096 4096 NT_STATUS_OK
ReadX 11144 516 4096 4096 NT_STATUS_OK
ReadX 11144 1844 4096 4096 NT_STATUS_OK
ReadX 11144 1124 4096 4096 NT_STATUS_OK
ReadX 11144 3136 4096 4096 NT_STATUS_OK
ReadX 11144 324 4096 4096 NT_STATUS_OK
ReadX 11144 1156 4096 4096 NT_STATUS_OK
ReadX 11144 1172 4096 4096 NT_STATUS_OK
ReadX 11144 2112 4096 4096 NT_STATUS_OK
ReadX 11144 2368 4096 4096 NT_STATUS_OK
ReadX 11144 964 4096 4096 NT_STATUS_OK
ReadX 11144 980 4096 4096 NT_STATUS_OK
ReadX 11144 1012 4096 4096 NT_STATUS_OK
ReadX 11144 532 4096 4096 NT_STATUS_OK
ReadX 11144 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11144 1620 4096 4096 NT_STATUS_OK
ReadX 11144 1604 4096 4096 NT_STATUS_OK
ReadX 11144 2116 4096 4096 NT_STATUS_OK
ReadX 11144 2132 4096 4096 NT_STATUS_OK
ReadX 11144 2148 4096 4096 NT_STATUS_OK
ReadX 11144 2276 4096 4096 NT_STATUS_OK
ReadX 11144 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11166 NT_STATUS_OK
Close 11166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11169 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 1004 NT_STATUS_OK
Close 11124 NT_STATUS_OK
WriteX 11169 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11169 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 1004 NT_STATUS_OK
Close 11126 NT_STATUS_OK
WriteX 11169 0 65536 65536 NT_STATUS_OK
WriteX 11169 65536 64850 64850 NT_STATUS_OK
Close 11169 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11171 NT_STATUS_OK
WriteX 11171 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11171 258 NT_STATUS_OK
ReadX 11144 2068 4096 4096 NT_STATUS_OK
ReadX 11144 1588 4096 4096 NT_STATUS_OK
ReadX 11144 1572 4096 4096 NT_STATUS_OK
WriteX 11171 0 18630 18630 NT_STATUS_OK
Flush 11171 NT_STATUS_OK
Close 11171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11173 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11175 NT_STATUS_OK
ReadX 11175 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11144 612 4096 4096 NT_STATUS_OK
ReadX 11144 564 4096 4096 NT_STATUS_OK
ReadX 11144 1876 4096 4096 NT_STATUS_OK
ReadX 11144 628 4096 4096 NT_STATUS_OK
ReadX 11144 740 4096 4096 NT_STATUS_OK
ReadX 11144 724 4096 4096 NT_STATUS_OK
ReadX 11144 644 4096 4096 NT_STATUS_OK
ReadX 11144 2324 4096 4096 NT_STATUS_OK
ReadX 11144 660 4096 4096 NT_STATUS_OK
ReadX 11144 852 4096 4096 NT_STATUS_OK
ReadX 11144 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11144 2368 4096 4096 NT_STATUS_OK
ReadX 11144 1024 4096 4096 NT_STATUS_OK
ReadX 11144 320 4096 4096 NT_STATUS_OK
ReadX 11144 580 4096 4096 NT_STATUS_OK
ReadX 11144 3136 512 512 NT_STATUS_OK
ReadX 11144 2880 4096 4096 NT_STATUS_OK
Close 11144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 61440 4096 4096 NT_STATUS_OK
ReadX 11176 126976 4096 4096 NT_STATUS_OK
WriteX 11176 0 65536 65536 NT_STATUS_OK
WriteX 11176 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 61440 4096 4096 NT_STATUS_OK
ReadX 11177 126976 4096 4096 NT_STATUS_OK
ReadX 11177 192512 4096 4096 NT_STATUS_OK
ReadX 11177 258048 4096 4096 NT_STATUS_OK
WriteX 11177 0 65536 65536 NT_STATUS_OK
WriteX 11177 65536 65536 65536 NT_STATUS_OK
WriteX 11177 131072 65536 65536 NT_STATUS_OK
WriteX 11177 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 61440 4096 4096 NT_STATUS_OK
ReadX 11178 126976 4096 4096 NT_STATUS_OK
ReadX 11178 192512 4096 4096 NT_STATUS_OK
ReadX 11178 258048 4096 4096 NT_STATUS_OK
ReadX 11178 323584 4096 4096 NT_STATUS_OK
ReadX 11178 389120 4096 4096 NT_STATUS_OK
ReadX 11178 454656 4096 4096 NT_STATUS_OK
ReadX 11178 520192 4096 4096 NT_STATUS_OK
WriteX 11178 0 65536 65536 NT_STATUS_OK
WriteX 11178 65536 65536 65536 NT_STATUS_OK
WriteX 11178 131072 65536 65536 NT_STATUS_OK
WriteX 11178 196608 65536 65536 NT_STATUS_OK
WriteX 11178 262144 65536 65536 NT_STATUS_OK
WriteX 11178 327680 65536 65536 NT_STATUS_OK
WriteX 11178 393216 65536 65536 NT_STATUS_OK
WriteX 11178 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11180 NT_STATUS_OK
Close 11180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11181 NT_STATUS_OK
WriteX 11181 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11181 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11179 0 8192 8192 NT_STATUS_OK
Flush 11179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11179 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11179 0 8192 8192 NT_STATUS_OK
Flush 11179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11179 0 8192 8192 NT_STATUS_OK
Flush 11179 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11179 0 8192 8192 NT_STATUS_OK
Flush 11179 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11183 NT_STATUS_OK
Close 11183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11143 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11186 NT_STATUS_OK
WriteX 11186 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11186 258 NT_STATUS_OK
WriteX 11186 0 62591 62591 NT_STATUS_OK
Close 11186 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11188 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11191 NT_STATUS_OK
WriteX 11191 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11191 258 NT_STATUS_OK
WriteX 11191 0 10845 10845 NT_STATUS_OK
Close 11191 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11193 NT_STATUS_OK
Close 11193 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11196 NT_STATUS_OK
WriteX 11196 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11196 258 NT_STATUS_OK
WriteX 11196 0 30118 30118 NT_STATUS_OK
Close 11196 NT_STATUS_OK
WriteX 11179 0 4096 4096 NT_STATUS_OK
WriteX 11181 0 64 64 NT_STATUS_OK
Close 11181 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 61440 61440 NT_STATUS_OK
ReadX 11198 61440 4096 4096 NT_STATUS_OK
ReadX 11198 65536 61440 61440 NT_STATUS_OK
ReadX 11198 126976 4096 4096 NT_STATUS_OK
ReadX 11198 131072 61440 61440 NT_STATUS_OK
ReadX 11198 192512 4096 4096 NT_STATUS_OK
ReadX 11198 196608 61440 61440 NT_STATUS_OK
ReadX 11198 258048 4096 4096 NT_STATUS_OK
ReadX 11198 262144 61440 61440 NT_STATUS_OK
ReadX 11198 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 61440 61440 NT_STATUS_OK
ReadX 11199 61440 4096 4096 NT_STATUS_OK
ReadX 11199 65536 61440 61440 NT_STATUS_OK
ReadX 11199 126976 4096 4096 NT_STATUS_OK
ReadX 11199 131072 61440 61440 NT_STATUS_OK
ReadX 11199 192512 4096 4096 NT_STATUS_OK
ReadX 11199 196608 61440 61440 NT_STATUS_OK
ReadX 11199 258048 4096 4096 NT_STATUS_OK
ReadX 11199 262144 61440 61440 NT_STATUS_OK
ReadX 11199 323584 4096 4096 NT_STATUS_OK
ReadX 11199 327680 61440 61440 NT_STATUS_OK
ReadX 11199 389120 4096 4096 NT_STATUS_OK
ReadX 11199 393216 61440 61440 NT_STATUS_OK
ReadX 11199 454656 4096 4096 NT_STATUS_OK
ReadX 11199 458752 61440 61440 NT_STATUS_OK
ReadX 11199 520192 4096 4096 NT_STATUS_OK
ReadX 11199 524288 61440 61440 NT_STATUS_OK
ReadX 11199 585728 4096 4096 NT_STATUS_OK
ReadX 11199 589824 61440 61440 NT_STATUS_OK
ReadX 11199 651264 4096 4096 NT_STATUS_OK
ReadX 11199 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 61440 61440 NT_STATUS_OK
ReadX 11200 61440 4096 4096 NT_STATUS_OK
ReadX 11200 65536 61440 61440 NT_STATUS_OK
ReadX 11200 126976 4096 4096 NT_STATUS_OK
ReadX 11200 131072 61440 61440 NT_STATUS_OK
ReadX 11200 192512 4096 4096 NT_STATUS_OK
ReadX 11200 196608 61440 61440 NT_STATUS_OK
ReadX 11200 258048 4096 4096 NT_STATUS_OK
ReadX 11200 262144 61440 61440 NT_STATUS_OK
ReadX 11200 323584 4096 4096 NT_STATUS_OK
ReadX 11200 327680 61440 61440 NT_STATUS_OK
ReadX 11200 389120 4096 4096 NT_STATUS_OK
ReadX 11200 393216 61440 61440 NT_STATUS_OK
ReadX 11200 454656 4096 4096 NT_STATUS_OK
ReadX 11200 458752 61440 61440 NT_STATUS_OK
ReadX 11200 520192 4096 4096 NT_STATUS_OK
ReadX 11200 524288 61440 61440 NT_STATUS_OK
ReadX 11200 585728 4096 4096 NT_STATUS_OK
ReadX 11200 589824 61440 61440 NT_STATUS_OK
ReadX 11200 651264 4096 4096 NT_STATUS_OK
ReadX 11200 655360 61440 61440 NT_STATUS_OK
ReadX 11200 716800 4096 4096 NT_STATUS_OK
ReadX 11200 720896 61440 61440 NT_STATUS_OK
ReadX 11200 782336 4096 4096 NT_STATUS_OK
ReadX 11200 786432 61440 61440 NT_STATUS_OK
ReadX 11200 847872 4096 4096 NT_STATUS_OK
ReadX 11200 851968 61440 61440 NT_STATUS_OK
ReadX 11200 913408 4096 4096 NT_STATUS_OK
ReadX 11200 917504 61440 61440 NT_STATUS_OK
ReadX 11200 978944 4096 4096 NT_STATUS_OK
ReadX 11200 983040 61440 61440 NT_STATUS_OK
ReadX 11200 1044480 4096 4096 NT_STATUS_OK
ReadX 11200 1048576 61440 61440 NT_STATUS_OK
ReadX 11200 1110016 4096 4096 NT_STATUS_OK
ReadX 11200 1114112 61440 61440 NT_STATUS_OK
ReadX 11200 1175552 4096 4096 NT_STATUS_OK
ReadX 11200 1179648 61440 61440 NT_STATUS_OK
ReadX 11200 1241088 4096 4096 NT_STATUS_OK
ReadX 11200 1245184 61440 61440 NT_STATUS_OK
ReadX 11200 1306624 4096 4096 NT_STATUS_OK
ReadX 11200 1310720 61440 61440 NT_STATUS_OK
ReadX 11200 1372160 4096 4096 NT_STATUS_OK
ReadX 11200 1376256 61440 61440 NT_STATUS_OK
ReadX 11200 1437696 4096 4096 NT_STATUS_OK
ReadX 11200 1441792 61440 61440 NT_STATUS_OK
ReadX 11200 1503232 4096 4096 NT_STATUS_OK
ReadX 11200 1507328 61440 61440 NT_STATUS_OK
ReadX 11200 1568768 4096 4096 NT_STATUS_OK
ReadX 11200 1572864 61440 61440 NT_STATUS_OK
ReadX 11200 1634304 4096 4096 NT_STATUS_OK
ReadX 11200 1638400 61440 61440 NT_STATUS_OK
ReadX 11200 1699840 4096 4096 NT_STATUS_OK
ReadX 11200 1703936 61440 61440 NT_STATUS_OK
ReadX 11200 1765376 4096 4096 NT_STATUS_OK
ReadX 11200 1769472 61440 61440 NT_STATUS_OK
ReadX 11200 1830912 4096 4096 NT_STATUS_OK
ReadX 11200 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11198 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11205 NT_STATUS_OK
ReadX 11205 0 4096 4096 NT_STATUS_OK
ReadX 11205 4096 4096 4096 NT_STATUS_OK
ReadX 11205 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11206 NT_STATUS_OK
Close 11206 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11208 NT_STATUS_OK
ReadX 11208 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11209 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11210 NT_STATUS_OK
Close 11210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11208 NT_STATUS_OK
Close 11209 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11213 NT_STATUS_OK
ReadX 11213 0 8192 8192 NT_STATUS_OK
ReadX 11213 8192 8192 8192 NT_STATUS_OK
ReadX 11213 16384 8192 8192 NT_STATUS_OK
ReadX 11213 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11215 NT_STATUS_OK
Close 11215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11213 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11218 NT_STATUS_OK
WriteX 11218 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11218 258 NT_STATUS_OK
WriteX 11218 0 10438 10438 NT_STATUS_OK
Close 11218 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11219 NT_STATUS_OK
Close 11219 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11221 NT_STATUS_OK
Close 11221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11222 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11223 NT_STATUS_OK
Close 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11224 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11225 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
ReadX 11227 4096 4096 4096 NT_STATUS_OK
ReadX 11227 8192 4096 4096 NT_STATUS_OK
ReadX 11227 12288 8192 8192 NT_STATUS_OK
ReadX 11227 20480 8192 8192 NT_STATUS_OK
ReadX 11227 28672 8192 8192 NT_STATUS_OK
ReadX 11227 36864 8192 8192 NT_STATUS_OK
ReadX 11227 45056 8192 8192 NT_STATUS_OK
ReadX 11227 53248 8192 8192 NT_STATUS_OK
ReadX 11227 61440 8192 8192 NT_STATUS_OK
ReadX 11227 69632 8192 8192 NT_STATUS_OK
ReadX 11227 77824 8192 8192 NT_STATUS_OK
ReadX 11227 86016 8192 8192 NT_STATUS_OK
ReadX 11227 94208 8192 8192 NT_STATUS_OK
ReadX 11227 102400 8192 8192 NT_STATUS_OK
ReadX 11227 110592 8192 8192 NT_STATUS_OK
ReadX 11227 118784 8192 8192 NT_STATUS_OK
ReadX 11227 126976 8192 8192 NT_STATUS_OK
ReadX 11227 135168 8192 8192 NT_STATUS_OK
ReadX 11227 143360 8192 8192 NT_STATUS_OK
ReadX 11227 151552 8192 8192 NT_STATUS_OK
ReadX 11227 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11227 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Close 11222 NT_STATUS_OK
Close 11224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11229 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11232 NT_STATUS_OK
WriteX 11232 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11232 258 NT_STATUS_OK
WriteX 11232 0 28489 28489 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11233 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11235 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11236 NT_STATUS_OK
Close 11236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 8192 8192 NT_STATUS_OK
ReadX 11239 8192 8192 8192 NT_STATUS_OK
ReadX 11239 16384 8192 8192 NT_STATUS_OK
ReadX 11239 24576 8192 8192 NT_STATUS_OK
ReadX 11239 32768 16384 16384 NT_STATUS_OK
ReadX 11239 49152 8192 8192 NT_STATUS_OK
ReadX 11239 57344 8192 8192 NT_STATUS_OK
ReadX 11239 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11241 NT_STATUS_OK
Close 11241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11244 NT_STATUS_OK
WriteX 11244 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11244 258 NT_STATUS_OK
WriteX 11244 0 29253 29253 NT_STATUS_OK
Close 11244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11245 NT_STATUS_OK
Close 11245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11248 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11251 NT_STATUS_OK
WriteX 11251 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11251 258 NT_STATUS_OK
WriteX 11251 0 30183 30183 NT_STATUS_OK
Close 11251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11254 NT_STATUS_OK
WriteX 11254 0 510 510 NT_STATUS_OK
WriteX 11254 510 512 512 NT_STATUS_OK
WriteX 11254 1022 510 510 NT_STATUS_OK
WriteX 11254 1532 510 510 NT_STATUS_OK
WriteX 11254 2042 168 168 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11255 NT_STATUS_OK
Close 11255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 0 4096 4096 NT_STATUS_OK
WriteX 11257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 61440 4096 4096 NT_STATUS_OK
ReadX 11258 126976 4096 4096 NT_STATUS_OK
WriteX 11258 0 65536 65536 NT_STATUS_OK
WriteX 11258 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 61440 4096 4096 NT_STATUS_OK
ReadX 11259 126976 4096 4096 NT_STATUS_OK
ReadX 11259 192512 4096 4096 NT_STATUS_OK
ReadX 11259 258048 4096 4096 NT_STATUS_OK
WriteX 11259 0 65536 65536 NT_STATUS_OK
WriteX 11259 65536 65536 65536 NT_STATUS_OK
WriteX 11259 131072 65536 65536 NT_STATUS_OK
WriteX 11259 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11260 NT_STATUS_OK
ReadX 11260 61440 4096 4096 NT_STATUS_OK
ReadX 11260 126976 4096 4096 NT_STATUS_OK
ReadX 11260 192512 4096 4096 NT_STATUS_OK
ReadX 11260 258048 4096 4096 NT_STATUS_OK
ReadX 11260 323584 4096 4096 NT_STATUS_OK
ReadX 11260 389120 4096 4096 NT_STATUS_OK
ReadX 11260 454656 4096 4096 NT_STATUS_OK
ReadX 11260 520192 4096 4096 NT_STATUS_OK
WriteX 11260 0 65536 65536 NT_STATUS_OK
WriteX 11260 65536 65536 65536 NT_STATUS_OK
WriteX 11260 131072 65536 65536 NT_STATUS_OK
WriteX 11260 196608 65536 65536 NT_STATUS_OK
WriteX 11260 262144 65536 65536 NT_STATUS_OK
WriteX 11260 327680 65536 65536 NT_STATUS_OK
WriteX 11260 393216 65536 65536 NT_STATUS_OK
WriteX 11260 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11257 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11259 NT_STATUS_OK
Close 11260 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11263 NT_STATUS_OK
Close 11263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11267 NT_STATUS_OK
Close 11267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11270 NT_STATUS_OK
Close 11270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11272 NT_STATUS_OK
Close 11272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11276 NT_STATUS_OK
Close 11276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11279 NT_STATUS_OK
Close 11279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11281 NT_STATUS_OK
Close 11281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11285 NT_STATUS_OK
Close 11285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11290 NT_STATUS_OK
Close 11290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11295 NT_STATUS_OK
Close 11295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11300 NT_STATUS_OK
Close 11300 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11305 NT_STATUS_OK
Close 11305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11310 NT_STATUS_OK
Close 11310 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11320 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11323 NT_STATUS_OK
Close 11323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11326 NT_STATUS_OK
Close 11326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11329 NT_STATUS_OK
WriteX 11329 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11329 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11329 0 65536 65536 NT_STATUS_OK
WriteX 11329 65536 65536 65536 NT_STATUS_OK
WriteX 11329 131072 65536 65536 NT_STATUS_OK
WriteX 11329 196608 65536 65536 NT_STATUS_OK
WriteX 11329 262144 26634 26634 NT_STATUS_OK
Close 11329 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11334 NT_STATUS_OK
Close 11334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11335 NT_STATUS_OK
Close 11335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
Close 11336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11337 NT_STATUS_OK
ReadX 11337 0 4096 4096 NT_STATUS_OK
ReadX 11337 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11337 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11342 NT_STATUS_OK
Close 11342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11345 NT_STATUS_OK
Close 11345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11354 NT_STATUS_OK
Close 11354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11360 NT_STATUS_OK
Close 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11365 NT_STATUS_OK
Close 11365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11370 NT_STATUS_OK
Close 11370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11375 NT_STATUS_OK
Close 11375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11385 NT_STATUS_OK
Close 11385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11389 NT_STATUS_OK
Close 11389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11399 NT_STATUS_OK
Close 11399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11404 NT_STATUS_OK
Close 11404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11414 NT_STATUS_OK
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 4096 4096 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 0 4096 4096 NT_STATUS_OK
Close 11417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11418 NT_STATUS_OK
ReadX 11418 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11428 NT_STATUS_OK
Close 11428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 0 4096 4096 NT_STATUS_OK
Close 11430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 0 4096 4096 NT_STATUS_OK
Close 11431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11432 NT_STATUS_OK
ReadX 11432 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11418 NT_STATUS_OK
Close 11432 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11461 0 4096 4096 NT_STATUS_OK
Close 11461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11463 NT_STATUS_OK
ReadX 11463 0 4096 4096 NT_STATUS_OK
ReadX 11463 4096 4096 4096 NT_STATUS_OK
ReadX 11463 8192 4096 4096 NT_STATUS_OK
ReadX 11463 12288 4096 4096 NT_STATUS_OK
ReadX 11463 16384 4096 4096 NT_STATUS_OK
ReadX 11463 20480 4096 4096 NT_STATUS_OK
ReadX 11463 24576 4096 4096 NT_STATUS_OK
ReadX 11463 28672 4096 4096 NT_STATUS_OK
ReadX 11463 32768 4096 4096 NT_STATUS_OK
ReadX 11463 36864 4096 4096 NT_STATUS_OK
ReadX 11463 40960 4096 4096 NT_STATUS_OK
ReadX 11463 45056 4096 4096 NT_STATUS_OK
ReadX 11463 49152 4096 4096 NT_STATUS_OK
ReadX 11463 53248 4096 4096 NT_STATUS_OK
ReadX 11463 57344 4096 4096 NT_STATUS_OK
ReadX 11463 61440 4096 4096 NT_STATUS_OK
ReadX 11463 65536 4096 4096 NT_STATUS_OK
ReadX 11463 69632 4096 4096 NT_STATUS_OK
ReadX 11463 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
WriteX 11463 0 4096 4096 NT_STATUS_OK
Close 11463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11464 NT_STATUS_OK
SET_FILE_INFORMATION 11464 1004 NT_STATUS_OK
Close 11464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11465 NT_STATUS_OK
ReadX 11465 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11466 NT_STATUS_OK
Close 11466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11469 NT_STATUS_OK
WriteX 11469 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 258 NT_STATUS_OK
WriteX 11469 0 65536 65536 NT_STATUS_OK
WriteX 11469 65536 19979 19979 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
QUERY_FILE_INFORMATION 11470 1004 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
SET_FILE_INFORMATION 11470 1004 NT_STATUS_OK
WriteX 11470 0 4096 4096 NT_STATUS_OK
Flush 11470 NT_STATUS_OK
Close 11470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11471 NT_STATUS_OK
ReadX 11471 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
Close 11471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
Close 11473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11474 NT_STATUS_OK
ReadX 11474 0 4096 4096 NT_STATUS_OK
Close 11474 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11475 NT_STATUS_OK
ReadX 11475 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11475 1004 NT_STATUS_OK
WriteX 11475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11476 NT_STATUS_OK
Close 11476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Close 11475 NT_STATUS_OK
Close 11465 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11478 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11481 NT_STATUS_OK
WriteX 11481 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11481 258 NT_STATUS_OK
WriteX 11481 0 65536 65536 NT_STATUS_OK
WriteX 11481 65536 17654 17654 NT_STATUS_OK
Close 11481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11482 NT_STATUS_OK
ReadX 11482 0 4096 4096 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
QUERY_FILE_INFORMATION 11482 1004 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
SET_FILE_INFORMATION 11482 1004 NT_STATUS_OK
WriteX 11482 0 4096 4096 NT_STATUS_OK
Flush 11482 NT_STATUS_OK
Close 11482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11483 NT_STATUS_OK
SET_FILE_INFORMATION 11483 1004 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11484 NT_STATUS_OK
ReadX 11484 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11485 NT_STATUS_OK
Close 11485 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
ReadX 11487 4096 4096 4096 NT_STATUS_OK
ReadX 11487 8192 4096 4096 NT_STATUS_OK
ReadX 11487 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11487 16384 4096 4096 NT_STATUS_OK
ReadX 11487 20480 4096 4096 NT_STATUS_OK
ReadX 11487 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11489 NT_STATUS_OK
ReadX 11489 0 4096 4096 NT_STATUS_OK
Close 11489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11490 NT_STATUS_OK
ReadX 11490 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11490 1004 NT_STATUS_OK
WriteX 11490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11490 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11493 NT_STATUS_OK
Close 11493 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11496 NT_STATUS_OK
WriteX 11496 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11496 258 NT_STATUS_OK
WriteX 11496 0 65536 65536 NT_STATUS_OK
WriteX 11496 65536 19490 19490 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 0 4096 4096 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
QUERY_FILE_INFORMATION 11497 1004 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
SET_FILE_INFORMATION 11497 1004 NT_STATUS_OK
WriteX 11497 0 4096 4096 NT_STATUS_OK
Flush 11497 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11498 NT_STATUS_OK
SET_FILE_INFORMATION 11498 1004 NT_STATUS_OK
Close 11498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11500 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11502 0 4096 4096 NT_STATUS_OK
Close 11502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11504 NT_STATUS_OK
ReadX 11504 0 4096 4096 NT_STATUS_OK
ReadX 11504 4096 4096 4096 NT_STATUS_OK
ReadX 11504 8192 4096 4096 NT_STATUS_OK
ReadX 11504 12288 4096 4096 NT_STATUS_OK
ReadX 11504 16384 4096 4096 NT_STATUS_OK
ReadX 11504 20480 4096 4096 NT_STATUS_OK
ReadX 11504 24576 4096 4096 NT_STATUS_OK
ReadX 11504 28672 4096 4096 NT_STATUS_OK
ReadX 11504 32768 4096 4096 NT_STATUS_OK
ReadX 11504 36864 4096 4096 NT_STATUS_OK
ReadX 11504 40960 4096 4096 NT_STATUS_OK
ReadX 11504 45056 4096 4096 NT_STATUS_OK
ReadX 11504 49152 4096 4096 NT_STATUS_OK
ReadX 11504 53248 4096 4096 NT_STATUS_OK
ReadX 11504 57344 4096 4096 NT_STATUS_OK
ReadX 11504 61440 4096 4096 NT_STATUS_OK
ReadX 11504 65536 4096 4096 NT_STATUS_OK
ReadX 11504 69632 4096 4096 NT_STATUS_OK
ReadX 11504 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11504 1004 NT_STATUS_OK
WriteX 11504 0 4096 4096 NT_STATUS_OK
Close 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11505 NT_STATUS_OK
SET_FILE_INFORMATION 11505 1004 NT_STATUS_OK
Close 11505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11506 NT_STATUS_OK
ReadX 11506 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11510 NT_STATUS_OK
WriteX 11510 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11510 258 NT_STATUS_OK
WriteX 11510 0 65536 65536 NT_STATUS_OK
WriteX 11510 65536 8866 8866 NT_STATUS_OK
Close 11510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
WriteX 11511 0 4096 4096 NT_STATUS_OK
Flush 11511 NT_STATUS_OK
SET_FILE_INFORMATION 11511 1004 NT_STATUS_OK
WriteX 11511 0 4096 4096 NT_STATUS_OK
Flush 11511 NT_STATUS_OK
Close 11511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
Close 11513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11514 NT_STATUS_OK
ReadX 11514 0 4096 4096 NT_STATUS_OK
Close 11514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11515 NT_STATUS_OK
ReadX 11515 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11515 1004 NT_STATUS_OK
WriteX 11515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11516 NT_STATUS_OK
Close 11516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11515 NT_STATUS_OK
Close 11506 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11518 NT_STATUS_OK
Close 11518 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11521 NT_STATUS_OK
WriteX 11521 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11521 258 NT_STATUS_OK
WriteX 11521 0 65536 65536 NT_STATUS_OK
WriteX 11521 65536 9298 9298 NT_STATUS_OK
Close 11521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11522 NT_STATUS_OK
ReadX 11522 0 4096 4096 NT_STATUS_OK
WriteX 11522 0 4096 4096 NT_STATUS_OK
Flush 11522 NT_STATUS_OK
SET_FILE_INFORMATION 11522 1004 NT_STATUS_OK
WriteX 11522 0 4096 4096 NT_STATUS_OK
Flush 11522 NT_STATUS_OK
Close 11522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11523 NT_STATUS_OK
SET_FILE_INFORMATION 11523 1004 NT_STATUS_OK
Close 11523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11524 NT_STATUS_OK
ReadX 11524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11525 NT_STATUS_OK
Close 11525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11528 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11528 0 4096 4096 NT_STATUS_OK
Close 11528 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11529 NT_STATUS_OK
ReadX 11529 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11529 4096 4096 4096 NT_STATUS_OK
ReadX 11529 8192 4096 4096 NT_STATUS_OK
ReadX 11529 12288 4096 4096 NT_STATUS_OK
ReadX 11529 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11531 NT_STATUS_OK
ReadX 11531 0 4096 4096 NT_STATUS_OK
Close 11531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11532 NT_STATUS_OK
ReadX 11532 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11532 1004 NT_STATUS_OK
WriteX 11532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11533 NT_STATUS_OK
Close 11533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11529 NT_STATUS_OK
Close 11532 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11535 NT_STATUS_OK
Close 11535 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11538 NT_STATUS_OK
WriteX 11538 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11538 258 NT_STATUS_OK
WriteX 11538 0 65536 65536 NT_STATUS_OK
WriteX 11538 65536 11540 11540 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11539 NT_STATUS_OK
ReadX 11539 0 4096 4096 NT_STATUS_OK
WriteX 11539 0 4096 4096 NT_STATUS_OK
Flush 11539 NT_STATUS_OK
SET_FILE_INFORMATION 11539 1004 NT_STATUS_OK
WriteX 11539 0 4096 4096 NT_STATUS_OK
Flush 11539 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11540 NT_STATUS_OK
SET_FILE_INFORMATION 11540 1004 NT_STATUS_OK
Close 11540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11541 NT_STATUS_OK
ReadX 11541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11542 NT_STATUS_OK
Close 11542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11544 NT_STATUS_OK
ReadX 11544 61440 4096 4096 NT_STATUS_OK
ReadX 11544 126976 4096 4096 NT_STATUS_OK
WriteX 11544 0 65536 65536 NT_STATUS_OK
WriteX 11544 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11545 NT_STATUS_OK
ReadX 11545 61440 4096 4096 NT_STATUS_OK
ReadX 11545 126976 4096 4096 NT_STATUS_OK
ReadX 11545 192512 4096 4096 NT_STATUS_OK
ReadX 11545 258048 4096 4096 NT_STATUS_OK
WriteX 11545 0 65536 65536 NT_STATUS_OK
WriteX 11545 65536 65536 65536 NT_STATUS_OK
WriteX 11545 131072 65536 65536 NT_STATUS_OK
WriteX 11545 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11546 NT_STATUS_OK
ReadX 11546 61440 4096 4096 NT_STATUS_OK
ReadX 11546 126976 4096 4096 NT_STATUS_OK
ReadX 11546 192512 4096 4096 NT_STATUS_OK
ReadX 11546 258048 4096 4096 NT_STATUS_OK
ReadX 11546 323584 4096 4096 NT_STATUS_OK
ReadX 11546 389120 4096 4096 NT_STATUS_OK
ReadX 11546 454656 4096 4096 NT_STATUS_OK
ReadX 11546 520192 4096 4096 NT_STATUS_OK
WriteX 11546 0 65536 65536 NT_STATUS_OK
WriteX 11546 65536 65536 65536 NT_STATUS_OK
WriteX 11546 131072 65536 65536 NT_STATUS_OK
WriteX 11546 196608 65536 65536 NT_STATUS_OK
WriteX 11546 262144 65536 65536 NT_STATUS_OK
WriteX 11546 327680 65536 65536 NT_STATUS_OK
WriteX 11546 393216 65536 65536 NT_STATUS_OK
WriteX 11546 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11547 NT_STATUS_OK
ReadX 11547 0 4096 4096 NT_STATUS_OK
ReadX 11547 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11548 NT_STATUS_OK
WriteX 11548 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11548 258 NT_STATUS_OK
WriteX 11548 0 53 53 NT_STATUS_OK
Close 11548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11549 NT_STATUS_OK
Close 11549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11541 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Close 11545 NT_STATUS_OK
Close 11546 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11547 8192 4096 4096 NT_STATUS_OK
ReadX 11547 12288 4096 4096 NT_STATUS_OK
WriteX 11551 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11551 258 NT_STATUS_OK
ReadX 11547 16384 4096 4096 NT_STATUS_OK
ReadX 11547 20480 4096 4096 NT_STATUS_OK
WriteX 11551 0 15360 15360 NT_STATUS_OK
Close 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11552 NT_STATUS_OK
ReadX 11552 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11552 1004 NT_STATUS_OK
WriteX 11552 0 4096 4096 NT_STATUS_OK
Close 11552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11553 NT_STATUS_OK
Close 11553 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11555 NT_STATUS_OK
ReadX 11555 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11556 NT_STATUS_OK
Close 11556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11555 4096 4096 4096 NT_STATUS_OK
ReadX 11555 8192 4096 4096 NT_STATUS_OK
ReadX 11555 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
ReadX 11558 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11559 NT_STATUS_OK
ReadX 11559 0 4096 4096 NT_STATUS_OK
ReadX 11559 4096 4096 4096 NT_STATUS_OK
ReadX 11559 8192 4096 4096 NT_STATUS_OK
Close 11558 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11560 NT_STATUS_OK
WriteX 11560 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11560 258 NT_STATUS_OK
WriteX 11560 0 15360 15360 NT_STATUS_OK
Close 11560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11561 NT_STATUS_OK
ReadX 11561 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11561 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11561 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11565 NT_STATUS_OK
SET_FILE_INFORMATION 11565 1004 NT_STATUS_OK
Close 11565 NT_STATUS_OK
WriteX 11561 0 4096 4096 NT_STATUS_OK
Close 11561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11566 NT_STATUS_OK
Close 11566 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11568 NT_STATUS_OK
ReadX 11568 0 4096 4096 NT_STATUS_OK
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 4096 4096 NT_STATUS_OK
ReadX 11568 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11568 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11568 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11569 NT_STATUS_OK
ReadX 11569 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11570 NT_STATUS_OK
WriteX 11570 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11570 258 NT_STATUS_OK
WriteX 11570 0 53 53 NT_STATUS_OK
Close 11570 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11571 NT_STATUS_OK
Close 11571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11569 4096 4096 4096 NT_STATUS_OK
ReadX 11569 8192 4096 4096 NT_STATUS_OK
ReadX 11569 12288 4096 4096 NT_STATUS_OK
WriteX 11573 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11573 258 NT_STATUS_OK
WriteX 11573 0 12006 12006 NT_STATUS_OK
Close 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11574 NT_STATUS_OK
ReadX 11574 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11574 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11574 1004 NT_STATUS_OK
WriteX 11574 0 4096 4096 NT_STATUS_OK
Close 11574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11575 NT_STATUS_OK
Close 11575 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11577 NT_STATUS_OK
ReadX 11577 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11578 NT_STATUS_OK
Close 11578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11577 4096 4096 4096 NT_STATUS_OK
ReadX 11577 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11580 NT_STATUS_OK
WriteX 11580 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11580 258 NT_STATUS_OK
WriteX 11580 0 11991 11991 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11581 NT_STATUS_OK
ReadX 11581 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11581 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11581 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11582 NT_STATUS_OK
Close 11582 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11584 NT_STATUS_OK
ReadX 11584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11585 NT_STATUS_OK
SET_FILE_INFORMATION 11585 1004 NT_STATUS_OK
Close 11585 NT_STATUS_OK
WriteX 11581 0 4096 4096 NT_STATUS_OK
Close 11581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11588 NT_STATUS_OK
ReadX 11588 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11589 NT_STATUS_OK
Close 11589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11588 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
ReadX 11588 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
WriteX 11588 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11588 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11588 1004 NT_STATUS_OK
Close 11564 NT_STATUS_OK
WriteX 11568 0 19054 19054 NT_STATUS_OK
WriteX 11588 0 12288 12288 NT_STATUS_OK
Close 11584 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11591 NT_STATUS_OK
Close 11591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11568 NT_STATUS_OK
Close 11588 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 61440 61440 NT_STATUS_OK
ReadX 11595 61440 4096 4096 NT_STATUS_OK
ReadX 11595 65536 61440 61440 NT_STATUS_OK
ReadX 11595 126976 4096 4096 NT_STATUS_OK
ReadX 11595 131072 61440 61440 NT_STATUS_OK
ReadX 11595 192512 4096 4096 NT_STATUS_OK
ReadX 11595 196608 61440 61440 NT_STATUS_OK
ReadX 11595 258048 4096 4096 NT_STATUS_OK
ReadX 11595 262144 61440 61440 NT_STATUS_OK
ReadX 11595 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11596 NT_STATUS_OK
ReadX 11596 0 61440 61440 NT_STATUS_OK
ReadX 11596 61440 4096 4096 NT_STATUS_OK
ReadX 11596 65536 61440 61440 NT_STATUS_OK
ReadX 11596 126976 4096 4096 NT_STATUS_OK
ReadX 11596 131072 61440 61440 NT_STATUS_OK
ReadX 11596 192512 4096 4096 NT_STATUS_OK
ReadX 11596 196608 61440 61440 NT_STATUS_OK
ReadX 11596 258048 4096 4096 NT_STATUS_OK
ReadX 11596 262144 61440 61440 NT_STATUS_OK
ReadX 11596 323584 4096 4096 NT_STATUS_OK
ReadX 11596 327680 61440 61440 NT_STATUS_OK
ReadX 11596 389120 4096 4096 NT_STATUS_OK
ReadX 11596 393216 61440 61440 NT_STATUS_OK
ReadX 11596 454656 4096 4096 NT_STATUS_OK
ReadX 11596 458752 61440 61440 NT_STATUS_OK
ReadX 11596 520192 4096 4096 NT_STATUS_OK
ReadX 11596 524288 61440 61440 NT_STATUS_OK
ReadX 11596 585728 4096 4096 NT_STATUS_OK
ReadX 11596 589824 61440 61440 NT_STATUS_OK
ReadX 11596 651264 4096 4096 NT_STATUS_OK
ReadX 11596 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 61440 61440 NT_STATUS_OK
ReadX 11597 61440 4096 4096 NT_STATUS_OK
ReadX 11597 65536 61440 61440 NT_STATUS_OK
ReadX 11597 126976 4096 4096 NT_STATUS_OK
ReadX 11597 131072 61440 61440 NT_STATUS_OK
ReadX 11597 192512 4096 4096 NT_STATUS_OK
ReadX 11597 196608 61440 61440 NT_STATUS_OK
ReadX 11597 258048 4096 4096 NT_STATUS_OK
ReadX 11597 262144 61440 61440 NT_STATUS_OK
ReadX 11597 323584 4096 4096 NT_STATUS_OK
ReadX 11597 327680 61440 61440 NT_STATUS_OK
ReadX 11597 389120 4096 4096 NT_STATUS_OK
ReadX 11597 393216 61440 61440 NT_STATUS_OK
ReadX 11597 454656 4096 4096 NT_STATUS_OK
ReadX 11597 458752 61440 61440 NT_STATUS_OK
ReadX 11597 520192 4096 4096 NT_STATUS_OK
ReadX 11597 524288 61440 61440 NT_STATUS_OK
ReadX 11597 585728 4096 4096 NT_STATUS_OK
ReadX 11597 589824 61440 61440 NT_STATUS_OK
ReadX 11597 651264 4096 4096 NT_STATUS_OK
ReadX 11597 655360 61440 61440 NT_STATUS_OK
ReadX 11597 716800 4096 4096 NT_STATUS_OK
ReadX 11597 720896 61440 61440 NT_STATUS_OK
ReadX 11597 782336 4096 4096 NT_STATUS_OK
ReadX 11597 786432 61440 61440 NT_STATUS_OK
ReadX 11597 847872 4096 4096 NT_STATUS_OK
ReadX 11597 851968 61440 61440 NT_STATUS_OK
ReadX 11597 913408 4096 4096 NT_STATUS_OK
ReadX 11597 917504 61440 61440 NT_STATUS_OK
ReadX 11597 978944 4096 4096 NT_STATUS_OK
ReadX 11597 983040 61440 61440 NT_STATUS_OK
ReadX 11597 1044480 4096 4096 NT_STATUS_OK
ReadX 11597 1048576 61440 61440 NT_STATUS_OK
ReadX 11597 1110016 4096 4096 NT_STATUS_OK
ReadX 11597 1114112 61440 61440 NT_STATUS_OK
ReadX 11597 1175552 4096 4096 NT_STATUS_OK
ReadX 11597 1179648 61440 61440 NT_STATUS_OK
ReadX 11597 1241088 4096 4096 NT_STATUS_OK
ReadX 11597 1245184 61440 61440 NT_STATUS_OK
ReadX 11597 1306624 4096 4096 NT_STATUS_OK
ReadX 11597 1310720 61440 61440 NT_STATUS_OK
ReadX 11597 1372160 4096 4096 NT_STATUS_OK
ReadX 11597 1376256 61440 61440 NT_STATUS_OK
ReadX 11597 1437696 4096 4096 NT_STATUS_OK
ReadX 11597 1441792 61440 61440 NT_STATUS_OK
ReadX 11597 1503232 4096 4096 NT_STATUS_OK
ReadX 11597 1507328 61440 61440 NT_STATUS_OK
ReadX 11597 1568768 4096 4096 NT_STATUS_OK
ReadX 11597 1572864 61440 61440 NT_STATUS_OK
ReadX 11597 1634304 4096 4096 NT_STATUS_OK
ReadX 11597 1638400 61440 61440 NT_STATUS_OK
ReadX 11597 1699840 4096 4096 NT_STATUS_OK
ReadX 11597 1703936 61440 61440 NT_STATUS_OK
ReadX 11597 1765376 4096 4096 NT_STATUS_OK
ReadX 11597 1769472 61440 61440 NT_STATUS_OK
ReadX 11597 1830912 4096 4096 NT_STATUS_OK
ReadX 11597 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11598 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11598 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11599 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11603 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11604 NT_STATUS_OK
QUERY_FILE_INFORMATION 11604 1004 NT_STATUS_OK
WriteX 11604 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11604 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11605 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11606 NT_STATUS_OK
WriteX 11606 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11606 258 NT_STATUS_OK
WriteX 11606 0 491 491 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11604 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11610 NT_STATUS_OK
WriteX 11610 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11610 258 NT_STATUS_OK
WriteX 11610 0 543 543 NT_STATUS_OK
Close 11610 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11611 NT_STATUS_OK
ReadX 11611 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Close 11596 NT_STATUS_OK
Close 11597 NT_STATUS_OK
Close 11611 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Close 11601 NT_STATUS_OK
Close 11602 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11618 NT_STATUS_OK
ReadX 11618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11619 NT_STATUS_OK
ReadX 11619 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11623 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11624 NT_STATUS_OK
QUERY_FILE_INFORMATION 11624 1004 NT_STATUS_OK
WriteX 11624 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11624 258 NT_STATUS_OK
WriteX 11624 0 2048 2048 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11625 NT_STATUS_OK
ReadX 11625 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11625 0 4096 4096 NT_STATUS_OK
Flush 11625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11625 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11629 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11630 NT_STATUS_OK
WriteX 11630 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11630 258 NT_STATUS_OK
WriteX 11630 0 2048 2048 NT_STATUS_OK
Close 11630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11635 NT_STATUS_OK
Close 11635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11636 NT_STATUS_OK
WriteX 11636 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11636 258 NT_STATUS_OK
WriteX 11636 0 2048 2048 NT_STATUS_OK
Close 11636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11637 NT_STATUS_OK
ReadX 11637 0 2048 2048 NT_STATUS_OK
ReadX 11615 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11637 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11619 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11631 0 4096 4096 NT_STATUS_OK
WriteX 11615 0 8192 8192 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
WriteX 11617 0 4096 4096 NT_STATUS_OK
ReadX 11631 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11640 NT_STATUS_OK
ReadX 11640 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11641 NT_STATUS_OK
QUERY_FILE_INFORMATION 11641 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11640 NT_STATUS_OK
Close 11616 NT_STATUS_OK
Close 11617 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Close 11615 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11643 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11648 NT_STATUS_OK
ReadX 11648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11650 NT_STATUS_OK
ReadX 11650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11651 NT_STATUS_OK
ReadX 11651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11661 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 1004 NT_STATUS_OK
WriteX 11661 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11661 258 NT_STATUS_OK
WriteX 11661 0 2048 2048 NT_STATUS_OK
Close 11661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11662 NT_STATUS_OK
ReadX 11662 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11664 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11669 NT_STATUS_OK
QUERY_FILE_INFORMATION 11669 1004 NT_STATUS_OK
WriteX 11669 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11669 258 NT_STATUS_OK
WriteX 11669 0 2048 2048 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11662 0 4096 4096 NT_STATUS_OK
Flush 11662 NT_STATUS_OK
WriteX 11670 0 4096 4096 NT_STATUS_OK
Flush 11670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11662 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11670 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11664 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11672 NT_STATUS_OK
WriteX 11672 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11672 258 NT_STATUS_OK
WriteX 11672 0 4096 4096 NT_STATUS_OK
Close 11672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11674 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11675 NT_STATUS_OK
WriteX 11675 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11675 258 NT_STATUS_OK
WriteX 11675 0 4096 4096 NT_STATUS_OK
Close 11675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11676 NT_STATUS_OK
ReadX 11676 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11676 0 4096 4096 NT_STATUS_OK
Close 11673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11656 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Close 11653 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11651 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Close 11645 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Close 11649 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11679 NT_STATUS_OK
Close 11679 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11681 NT_STATUS_OK
ReadX 11681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11682 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11683 NT_STATUS_OK
WriteX 11683 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11683 258 NT_STATUS_OK
WriteX 11683 0 2048 2048 NT_STATUS_OK
Close 11683 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11685 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11689 NT_STATUS_OK
ReadX 11689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11692 NT_STATUS_OK
ReadX 11692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11697 NT_STATUS_OK
ReadX 11697 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11698 NT_STATUS_OK
QUERY_FILE_INFORMATION 11698 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11698 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11681 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11691 NT_STATUS_OK
Close 11692 NT_STATUS_OK
Close 11693 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11697 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11689 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11700 NT_STATUS_OK
QUERY_FILE_INFORMATION 11700 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11707 NT_STATUS_OK
ReadX 11707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11708 NT_STATUS_OK
ReadX 11708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11710 NT_STATUS_OK
ReadX 11710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11715 NT_STATUS_OK
ReadX 11715 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11719 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11720 NT_STATUS_OK
QUERY_FILE_INFORMATION 11720 1004 NT_STATUS_OK
WriteX 11720 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11720 258 NT_STATUS_OK
WriteX 11720 0 2048 2048 NT_STATUS_OK
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11723 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11725 NT_STATUS_OK
ReadX 11725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11732 NT_STATUS_OK
QUERY_FILE_INFORMATION 11732 1004 NT_STATUS_OK
WriteX 11732 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11732 258 NT_STATUS_OK
WriteX 11732 0 2048 2048 NT_STATUS_OK
Close 11732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11733 NT_STATUS_OK
ReadX 11733 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11735 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11739 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11740 NT_STATUS_OK
QUERY_FILE_INFORMATION 11740 1004 NT_STATUS_OK
WriteX 11740 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11740 258 NT_STATUS_OK
WriteX 11740 0 2048 2048 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11741 NT_STATUS_OK
ReadX 11741 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
WriteX 11733 0 4096 4096 NT_STATUS_OK
Flush 11733 NT_STATUS_OK
WriteX 11741 0 4096 4096 NT_STATUS_OK
Flush 11741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11733 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11741 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11723 4096 16384 16384 NT_STATUS_OK
ReadX 11703 4096 16384 16384 NT_STATUS_OK
ReadX 11735 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11742 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 2048 2048 NT_STATUS_OK
WriteX 11743 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11744 NT_STATUS_OK
QUERY_FILE_INFORMATION 11744 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Close 11727 NT_STATUS_OK
Close 11715 NT_STATUS_OK
Close 11707 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Close 11725 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11735 NT_STATUS_OK
Close 11709 NT_STATUS_OK
Close 11712 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Close 11710 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Close 11706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11746 NT_STATUS_OK
QUERY_FILE_INFORMATION 11746 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11748 NT_STATUS_OK
QUERY_FILE_INFORMATION 11748 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11755 NT_STATUS_OK
ReadX 11755 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11751 4096 16384 16384 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11752 0 4096 4096 NT_STATUS_OK
WriteX 11753 0 4096 4096 NT_STATUS_OK
WriteX 11754 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11756 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11762 NT_STATUS_OK
ReadX 11762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11766 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11767 NT_STATUS_OK
ReadX 11767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11770 NT_STATUS_OK
ReadX 11770 0 8192 8192 NT_STATUS_OK
ReadX 11757 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11771 0 4096 4096 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
ReadX 11771 8192 4096 4096 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
WriteX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11772 0 4096 4096 NT_STATUS_OK
ReadX 11772 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11752 0 4096 4096 NT_STATUS_OK
WriteX 11753 0 4096 4096 NT_STATUS_OK
WriteX 11754 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11776 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11777 NT_STATUS_OK
QUERY_FILE_INFORMATION 11777 1004 NT_STATUS_OK
WriteX 11777 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11777 258 NT_STATUS_OK
WriteX 11777 0 2048 2048 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11779 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
ReadX 11780 4096 4096 4096 NT_STATUS_OK
WriteX 11780 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11780 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
ReadX 11782 4096 4096 4096 NT_STATUS_OK
WriteX 11782 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11783 NT_STATUS_OK
QUERY_FILE_INFORMATION 11783 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11770 NT_STATUS_OK
Close 11755 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Close 11766 NT_STATUS_OK
Close 11767 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11785 0 4096 4096 NT_STATUS_OK
ReadX 11785 4096 4096 4096 NT_STATUS_OK
ReadX 11785 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11786 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11790 NT_STATUS_OK
ReadX 11790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 4096 4096 NT_STATUS_OK
ReadX 11786 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11802 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11803 NT_STATUS_OK
QUERY_FILE_INFORMATION 11803 1004 NT_STATUS_OK
WriteX 11803 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11803 258 NT_STATUS_OK
WriteX 11803 0 2048 2048 NT_STATUS_OK
Close 11803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11804 NT_STATUS_OK
ReadX 11804 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11804 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11808 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11809 NT_STATUS_OK
QUERY_FILE_INFORMATION 11809 1004 NT_STATUS_OK
WriteX 11809 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11809 258 NT_STATUS_OK
WriteX 11809 0 2048 2048 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11810 NT_STATUS_OK
ReadX 11810 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11810 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11793 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11811 NT_STATUS_OK
QUERY_FILE_INFORMATION 11811 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11798 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11790 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11813 NT_STATUS_OK
QUERY_FILE_INFORMATION 11813 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11815 NT_STATUS_OK
ReadX 11815 61440 4096 4096 NT_STATUS_OK
ReadX 11815 126976 4096 4096 NT_STATUS_OK
WriteX 11815 0 65536 65536 NT_STATUS_OK
WriteX 11815 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 61440 4096 4096 NT_STATUS_OK
ReadX 11816 126976 4096 4096 NT_STATUS_OK
ReadX 11816 192512 4096 4096 NT_STATUS_OK
ReadX 11816 258048 4096 4096 NT_STATUS_OK
WriteX 11816 0 65536 65536 NT_STATUS_OK
WriteX 11816 65536 65536 65536 NT_STATUS_OK
WriteX 11816 131072 65536 65536 NT_STATUS_OK
WriteX 11816 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 61440 4096 4096 NT_STATUS_OK
ReadX 11817 126976 4096 4096 NT_STATUS_OK
ReadX 11817 192512 4096 4096 NT_STATUS_OK
ReadX 11817 258048 4096 4096 NT_STATUS_OK
ReadX 11817 323584 4096 4096 NT_STATUS_OK
ReadX 11817 389120 4096 4096 NT_STATUS_OK
ReadX 11817 454656 4096 4096 NT_STATUS_OK
ReadX 11817 520192 4096 4096 NT_STATUS_OK
WriteX 11817 0 65536 65536 NT_STATUS_OK
WriteX 11817 65536 65536 65536 NT_STATUS_OK
WriteX 11817 131072 65536 65536 NT_STATUS_OK
WriteX 11817 196608 65536 65536 NT_STATUS_OK
WriteX 11817 262144 65536 65536 NT_STATUS_OK
WriteX 11817 327680 65536 65536 NT_STATUS_OK
WriteX 11817 393216 65536 65536 NT_STATUS_OK
WriteX 11817 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11818 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11818 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11818 8192 4096 4096 NT_STATUS_OK
ReadX 11818 12288 4096 4096 NT_STATUS_OK
ReadX 11818 16384 4096 4096 NT_STATUS_OK
ReadX 11818 20480 4096 4096 NT_STATUS_OK
ReadX 11818 24576 4096 4096 NT_STATUS_OK
ReadX 11818 28672 4096 4096 NT_STATUS_OK
ReadX 11818 32768 4096 4096 NT_STATUS_OK
ReadX 11818 36864 4096 4096 NT_STATUS_OK
ReadX 11818 40960 4096 4096 NT_STATUS_OK
ReadX 11818 45056 4096 4096 NT_STATUS_OK
ReadX 11818 49152 4096 4096 NT_STATUS_OK
ReadX 11818 53248 4096 4096 NT_STATUS_OK
ReadX 11818 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11818 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11819 NT_STATUS_OK
Close 11819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11821 NT_STATUS_OK
WriteX 11821 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11821 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11821 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
WriteX 11821 0 57088 57088 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
Flush 11821 NT_STATUS_OK
Close 11818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11822 NT_STATUS_OK
SET_FILE_INFORMATION 11822 1004 NT_STATUS_OK
Close 11822 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
WriteX 11821 0 4096 4096 NT_STATUS_OK
Close 11821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11823 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11825 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11826 NT_STATUS_OK
WriteX 11826 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11826 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11826 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11826 1004 NT_STATUS_OK
WriteX 11826 0 51456 51456 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Flush 11826 NT_STATUS_OK
SET_FILE_INFORMATION 11826 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11826 1004 NT_STATUS_OK
WriteX 11826 0 4096 4096 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11830 NT_STATUS_OK
ReadX 11830 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11830 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11835 NT_STATUS_OK
WriteX 11835 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11835 258 NT_STATUS_OK
WriteX 11835 0 53077 53077 NT_STATUS_OK
Close 11835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11836 NT_STATUS_OK
WriteX 11836 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11836 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11836 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11836 1004 NT_STATUS_OK
WriteX 11836 0 65536 65536 NT_STATUS_OK
WriteX 11836 65536 1856 1856 NT_STATUS_OK
WriteX 11836 0 4096 4096 NT_STATUS_OK
Flush 11836 NT_STATUS_OK
SET_FILE_INFORMATION 11836 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11836 1004 NT_STATUS_OK
WriteX 11836 0 4096 4096 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11838 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11840 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11842 NT_STATUS_OK
Close 11842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11845 NT_STATUS_OK
WriteX 11845 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 258 NT_STATUS_OK
WriteX 11845 0 7983 7983 NT_STATUS_OK
Close 11845 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11847 NT_STATUS_OK
Close 11847 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11850 NT_STATUS_OK
WriteX 11850 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 258 NT_STATUS_OK
WriteX 11850 0 65536 65536 NT_STATUS_OK
WriteX 11850 65536 65536 65536 NT_STATUS_OK
WriteX 11850 131072 65536 65536 NT_STATUS_OK
WriteX 11850 196608 65536 65536 NT_STATUS_OK
WriteX 11850 262144 65536 65536 NT_STATUS_OK
WriteX 11850 327680 65536 65536 NT_STATUS_OK
WriteX 11850 393216 65536 65536 NT_STATUS_OK
WriteX 11850 458752 46731 46731 NT_STATUS_OK
Close 11850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11851 NT_STATUS_OK
WriteX 11851 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11851 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11840 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11851 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
WriteX 11851 0 65536 65536 NT_STATUS_OK
WriteX 11851 65536 22848 22848 NT_STATUS_OK
WriteX 11851 0 4096 4096 NT_STATUS_OK
Flush 11851 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11851 1004 NT_STATUS_OK
WriteX 11851 0 4096 4096 NT_STATUS_OK
Close 11851 NT_STATUS_OK
Close 11840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11853 NT_STATUS_OK
Close 11853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11855 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11856 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11856 1004 NT_STATUS_OK
ReadX 11856 8192 4096 4096 NT_STATUS_OK
ReadX 11856 12288 4096 4096 NT_STATUS_OK
ReadX 11856 16384 4096 4096 NT_STATUS_OK
ReadX 11856 20480 4096 4096 NT_STATUS_OK
ReadX 11856 24576 4096 4096 NT_STATUS_OK
ReadX 11856 28672 4096 4096 NT_STATUS_OK
ReadX 11856 32768 4096 4096 NT_STATUS_OK
ReadX 11856 36864 4096 4096 NT_STATUS_OK
ReadX 11856 40960 4096 4096 NT_STATUS_OK
ReadX 11856 45056 4096 4096 NT_STATUS_OK
ReadX 11856 49152 4096 4096 NT_STATUS_OK
ReadX 11856 53248 4096 4096 NT_STATUS_OK
ReadX 11856 57344 4096 4096 NT_STATUS_OK
ReadX 11856 61440 4096 4096 NT_STATUS_OK
ReadX 11856 65536 4096 4096 NT_STATUS_OK
ReadX 11856 69632 4096 4096 NT_STATUS_OK
ReadX 11856 73728 4096 4096 NT_STATUS_OK
ReadX 11856 77824 4096 4096 NT_STATUS_OK
ReadX 11856 81920 4096 4096 NT_STATUS_OK
ReadX 11856 86016 4096 4096 NT_STATUS_OK
ReadX 11856 90112 4096 4096 NT_STATUS_OK
ReadX 11856 94208 4096 4096 NT_STATUS_OK
ReadX 11856 98304 4096 4096 NT_STATUS_OK
ReadX 11856 102400 4096 4096 NT_STATUS_OK
ReadX 11856 106496 4096 4096 NT_STATUS_OK
ReadX 11856 110592 4096 4096 NT_STATUS_OK
ReadX 11856 114688 4096 4096 NT_STATUS_OK
ReadX 11856 118784 4096 4096 NT_STATUS_OK
ReadX 11856 122880 4096 4096 NT_STATUS_OK
ReadX 11856 126976 4096 4096 NT_STATUS_OK
ReadX 11856 131072 4096 4096 NT_STATUS_OK
ReadX 11856 135168 4096 4096 NT_STATUS_OK
ReadX 11856 139264 4096 4096 NT_STATUS_OK
ReadX 11856 143360 4096 4096 NT_STATUS_OK
ReadX 11856 147456 4096 4096 NT_STATUS_OK
ReadX 11856 151552 4096 4096 NT_STATUS_OK
ReadX 11856 155648 4096 4096 NT_STATUS_OK
ReadX 11856 159744 4096 4096 NT_STATUS_OK
ReadX 11856 163840 4096 4096 NT_STATUS_OK
ReadX 11856 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11856 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11857 NT_STATUS_OK
Close 11857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11859 NT_STATUS_OK
WriteX 11859 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11859 258 NT_STATUS_OK
Close 11856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11860 NT_STATUS_OK
SET_FILE_INFORMATION 11860 1004 NT_STATUS_OK
Close 11860 NT_STATUS_OK
WriteX 11859 0 42388 42388 NT_STATUS_OK
Close 11859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11861 NT_STATUS_OK
Close 11861 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11863 NT_STATUS_OK
ReadX 11863 0 4096 4096 NT_STATUS_OK
ReadX 11863 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11864 NT_STATUS_OK
WriteX 11864 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 258 NT_STATUS_OK
SET_FILE_INFORMATION 11864 1004 NT_STATUS_OK
WriteX 11864 0 42652 42652 NT_STATUS_OK
Close 11864 NT_STATUS_OK
Close 11863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11866 NT_STATUS_OK
Close 11866 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11868 NT_STATUS_OK
ReadX 11868 0 4096 4096 NT_STATUS_OK
ReadX 11868 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11870 NT_STATUS_OK
Close 11870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11873 NT_STATUS_OK
WriteX 11873 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11873 258 NT_STATUS_OK
WriteX 11873 0 65536 65536 NT_STATUS_OK
WriteX 11873 65536 49 49 NT_STATUS_OK
Close 11873 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 61440 61440 NT_STATUS_OK
ReadX 11874 61440 4096 4096 NT_STATUS_OK
ReadX 11874 65536 61440 61440 NT_STATUS_OK
ReadX 11874 126976 4096 4096 NT_STATUS_OK
ReadX 11874 131072 61440 61440 NT_STATUS_OK
ReadX 11874 192512 4096 4096 NT_STATUS_OK
ReadX 11874 196608 61440 61440 NT_STATUS_OK
ReadX 11874 258048 4096 4096 NT_STATUS_OK
ReadX 11874 262144 61440 61440 NT_STATUS_OK
ReadX 11874 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 61440 61440 NT_STATUS_OK
ReadX 11875 61440 4096 4096 NT_STATUS_OK
ReadX 11875 65536 61440 61440 NT_STATUS_OK
ReadX 11875 126976 4096 4096 NT_STATUS_OK
ReadX 11875 131072 61440 61440 NT_STATUS_OK
ReadX 11875 192512 4096 4096 NT_STATUS_OK
ReadX 11875 196608 61440 61440 NT_STATUS_OK
ReadX 11875 258048 4096 4096 NT_STATUS_OK
ReadX 11875 262144 61440 61440 NT_STATUS_OK
ReadX 11875 323584 4096 4096 NT_STATUS_OK
ReadX 11875 327680 61440 61440 NT_STATUS_OK
ReadX 11875 389120 4096 4096 NT_STATUS_OK
ReadX 11875 393216 61440 61440 NT_STATUS_OK
ReadX 11875 454656 4096 4096 NT_STATUS_OK
ReadX 11875 458752 61440 61440 NT_STATUS_OK
ReadX 11875 520192 4096 4096 NT_STATUS_OK
ReadX 11875 524288 61440 61440 NT_STATUS_OK
ReadX 11875 585728 4096 4096 NT_STATUS_OK
ReadX 11875 589824 61440 61440 NT_STATUS_OK
ReadX 11875 651264 4096 4096 NT_STATUS_OK
ReadX 11875 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11876 NT_STATUS_OK
ReadX 11876 0 61440 61440 NT_STATUS_OK
ReadX 11876 61440 4096 4096 NT_STATUS_OK
ReadX 11876 65536 61440 61440 NT_STATUS_OK
ReadX 11876 126976 4096 4096 NT_STATUS_OK
ReadX 11876 131072 61440 61440 NT_STATUS_OK
ReadX 11876 192512 4096 4096 NT_STATUS_OK
ReadX 11876 196608 61440 61440 NT_STATUS_OK
ReadX 11876 258048 4096 4096 NT_STATUS_OK
ReadX 11876 262144 61440 61440 NT_STATUS_OK
ReadX 11876 323584 4096 4096 NT_STATUS_OK
ReadX 11876 327680 61440 61440 NT_STATUS_OK
ReadX 11876 389120 4096 4096 NT_STATUS_OK
ReadX 11876 393216 61440 61440 NT_STATUS_OK
ReadX 11876 454656 4096 4096 NT_STATUS_OK
ReadX 11876 458752 61440 61440 NT_STATUS_OK
ReadX 11876 520192 4096 4096 NT_STATUS_OK
ReadX 11876 524288 61440 61440 NT_STATUS_OK
ReadX 11876 585728 4096 4096 NT_STATUS_OK
ReadX 11876 589824 61440 61440 NT_STATUS_OK
ReadX 11876 651264 4096 4096 NT_STATUS_OK
ReadX 11876 655360 61440 61440 NT_STATUS_OK
ReadX 11876 716800 4096 4096 NT_STATUS_OK
ReadX 11876 720896 61440 61440 NT_STATUS_OK
ReadX 11876 782336 4096 4096 NT_STATUS_OK
ReadX 11876 786432 61440 61440 NT_STATUS_OK
ReadX 11876 847872 4096 4096 NT_STATUS_OK
ReadX 11876 851968 61440 61440 NT_STATUS_OK
ReadX 11876 913408 4096 4096 NT_STATUS_OK
ReadX 11876 917504 61440 61440 NT_STATUS_OK
ReadX 11876 978944 4096 4096 NT_STATUS_OK
ReadX 11876 983040 61440 61440 NT_STATUS_OK
ReadX 11876 1044480 4096 4096 NT_STATUS_OK
ReadX 11876 1048576 61440 61440 NT_STATUS_OK
ReadX 11876 1110016 4096 4096 NT_STATUS_OK
ReadX 11876 1114112 61440 61440 NT_STATUS_OK
ReadX 11876 1175552 4096 4096 NT_STATUS_OK
ReadX 11876 1179648 61440 61440 NT_STATUS_OK
ReadX 11876 1241088 4096 4096 NT_STATUS_OK
ReadX 11876 1245184 61440 61440 NT_STATUS_OK
ReadX 11876 1306624 4096 4096 NT_STATUS_OK
ReadX 11876 1310720 61440 61440 NT_STATUS_OK
ReadX 11876 1372160 4096 4096 NT_STATUS_OK
ReadX 11876 1376256 61440 61440 NT_STATUS_OK
ReadX 11876 1437696 4096 4096 NT_STATUS_OK
ReadX 11876 1441792 61440 61440 NT_STATUS_OK
ReadX 11876 1503232 4096 4096 NT_STATUS_OK
ReadX 11876 1507328 61440 61440 NT_STATUS_OK
ReadX 11876 1568768 4096 4096 NT_STATUS_OK
ReadX 11876 1572864 61440 61440 NT_STATUS_OK
ReadX 11876 1634304 4096 4096 NT_STATUS_OK
ReadX 11876 1638400 61440 61440 NT_STATUS_OK
ReadX 11876 1699840 4096 4096 NT_STATUS_OK
ReadX 11876 1703936 61440 61440 NT_STATUS_OK
ReadX 11876 1765376 4096 4096 NT_STATUS_OK
ReadX 11876 1769472 61440 61440 NT_STATUS_OK
ReadX 11876 1830912 4096 4096 NT_STATUS_OK
ReadX 11876 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11877 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11878 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1005 NT_STATUS_OK
ReadX 11878 2156 24 24 NT_STATUS_OK
ReadX 11878 2139 276 276 NT_STATUS_OK
ReadX 11878 2136 14 14 NT_STATUS_OK
ReadX 11878 2136 7 7 NT_STATUS_OK
ReadX 11878 2138 12 12 NT_STATUS_OK
ReadX 11878 2137 8 8 NT_STATUS_OK
ReadX 11878 2135 15 15 NT_STATUS_OK
ReadX 11878 0 16 16 NT_STATUS_OK
ReadX 11878 16 2048 2048 NT_STATUS_OK
ReadX 11878 2064 2048 2048 NT_STATUS_OK
ReadX 11878 257 2048 2048 NT_STATUS_OK
ReadX 11878 385 2048 2048 NT_STATUS_OK
ReadX 11878 513 2048 2048 NT_STATUS_OK
ReadX 11878 641 2048 2048 NT_STATUS_OK
ReadX 11878 769 2048 2048 NT_STATUS_OK
ReadX 11878 897 2048 2048 NT_STATUS_OK
ReadX 11878 1025 2048 2048 NT_STATUS_OK
ReadX 11878 1153 2048 2048 NT_STATUS_OK
ReadX 11878 1281 2048 2048 NT_STATUS_OK
ReadX 11878 1409 2048 2048 NT_STATUS_OK
ReadX 11878 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11880 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11874 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Close 11876 NT_STATUS_OK
Close 11868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11883 NT_STATUS_OK
WriteX 11883 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11883 258 NT_STATUS_OK
WriteX 11883 0 10575 10575 NT_STATUS_OK
Flush 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11884 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
Close 11878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11888 NT_STATUS_OK
LockX 11888 2147483538 1 NT_STATUS_OK
UnlockX 11888 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1005 NT_STATUS_OK
ReadX 11888 0 512 512 NT_STATUS_OK
ReadX 11888 512 512 512 NT_STATUS_OK
ReadX 11888 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1004 NT_STATUS_OK
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11889 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 1005 NT_STATUS_OK
ReadX 11889 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11890 NT_STATUS_OK
LockX 11890 2147483538 1 NT_STATUS_OK
UnlockX 11890 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11890 1005 NT_STATUS_OK
ReadX 11890 0 512 512 NT_STATUS_OK
ReadX 11890 512 512 512 NT_STATUS_OK
ReadX 11890 1024 512 512 NT_STATUS_OK
ReadX 11890 288 20 20 NT_STATUS_OK
ReadX 11890 308 2084 2084 NT_STATUS_OK
ReadX 11890 388 2084 2084 NT_STATUS_OK
ReadX 11890 388 2084 2084 NT_STATUS_OK
ReadX 11877 2157 1386 1386 NT_STATUS_OK
ReadX 11890 2472 399 399 NT_STATUS_OK
ReadX 11890 3072 1536 1536 NT_STATUS_OK
ReadX 11890 544 149 149 NT_STATUS_OK
ReadX 11890 693 485 485 NT_STATUS_OK
Close 11890 NT_STATUS_OK
ReadX 11877 2157 4096 4096 NT_STATUS_OK
ReadX 11877 6253 4096 4096 NT_STATUS_OK
ReadX 11877 10349 4096 4096 NT_STATUS_OK
ReadX 11877 14445 4096 4096 NT_STATUS_OK
ReadX 11877 18541 4096 4096 NT_STATUS_OK
ReadX 11877 22637 256 256 NT_STATUS_OK
ReadX 11877 22893 4096 4096 NT_STATUS_OK
ReadX 11877 26989 4096 4096 NT_STATUS_OK
ReadX 11877 31085 4096 4096 NT_STATUS_OK
ReadX 11877 35181 4096 4096 NT_STATUS_OK
ReadX 11877 39277 4096 4096 NT_STATUS_OK
ReadX 11877 43373 4096 4096 NT_STATUS_OK
ReadX 11877 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11877 2157 1024 1024 NT_STATUS_OK
ReadX 11877 1667 4688 4688 NT_STATUS_OK
ReadX 11877 6355 3516 3516 NT_STATUS_OK
ReadX 11877 9871 16384 16384 NT_STATUS_OK
ReadX 11877 26255 3771 3771 NT_STATUS_OK
ReadX 11877 30026 2048 2048 NT_STATUS_OK
ReadX 11877 32074 1024 1024 NT_STATUS_OK
ReadX 11877 33098 6652 6652 NT_STATUS_OK
ReadX 11877 39750 16384 16384 NT_STATUS_OK
ReadX 11877 56134 10496 10496 NT_STATUS_OK
ReadX 11877 66630 1784 1784 NT_STATUS_OK
ReadX 11877 68414 90 90 NT_STATUS_OK
ReadX 11877 68504 273 273 NT_STATUS_OK
ReadX 11877 68777 1600 1600 NT_STATUS_OK
ReadX 11877 70377 640 640 NT_STATUS_OK
ReadX 11877 71017 1280 1280 NT_STATUS_OK
ReadX 11877 72297 8464 8464 NT_STATUS_OK
ReadX 11877 80761 158 158 NT_STATUS_OK
ReadX 11877 80919 912 912 NT_STATUS_OK
ReadX 11877 81831 1980 1980 NT_STATUS_OK
ReadX 11877 83811 2256 2256 NT_STATUS_OK
ReadX 11877 86067 400 400 NT_STATUS_OK
ReadX 11877 86467 252 252 NT_STATUS_OK
ReadX 11877 86719 42 42 NT_STATUS_OK
ReadX 11877 86761 725 725 NT_STATUS_OK
ReadX 11877 2009 512 512 NT_STATUS_OK
ReadX 11877 3895 9 9 NT_STATUS_OK
ReadX 11877 3781 46 46 NT_STATUS_OK
ReadX 11877 4059 92 92 NT_STATUS_OK
ReadX 11877 3781 92 92 NT_STATUS_OK
ReadX 11877 3986 184 184 NT_STATUS_OK
ReadX 11877 3987 16384 16384 NT_STATUS_OK
ReadX 11877 3902 16384 16384 NT_STATUS_OK
ReadX 11877 3781 10240 10240 NT_STATUS_OK
ReadX 11877 3821 16384 16384 NT_STATUS_OK
ReadX 11877 3891 935 935 NT_STATUS_OK
ReadX 11877 4060 10240 10240 NT_STATUS_OK
ReadX 11877 4059 184 184 NT_STATUS_OK
ReadX 11877 256 184 184 NT_STATUS_OK
ReadX 11877 256 1026 1026 NT_STATUS_OK
ReadX 11877 3901 326 326 NT_STATUS_OK
ReadX 11877 3899 652 652 NT_STATUS_OK
ReadX 11877 256 2 2 NT_STATUS_OK
ReadX 11877 258 4948 4948 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11892 NT_STATUS_OK
Close 11892 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11895 NT_STATUS_OK
WriteX 11895 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11895 258 NT_STATUS_OK
WriteX 11895 0 65536 65536 NT_STATUS_OK
WriteX 11895 65536 65536 65536 NT_STATUS_OK
WriteX 11895 131072 65536 65536 NT_STATUS_OK
WriteX 11895 196608 65536 65536 NT_STATUS_OK
WriteX 11895 262144 65536 65536 NT_STATUS_OK
WriteX 11895 327680 65536 65536 NT_STATUS_OK
WriteX 11895 393216 65536 65536 NT_STATUS_OK
WriteX 11895 458752 65536 65536 NT_STATUS_OK
WriteX 11895 524288 65536 65536 NT_STATUS_OK
WriteX 11895 589824 35257 35257 NT_STATUS_OK
Close 11895 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11897 NT_STATUS_OK
Close 11897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11900 NT_STATUS_OK
WriteX 11900 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11900 258 NT_STATUS_OK
WriteX 11900 0 65536 65536 NT_STATUS_OK
WriteX 11900 65536 65536 65536 NT_STATUS_OK
WriteX 11900 131072 65536 65536 NT_STATUS_OK
WriteX 11900 196608 65536 65536 NT_STATUS_OK
WriteX 11900 262144 65536 65536 NT_STATUS_OK
WriteX 11900 327680 65536 65536 NT_STATUS_OK
WriteX 11900 393216 65536 65536 NT_STATUS_OK
WriteX 11900 458752 65536 65536 NT_STATUS_OK
WriteX 11900 524288 65536 65536 NT_STATUS_OK
WriteX 11900 589824 57598 57598 NT_STATUS_OK
Close 11900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11902 NT_STATUS_OK
WriteX 11902 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11902 258 NT_STATUS_OK
WriteX 11902 0 12543 12543 NT_STATUS_OK
Flush 11902 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11904 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11906 NT_STATUS_OK
ReadX 11906 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11908 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 1005 NT_STATUS_OK
ReadX 11908 1938 24 24 NT_STATUS_OK
ReadX 11908 1920 276 276 NT_STATUS_OK
ReadX 11908 1918 14 14 NT_STATUS_OK
ReadX 11908 1918 7 7 NT_STATUS_OK
ReadX 11908 1919 12 12 NT_STATUS_OK
ReadX 11908 1919 8 8 NT_STATUS_OK
ReadX 11908 1917 15 15 NT_STATUS_OK
ReadX 11908 0 16 16 NT_STATUS_OK
ReadX 11908 16 2048 2048 NT_STATUS_OK
ReadX 11908 2064 2048 2048 NT_STATUS_OK
ReadX 11908 257 2048 2048 NT_STATUS_OK
ReadX 11908 385 2048 2048 NT_STATUS_OK
ReadX 11908 513 2048 2048 NT_STATUS_OK
ReadX 11908 641 2048 2048 NT_STATUS_OK
ReadX 11908 769 2048 2048 NT_STATUS_OK
ReadX 11908 897 2048 2048 NT_STATUS_OK
ReadX 11908 1025 2048 2048 NT_STATUS_OK
ReadX 11908 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11910 NT_STATUS_OK
Close 11910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11913 NT_STATUS_OK
WriteX 11913 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11913 258 NT_STATUS_OK
WriteX 11913 0 11588 11588 NT_STATUS_OK
Flush 11913 NT_STATUS_OK
Close 11913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11914 NT_STATUS_OK
Close 11914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11916 NT_STATUS_OK
ReadX 11916 0 4096 4096 NT_STATUS_OK
Close 11908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11918 NT_STATUS_OK
WriteX 11918 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11918 258 NT_STATUS_OK
WriteX 11918 0 11615 11615 NT_STATUS_OK
Flush 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11916 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11920 NT_STATUS_OK
Close 11920 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11922 NT_STATUS_OK
ReadX 11922 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11924 NT_STATUS_OK
Close 11924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11927 NT_STATUS_OK
WriteX 11927 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11927 258 NT_STATUS_OK
WriteX 11927 0 65536 65536 NT_STATUS_OK
WriteX 11927 65536 16050 16050 NT_STATUS_OK
Close 11927 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11907 1939 64 64 NT_STATUS_OK
ReadX 11907 128 248 248 NT_STATUS_OK
ReadX 11907 128 568 568 NT_STATUS_OK
ReadX 11907 3872 1536 1536 NT_STATUS_OK
ReadX 11907 3456 2560 2560 NT_STATUS_OK
ReadX 11907 3136 512 512 NT_STATUS_OK
ReadX 11907 2880 4096 4096 NT_STATUS_OK
ReadX 11907 3264 3072 3072 NT_STATUS_OK
ReadX 11907 320 4096 4096 NT_STATUS_OK
ReadX 11907 1024 4096 4096 NT_STATUS_OK
ReadX 11907 3616 4096 4096 NT_STATUS_OK
ReadX 11907 1939 64 64 NT_STATUS_OK
ReadX 11907 128 248 248 NT_STATUS_OK
ReadX 11907 128 608 608 NT_STATUS_OK
ReadX 11907 2858 1024 1024 NT_STATUS_OK
ReadX 11907 2810 4096 4096 NT_STATUS_OK
ReadX 11907 2826 4096 4096 NT_STATUS_OK
ReadX 11907 2580 2048 2048 NT_STATUS_OK
ReadX 11907 2800 2560 2560 NT_STATUS_OK
ReadX 11907 2100 4096 4096 NT_STATUS_OK
ReadX 11907 2084 4096 4096 NT_STATUS_OK
ReadX 11907 868 4096 4096 NT_STATUS_OK
ReadX 11907 2324 4096 4096 NT_STATUS_OK
ReadX 11907 884 4096 4096 NT_STATUS_OK
ReadX 11907 2604 1024 1024 NT_STATUS_OK
ReadX 11907 580 4096 4096 NT_STATUS_OK
ReadX 11907 596 4096 4096 NT_STATUS_OK
ReadX 11907 2752 4096 4096 NT_STATUS_OK
ReadX 11907 2842 1024 1024 NT_STATUS_OK
ReadX 11907 660 4096 4096 NT_STATUS_OK
ReadX 11907 2720 4096 4096 NT_STATUS_OK
ReadX 11907 2736 4096 4096 NT_STATUS_OK
ReadX 11907 628 4096 4096 NT_STATUS_OK
ReadX 11907 2704 4096 4096 NT_STATUS_OK
ReadX 11907 1556 4096 4096 NT_STATUS_OK
ReadX 11907 576 4096 4096 NT_STATUS_OK
ReadX 11907 3168 1536 1536 NT_STATUS_OK
ReadX 11907 832 4096 4096 NT_STATUS_OK
ReadX 11907 1088 4096 4096 NT_STATUS_OK
ReadX 11907 1344 4096 4096 NT_STATUS_OK
ReadX 11907 1600 4096 4096 NT_STATUS_OK
ReadX 11907 1856 4096 4096 NT_STATUS_OK
ReadX 11907 2112 4096 4096 NT_STATUS_OK
ReadX 11907 1892 4096 4096 NT_STATUS_OK
ReadX 11907 820 4096 4096 NT_STATUS_OK
ReadX 11907 788 4096 4096 NT_STATUS_OK
ReadX 11907 1604 4096 4096 NT_STATUS_OK
ReadX 11907 3648 4096 4096 NT_STATUS_OK
ReadX 11907 2608 4096 4096 NT_STATUS_OK
ReadX 11907 548 4096 4096 NT_STATUS_OK
ReadX 11907 740 4096 4096 NT_STATUS_OK
ReadX 11907 1344 4096 4096 NT_STATUS_OK
ReadX 11907 3392 4096 4096 NT_STATUS_OK
ReadX 11907 3904 4096 4096 NT_STATUS_OK
ReadX 11907 644 4096 4096 NT_STATUS_OK
ReadX 11907 676 4096 4096 NT_STATUS_OK
ReadX 11907 2688 4096 4096 NT_STATUS_OK
ReadX 11907 320 4096 4096 NT_STATUS_OK
ReadX 11907 900 4096 4096 NT_STATUS_OK
ReadX 11907 1908 4096 4096 NT_STATUS_OK
ReadX 11907 852 4096 4096 NT_STATUS_OK
ReadX 11907 724 4096 4096 NT_STATUS_OK
ReadX 11907 2292 4096 4096 NT_STATUS_OK
ReadX 11907 612 4096 4096 NT_STATUS_OK
ReadX 11907 388 4096 4096 NT_STATUS_OK
ReadX 11907 2368 4096 4096 NT_STATUS_OK
ReadX 11907 2624 4096 4096 NT_STATUS_OK
ReadX 11907 500 4096 4096 NT_STATUS_OK
ReadX 11907 356 4096 4096 NT_STATUS_OK
ReadX 11907 1024 4096 4096 NT_STATUS_OK
ReadX 11907 576 4096 4096 NT_STATUS_OK
ReadX 11907 340 4096 4096 NT_STATUS_OK
ReadX 11907 420 4096 4096 NT_STATUS_OK
ReadX 11907 1600 4096 4096 NT_STATUS_OK
ReadX 11907 404 4096 4096 NT_STATUS_OK
ReadX 11907 1428 4096 4096 NT_STATUS_OK
ReadX 11907 2656 4096 4096 NT_STATUS_OK
ReadX 11907 2624 4096 4096 NT_STATUS_OK
ReadX 11907 452 4096 4096 NT_STATUS_OK
ReadX 11907 692 4096 4096 NT_STATUS_OK
ReadX 11907 564 4096 4096 NT_STATUS_OK
ReadX 11907 372 4096 4096 NT_STATUS_OK
ReadX 11907 468 4096 4096 NT_STATUS_OK
ReadX 11907 484 4096 4096 NT_STATUS_OK
ReadX 11907 1088 4096 4096 NT_STATUS_OK
ReadX 11907 1924 4096 4096 NT_STATUS_OK
ReadX 11907 2768 4096 4096 NT_STATUS_OK
ReadX 11907 832 4096 4096 NT_STATUS_OK
ReadX 11907 836 4096 4096 NT_STATUS_OK
ReadX 11907 1856 4096 4096 NT_STATUS_OK
ReadX 11907 2640 4096 4096 NT_STATUS_OK
ReadX 11907 436 4096 4096 NT_STATUS_OK
ReadX 11907 1828 4096 4096 NT_STATUS_OK
ReadX 11907 804 4096 4096 NT_STATUS_OK
ReadX 11907 1860 4096 4096 NT_STATUS_OK
ReadX 11907 1812 4096 4096 NT_STATUS_OK
ReadX 11907 756 4096 4096 NT_STATUS_OK
ReadX 11907 1636 4096 4096 NT_STATUS_OK
ReadX 11907 772 4096 4096 NT_STATUS_OK
ReadX 11907 2036 4096 4096 NT_STATUS_OK
ReadX 11907 1220 4096 4096 NT_STATUS_OK
ReadX 11907 1652 4096 4096 NT_STATUS_OK
ReadX 11907 2588 4096 4096 NT_STATUS_OK
ReadX 11907 916 4096 4096 NT_STATUS_OK
ReadX 11907 260 4096 4096 NT_STATUS_OK
ReadX 11907 932 4096 4096 NT_STATUS_OK
ReadX 11907 2624 4096 4096 NT_STATUS_OK
ReadX 11907 308 4096 4096 NT_STATUS_OK
ReadX 11907 292 4096 4096 NT_STATUS_OK
ReadX 11907 1140 4096 4096 NT_STATUS_OK
ReadX 11907 276 4096 4096 NT_STATUS_OK
ReadX 11907 2020 4096 4096 NT_STATUS_OK
ReadX 11907 2880 4096 4096 NT_STATUS_OK
ReadX 11907 516 4096 4096 NT_STATUS_OK
ReadX 11907 1844 4096 4096 NT_STATUS_OK
ReadX 11907 1124 4096 4096 NT_STATUS_OK
ReadX 11907 3136 4096 4096 NT_STATUS_OK
ReadX 11907 324 4096 4096 NT_STATUS_OK
ReadX 11907 1156 4096 4096 NT_STATUS_OK
ReadX 11907 1172 4096 4096 NT_STATUS_OK
ReadX 11907 2112 4096 4096 NT_STATUS_OK
ReadX 11907 2368 4096 4096 NT_STATUS_OK
ReadX 11907 964 4096 4096 NT_STATUS_OK
ReadX 11907 980 4096 4096 NT_STATUS_OK
ReadX 11907 1012 4096 4096 NT_STATUS_OK
ReadX 11907 532 4096 4096 NT_STATUS_OK
ReadX 11907 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11907 1620 4096 4096 NT_STATUS_OK
ReadX 11907 1604 4096 4096 NT_STATUS_OK
ReadX 11907 2116 4096 4096 NT_STATUS_OK
ReadX 11907 2132 4096 4096 NT_STATUS_OK
ReadX 11907 2148 4096 4096 NT_STATUS_OK
ReadX 11907 2276 4096 4096 NT_STATUS_OK
ReadX 11907 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11929 NT_STATUS_OK
Close 11929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11932 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 1004 NT_STATUS_OK
Close 11887 NT_STATUS_OK
WriteX 11932 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11932 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 1004 NT_STATUS_OK
Close 11889 NT_STATUS_OK
WriteX 11932 0 65536 65536 NT_STATUS_OK
WriteX 11932 65536 64850 64850 NT_STATUS_OK
Close 11932 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11934 NT_STATUS_OK
WriteX 11934 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11934 258 NT_STATUS_OK
ReadX 11907 2068 4096 4096 NT_STATUS_OK
ReadX 11907 1588 4096 4096 NT_STATUS_OK
ReadX 11907 1572 4096 4096 NT_STATUS_OK
WriteX 11934 0 18630 18630 NT_STATUS_OK
Flush 11934 NT_STATUS_OK
Close 11934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11936 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11938 NT_STATUS_OK
ReadX 11938 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11907 612 4096 4096 NT_STATUS_OK
ReadX 11907 564 4096 4096 NT_STATUS_OK
ReadX 11907 1876 4096 4096 NT_STATUS_OK
ReadX 11907 628 4096 4096 NT_STATUS_OK
ReadX 11907 740 4096 4096 NT_STATUS_OK
ReadX 11907 724 4096 4096 NT_STATUS_OK
ReadX 11907 644 4096 4096 NT_STATUS_OK
ReadX 11907 2324 4096 4096 NT_STATUS_OK
ReadX 11907 660 4096 4096 NT_STATUS_OK
ReadX 11907 852 4096 4096 NT_STATUS_OK
ReadX 11907 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11907 2368 4096 4096 NT_STATUS_OK
ReadX 11907 1024 4096 4096 NT_STATUS_OK
ReadX 11907 320 4096 4096 NT_STATUS_OK
ReadX 11907 580 4096 4096 NT_STATUS_OK
ReadX 11907 3136 512 512 NT_STATUS_OK
ReadX 11907 2880 4096 4096 NT_STATUS_OK
Close 11907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 61440 4096 4096 NT_STATUS_OK
ReadX 11939 126976 4096 4096 NT_STATUS_OK
WriteX 11939 0 65536 65536 NT_STATUS_OK
WriteX 11939 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 61440 4096 4096 NT_STATUS_OK
ReadX 11940 126976 4096 4096 NT_STATUS_OK
ReadX 11940 192512 4096 4096 NT_STATUS_OK
ReadX 11940 258048 4096 4096 NT_STATUS_OK
WriteX 11940 0 65536 65536 NT_STATUS_OK
WriteX 11940 65536 65536 65536 NT_STATUS_OK
WriteX 11940 131072 65536 65536 NT_STATUS_OK
WriteX 11940 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 61440 4096 4096 NT_STATUS_OK
ReadX 11941 126976 4096 4096 NT_STATUS_OK
ReadX 11941 192512 4096 4096 NT_STATUS_OK
ReadX 11941 258048 4096 4096 NT_STATUS_OK
ReadX 11941 323584 4096 4096 NT_STATUS_OK
ReadX 11941 389120 4096 4096 NT_STATUS_OK
ReadX 11941 454656 4096 4096 NT_STATUS_OK
ReadX 11941 520192 4096 4096 NT_STATUS_OK
WriteX 11941 0 65536 65536 NT_STATUS_OK
WriteX 11941 65536 65536 65536 NT_STATUS_OK
WriteX 11941 131072 65536 65536 NT_STATUS_OK
WriteX 11941 196608 65536 65536 NT_STATUS_OK
WriteX 11941 262144 65536 65536 NT_STATUS_OK
WriteX 11941 327680 65536 65536 NT_STATUS_OK
WriteX 11941 393216 65536 65536 NT_STATUS_OK
WriteX 11941 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11943 NT_STATUS_OK
Close 11943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11944 NT_STATUS_OK
WriteX 11944 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11944 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11942 0 8192 8192 NT_STATUS_OK
Flush 11942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11942 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11942 0 8192 8192 NT_STATUS_OK
Flush 11942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11942 0 8192 8192 NT_STATUS_OK
Flush 11942 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11942 0 8192 8192 NT_STATUS_OK
Flush 11942 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11946 NT_STATUS_OK
Close 11946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11906 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11949 NT_STATUS_OK
WriteX 11949 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11949 258 NT_STATUS_OK
WriteX 11949 0 62591 62591 NT_STATUS_OK
Close 11949 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11954 NT_STATUS_OK
WriteX 11954 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11954 258 NT_STATUS_OK
WriteX 11954 0 10845 10845 NT_STATUS_OK
Close 11954 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11956 NT_STATUS_OK
Close 11956 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11959 NT_STATUS_OK
WriteX 11959 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11959 258 NT_STATUS_OK
WriteX 11959 0 30118 30118 NT_STATUS_OK
Close 11959 NT_STATUS_OK
WriteX 11942 0 4096 4096 NT_STATUS_OK
WriteX 11944 0 64 64 NT_STATUS_OK
Close 11944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 61440 61440 NT_STATUS_OK
ReadX 11961 61440 4096 4096 NT_STATUS_OK
ReadX 11961 65536 61440 61440 NT_STATUS_OK
ReadX 11961 126976 4096 4096 NT_STATUS_OK
ReadX 11961 131072 61440 61440 NT_STATUS_OK
ReadX 11961 192512 4096 4096 NT_STATUS_OK
ReadX 11961 196608 61440 61440 NT_STATUS_OK
ReadX 11961 258048 4096 4096 NT_STATUS_OK
ReadX 11961 262144 61440 61440 NT_STATUS_OK
ReadX 11961 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 61440 61440 NT_STATUS_OK
ReadX 11962 61440 4096 4096 NT_STATUS_OK
ReadX 11962 65536 61440 61440 NT_STATUS_OK
ReadX 11962 126976 4096 4096 NT_STATUS_OK
ReadX 11962 131072 61440 61440 NT_STATUS_OK
ReadX 11962 192512 4096 4096 NT_STATUS_OK
ReadX 11962 196608 61440 61440 NT_STATUS_OK
ReadX 11962 258048 4096 4096 NT_STATUS_OK
ReadX 11962 262144 61440 61440 NT_STATUS_OK
ReadX 11962 323584 4096 4096 NT_STATUS_OK
ReadX 11962 327680 61440 61440 NT_STATUS_OK
ReadX 11962 389120 4096 4096 NT_STATUS_OK
ReadX 11962 393216 61440 61440 NT_STATUS_OK
ReadX 11962 454656 4096 4096 NT_STATUS_OK
ReadX 11962 458752 61440 61440 NT_STATUS_OK
ReadX 11962 520192 4096 4096 NT_STATUS_OK
ReadX 11962 524288 61440 61440 NT_STATUS_OK
ReadX 11962 585728 4096 4096 NT_STATUS_OK
ReadX 11962 589824 61440 61440 NT_STATUS_OK
ReadX 11962 651264 4096 4096 NT_STATUS_OK
ReadX 11962 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 61440 61440 NT_STATUS_OK
ReadX 11963 61440 4096 4096 NT_STATUS_OK
ReadX 11963 65536 61440 61440 NT_STATUS_OK
ReadX 11963 126976 4096 4096 NT_STATUS_OK
ReadX 11963 131072 61440 61440 NT_STATUS_OK
ReadX 11963 192512 4096 4096 NT_STATUS_OK
ReadX 11963 196608 61440 61440 NT_STATUS_OK
ReadX 11963 258048 4096 4096 NT_STATUS_OK
ReadX 11963 262144 61440 61440 NT_STATUS_OK
ReadX 11963 323584 4096 4096 NT_STATUS_OK
ReadX 11963 327680 61440 61440 NT_STATUS_OK
ReadX 11963 389120 4096 4096 NT_STATUS_OK
ReadX 11963 393216 61440 61440 NT_STATUS_OK
ReadX 11963 454656 4096 4096 NT_STATUS_OK
ReadX 11963 458752 61440 61440 NT_STATUS_OK
ReadX 11963 520192 4096 4096 NT_STATUS_OK
ReadX 11963 524288 61440 61440 NT_STATUS_OK
ReadX 11963 585728 4096 4096 NT_STATUS_OK
ReadX 11963 589824 61440 61440 NT_STATUS_OK
ReadX 11963 651264 4096 4096 NT_STATUS_OK
ReadX 11963 655360 61440 61440 NT_STATUS_OK
ReadX 11963 716800 4096 4096 NT_STATUS_OK
ReadX 11963 720896 61440 61440 NT_STATUS_OK
ReadX 11963 782336 4096 4096 NT_STATUS_OK
ReadX 11963 786432 61440 61440 NT_STATUS_OK
ReadX 11963 847872 4096 4096 NT_STATUS_OK
ReadX 11963 851968 61440 61440 NT_STATUS_OK
ReadX 11963 913408 4096 4096 NT_STATUS_OK
ReadX 11963 917504 61440 61440 NT_STATUS_OK
ReadX 11963 978944 4096 4096 NT_STATUS_OK
ReadX 11963 983040 61440 61440 NT_STATUS_OK
ReadX 11963 1044480 4096 4096 NT_STATUS_OK
ReadX 11963 1048576 61440 61440 NT_STATUS_OK
ReadX 11963 1110016 4096 4096 NT_STATUS_OK
ReadX 11963 1114112 61440 61440 NT_STATUS_OK
ReadX 11963 1175552 4096 4096 NT_STATUS_OK
ReadX 11963 1179648 61440 61440 NT_STATUS_OK
ReadX 11963 1241088 4096 4096 NT_STATUS_OK
ReadX 11963 1245184 61440 61440 NT_STATUS_OK
ReadX 11963 1306624 4096 4096 NT_STATUS_OK
ReadX 11963 1310720 61440 61440 NT_STATUS_OK
ReadX 11963 1372160 4096 4096 NT_STATUS_OK
ReadX 11963 1376256 61440 61440 NT_STATUS_OK
ReadX 11963 1437696 4096 4096 NT_STATUS_OK
ReadX 11963 1441792 61440 61440 NT_STATUS_OK
ReadX 11963 1503232 4096 4096 NT_STATUS_OK
ReadX 11963 1507328 61440 61440 NT_STATUS_OK
ReadX 11963 1568768 4096 4096 NT_STATUS_OK
ReadX 11963 1572864 61440 61440 NT_STATUS_OK
ReadX 11963 1634304 4096 4096 NT_STATUS_OK
ReadX 11963 1638400 61440 61440 NT_STATUS_OK
ReadX 11963 1699840 4096 4096 NT_STATUS_OK
ReadX 11963 1703936 61440 61440 NT_STATUS_OK
ReadX 11963 1765376 4096 4096 NT_STATUS_OK
ReadX 11963 1769472 61440 61440 NT_STATUS_OK
ReadX 11963 1830912 4096 4096 NT_STATUS_OK
ReadX 11963 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11961 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11968 NT_STATUS_OK
ReadX 11968 0 4096 4096 NT_STATUS_OK
ReadX 11968 4096 4096 4096 NT_STATUS_OK
ReadX 11968 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11969 NT_STATUS_OK
Close 11969 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11971 NT_STATUS_OK
ReadX 11971 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11972 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11973 NT_STATUS_OK
Close 11973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11971 NT_STATUS_OK
Close 11972 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11976 NT_STATUS_OK
ReadX 11976 0 8192 8192 NT_STATUS_OK
ReadX 11976 8192 8192 8192 NT_STATUS_OK
ReadX 11976 16384 8192 8192 NT_STATUS_OK
ReadX 11976 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11978 NT_STATUS_OK
Close 11978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11976 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11981 NT_STATUS_OK
WriteX 11981 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11981 258 NT_STATUS_OK
WriteX 11981 0 10438 10438 NT_STATUS_OK
Close 11981 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11982 NT_STATUS_OK
Close 11982 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11984 NT_STATUS_OK
Close 11984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11985 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11986 NT_STATUS_OK
Close 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11987 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11988 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
ReadX 11990 4096 4096 4096 NT_STATUS_OK
ReadX 11990 8192 4096 4096 NT_STATUS_OK
ReadX 11990 12288 8192 8192 NT_STATUS_OK
ReadX 11990 20480 8192 8192 NT_STATUS_OK
ReadX 11990 28672 8192 8192 NT_STATUS_OK
ReadX 11990 36864 8192 8192 NT_STATUS_OK
ReadX 11990 45056 8192 8192 NT_STATUS_OK
ReadX 11990 53248 8192 8192 NT_STATUS_OK
ReadX 11990 61440 8192 8192 NT_STATUS_OK
ReadX 11990 69632 8192 8192 NT_STATUS_OK
ReadX 11990 77824 8192 8192 NT_STATUS_OK
ReadX 11990 86016 8192 8192 NT_STATUS_OK
ReadX 11990 94208 8192 8192 NT_STATUS_OK
ReadX 11990 102400 8192 8192 NT_STATUS_OK
ReadX 11990 110592 8192 8192 NT_STATUS_OK
ReadX 11990 118784 8192 8192 NT_STATUS_OK
ReadX 11990 126976 8192 8192 NT_STATUS_OK
ReadX 11990 135168 8192 8192 NT_STATUS_OK
ReadX 11990 143360 8192 8192 NT_STATUS_OK
ReadX 11990 151552 8192 8192 NT_STATUS_OK
ReadX 11990 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11990 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Close 11985 NT_STATUS_OK
Close 11987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11992 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11995 NT_STATUS_OK
WriteX 11995 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11995 258 NT_STATUS_OK
WriteX 11995 0 28489 28489 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11996 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11998 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11999 NT_STATUS_OK
Close 11999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 8192 8192 NT_STATUS_OK
ReadX 12002 8192 8192 8192 NT_STATUS_OK
ReadX 12002 16384 8192 8192 NT_STATUS_OK
ReadX 12002 24576 8192 8192 NT_STATUS_OK
ReadX 12002 32768 16384 16384 NT_STATUS_OK
ReadX 12002 49152 8192 8192 NT_STATUS_OK
ReadX 12002 57344 8192 8192 NT_STATUS_OK
ReadX 12002 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12004 NT_STATUS_OK
Close 12004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12007 NT_STATUS_OK
WriteX 12007 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12007 258 NT_STATUS_OK
WriteX 12007 0 29253 29253 NT_STATUS_OK
Close 12007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12008 NT_STATUS_OK
Close 12008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12011 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12014 NT_STATUS_OK
WriteX 12014 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12014 258 NT_STATUS_OK
WriteX 12014 0 30183 30183 NT_STATUS_OK
Close 12014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12017 NT_STATUS_OK
WriteX 12017 0 510 510 NT_STATUS_OK
WriteX 12017 510 512 512 NT_STATUS_OK
WriteX 12017 1022 510 510 NT_STATUS_OK
WriteX 12017 1532 510 510 NT_STATUS_OK
WriteX 12017 2042 168 168 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12018 NT_STATUS_OK
Close 12018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 0 4096 4096 NT_STATUS_OK
WriteX 12020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 61440 4096 4096 NT_STATUS_OK
ReadX 12021 126976 4096 4096 NT_STATUS_OK
WriteX 12021 0 65536 65536 NT_STATUS_OK
WriteX 12021 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 61440 4096 4096 NT_STATUS_OK
ReadX 12022 126976 4096 4096 NT_STATUS_OK
ReadX 12022 192512 4096 4096 NT_STATUS_OK
ReadX 12022 258048 4096 4096 NT_STATUS_OK
WriteX 12022 0 65536 65536 NT_STATUS_OK
WriteX 12022 65536 65536 65536 NT_STATUS_OK
WriteX 12022 131072 65536 65536 NT_STATUS_OK
WriteX 12022 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12023 NT_STATUS_OK
ReadX 12023 61440 4096 4096 NT_STATUS_OK
ReadX 12023 126976 4096 4096 NT_STATUS_OK
ReadX 12023 192512 4096 4096 NT_STATUS_OK
ReadX 12023 258048 4096 4096 NT_STATUS_OK
ReadX 12023 323584 4096 4096 NT_STATUS_OK
ReadX 12023 389120 4096 4096 NT_STATUS_OK
ReadX 12023 454656 4096 4096 NT_STATUS_OK
ReadX 12023 520192 4096 4096 NT_STATUS_OK
WriteX 12023 0 65536 65536 NT_STATUS_OK
WriteX 12023 65536 65536 65536 NT_STATUS_OK
WriteX 12023 131072 65536 65536 NT_STATUS_OK
WriteX 12023 196608 65536 65536 NT_STATUS_OK
WriteX 12023 262144 65536 65536 NT_STATUS_OK
WriteX 12023 327680 65536 65536 NT_STATUS_OK
WriteX 12023 393216 65536 65536 NT_STATUS_OK
WriteX 12023 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12020 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12022 NT_STATUS_OK
Close 12023 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12026 NT_STATUS_OK
Close 12026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12030 NT_STATUS_OK
Close 12030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12033 NT_STATUS_OK
Close 12033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12035 NT_STATUS_OK
Close 12035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12039 NT_STATUS_OK
Close 12039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12044 NT_STATUS_OK
Close 12044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12048 NT_STATUS_OK
Close 12048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12053 NT_STATUS_OK
Close 12053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12058 NT_STATUS_OK
Close 12058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12063 NT_STATUS_OK
Close 12063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12068 NT_STATUS_OK
Close 12068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12073 NT_STATUS_OK
Close 12073 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12078 NT_STATUS_OK
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12083 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12089 NT_STATUS_OK
Close 12089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12092 NT_STATUS_OK
WriteX 12092 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12092 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12092 0 65536 65536 NT_STATUS_OK
WriteX 12092 65536 65536 65536 NT_STATUS_OK
WriteX 12092 131072 65536 65536 NT_STATUS_OK
WriteX 12092 196608 65536 65536 NT_STATUS_OK
WriteX 12092 262144 26634 26634 NT_STATUS_OK
Close 12092 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12097 NT_STATUS_OK
Close 12097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12098 NT_STATUS_OK
Close 12098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
Close 12099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12100 NT_STATUS_OK
ReadX 12100 0 4096 4096 NT_STATUS_OK
ReadX 12100 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12100 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12105 NT_STATUS_OK
Close 12105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12108 NT_STATUS_OK
Close 12108 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12117 NT_STATUS_OK
Close 12117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12123 NT_STATUS_OK
Close 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12128 NT_STATUS_OK
Close 12128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12133 NT_STATUS_OK
Close 12133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12138 NT_STATUS_OK
Close 12138 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12148 NT_STATUS_OK
Close 12148 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12152 NT_STATUS_OK
Close 12152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12162 NT_STATUS_OK
Close 12162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12167 NT_STATUS_OK
Close 12167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12177 NT_STATUS_OK
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 4096 4096 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 0 4096 4096 NT_STATUS_OK
Close 12180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12181 NT_STATUS_OK
ReadX 12181 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12191 NT_STATUS_OK
Close 12191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 0 4096 4096 NT_STATUS_OK
Close 12193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 0 4096 4096 NT_STATUS_OK
Close 12194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12195 NT_STATUS_OK
ReadX 12195 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12181 NT_STATUS_OK
Close 12195 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12224 0 4096 4096 NT_STATUS_OK
Close 12224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12226 NT_STATUS_OK
ReadX 12226 0 4096 4096 NT_STATUS_OK
ReadX 12226 4096 4096 4096 NT_STATUS_OK
ReadX 12226 8192 4096 4096 NT_STATUS_OK
ReadX 12226 12288 4096 4096 NT_STATUS_OK
ReadX 12226 16384 4096 4096 NT_STATUS_OK
ReadX 12226 20480 4096 4096 NT_STATUS_OK
ReadX 12226 24576 4096 4096 NT_STATUS_OK
ReadX 12226 28672 4096 4096 NT_STATUS_OK
ReadX 12226 32768 4096 4096 NT_STATUS_OK
ReadX 12226 36864 4096 4096 NT_STATUS_OK
ReadX 12226 40960 4096 4096 NT_STATUS_OK
ReadX 12226 45056 4096 4096 NT_STATUS_OK
ReadX 12226 49152 4096 4096 NT_STATUS_OK
ReadX 12226 53248 4096 4096 NT_STATUS_OK
ReadX 12226 57344 4096 4096 NT_STATUS_OK
ReadX 12226 61440 4096 4096 NT_STATUS_OK
ReadX 12226 65536 4096 4096 NT_STATUS_OK
ReadX 12226 69632 4096 4096 NT_STATUS_OK
ReadX 12226 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
WriteX 12226 0 4096 4096 NT_STATUS_OK
Close 12226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12227 NT_STATUS_OK
SET_FILE_INFORMATION 12227 1004 NT_STATUS_OK
Close 12227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12228 NT_STATUS_OK
ReadX 12228 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12229 NT_STATUS_OK
Close 12229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12232 NT_STATUS_OK
WriteX 12232 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 258 NT_STATUS_OK
WriteX 12232 0 65536 65536 NT_STATUS_OK
WriteX 12232 65536 19979 19979 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
QUERY_FILE_INFORMATION 12233 1004 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
SET_FILE_INFORMATION 12233 1004 NT_STATUS_OK
WriteX 12233 0 4096 4096 NT_STATUS_OK
Flush 12233 NT_STATUS_OK
Close 12233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12234 NT_STATUS_OK
ReadX 12234 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
Close 12234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
Close 12236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12237 NT_STATUS_OK
ReadX 12237 0 4096 4096 NT_STATUS_OK
Close 12237 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12238 NT_STATUS_OK
ReadX 12238 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12238 1004 NT_STATUS_OK
WriteX 12238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12239 NT_STATUS_OK
Close 12239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Close 12238 NT_STATUS_OK
Close 12228 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12241 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12244 NT_STATUS_OK
WriteX 12244 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12244 258 NT_STATUS_OK
WriteX 12244 0 65536 65536 NT_STATUS_OK
WriteX 12244 65536 17654 17654 NT_STATUS_OK
Close 12244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12245 NT_STATUS_OK
ReadX 12245 0 4096 4096 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
QUERY_FILE_INFORMATION 12245 1004 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
SET_FILE_INFORMATION 12245 1004 NT_STATUS_OK
WriteX 12245 0 4096 4096 NT_STATUS_OK
Flush 12245 NT_STATUS_OK
Close 12245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12246 NT_STATUS_OK
SET_FILE_INFORMATION 12246 1004 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12247 NT_STATUS_OK
ReadX 12247 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12248 NT_STATUS_OK
Close 12248 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
ReadX 12250 4096 4096 4096 NT_STATUS_OK
ReadX 12250 8192 4096 4096 NT_STATUS_OK
ReadX 12250 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12250 16384 4096 4096 NT_STATUS_OK
ReadX 12250 20480 4096 4096 NT_STATUS_OK
ReadX 12250 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12252 NT_STATUS_OK
ReadX 12252 0 4096 4096 NT_STATUS_OK
Close 12252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12253 NT_STATUS_OK
ReadX 12253 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12253 1004 NT_STATUS_OK
WriteX 12253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12253 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12256 NT_STATUS_OK
Close 12256 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12259 NT_STATUS_OK
WriteX 12259 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12259 258 NT_STATUS_OK
WriteX 12259 0 65536 65536 NT_STATUS_OK
WriteX 12259 65536 19490 19490 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 0 4096 4096 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
QUERY_FILE_INFORMATION 12260 1004 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
SET_FILE_INFORMATION 12260 1004 NT_STATUS_OK
WriteX 12260 0 4096 4096 NT_STATUS_OK
Flush 12260 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12261 NT_STATUS_OK
SET_FILE_INFORMATION 12261 1004 NT_STATUS_OK
Close 12261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12263 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12265 0 4096 4096 NT_STATUS_OK
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12267 NT_STATUS_OK
ReadX 12267 0 4096 4096 NT_STATUS_OK
ReadX 12267 4096 4096 4096 NT_STATUS_OK
ReadX 12267 8192 4096 4096 NT_STATUS_OK
ReadX 12267 12288 4096 4096 NT_STATUS_OK
ReadX 12267 16384 4096 4096 NT_STATUS_OK
ReadX 12267 20480 4096 4096 NT_STATUS_OK
ReadX 12267 24576 4096 4096 NT_STATUS_OK
ReadX 12267 28672 4096 4096 NT_STATUS_OK
ReadX 12267 32768 4096 4096 NT_STATUS_OK
ReadX 12267 36864 4096 4096 NT_STATUS_OK
ReadX 12267 40960 4096 4096 NT_STATUS_OK
ReadX 12267 45056 4096 4096 NT_STATUS_OK
ReadX 12267 49152 4096 4096 NT_STATUS_OK
ReadX 12267 53248 4096 4096 NT_STATUS_OK
ReadX 12267 57344 4096 4096 NT_STATUS_OK
ReadX 12267 61440 4096 4096 NT_STATUS_OK
ReadX 12267 65536 4096 4096 NT_STATUS_OK
ReadX 12267 69632 4096 4096 NT_STATUS_OK
ReadX 12267 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12267 1004 NT_STATUS_OK
WriteX 12267 0 4096 4096 NT_STATUS_OK
Close 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12268 NT_STATUS_OK
SET_FILE_INFORMATION 12268 1004 NT_STATUS_OK
Close 12268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12269 NT_STATUS_OK
ReadX 12269 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12273 NT_STATUS_OK
WriteX 12273 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12273 258 NT_STATUS_OK
WriteX 12273 0 65536 65536 NT_STATUS_OK
WriteX 12273 65536 8866 8866 NT_STATUS_OK
Close 12273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
WriteX 12274 0 4096 4096 NT_STATUS_OK
Flush 12274 NT_STATUS_OK
SET_FILE_INFORMATION 12274 1004 NT_STATUS_OK
WriteX 12274 0 4096 4096 NT_STATUS_OK
Flush 12274 NT_STATUS_OK
Close 12274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
Close 12276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12277 NT_STATUS_OK
ReadX 12277 0 4096 4096 NT_STATUS_OK
Close 12277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12278 NT_STATUS_OK
ReadX 12278 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12278 1004 NT_STATUS_OK
WriteX 12278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12279 NT_STATUS_OK
Close 12279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12278 NT_STATUS_OK
Close 12269 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12281 NT_STATUS_OK
Close 12281 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12284 NT_STATUS_OK
WriteX 12284 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12284 258 NT_STATUS_OK
WriteX 12284 0 65536 65536 NT_STATUS_OK
WriteX 12284 65536 9298 9298 NT_STATUS_OK
Close 12284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12285 NT_STATUS_OK
ReadX 12285 0 4096 4096 NT_STATUS_OK
WriteX 12285 0 4096 4096 NT_STATUS_OK
Flush 12285 NT_STATUS_OK
SET_FILE_INFORMATION 12285 1004 NT_STATUS_OK
WriteX 12285 0 4096 4096 NT_STATUS_OK
Flush 12285 NT_STATUS_OK
Close 12285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12286 NT_STATUS_OK
SET_FILE_INFORMATION 12286 1004 NT_STATUS_OK
Close 12286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12287 NT_STATUS_OK
ReadX 12287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12288 NT_STATUS_OK
Close 12288 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12291 0 4096 4096 NT_STATUS_OK
Close 12291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12292 NT_STATUS_OK
ReadX 12292 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12292 4096 4096 4096 NT_STATUS_OK
ReadX 12292 8192 4096 4096 NT_STATUS_OK
ReadX 12292 12288 4096 4096 NT_STATUS_OK
ReadX 12292 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12294 NT_STATUS_OK
ReadX 12294 0 4096 4096 NT_STATUS_OK
Close 12294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12295 NT_STATUS_OK
ReadX 12295 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12295 1004 NT_STATUS_OK
WriteX 12295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12296 NT_STATUS_OK
Close 12296 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12292 NT_STATUS_OK
Close 12295 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12298 NT_STATUS_OK
Close 12298 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12301 NT_STATUS_OK
WriteX 12301 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12301 258 NT_STATUS_OK
WriteX 12301 0 65536 65536 NT_STATUS_OK
WriteX 12301 65536 11540 11540 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12302 NT_STATUS_OK
ReadX 12302 0 4096 4096 NT_STATUS_OK
WriteX 12302 0 4096 4096 NT_STATUS_OK
Flush 12302 NT_STATUS_OK
SET_FILE_INFORMATION 12302 1004 NT_STATUS_OK
WriteX 12302 0 4096 4096 NT_STATUS_OK
Flush 12302 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12303 NT_STATUS_OK
SET_FILE_INFORMATION 12303 1004 NT_STATUS_OK
Close 12303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12304 NT_STATUS_OK
ReadX 12304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12305 NT_STATUS_OK
Close 12305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12307 NT_STATUS_OK
ReadX 12307 61440 4096 4096 NT_STATUS_OK
ReadX 12307 126976 4096 4096 NT_STATUS_OK
WriteX 12307 0 65536 65536 NT_STATUS_OK
WriteX 12307 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12308 NT_STATUS_OK
ReadX 12308 61440 4096 4096 NT_STATUS_OK
ReadX 12308 126976 4096 4096 NT_STATUS_OK
ReadX 12308 192512 4096 4096 NT_STATUS_OK
ReadX 12308 258048 4096 4096 NT_STATUS_OK
WriteX 12308 0 65536 65536 NT_STATUS_OK
WriteX 12308 65536 65536 65536 NT_STATUS_OK
WriteX 12308 131072 65536 65536 NT_STATUS_OK
WriteX 12308 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12309 NT_STATUS_OK
ReadX 12309 61440 4096 4096 NT_STATUS_OK
ReadX 12309 126976 4096 4096 NT_STATUS_OK
ReadX 12309 192512 4096 4096 NT_STATUS_OK
ReadX 12309 258048 4096 4096 NT_STATUS_OK
ReadX 12309 323584 4096 4096 NT_STATUS_OK
ReadX 12309 389120 4096 4096 NT_STATUS_OK
ReadX 12309 454656 4096 4096 NT_STATUS_OK
ReadX 12309 520192 4096 4096 NT_STATUS_OK
WriteX 12309 0 65536 65536 NT_STATUS_OK
WriteX 12309 65536 65536 65536 NT_STATUS_OK
WriteX 12309 131072 65536 65536 NT_STATUS_OK
WriteX 12309 196608 65536 65536 NT_STATUS_OK
WriteX 12309 262144 65536 65536 NT_STATUS_OK
WriteX 12309 327680 65536 65536 NT_STATUS_OK
WriteX 12309 393216 65536 65536 NT_STATUS_OK
Close 12304 NT_STATUS_OK
WriteX 12309 458752 65536 65536 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Close 12308 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12309 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12310 NT_STATUS_OK
ReadX 12310 0 4096 4096 NT_STATUS_OK
ReadX 12310 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12311 NT_STATUS_OK
WriteX 12311 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12311 258 NT_STATUS_OK
WriteX 12311 0 53 53 NT_STATUS_OK
Close 12311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12312 NT_STATUS_OK
Close 12312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12310 8192 4096 4096 NT_STATUS_OK
ReadX 12310 12288 4096 4096 NT_STATUS_OK
WriteX 12314 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12314 258 NT_STATUS_OK
ReadX 12310 16384 4096 4096 NT_STATUS_OK
ReadX 12310 20480 4096 4096 NT_STATUS_OK
WriteX 12314 0 15360 15360 NT_STATUS_OK
Close 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12315 NT_STATUS_OK
ReadX 12315 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12315 1004 NT_STATUS_OK
WriteX 12315 0 4096 4096 NT_STATUS_OK
Close 12315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12316 NT_STATUS_OK
Close 12316 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12318 NT_STATUS_OK
ReadX 12318 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12319 NT_STATUS_OK
Close 12319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12318 4096 4096 4096 NT_STATUS_OK
ReadX 12318 8192 4096 4096 NT_STATUS_OK
ReadX 12318 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
ReadX 12321 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12322 NT_STATUS_OK
ReadX 12322 0 4096 4096 NT_STATUS_OK
ReadX 12322 4096 4096 4096 NT_STATUS_OK
ReadX 12322 8192 4096 4096 NT_STATUS_OK
Close 12321 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12323 NT_STATUS_OK
WriteX 12323 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12323 258 NT_STATUS_OK
WriteX 12323 0 15360 15360 NT_STATUS_OK
Close 12323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12324 NT_STATUS_OK
ReadX 12324 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12324 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12324 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12328 NT_STATUS_OK
SET_FILE_INFORMATION 12328 1004 NT_STATUS_OK
Close 12328 NT_STATUS_OK
WriteX 12324 0 4096 4096 NT_STATUS_OK
Close 12324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12329 NT_STATUS_OK
Close 12329 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12331 NT_STATUS_OK
ReadX 12331 0 4096 4096 NT_STATUS_OK
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 4096 4096 NT_STATUS_OK
ReadX 12331 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12331 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12331 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12332 NT_STATUS_OK
ReadX 12332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12333 NT_STATUS_OK
WriteX 12333 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12333 258 NT_STATUS_OK
WriteX 12333 0 53 53 NT_STATUS_OK
Close 12333 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12334 NT_STATUS_OK
Close 12334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12332 4096 4096 4096 NT_STATUS_OK
ReadX 12332 8192 4096 4096 NT_STATUS_OK
ReadX 12332 12288 4096 4096 NT_STATUS_OK
WriteX 12336 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12336 258 NT_STATUS_OK
WriteX 12336 0 12006 12006 NT_STATUS_OK
Close 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12337 NT_STATUS_OK
ReadX 12337 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12337 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12337 1004 NT_STATUS_OK
WriteX 12337 0 4096 4096 NT_STATUS_OK
Close 12337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12338 NT_STATUS_OK
Close 12338 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12340 NT_STATUS_OK
ReadX 12340 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12341 NT_STATUS_OK
Close 12341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12340 4096 4096 4096 NT_STATUS_OK
ReadX 12340 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12343 NT_STATUS_OK
WriteX 12343 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12343 258 NT_STATUS_OK
WriteX 12343 0 11991 11991 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12344 NT_STATUS_OK
ReadX 12344 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12344 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12344 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12345 NT_STATUS_OK
Close 12345 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12347 NT_STATUS_OK
ReadX 12347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12348 NT_STATUS_OK
WriteX 12331 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 12348 1004 NT_STATUS_OK
Close 12348 NT_STATUS_OK
WriteX 12344 0 4096 4096 NT_STATUS_OK
Close 12344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12351 NT_STATUS_OK
ReadX 12351 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12352 NT_STATUS_OK
Close 12352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12351 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12351 1004 NT_STATUS_OK
ReadX 12351 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12351 1004 NT_STATUS_OK
WriteX 12351 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12351 1004 NT_STATUS_OK
Close 12327 NT_STATUS_OK
WriteX 12351 0 12288 12288 NT_STATUS_OK
Close 12347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12354 NT_STATUS_OK
Close 12354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12331 NT_STATUS_OK
Close 12351 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 61440 61440 NT_STATUS_OK
ReadX 12358 61440 4096 4096 NT_STATUS_OK
ReadX 12358 65536 61440 61440 NT_STATUS_OK
ReadX 12358 126976 4096 4096 NT_STATUS_OK
ReadX 12358 131072 61440 61440 NT_STATUS_OK
ReadX 12358 192512 4096 4096 NT_STATUS_OK
ReadX 12358 196608 61440 61440 NT_STATUS_OK
ReadX 12358 258048 4096 4096 NT_STATUS_OK
ReadX 12358 262144 61440 61440 NT_STATUS_OK
ReadX 12358 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12359 NT_STATUS_OK
ReadX 12359 0 61440 61440 NT_STATUS_OK
ReadX 12359 61440 4096 4096 NT_STATUS_OK
ReadX 12359 65536 61440 61440 NT_STATUS_OK
ReadX 12359 126976 4096 4096 NT_STATUS_OK
ReadX 12359 131072 61440 61440 NT_STATUS_OK
ReadX 12359 192512 4096 4096 NT_STATUS_OK
ReadX 12359 196608 61440 61440 NT_STATUS_OK
ReadX 12359 258048 4096 4096 NT_STATUS_OK
ReadX 12359 262144 61440 61440 NT_STATUS_OK
ReadX 12359 323584 4096 4096 NT_STATUS_OK
ReadX 12359 327680 61440 61440 NT_STATUS_OK
ReadX 12359 389120 4096 4096 NT_STATUS_OK
ReadX 12359 393216 61440 61440 NT_STATUS_OK
ReadX 12359 454656 4096 4096 NT_STATUS_OK
ReadX 12359 458752 61440 61440 NT_STATUS_OK
ReadX 12359 520192 4096 4096 NT_STATUS_OK
ReadX 12359 524288 61440 61440 NT_STATUS_OK
ReadX 12359 585728 4096 4096 NT_STATUS_OK
ReadX 12359 589824 61440 61440 NT_STATUS_OK
ReadX 12359 651264 4096 4096 NT_STATUS_OK
ReadX 12359 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 61440 61440 NT_STATUS_OK
ReadX 12360 61440 4096 4096 NT_STATUS_OK
ReadX 12360 65536 61440 61440 NT_STATUS_OK
ReadX 12360 126976 4096 4096 NT_STATUS_OK
ReadX 12360 131072 61440 61440 NT_STATUS_OK
ReadX 12360 192512 4096 4096 NT_STATUS_OK
ReadX 12360 196608 61440 61440 NT_STATUS_OK
ReadX 12360 258048 4096 4096 NT_STATUS_OK
ReadX 12360 262144 61440 61440 NT_STATUS_OK
ReadX 12360 323584 4096 4096 NT_STATUS_OK
ReadX 12360 327680 61440 61440 NT_STATUS_OK
ReadX 12360 389120 4096 4096 NT_STATUS_OK
ReadX 12360 393216 61440 61440 NT_STATUS_OK
ReadX 12360 454656 4096 4096 NT_STATUS_OK
ReadX 12360 458752 61440 61440 NT_STATUS_OK
ReadX 12360 520192 4096 4096 NT_STATUS_OK
ReadX 12360 524288 61440 61440 NT_STATUS_OK
ReadX 12360 585728 4096 4096 NT_STATUS_OK
ReadX 12360 589824 61440 61440 NT_STATUS_OK
ReadX 12360 651264 4096 4096 NT_STATUS_OK
ReadX 12360 655360 61440 61440 NT_STATUS_OK
ReadX 12360 716800 4096 4096 NT_STATUS_OK
ReadX 12360 720896 61440 61440 NT_STATUS_OK
ReadX 12360 782336 4096 4096 NT_STATUS_OK
ReadX 12360 786432 61440 61440 NT_STATUS_OK
ReadX 12360 847872 4096 4096 NT_STATUS_OK
ReadX 12360 851968 61440 61440 NT_STATUS_OK
ReadX 12360 913408 4096 4096 NT_STATUS_OK
ReadX 12360 917504 61440 61440 NT_STATUS_OK
ReadX 12360 978944 4096 4096 NT_STATUS_OK
ReadX 12360 983040 61440 61440 NT_STATUS_OK
ReadX 12360 1044480 4096 4096 NT_STATUS_OK
ReadX 12360 1048576 61440 61440 NT_STATUS_OK
ReadX 12360 1110016 4096 4096 NT_STATUS_OK
ReadX 12360 1114112 61440 61440 NT_STATUS_OK
ReadX 12360 1175552 4096 4096 NT_STATUS_OK
ReadX 12360 1179648 61440 61440 NT_STATUS_OK
ReadX 12360 1241088 4096 4096 NT_STATUS_OK
ReadX 12360 1245184 61440 61440 NT_STATUS_OK
ReadX 12360 1306624 4096 4096 NT_STATUS_OK
ReadX 12360 1310720 61440 61440 NT_STATUS_OK
ReadX 12360 1372160 4096 4096 NT_STATUS_OK
ReadX 12360 1376256 61440 61440 NT_STATUS_OK
ReadX 12360 1437696 4096 4096 NT_STATUS_OK
ReadX 12360 1441792 61440 61440 NT_STATUS_OK
ReadX 12360 1503232 4096 4096 NT_STATUS_OK
ReadX 12360 1507328 61440 61440 NT_STATUS_OK
ReadX 12360 1568768 4096 4096 NT_STATUS_OK
ReadX 12360 1572864 61440 61440 NT_STATUS_OK
ReadX 12360 1634304 4096 4096 NT_STATUS_OK
ReadX 12360 1638400 61440 61440 NT_STATUS_OK
ReadX 12360 1699840 4096 4096 NT_STATUS_OK
ReadX 12360 1703936 61440 61440 NT_STATUS_OK
ReadX 12360 1765376 4096 4096 NT_STATUS_OK
ReadX 12360 1769472 61440 61440 NT_STATUS_OK
ReadX 12360 1830912 4096 4096 NT_STATUS_OK
ReadX 12360 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12361 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12366 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12367 NT_STATUS_OK
QUERY_FILE_INFORMATION 12367 1004 NT_STATUS_OK
WriteX 12367 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12367 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12368 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12369 NT_STATUS_OK
WriteX 12369 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12369 258 NT_STATUS_OK
WriteX 12369 0 491 491 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12367 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12373 NT_STATUS_OK
WriteX 12373 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12373 258 NT_STATUS_OK
WriteX 12373 0 543 543 NT_STATUS_OK
Close 12373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12374 NT_STATUS_OK
ReadX 12374 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Close 12359 NT_STATUS_OK
Close 12360 NT_STATUS_OK
Close 12374 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Close 12364 NT_STATUS_OK
Close 12365 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12380 NT_STATUS_OK
ReadX 12380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12381 NT_STATUS_OK
ReadX 12381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12382 NT_STATUS_OK
ReadX 12382 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12386 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12387 NT_STATUS_OK
QUERY_FILE_INFORMATION 12387 1004 NT_STATUS_OK
WriteX 12387 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12387 258 NT_STATUS_OK
WriteX 12387 0 2048 2048 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12388 NT_STATUS_OK
ReadX 12388 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12388 0 4096 4096 NT_STATUS_OK
Flush 12388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12388 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12392 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12393 NT_STATUS_OK
WriteX 12393 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12393 258 NT_STATUS_OK
WriteX 12393 0 2048 2048 NT_STATUS_OK
Close 12393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12398 NT_STATUS_OK
Close 12398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12399 NT_STATUS_OK
WriteX 12399 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12399 258 NT_STATUS_OK
WriteX 12399 0 2048 2048 NT_STATUS_OK
Close 12399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12400 NT_STATUS_OK
ReadX 12400 0 2048 2048 NT_STATUS_OK
ReadX 12378 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12382 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12394 0 4096 4096 NT_STATUS_OK
WriteX 12378 0 8192 8192 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
WriteX 12380 0 4096 4096 NT_STATUS_OK
ReadX 12394 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12403 NT_STATUS_OK
ReadX 12403 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12404 NT_STATUS_OK
QUERY_FILE_INFORMATION 12404 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12403 NT_STATUS_OK
Close 12379 NT_STATUS_OK
Close 12380 NT_STATUS_OK
Close 12381 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Close 12378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12406 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12411 NT_STATUS_OK
ReadX 12411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12413 NT_STATUS_OK
ReadX 12413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12414 NT_STATUS_OK
ReadX 12414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12424 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 1004 NT_STATUS_OK
WriteX 12424 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12424 258 NT_STATUS_OK
WriteX 12424 0 2048 2048 NT_STATUS_OK
Close 12424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12425 NT_STATUS_OK
ReadX 12425 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12427 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12432 NT_STATUS_OK
QUERY_FILE_INFORMATION 12432 1004 NT_STATUS_OK
WriteX 12432 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12432 258 NT_STATUS_OK
WriteX 12432 0 2048 2048 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12425 0 4096 4096 NT_STATUS_OK
Flush 12425 NT_STATUS_OK
WriteX 12433 0 4096 4096 NT_STATUS_OK
Flush 12433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12425 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12433 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12427 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12435 NT_STATUS_OK
WriteX 12435 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12435 258 NT_STATUS_OK
WriteX 12435 0 4096 4096 NT_STATUS_OK
Close 12435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12436 NT_STATUS_OK
ReadX 12436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12437 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12438 NT_STATUS_OK
WriteX 12438 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12438 258 NT_STATUS_OK
WriteX 12438 0 4096 4096 NT_STATUS_OK
Close 12438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12439 NT_STATUS_OK
ReadX 12439 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12439 0 4096 4096 NT_STATUS_OK
Close 12436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12419 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Close 12416 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12414 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Close 12408 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Close 12412 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12442 NT_STATUS_OK
Close 12442 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12444 NT_STATUS_OK
ReadX 12444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12445 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12446 NT_STATUS_OK
WriteX 12446 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12446 258 NT_STATUS_OK
WriteX 12446 0 2048 2048 NT_STATUS_OK
Close 12446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12448 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12452 NT_STATUS_OK
ReadX 12452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12455 NT_STATUS_OK
ReadX 12455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12460 NT_STATUS_OK
ReadX 12460 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12461 NT_STATUS_OK
QUERY_FILE_INFORMATION 12461 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12461 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12444 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12454 NT_STATUS_OK
Close 12455 NT_STATUS_OK
Close 12456 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12460 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12452 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12463 NT_STATUS_OK
QUERY_FILE_INFORMATION 12463 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12470 NT_STATUS_OK
ReadX 12470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12471 NT_STATUS_OK
ReadX 12471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12473 NT_STATUS_OK
ReadX 12473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12478 NT_STATUS_OK
ReadX 12478 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12483 NT_STATUS_OK
QUERY_FILE_INFORMATION 12483 1004 NT_STATUS_OK
WriteX 12483 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12483 258 NT_STATUS_OK
WriteX 12483 0 2048 2048 NT_STATUS_OK
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12486 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12488 NT_STATUS_OK
ReadX 12488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12495 NT_STATUS_OK
QUERY_FILE_INFORMATION 12495 1004 NT_STATUS_OK
WriteX 12495 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12495 258 NT_STATUS_OK
WriteX 12495 0 2048 2048 NT_STATUS_OK
Close 12495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12496 NT_STATUS_OK
ReadX 12496 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12502 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12503 NT_STATUS_OK
QUERY_FILE_INFORMATION 12503 1004 NT_STATUS_OK
WriteX 12503 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12503 258 NT_STATUS_OK
WriteX 12503 0 2048 2048 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12504 NT_STATUS_OK
ReadX 12504 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
WriteX 12496 0 4096 4096 NT_STATUS_OK
Flush 12496 NT_STATUS_OK
WriteX 12504 0 4096 4096 NT_STATUS_OK
Flush 12504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12496 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12504 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12486 4096 16384 16384 NT_STATUS_OK
ReadX 12466 4096 16384 16384 NT_STATUS_OK
ReadX 12498 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12505 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 2048 2048 NT_STATUS_OK
WriteX 12506 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12507 NT_STATUS_OK
QUERY_FILE_INFORMATION 12507 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Close 12490 NT_STATUS_OK
Close 12478 NT_STATUS_OK
Close 12470 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Close 12488 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12498 NT_STATUS_OK
Close 12472 NT_STATUS_OK
Close 12475 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Close 12473 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Close 12469 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12509 NT_STATUS_OK
QUERY_FILE_INFORMATION 12509 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12511 NT_STATUS_OK
QUERY_FILE_INFORMATION 12511 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12518 NT_STATUS_OK
ReadX 12518 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12514 4096 16384 16384 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12515 0 4096 4096 NT_STATUS_OK
WriteX 12516 0 4096 4096 NT_STATUS_OK
WriteX 12517 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12519 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12525 NT_STATUS_OK
ReadX 12525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12529 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12530 NT_STATUS_OK
ReadX 12530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12533 NT_STATUS_OK
ReadX 12533 0 8192 8192 NT_STATUS_OK
ReadX 12520 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12534 0 4096 4096 NT_STATUS_OK
ReadX 12534 4096 4096 4096 NT_STATUS_OK
ReadX 12534 8192 4096 4096 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
WriteX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12535 0 4096 4096 NT_STATUS_OK
ReadX 12535 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12515 0 4096 4096 NT_STATUS_OK
WriteX 12516 0 4096 4096 NT_STATUS_OK
WriteX 12517 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12539 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12540 NT_STATUS_OK
QUERY_FILE_INFORMATION 12540 1004 NT_STATUS_OK
WriteX 12540 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12540 258 NT_STATUS_OK
WriteX 12540 0 2048 2048 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12542 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
ReadX 12543 4096 4096 4096 NT_STATUS_OK
WriteX 12543 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
ReadX 12545 4096 4096 4096 NT_STATUS_OK
WriteX 12545 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12546 NT_STATUS_OK
QUERY_FILE_INFORMATION 12546 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12533 NT_STATUS_OK
Close 12518 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Close 12529 NT_STATUS_OK
Close 12530 NT_STATUS_OK
Close 12532 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12548 0 4096 4096 NT_STATUS_OK
ReadX 12548 4096 4096 4096 NT_STATUS_OK
ReadX 12548 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12549 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12553 NT_STATUS_OK
ReadX 12553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 0 4096 4096 NT_STATUS_OK
ReadX 12549 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12565 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12566 NT_STATUS_OK
QUERY_FILE_INFORMATION 12566 1004 NT_STATUS_OK
WriteX 12566 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12566 258 NT_STATUS_OK
WriteX 12566 0 2048 2048 NT_STATUS_OK
Close 12566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12567 NT_STATUS_OK
ReadX 12567 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12567 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12571 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12572 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 1004 NT_STATUS_OK
WriteX 12572 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 258 NT_STATUS_OK
WriteX 12572 0 2048 2048 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12573 NT_STATUS_OK
ReadX 12573 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12573 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12556 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12574 NT_STATUS_OK
QUERY_FILE_INFORMATION 12574 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12561 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12553 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12576 NT_STATUS_OK
QUERY_FILE_INFORMATION 12576 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12578 NT_STATUS_OK
ReadX 12578 61440 4096 4096 NT_STATUS_OK
ReadX 12578 126976 4096 4096 NT_STATUS_OK
WriteX 12578 0 65536 65536 NT_STATUS_OK
WriteX 12578 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 61440 4096 4096 NT_STATUS_OK
ReadX 12579 126976 4096 4096 NT_STATUS_OK
ReadX 12579 192512 4096 4096 NT_STATUS_OK
ReadX 12579 258048 4096 4096 NT_STATUS_OK
WriteX 12579 0 65536 65536 NT_STATUS_OK
WriteX 12579 65536 65536 65536 NT_STATUS_OK
WriteX 12579 131072 65536 65536 NT_STATUS_OK
WriteX 12579 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 61440 4096 4096 NT_STATUS_OK
ReadX 12580 126976 4096 4096 NT_STATUS_OK
ReadX 12580 192512 4096 4096 NT_STATUS_OK
ReadX 12580 258048 4096 4096 NT_STATUS_OK
ReadX 12580 323584 4096 4096 NT_STATUS_OK
ReadX 12580 389120 4096 4096 NT_STATUS_OK
ReadX 12580 454656 4096 4096 NT_STATUS_OK
ReadX 12580 520192 4096 4096 NT_STATUS_OK
WriteX 12580 0 65536 65536 NT_STATUS_OK
WriteX 12580 65536 65536 65536 NT_STATUS_OK
WriteX 12580 131072 65536 65536 NT_STATUS_OK
WriteX 12580 196608 65536 65536 NT_STATUS_OK
WriteX 12580 262144 65536 65536 NT_STATUS_OK
WriteX 12580 327680 65536 65536 NT_STATUS_OK
WriteX 12580 393216 65536 65536 NT_STATUS_OK
WriteX 12580 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12581 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12581 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12581 8192 4096 4096 NT_STATUS_OK
ReadX 12581 12288 4096 4096 NT_STATUS_OK
ReadX 12581 16384 4096 4096 NT_STATUS_OK
ReadX 12581 20480 4096 4096 NT_STATUS_OK
ReadX 12581 24576 4096 4096 NT_STATUS_OK
ReadX 12581 28672 4096 4096 NT_STATUS_OK
ReadX 12581 32768 4096 4096 NT_STATUS_OK
ReadX 12581 36864 4096 4096 NT_STATUS_OK
ReadX 12581 40960 4096 4096 NT_STATUS_OK
ReadX 12581 45056 4096 4096 NT_STATUS_OK
ReadX 12581 49152 4096 4096 NT_STATUS_OK
ReadX 12581 53248 4096 4096 NT_STATUS_OK
ReadX 12581 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12581 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12582 NT_STATUS_OK
Close 12582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12584 NT_STATUS_OK
WriteX 12584 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12584 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12584 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
WriteX 12584 0 57088 57088 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
Flush 12584 NT_STATUS_OK
Close 12581 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12585 NT_STATUS_OK
SET_FILE_INFORMATION 12585 1004 NT_STATUS_OK
Close 12585 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
WriteX 12584 0 4096 4096 NT_STATUS_OK
Close 12584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12586 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12588 NT_STATUS_OK
ReadX 12588 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12588 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12589 NT_STATUS_OK
WriteX 12589 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12589 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12589 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12589 1004 NT_STATUS_OK
WriteX 12589 0 51456 51456 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Flush 12589 NT_STATUS_OK
SET_FILE_INFORMATION 12589 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12589 1004 NT_STATUS_OK
WriteX 12589 0 4096 4096 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12593 NT_STATUS_OK
ReadX 12593 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12593 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12598 NT_STATUS_OK
WriteX 12598 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12598 258 NT_STATUS_OK
WriteX 12598 0 53077 53077 NT_STATUS_OK
Close 12598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12599 NT_STATUS_OK
WriteX 12599 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12599 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12599 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12599 1004 NT_STATUS_OK
WriteX 12599 0 65536 65536 NT_STATUS_OK
WriteX 12599 65536 1856 1856 NT_STATUS_OK
WriteX 12599 0 4096 4096 NT_STATUS_OK
Flush 12599 NT_STATUS_OK
SET_FILE_INFORMATION 12599 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12599 1004 NT_STATUS_OK
WriteX 12599 0 4096 4096 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12601 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12603 NT_STATUS_OK
ReadX 12603 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12605 NT_STATUS_OK
Close 12605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12608 NT_STATUS_OK
WriteX 12608 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12608 258 NT_STATUS_OK
WriteX 12608 0 7983 7983 NT_STATUS_OK
Close 12608 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12610 NT_STATUS_OK
Close 12610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12613 NT_STATUS_OK
WriteX 12613 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 258 NT_STATUS_OK
WriteX 12613 0 65536 65536 NT_STATUS_OK
WriteX 12613 65536 65536 65536 NT_STATUS_OK
WriteX 12613 131072 65536 65536 NT_STATUS_OK
WriteX 12613 196608 65536 65536 NT_STATUS_OK
WriteX 12613 262144 65536 65536 NT_STATUS_OK
WriteX 12613 327680 65536 65536 NT_STATUS_OK
WriteX 12613 393216 65536 65536 NT_STATUS_OK
WriteX 12613 458752 46731 46731 NT_STATUS_OK
Close 12613 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12614 NT_STATUS_OK
WriteX 12614 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12614 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12603 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12614 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
WriteX 12614 0 65536 65536 NT_STATUS_OK
WriteX 12614 65536 22848 22848 NT_STATUS_OK
WriteX 12614 0 4096 4096 NT_STATUS_OK
Flush 12614 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12614 1004 NT_STATUS_OK
WriteX 12614 0 4096 4096 NT_STATUS_OK
Close 12614 NT_STATUS_OK
Close 12603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12616 NT_STATUS_OK
Close 12616 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12618 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12619 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12619 1004 NT_STATUS_OK
ReadX 12619 8192 4096 4096 NT_STATUS_OK
ReadX 12619 12288 4096 4096 NT_STATUS_OK
ReadX 12619 16384 4096 4096 NT_STATUS_OK
ReadX 12619 20480 4096 4096 NT_STATUS_OK
ReadX 12619 24576 4096 4096 NT_STATUS_OK
ReadX 12619 28672 4096 4096 NT_STATUS_OK
ReadX 12619 32768 4096 4096 NT_STATUS_OK
ReadX 12619 36864 4096 4096 NT_STATUS_OK
ReadX 12619 40960 4096 4096 NT_STATUS_OK
ReadX 12619 45056 4096 4096 NT_STATUS_OK
ReadX 12619 49152 4096 4096 NT_STATUS_OK
ReadX 12619 53248 4096 4096 NT_STATUS_OK
ReadX 12619 57344 4096 4096 NT_STATUS_OK
ReadX 12619 61440 4096 4096 NT_STATUS_OK
ReadX 12619 65536 4096 4096 NT_STATUS_OK
ReadX 12619 69632 4096 4096 NT_STATUS_OK
ReadX 12619 73728 4096 4096 NT_STATUS_OK
ReadX 12619 77824 4096 4096 NT_STATUS_OK
ReadX 12619 81920 4096 4096 NT_STATUS_OK
ReadX 12619 86016 4096 4096 NT_STATUS_OK
ReadX 12619 90112 4096 4096 NT_STATUS_OK
ReadX 12619 94208 4096 4096 NT_STATUS_OK
ReadX 12619 98304 4096 4096 NT_STATUS_OK
ReadX 12619 102400 4096 4096 NT_STATUS_OK
ReadX 12619 106496 4096 4096 NT_STATUS_OK
ReadX 12619 110592 4096 4096 NT_STATUS_OK
ReadX 12619 114688 4096 4096 NT_STATUS_OK
ReadX 12619 118784 4096 4096 NT_STATUS_OK
ReadX 12619 122880 4096 4096 NT_STATUS_OK
ReadX 12619 126976 4096 4096 NT_STATUS_OK
ReadX 12619 131072 4096 4096 NT_STATUS_OK
ReadX 12619 135168 4096 4096 NT_STATUS_OK
ReadX 12619 139264 4096 4096 NT_STATUS_OK
ReadX 12619 143360 4096 4096 NT_STATUS_OK
ReadX 12619 147456 4096 4096 NT_STATUS_OK
ReadX 12619 151552 4096 4096 NT_STATUS_OK
ReadX 12619 155648 4096 4096 NT_STATUS_OK
ReadX 12619 159744 4096 4096 NT_STATUS_OK
ReadX 12619 163840 4096 4096 NT_STATUS_OK
ReadX 12619 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12619 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12620 NT_STATUS_OK
Close 12620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12622 NT_STATUS_OK
WriteX 12622 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12622 258 NT_STATUS_OK
Close 12619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12623 NT_STATUS_OK
SET_FILE_INFORMATION 12623 1004 NT_STATUS_OK
Close 12623 NT_STATUS_OK
WriteX 12622 0 42388 42388 NT_STATUS_OK
Close 12622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12624 NT_STATUS_OK
Close 12624 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12626 NT_STATUS_OK
ReadX 12626 0 4096 4096 NT_STATUS_OK
ReadX 12626 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12627 NT_STATUS_OK
WriteX 12627 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 258 NT_STATUS_OK
SET_FILE_INFORMATION 12627 1004 NT_STATUS_OK
WriteX 12627 0 42652 42652 NT_STATUS_OK
Close 12627 NT_STATUS_OK
Close 12626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12629 NT_STATUS_OK
Close 12629 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12631 NT_STATUS_OK
ReadX 12631 0 4096 4096 NT_STATUS_OK
ReadX 12631 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12633 NT_STATUS_OK
Close 12633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12636 NT_STATUS_OK
WriteX 12636 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12636 258 NT_STATUS_OK
WriteX 12636 0 65536 65536 NT_STATUS_OK
WriteX 12636 65536 49 49 NT_STATUS_OK
Close 12636 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 61440 61440 NT_STATUS_OK
ReadX 12637 61440 4096 4096 NT_STATUS_OK
ReadX 12637 65536 61440 61440 NT_STATUS_OK
ReadX 12637 126976 4096 4096 NT_STATUS_OK
ReadX 12637 131072 61440 61440 NT_STATUS_OK
ReadX 12637 192512 4096 4096 NT_STATUS_OK
ReadX 12637 196608 61440 61440 NT_STATUS_OK
ReadX 12637 258048 4096 4096 NT_STATUS_OK
ReadX 12637 262144 61440 61440 NT_STATUS_OK
ReadX 12637 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 61440 61440 NT_STATUS_OK
ReadX 12638 61440 4096 4096 NT_STATUS_OK
ReadX 12638 65536 61440 61440 NT_STATUS_OK
ReadX 12638 126976 4096 4096 NT_STATUS_OK
ReadX 12638 131072 61440 61440 NT_STATUS_OK
ReadX 12638 192512 4096 4096 NT_STATUS_OK
ReadX 12638 196608 61440 61440 NT_STATUS_OK
ReadX 12638 258048 4096 4096 NT_STATUS_OK
ReadX 12638 262144 61440 61440 NT_STATUS_OK
ReadX 12638 323584 4096 4096 NT_STATUS_OK
ReadX 12638 327680 61440 61440 NT_STATUS_OK
ReadX 12638 389120 4096 4096 NT_STATUS_OK
ReadX 12638 393216 61440 61440 NT_STATUS_OK
ReadX 12638 454656 4096 4096 NT_STATUS_OK
ReadX 12638 458752 61440 61440 NT_STATUS_OK
ReadX 12638 520192 4096 4096 NT_STATUS_OK
ReadX 12638 524288 61440 61440 NT_STATUS_OK
ReadX 12638 585728 4096 4096 NT_STATUS_OK
ReadX 12638 589824 61440 61440 NT_STATUS_OK
ReadX 12638 651264 4096 4096 NT_STATUS_OK
ReadX 12638 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12639 NT_STATUS_OK
ReadX 12639 0 61440 61440 NT_STATUS_OK
ReadX 12639 61440 4096 4096 NT_STATUS_OK
ReadX 12639 65536 61440 61440 NT_STATUS_OK
ReadX 12639 126976 4096 4096 NT_STATUS_OK
ReadX 12639 131072 61440 61440 NT_STATUS_OK
ReadX 12639 192512 4096 4096 NT_STATUS_OK
ReadX 12639 196608 61440 61440 NT_STATUS_OK
ReadX 12639 258048 4096 4096 NT_STATUS_OK
ReadX 12639 262144 61440 61440 NT_STATUS_OK
ReadX 12639 323584 4096 4096 NT_STATUS_OK
ReadX 12639 327680 61440 61440 NT_STATUS_OK
ReadX 12639 389120 4096 4096 NT_STATUS_OK
ReadX 12639 393216 61440 61440 NT_STATUS_OK
ReadX 12639 454656 4096 4096 NT_STATUS_OK
ReadX 12639 458752 61440 61440 NT_STATUS_OK
ReadX 12639 520192 4096 4096 NT_STATUS_OK
ReadX 12639 524288 61440 61440 NT_STATUS_OK
ReadX 12639 585728 4096 4096 NT_STATUS_OK
ReadX 12639 589824 61440 61440 NT_STATUS_OK
ReadX 12639 651264 4096 4096 NT_STATUS_OK
ReadX 12639 655360 61440 61440 NT_STATUS_OK
ReadX 12639 716800 4096 4096 NT_STATUS_OK
ReadX 12639 720896 61440 61440 NT_STATUS_OK
ReadX 12639 782336 4096 4096 NT_STATUS_OK
ReadX 12639 786432 61440 61440 NT_STATUS_OK
ReadX 12639 847872 4096 4096 NT_STATUS_OK
ReadX 12639 851968 61440 61440 NT_STATUS_OK
ReadX 12639 913408 4096 4096 NT_STATUS_OK
ReadX 12639 917504 61440 61440 NT_STATUS_OK
ReadX 12639 978944 4096 4096 NT_STATUS_OK
ReadX 12639 983040 61440 61440 NT_STATUS_OK
ReadX 12639 1044480 4096 4096 NT_STATUS_OK
ReadX 12639 1048576 61440 61440 NT_STATUS_OK
ReadX 12639 1110016 4096 4096 NT_STATUS_OK
ReadX 12639 1114112 61440 61440 NT_STATUS_OK
ReadX 12639 1175552 4096 4096 NT_STATUS_OK
ReadX 12639 1179648 61440 61440 NT_STATUS_OK
ReadX 12639 1241088 4096 4096 NT_STATUS_OK
ReadX 12639 1245184 61440 61440 NT_STATUS_OK
ReadX 12639 1306624 4096 4096 NT_STATUS_OK
ReadX 12639 1310720 61440 61440 NT_STATUS_OK
ReadX 12639 1372160 4096 4096 NT_STATUS_OK
ReadX 12639 1376256 61440 61440 NT_STATUS_OK
ReadX 12639 1437696 4096 4096 NT_STATUS_OK
ReadX 12639 1441792 61440 61440 NT_STATUS_OK
ReadX 12639 1503232 4096 4096 NT_STATUS_OK
ReadX 12639 1507328 61440 61440 NT_STATUS_OK
ReadX 12639 1568768 4096 4096 NT_STATUS_OK
ReadX 12639 1572864 61440 61440 NT_STATUS_OK
ReadX 12639 1634304 4096 4096 NT_STATUS_OK
ReadX 12639 1638400 61440 61440 NT_STATUS_OK
ReadX 12639 1699840 4096 4096 NT_STATUS_OK
ReadX 12639 1703936 61440 61440 NT_STATUS_OK
ReadX 12639 1765376 4096 4096 NT_STATUS_OK
ReadX 12639 1769472 61440 61440 NT_STATUS_OK
ReadX 12639 1830912 4096 4096 NT_STATUS_OK
ReadX 12639 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12641 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1005 NT_STATUS_OK
ReadX 12641 2156 24 24 NT_STATUS_OK
ReadX 12641 2139 276 276 NT_STATUS_OK
ReadX 12641 2136 14 14 NT_STATUS_OK
ReadX 12641 2136 7 7 NT_STATUS_OK
ReadX 12641 2138 12 12 NT_STATUS_OK
ReadX 12641 2137 8 8 NT_STATUS_OK
ReadX 12641 2135 15 15 NT_STATUS_OK
ReadX 12641 0 16 16 NT_STATUS_OK
ReadX 12641 16 2048 2048 NT_STATUS_OK
ReadX 12641 2064 2048 2048 NT_STATUS_OK
ReadX 12641 257 2048 2048 NT_STATUS_OK
ReadX 12641 385 2048 2048 NT_STATUS_OK
ReadX 12641 513 2048 2048 NT_STATUS_OK
ReadX 12641 641 2048 2048 NT_STATUS_OK
ReadX 12641 769 2048 2048 NT_STATUS_OK
ReadX 12641 897 2048 2048 NT_STATUS_OK
ReadX 12641 1025 2048 2048 NT_STATUS_OK
ReadX 12641 1153 2048 2048 NT_STATUS_OK
ReadX 12641 1281 2048 2048 NT_STATUS_OK
ReadX 12641 1409 2048 2048 NT_STATUS_OK
ReadX 12641 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12643 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12637 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Close 12639 NT_STATUS_OK
Close 12631 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12646 NT_STATUS_OK
WriteX 12646 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12646 258 NT_STATUS_OK
WriteX 12646 0 10575 10575 NT_STATUS_OK
Flush 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12647 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 0 4096 4096 NT_STATUS_OK
Close 12641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12651 NT_STATUS_OK
LockX 12651 2147483538 1 NT_STATUS_OK
UnlockX 12651 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1005 NT_STATUS_OK
ReadX 12651 0 512 512 NT_STATUS_OK
ReadX 12651 512 512 512 NT_STATUS_OK
ReadX 12651 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1004 NT_STATUS_OK
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12652 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 1005 NT_STATUS_OK
ReadX 12652 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12653 NT_STATUS_OK
LockX 12653 2147483538 1 NT_STATUS_OK
UnlockX 12653 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12653 1005 NT_STATUS_OK
ReadX 12653 0 512 512 NT_STATUS_OK
ReadX 12653 512 512 512 NT_STATUS_OK
ReadX 12653 1024 512 512 NT_STATUS_OK
ReadX 12653 288 20 20 NT_STATUS_OK
ReadX 12653 308 2084 2084 NT_STATUS_OK
ReadX 12653 388 2084 2084 NT_STATUS_OK
ReadX 12653 388 2084 2084 NT_STATUS_OK
ReadX 12640 2157 1386 1386 NT_STATUS_OK
ReadX 12653 2472 399 399 NT_STATUS_OK
ReadX 12653 3072 1536 1536 NT_STATUS_OK
ReadX 12653 544 149 149 NT_STATUS_OK
ReadX 12653 693 485 485 NT_STATUS_OK
Close 12653 NT_STATUS_OK
ReadX 12640 2157 4096 4096 NT_STATUS_OK
ReadX 12640 6253 4096 4096 NT_STATUS_OK
ReadX 12640 10349 4096 4096 NT_STATUS_OK
ReadX 12640 14445 4096 4096 NT_STATUS_OK
ReadX 12640 18541 4096 4096 NT_STATUS_OK
ReadX 12640 22637 256 256 NT_STATUS_OK
ReadX 12640 22893 4096 4096 NT_STATUS_OK
ReadX 12640 26989 4096 4096 NT_STATUS_OK
ReadX 12640 31085 4096 4096 NT_STATUS_OK
ReadX 12640 35181 4096 4096 NT_STATUS_OK
ReadX 12640 39277 4096 4096 NT_STATUS_OK
ReadX 12640 43373 4096 4096 NT_STATUS_OK
ReadX 12640 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12640 2157 1024 1024 NT_STATUS_OK
ReadX 12640 1667 4688 4688 NT_STATUS_OK
ReadX 12640 6355 3516 3516 NT_STATUS_OK
ReadX 12640 9871 16384 16384 NT_STATUS_OK
ReadX 12640 26255 3771 3771 NT_STATUS_OK
ReadX 12640 30026 2048 2048 NT_STATUS_OK
ReadX 12640 32074 1024 1024 NT_STATUS_OK
ReadX 12640 33098 6652 6652 NT_STATUS_OK
ReadX 12640 39750 16384 16384 NT_STATUS_OK
ReadX 12640 56134 10496 10496 NT_STATUS_OK
ReadX 12640 66630 1784 1784 NT_STATUS_OK
ReadX 12640 68414 90 90 NT_STATUS_OK
ReadX 12640 68504 273 273 NT_STATUS_OK
ReadX 12640 68777 1600 1600 NT_STATUS_OK
ReadX 12640 70377 640 640 NT_STATUS_OK
ReadX 12640 71017 1280 1280 NT_STATUS_OK
ReadX 12640 72297 8464 8464 NT_STATUS_OK
ReadX 12640 80761 158 158 NT_STATUS_OK
ReadX 12640 80919 912 912 NT_STATUS_OK
ReadX 12640 81831 1980 1980 NT_STATUS_OK
ReadX 12640 83811 2256 2256 NT_STATUS_OK
ReadX 12640 86067 400 400 NT_STATUS_OK
ReadX 12640 86467 252 252 NT_STATUS_OK
ReadX 12640 86719 42 42 NT_STATUS_OK
ReadX 12640 86761 725 725 NT_STATUS_OK
ReadX 12640 2009 512 512 NT_STATUS_OK
ReadX 12640 3895 9 9 NT_STATUS_OK
ReadX 12640 3781 46 46 NT_STATUS_OK
ReadX 12640 4059 92 92 NT_STATUS_OK
ReadX 12640 3781 92 92 NT_STATUS_OK
ReadX 12640 3986 184 184 NT_STATUS_OK
ReadX 12640 3987 16384 16384 NT_STATUS_OK
ReadX 12640 3902 16384 16384 NT_STATUS_OK
ReadX 12640 3781 10240 10240 NT_STATUS_OK
ReadX 12640 3821 16384 16384 NT_STATUS_OK
ReadX 12640 3891 935 935 NT_STATUS_OK
ReadX 12640 4060 10240 10240 NT_STATUS_OK
ReadX 12640 4059 184 184 NT_STATUS_OK
ReadX 12640 256 184 184 NT_STATUS_OK
ReadX 12640 256 1026 1026 NT_STATUS_OK
ReadX 12640 3901 326 326 NT_STATUS_OK
ReadX 12640 3899 652 652 NT_STATUS_OK
ReadX 12640 256 2 2 NT_STATUS_OK
ReadX 12640 258 4948 4948 NT_STATUS_OK
Close 12640 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12655 NT_STATUS_OK
Close 12655 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12658 NT_STATUS_OK
WriteX 12658 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12658 258 NT_STATUS_OK
WriteX 12658 0 65536 65536 NT_STATUS_OK
WriteX 12658 65536 65536 65536 NT_STATUS_OK
WriteX 12658 131072 65536 65536 NT_STATUS_OK
WriteX 12658 196608 65536 65536 NT_STATUS_OK
WriteX 12658 262144 65536 65536 NT_STATUS_OK
WriteX 12658 327680 65536 65536 NT_STATUS_OK
WriteX 12658 393216 65536 65536 NT_STATUS_OK
WriteX 12658 458752 65536 65536 NT_STATUS_OK
WriteX 12658 524288 65536 65536 NT_STATUS_OK
WriteX 12658 589824 35257 35257 NT_STATUS_OK
Close 12658 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12660 NT_STATUS_OK
Close 12660 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12663 NT_STATUS_OK
WriteX 12663 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12663 258 NT_STATUS_OK
WriteX 12663 0 65536 65536 NT_STATUS_OK
WriteX 12663 65536 65536 65536 NT_STATUS_OK
WriteX 12663 131072 65536 65536 NT_STATUS_OK
WriteX 12663 196608 65536 65536 NT_STATUS_OK
WriteX 12663 262144 65536 65536 NT_STATUS_OK
WriteX 12663 327680 65536 65536 NT_STATUS_OK
WriteX 12663 393216 65536 65536 NT_STATUS_OK
WriteX 12663 458752 65536 65536 NT_STATUS_OK
WriteX 12663 524288 65536 65536 NT_STATUS_OK
WriteX 12663 589824 57598 57598 NT_STATUS_OK
Close 12663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12665 NT_STATUS_OK
WriteX 12665 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12665 258 NT_STATUS_OK
WriteX 12665 0 12543 12543 NT_STATUS_OK
Flush 12665 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12667 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12669 NT_STATUS_OK
ReadX 12669 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12671 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 1005 NT_STATUS_OK
ReadX 12671 1938 24 24 NT_STATUS_OK
ReadX 12671 1920 276 276 NT_STATUS_OK
ReadX 12671 1918 14 14 NT_STATUS_OK
ReadX 12671 1918 7 7 NT_STATUS_OK
ReadX 12671 1919 12 12 NT_STATUS_OK
ReadX 12671 1919 8 8 NT_STATUS_OK
ReadX 12671 1917 15 15 NT_STATUS_OK
ReadX 12671 0 16 16 NT_STATUS_OK
ReadX 12671 16 2048 2048 NT_STATUS_OK
ReadX 12671 2064 2048 2048 NT_STATUS_OK
ReadX 12671 257 2048 2048 NT_STATUS_OK
ReadX 12671 385 2048 2048 NT_STATUS_OK
ReadX 12671 513 2048 2048 NT_STATUS_OK
ReadX 12671 641 2048 2048 NT_STATUS_OK
ReadX 12671 769 2048 2048 NT_STATUS_OK
ReadX 12671 897 2048 2048 NT_STATUS_OK
ReadX 12671 1025 2048 2048 NT_STATUS_OK
ReadX 12671 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12673 NT_STATUS_OK
Close 12673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12676 NT_STATUS_OK
WriteX 12676 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12676 258 NT_STATUS_OK
WriteX 12676 0 11588 11588 NT_STATUS_OK
Flush 12676 NT_STATUS_OK
Close 12676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12677 NT_STATUS_OK
Close 12677 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12679 NT_STATUS_OK
ReadX 12679 0 4096 4096 NT_STATUS_OK
Close 12671 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12681 NT_STATUS_OK
WriteX 12681 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12681 258 NT_STATUS_OK
WriteX 12681 0 11615 11615 NT_STATUS_OK
Flush 12681 NT_STATUS_OK
Close 12681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12683 NT_STATUS_OK
Close 12683 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12687 NT_STATUS_OK
Close 12687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12690 NT_STATUS_OK
WriteX 12690 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12690 258 NT_STATUS_OK
WriteX 12690 0 65536 65536 NT_STATUS_OK
WriteX 12690 65536 16050 16050 NT_STATUS_OK
Close 12690 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12670 1939 64 64 NT_STATUS_OK
ReadX 12670 128 248 248 NT_STATUS_OK
ReadX 12670 128 568 568 NT_STATUS_OK
ReadX 12670 3872 1536 1536 NT_STATUS_OK
ReadX 12670 3456 2560 2560 NT_STATUS_OK
ReadX 12670 3136 512 512 NT_STATUS_OK
ReadX 12670 2880 4096 4096 NT_STATUS_OK
ReadX 12670 3264 3072 3072 NT_STATUS_OK
ReadX 12670 320 4096 4096 NT_STATUS_OK
ReadX 12670 1024 4096 4096 NT_STATUS_OK
ReadX 12670 3616 4096 4096 NT_STATUS_OK
ReadX 12670 1939 64 64 NT_STATUS_OK
ReadX 12670 128 248 248 NT_STATUS_OK
ReadX 12670 128 608 608 NT_STATUS_OK
ReadX 12670 2858 1024 1024 NT_STATUS_OK
ReadX 12670 2810 4096 4096 NT_STATUS_OK
ReadX 12670 2826 4096 4096 NT_STATUS_OK
ReadX 12670 2580 2048 2048 NT_STATUS_OK
ReadX 12670 2800 2560 2560 NT_STATUS_OK
ReadX 12670 2100 4096 4096 NT_STATUS_OK
ReadX 12670 2084 4096 4096 NT_STATUS_OK
ReadX 12670 868 4096 4096 NT_STATUS_OK
ReadX 12670 2324 4096 4096 NT_STATUS_OK
ReadX 12670 884 4096 4096 NT_STATUS_OK
ReadX 12670 2604 1024 1024 NT_STATUS_OK
ReadX 12670 580 4096 4096 NT_STATUS_OK
ReadX 12670 596 4096 4096 NT_STATUS_OK
ReadX 12670 2752 4096 4096 NT_STATUS_OK
ReadX 12670 2842 1024 1024 NT_STATUS_OK
ReadX 12670 660 4096 4096 NT_STATUS_OK
ReadX 12670 2720 4096 4096 NT_STATUS_OK
ReadX 12670 2736 4096 4096 NT_STATUS_OK
ReadX 12670 628 4096 4096 NT_STATUS_OK
ReadX 12670 2704 4096 4096 NT_STATUS_OK
ReadX 12670 1556 4096 4096 NT_STATUS_OK
ReadX 12670 576 4096 4096 NT_STATUS_OK
ReadX 12670 3168 1536 1536 NT_STATUS_OK
ReadX 12670 832 4096 4096 NT_STATUS_OK
ReadX 12670 1088 4096 4096 NT_STATUS_OK
ReadX 12670 1344 4096 4096 NT_STATUS_OK
ReadX 12670 1600 4096 4096 NT_STATUS_OK
ReadX 12670 1856 4096 4096 NT_STATUS_OK
ReadX 12670 2112 4096 4096 NT_STATUS_OK
ReadX 12670 1892 4096 4096 NT_STATUS_OK
ReadX 12670 820 4096 4096 NT_STATUS_OK
ReadX 12670 788 4096 4096 NT_STATUS_OK
ReadX 12670 1604 4096 4096 NT_STATUS_OK
ReadX 12670 3648 4096 4096 NT_STATUS_OK
ReadX 12670 2608 4096 4096 NT_STATUS_OK
ReadX 12670 548 4096 4096 NT_STATUS_OK
ReadX 12670 740 4096 4096 NT_STATUS_OK
ReadX 12670 1344 4096 4096 NT_STATUS_OK
ReadX 12670 3392 4096 4096 NT_STATUS_OK
ReadX 12670 3904 4096 4096 NT_STATUS_OK
ReadX 12670 644 4096 4096 NT_STATUS_OK
ReadX 12670 676 4096 4096 NT_STATUS_OK
ReadX 12670 2688 4096 4096 NT_STATUS_OK
ReadX 12670 320 4096 4096 NT_STATUS_OK
ReadX 12670 900 4096 4096 NT_STATUS_OK
ReadX 12670 1908 4096 4096 NT_STATUS_OK
ReadX 12670 852 4096 4096 NT_STATUS_OK
ReadX 12670 724 4096 4096 NT_STATUS_OK
ReadX 12670 2292 4096 4096 NT_STATUS_OK
ReadX 12670 612 4096 4096 NT_STATUS_OK
ReadX 12670 388 4096 4096 NT_STATUS_OK
ReadX 12670 2368 4096 4096 NT_STATUS_OK
ReadX 12670 2624 4096 4096 NT_STATUS_OK
ReadX 12670 500 4096 4096 NT_STATUS_OK
ReadX 12670 356 4096 4096 NT_STATUS_OK
ReadX 12670 1024 4096 4096 NT_STATUS_OK
ReadX 12670 576 4096 4096 NT_STATUS_OK
ReadX 12670 340 4096 4096 NT_STATUS_OK
ReadX 12670 420 4096 4096 NT_STATUS_OK
ReadX 12670 1600 4096 4096 NT_STATUS_OK
ReadX 12670 404 4096 4096 NT_STATUS_OK
ReadX 12670 1428 4096 4096 NT_STATUS_OK
ReadX 12670 2656 4096 4096 NT_STATUS_OK
ReadX 12670 2624 4096 4096 NT_STATUS_OK
ReadX 12670 452 4096 4096 NT_STATUS_OK
ReadX 12670 692 4096 4096 NT_STATUS_OK
ReadX 12670 564 4096 4096 NT_STATUS_OK
ReadX 12670 372 4096 4096 NT_STATUS_OK
ReadX 12670 468 4096 4096 NT_STATUS_OK
ReadX 12670 484 4096 4096 NT_STATUS_OK
ReadX 12670 1088 4096 4096 NT_STATUS_OK
ReadX 12670 1924 4096 4096 NT_STATUS_OK
ReadX 12670 2768 4096 4096 NT_STATUS_OK
ReadX 12670 832 4096 4096 NT_STATUS_OK
ReadX 12670 836 4096 4096 NT_STATUS_OK
ReadX 12670 1856 4096 4096 NT_STATUS_OK
ReadX 12670 2640 4096 4096 NT_STATUS_OK
ReadX 12670 436 4096 4096 NT_STATUS_OK
ReadX 12670 1828 4096 4096 NT_STATUS_OK
ReadX 12670 804 4096 4096 NT_STATUS_OK
ReadX 12670 1860 4096 4096 NT_STATUS_OK
ReadX 12670 1812 4096 4096 NT_STATUS_OK
ReadX 12670 756 4096 4096 NT_STATUS_OK
ReadX 12670 1636 4096 4096 NT_STATUS_OK
ReadX 12670 772 4096 4096 NT_STATUS_OK
ReadX 12670 2036 4096 4096 NT_STATUS_OK
ReadX 12670 1220 4096 4096 NT_STATUS_OK
ReadX 12670 1652 4096 4096 NT_STATUS_OK
ReadX 12670 2588 4096 4096 NT_STATUS_OK
ReadX 12670 916 4096 4096 NT_STATUS_OK
ReadX 12670 260 4096 4096 NT_STATUS_OK
ReadX 12670 932 4096 4096 NT_STATUS_OK
ReadX 12670 2624 4096 4096 NT_STATUS_OK
ReadX 12670 308 4096 4096 NT_STATUS_OK
ReadX 12670 292 4096 4096 NT_STATUS_OK
ReadX 12670 1140 4096 4096 NT_STATUS_OK
ReadX 12670 276 4096 4096 NT_STATUS_OK
ReadX 12670 2020 4096 4096 NT_STATUS_OK
ReadX 12670 2880 4096 4096 NT_STATUS_OK
ReadX 12670 516 4096 4096 NT_STATUS_OK
ReadX 12670 1844 4096 4096 NT_STATUS_OK
ReadX 12670 1124 4096 4096 NT_STATUS_OK
ReadX 12670 3136 4096 4096 NT_STATUS_OK
ReadX 12670 324 4096 4096 NT_STATUS_OK
ReadX 12670 1156 4096 4096 NT_STATUS_OK
ReadX 12670 1172 4096 4096 NT_STATUS_OK
ReadX 12670 2112 4096 4096 NT_STATUS_OK
ReadX 12670 2368 4096 4096 NT_STATUS_OK
ReadX 12670 964 4096 4096 NT_STATUS_OK
ReadX 12670 980 4096 4096 NT_STATUS_OK
ReadX 12670 1012 4096 4096 NT_STATUS_OK
ReadX 12670 532 4096 4096 NT_STATUS_OK
ReadX 12670 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12670 1620 4096 4096 NT_STATUS_OK
ReadX 12670 1604 4096 4096 NT_STATUS_OK
ReadX 12670 2116 4096 4096 NT_STATUS_OK
ReadX 12670 2132 4096 4096 NT_STATUS_OK
ReadX 12670 2148 4096 4096 NT_STATUS_OK
ReadX 12670 2276 4096 4096 NT_STATUS_OK
ReadX 12670 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12692 NT_STATUS_OK
Close 12692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12695 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 1004 NT_STATUS_OK
Close 12650 NT_STATUS_OK
WriteX 12695 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12695 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 1004 NT_STATUS_OK
Close 12652 NT_STATUS_OK
WriteX 12695 0 65536 65536 NT_STATUS_OK
WriteX 12695 65536 64850 64850 NT_STATUS_OK
Close 12695 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12697 NT_STATUS_OK
WriteX 12697 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12697 258 NT_STATUS_OK
ReadX 12670 2068 4096 4096 NT_STATUS_OK
ReadX 12670 1588 4096 4096 NT_STATUS_OK
ReadX 12670 1572 4096 4096 NT_STATUS_OK
WriteX 12697 0 18630 18630 NT_STATUS_OK
Flush 12697 NT_STATUS_OK
Close 12697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12699 NT_STATUS_OK
Close 12699 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12701 NT_STATUS_OK
ReadX 12701 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12670 612 4096 4096 NT_STATUS_OK
ReadX 12670 564 4096 4096 NT_STATUS_OK
ReadX 12670 1876 4096 4096 NT_STATUS_OK
ReadX 12670 628 4096 4096 NT_STATUS_OK
ReadX 12670 740 4096 4096 NT_STATUS_OK
ReadX 12670 724 4096 4096 NT_STATUS_OK
ReadX 12670 644 4096 4096 NT_STATUS_OK
ReadX 12670 2324 4096 4096 NT_STATUS_OK
ReadX 12670 660 4096 4096 NT_STATUS_OK
ReadX 12670 852 4096 4096 NT_STATUS_OK
ReadX 12670 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12670 2368 4096 4096 NT_STATUS_OK
ReadX 12670 1024 4096 4096 NT_STATUS_OK
ReadX 12670 320 4096 4096 NT_STATUS_OK
ReadX 12670 580 4096 4096 NT_STATUS_OK
ReadX 12670 3136 512 512 NT_STATUS_OK
ReadX 12670 2880 4096 4096 NT_STATUS_OK
Close 12670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 61440 4096 4096 NT_STATUS_OK
ReadX 12702 126976 4096 4096 NT_STATUS_OK
WriteX 12702 0 65536 65536 NT_STATUS_OK
WriteX 12702 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 61440 4096 4096 NT_STATUS_OK
ReadX 12703 126976 4096 4096 NT_STATUS_OK
ReadX 12703 192512 4096 4096 NT_STATUS_OK
ReadX 12703 258048 4096 4096 NT_STATUS_OK
WriteX 12703 0 65536 65536 NT_STATUS_OK
WriteX 12703 65536 65536 65536 NT_STATUS_OK
WriteX 12703 131072 65536 65536 NT_STATUS_OK
WriteX 12703 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 61440 4096 4096 NT_STATUS_OK
ReadX 12704 126976 4096 4096 NT_STATUS_OK
ReadX 12704 192512 4096 4096 NT_STATUS_OK
ReadX 12704 258048 4096 4096 NT_STATUS_OK
ReadX 12704 323584 4096 4096 NT_STATUS_OK
ReadX 12704 389120 4096 4096 NT_STATUS_OK
ReadX 12704 454656 4096 4096 NT_STATUS_OK
ReadX 12704 520192 4096 4096 NT_STATUS_OK
WriteX 12704 0 65536 65536 NT_STATUS_OK
WriteX 12704 65536 65536 65536 NT_STATUS_OK
WriteX 12704 131072 65536 65536 NT_STATUS_OK
WriteX 12704 196608 65536 65536 NT_STATUS_OK
WriteX 12704 262144 65536 65536 NT_STATUS_OK
WriteX 12704 327680 65536 65536 NT_STATUS_OK
WriteX 12704 393216 65536 65536 NT_STATUS_OK
WriteX 12704 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12706 NT_STATUS_OK
Close 12706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12707 NT_STATUS_OK
WriteX 12707 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12707 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12705 0 8192 8192 NT_STATUS_OK
Flush 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12705 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12705 0 8192 8192 NT_STATUS_OK
Flush 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12705 0 8192 8192 NT_STATUS_OK
Flush 12705 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12705 0 8192 8192 NT_STATUS_OK
Flush 12705 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12709 NT_STATUS_OK
Close 12709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12669 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12712 NT_STATUS_OK
WriteX 12712 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12712 258 NT_STATUS_OK
WriteX 12712 0 62591 62591 NT_STATUS_OK
Close 12712 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12714 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12717 NT_STATUS_OK
WriteX 12717 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12717 258 NT_STATUS_OK
WriteX 12717 0 10845 10845 NT_STATUS_OK
Close 12717 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12719 NT_STATUS_OK
Close 12719 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12722 NT_STATUS_OK
WriteX 12722 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 258 NT_STATUS_OK
WriteX 12722 0 30118 30118 NT_STATUS_OK
Close 12722 NT_STATUS_OK
WriteX 12705 0 4096 4096 NT_STATUS_OK
WriteX 12707 0 64 64 NT_STATUS_OK
Close 12707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 61440 61440 NT_STATUS_OK
ReadX 12724 61440 4096 4096 NT_STATUS_OK
ReadX 12724 65536 61440 61440 NT_STATUS_OK
ReadX 12724 126976 4096 4096 NT_STATUS_OK
ReadX 12724 131072 61440 61440 NT_STATUS_OK
ReadX 12724 192512 4096 4096 NT_STATUS_OK
ReadX 12724 196608 61440 61440 NT_STATUS_OK
ReadX 12724 258048 4096 4096 NT_STATUS_OK
ReadX 12724 262144 61440 61440 NT_STATUS_OK
ReadX 12724 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 61440 61440 NT_STATUS_OK
ReadX 12725 61440 4096 4096 NT_STATUS_OK
ReadX 12725 65536 61440 61440 NT_STATUS_OK
ReadX 12725 126976 4096 4096 NT_STATUS_OK
ReadX 12725 131072 61440 61440 NT_STATUS_OK
ReadX 12725 192512 4096 4096 NT_STATUS_OK
ReadX 12725 196608 61440 61440 NT_STATUS_OK
ReadX 12725 258048 4096 4096 NT_STATUS_OK
ReadX 12725 262144 61440 61440 NT_STATUS_OK
ReadX 12725 323584 4096 4096 NT_STATUS_OK
ReadX 12725 327680 61440 61440 NT_STATUS_OK
ReadX 12725 389120 4096 4096 NT_STATUS_OK
ReadX 12725 393216 61440 61440 NT_STATUS_OK
ReadX 12725 454656 4096 4096 NT_STATUS_OK
ReadX 12725 458752 61440 61440 NT_STATUS_OK
ReadX 12725 520192 4096 4096 NT_STATUS_OK
ReadX 12725 524288 61440 61440 NT_STATUS_OK
ReadX 12725 585728 4096 4096 NT_STATUS_OK
ReadX 12725 589824 61440 61440 NT_STATUS_OK
ReadX 12725 651264 4096 4096 NT_STATUS_OK
ReadX 12725 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 61440 61440 NT_STATUS_OK
ReadX 12726 61440 4096 4096 NT_STATUS_OK
ReadX 12726 65536 61440 61440 NT_STATUS_OK
ReadX 12726 126976 4096 4096 NT_STATUS_OK
ReadX 12726 131072 61440 61440 NT_STATUS_OK
ReadX 12726 192512 4096 4096 NT_STATUS_OK
ReadX 12726 196608 61440 61440 NT_STATUS_OK
ReadX 12726 258048 4096 4096 NT_STATUS_OK
ReadX 12726 262144 61440 61440 NT_STATUS_OK
ReadX 12726 323584 4096 4096 NT_STATUS_OK
ReadX 12726 327680 61440 61440 NT_STATUS_OK
ReadX 12726 389120 4096 4096 NT_STATUS_OK
ReadX 12726 393216 61440 61440 NT_STATUS_OK
ReadX 12726 454656 4096 4096 NT_STATUS_OK
ReadX 12726 458752 61440 61440 NT_STATUS_OK
ReadX 12726 520192 4096 4096 NT_STATUS_OK
ReadX 12726 524288 61440 61440 NT_STATUS_OK
ReadX 12726 585728 4096 4096 NT_STATUS_OK
ReadX 12726 589824 61440 61440 NT_STATUS_OK
ReadX 12726 651264 4096 4096 NT_STATUS_OK
ReadX 12726 655360 61440 61440 NT_STATUS_OK
ReadX 12726 716800 4096 4096 NT_STATUS_OK
ReadX 12726 720896 61440 61440 NT_STATUS_OK
ReadX 12726 782336 4096 4096 NT_STATUS_OK
ReadX 12726 786432 61440 61440 NT_STATUS_OK
ReadX 12726 847872 4096 4096 NT_STATUS_OK
ReadX 12726 851968 61440 61440 NT_STATUS_OK
ReadX 12726 913408 4096 4096 NT_STATUS_OK
ReadX 12726 917504 61440 61440 NT_STATUS_OK
ReadX 12726 978944 4096 4096 NT_STATUS_OK
ReadX 12726 983040 61440 61440 NT_STATUS_OK
ReadX 12726 1044480 4096 4096 NT_STATUS_OK
ReadX 12726 1048576 61440 61440 NT_STATUS_OK
ReadX 12726 1110016 4096 4096 NT_STATUS_OK
ReadX 12726 1114112 61440 61440 NT_STATUS_OK
ReadX 12726 1175552 4096 4096 NT_STATUS_OK
ReadX 12726 1179648 61440 61440 NT_STATUS_OK
ReadX 12726 1241088 4096 4096 NT_STATUS_OK
ReadX 12726 1245184 61440 61440 NT_STATUS_OK
ReadX 12726 1306624 4096 4096 NT_STATUS_OK
ReadX 12726 1310720 61440 61440 NT_STATUS_OK
ReadX 12726 1372160 4096 4096 NT_STATUS_OK
ReadX 12726 1376256 61440 61440 NT_STATUS_OK
ReadX 12726 1437696 4096 4096 NT_STATUS_OK
ReadX 12726 1441792 61440 61440 NT_STATUS_OK
ReadX 12726 1503232 4096 4096 NT_STATUS_OK
ReadX 12726 1507328 61440 61440 NT_STATUS_OK
ReadX 12726 1568768 4096 4096 NT_STATUS_OK
ReadX 12726 1572864 61440 61440 NT_STATUS_OK
ReadX 12726 1634304 4096 4096 NT_STATUS_OK
ReadX 12726 1638400 61440 61440 NT_STATUS_OK
ReadX 12726 1699840 4096 4096 NT_STATUS_OK
ReadX 12726 1703936 61440 61440 NT_STATUS_OK
ReadX 12726 1765376 4096 4096 NT_STATUS_OK
ReadX 12726 1769472 61440 61440 NT_STATUS_OK
ReadX 12726 1830912 4096 4096 NT_STATUS_OK
ReadX 12726 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12724 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12731 NT_STATUS_OK
ReadX 12731 0 4096 4096 NT_STATUS_OK
ReadX 12731 4096 4096 4096 NT_STATUS_OK
ReadX 12731 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12732 NT_STATUS_OK
Close 12732 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12734 NT_STATUS_OK
ReadX 12734 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12735 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12736 NT_STATUS_OK
Close 12736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Close 12735 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12739 NT_STATUS_OK
ReadX 12739 0 8192 8192 NT_STATUS_OK
ReadX 12739 8192 8192 8192 NT_STATUS_OK
ReadX 12739 16384 8192 8192 NT_STATUS_OK
ReadX 12739 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12741 NT_STATUS_OK
Close 12741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12739 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12744 NT_STATUS_OK
WriteX 12744 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12744 258 NT_STATUS_OK
WriteX 12744 0 10438 10438 NT_STATUS_OK
Close 12744 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12745 NT_STATUS_OK
Close 12745 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12747 NT_STATUS_OK
Close 12747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12748 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12749 NT_STATUS_OK
Close 12749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12750 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12751 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
ReadX 12753 4096 4096 4096 NT_STATUS_OK
ReadX 12753 8192 4096 4096 NT_STATUS_OK
ReadX 12753 12288 8192 8192 NT_STATUS_OK
ReadX 12753 20480 8192 8192 NT_STATUS_OK
ReadX 12753 28672 8192 8192 NT_STATUS_OK
ReadX 12753 36864 8192 8192 NT_STATUS_OK
ReadX 12753 45056 8192 8192 NT_STATUS_OK
ReadX 12753 53248 8192 8192 NT_STATUS_OK
ReadX 12753 61440 8192 8192 NT_STATUS_OK
ReadX 12753 69632 8192 8192 NT_STATUS_OK
ReadX 12753 77824 8192 8192 NT_STATUS_OK
ReadX 12753 86016 8192 8192 NT_STATUS_OK
ReadX 12753 94208 8192 8192 NT_STATUS_OK
ReadX 12753 102400 8192 8192 NT_STATUS_OK
ReadX 12753 110592 8192 8192 NT_STATUS_OK
ReadX 12753 118784 8192 8192 NT_STATUS_OK
ReadX 12753 126976 8192 8192 NT_STATUS_OK
ReadX 12753 135168 8192 8192 NT_STATUS_OK
ReadX 12753 143360 8192 8192 NT_STATUS_OK
ReadX 12753 151552 8192 8192 NT_STATUS_OK
ReadX 12753 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12753 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Close 12748 NT_STATUS_OK
Close 12750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12755 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12758 NT_STATUS_OK
WriteX 12758 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12758 258 NT_STATUS_OK
WriteX 12758 0 28489 28489 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12759 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12761 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12762 NT_STATUS_OK
Close 12762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 8192 8192 NT_STATUS_OK
ReadX 12765 8192 8192 8192 NT_STATUS_OK
ReadX 12765 16384 8192 8192 NT_STATUS_OK
ReadX 12765 24576 8192 8192 NT_STATUS_OK
ReadX 12765 32768 16384 16384 NT_STATUS_OK
ReadX 12765 49152 8192 8192 NT_STATUS_OK
ReadX 12765 57344 8192 8192 NT_STATUS_OK
ReadX 12765 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12767 NT_STATUS_OK
Close 12767 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12770 NT_STATUS_OK
WriteX 12770 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12770 258 NT_STATUS_OK
WriteX 12770 0 29253 29253 NT_STATUS_OK
Close 12770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12771 NT_STATUS_OK
Close 12771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12774 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12777 NT_STATUS_OK
WriteX 12777 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12777 258 NT_STATUS_OK
WriteX 12777 0 30183 30183 NT_STATUS_OK
Close 12777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12780 NT_STATUS_OK
WriteX 12780 0 510 510 NT_STATUS_OK
WriteX 12780 510 512 512 NT_STATUS_OK
WriteX 12780 1022 510 510 NT_STATUS_OK
WriteX 12780 1532 510 510 NT_STATUS_OK
WriteX 12780 2042 168 168 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12781 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 0 4096 4096 NT_STATUS_OK
WriteX 12783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12784 NT_STATUS_OK
ReadX 12784 61440 4096 4096 NT_STATUS_OK
ReadX 12784 126976 4096 4096 NT_STATUS_OK
WriteX 12784 0 65536 65536 NT_STATUS_OK
WriteX 12784 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 61440 4096 4096 NT_STATUS_OK
ReadX 12785 126976 4096 4096 NT_STATUS_OK
ReadX 12785 192512 4096 4096 NT_STATUS_OK
ReadX 12785 258048 4096 4096 NT_STATUS_OK
WriteX 12785 0 65536 65536 NT_STATUS_OK
WriteX 12785 65536 65536 65536 NT_STATUS_OK
WriteX 12785 131072 65536 65536 NT_STATUS_OK
WriteX 12785 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12786 NT_STATUS_OK
ReadX 12786 61440 4096 4096 NT_STATUS_OK
ReadX 12786 126976 4096 4096 NT_STATUS_OK
ReadX 12786 192512 4096 4096 NT_STATUS_OK
ReadX 12786 258048 4096 4096 NT_STATUS_OK
ReadX 12786 323584 4096 4096 NT_STATUS_OK
ReadX 12786 389120 4096 4096 NT_STATUS_OK
ReadX 12786 454656 4096 4096 NT_STATUS_OK
ReadX 12786 520192 4096 4096 NT_STATUS_OK
WriteX 12786 0 65536 65536 NT_STATUS_OK
WriteX 12786 65536 65536 65536 NT_STATUS_OK
WriteX 12786 131072 65536 65536 NT_STATUS_OK
WriteX 12786 196608 65536 65536 NT_STATUS_OK
WriteX 12786 262144 65536 65536 NT_STATUS_OK
WriteX 12786 327680 65536 65536 NT_STATUS_OK
WriteX 12786 393216 65536 65536 NT_STATUS_OK
WriteX 12786 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12783 NT_STATUS_OK
Close 12784 NT_STATUS_OK
Close 12785 NT_STATUS_OK
Close 12786 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12789 NT_STATUS_OK
Close 12789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12793 NT_STATUS_OK
Close 12793 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12796 NT_STATUS_OK
Close 12796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12798 NT_STATUS_OK
Close 12798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12802 NT_STATUS_OK
Close 12802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12807 NT_STATUS_OK
Close 12807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12811 NT_STATUS_OK
Close 12811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12816 NT_STATUS_OK
Close 12816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12826 NT_STATUS_OK
Close 12826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12831 NT_STATUS_OK
Close 12831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12836 NT_STATUS_OK
Close 12836 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12841 NT_STATUS_OK
Close 12841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12846 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12849 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12852 NT_STATUS_OK
Close 12852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12855 NT_STATUS_OK
WriteX 12855 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12855 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12855 0 65536 65536 NT_STATUS_OK
WriteX 12855 65536 65536 65536 NT_STATUS_OK
WriteX 12855 131072 65536 65536 NT_STATUS_OK
WriteX 12855 196608 65536 65536 NT_STATUS_OK
WriteX 12855 262144 26634 26634 NT_STATUS_OK
Close 12855 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12860 NT_STATUS_OK
Close 12860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12861 NT_STATUS_OK
Close 12861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
Close 12862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12863 NT_STATUS_OK
ReadX 12863 0 4096 4096 NT_STATUS_OK
ReadX 12863 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12864 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12871 NT_STATUS_OK
Close 12871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12873 NT_STATUS_OK
Close 12873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12877 NT_STATUS_OK
Close 12877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12880 NT_STATUS_OK
Close 12880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12882 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12886 NT_STATUS_OK
Close 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12891 NT_STATUS_OK
Close 12891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12896 NT_STATUS_OK
Close 12896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12901 NT_STATUS_OK
Close 12901 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12911 NT_STATUS_OK
Close 12911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12920 NT_STATUS_OK
Close 12920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12925 NT_STATUS_OK
Close 12925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12928 NT_STATUS_OK
Close 12928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12930 NT_STATUS_OK
Close 12930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12940 NT_STATUS_OK
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 4096 4096 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
Close 12943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12944 NT_STATUS_OK
ReadX 12944 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12954 NT_STATUS_OK
Close 12954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12955 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12956 NT_STATUS_OK
ReadX 12956 0 4096 4096 NT_STATUS_OK
Close 12956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12957 NT_STATUS_OK
ReadX 12957 0 4096 4096 NT_STATUS_OK
Close 12957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12958 NT_STATUS_OK
ReadX 12958 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12944 NT_STATUS_OK
Close 12958 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12987 0 4096 4096 NT_STATUS_OK
Close 12987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12989 NT_STATUS_OK
ReadX 12989 0 4096 4096 NT_STATUS_OK
ReadX 12989 4096 4096 4096 NT_STATUS_OK
ReadX 12989 8192 4096 4096 NT_STATUS_OK
ReadX 12989 12288 4096 4096 NT_STATUS_OK
ReadX 12989 16384 4096 4096 NT_STATUS_OK
ReadX 12989 20480 4096 4096 NT_STATUS_OK
ReadX 12989 24576 4096 4096 NT_STATUS_OK
ReadX 12989 28672 4096 4096 NT_STATUS_OK
ReadX 12989 32768 4096 4096 NT_STATUS_OK
ReadX 12989 36864 4096 4096 NT_STATUS_OK
ReadX 12989 40960 4096 4096 NT_STATUS_OK
ReadX 12989 45056 4096 4096 NT_STATUS_OK
ReadX 12989 49152 4096 4096 NT_STATUS_OK
ReadX 12989 53248 4096 4096 NT_STATUS_OK
ReadX 12989 57344 4096 4096 NT_STATUS_OK
ReadX 12989 61440 4096 4096 NT_STATUS_OK
ReadX 12989 65536 4096 4096 NT_STATUS_OK
ReadX 12989 69632 4096 4096 NT_STATUS_OK
ReadX 12989 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
WriteX 12989 0 4096 4096 NT_STATUS_OK
Close 12989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12990 NT_STATUS_OK
SET_FILE_INFORMATION 12990 1004 NT_STATUS_OK
Close 12990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12991 NT_STATUS_OK
ReadX 12991 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12992 NT_STATUS_OK
Close 12992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12995 NT_STATUS_OK
WriteX 12995 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 258 NT_STATUS_OK
WriteX 12995 0 65536 65536 NT_STATUS_OK
WriteX 12995 65536 19979 19979 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
QUERY_FILE_INFORMATION 12996 1004 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
SET_FILE_INFORMATION 12996 1004 NT_STATUS_OK
WriteX 12996 0 4096 4096 NT_STATUS_OK
Flush 12996 NT_STATUS_OK
Close 12996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12997 NT_STATUS_OK
ReadX 12997 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
Close 12997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
Close 12999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13000 NT_STATUS_OK
ReadX 13000 0 4096 4096 NT_STATUS_OK
Close 13000 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13001 NT_STATUS_OK
ReadX 13001 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13001 1004 NT_STATUS_OK
WriteX 13001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13002 NT_STATUS_OK
Close 13002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Close 13001 NT_STATUS_OK
Close 12991 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13004 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13007 NT_STATUS_OK
WriteX 13007 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13007 258 NT_STATUS_OK
WriteX 13007 0 65536 65536 NT_STATUS_OK
WriteX 13007 65536 17654 17654 NT_STATUS_OK
Close 13007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13008 NT_STATUS_OK
ReadX 13008 0 4096 4096 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
QUERY_FILE_INFORMATION 13008 1004 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
SET_FILE_INFORMATION 13008 1004 NT_STATUS_OK
WriteX 13008 0 4096 4096 NT_STATUS_OK
Flush 13008 NT_STATUS_OK
Close 13008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13009 NT_STATUS_OK
SET_FILE_INFORMATION 13009 1004 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13010 NT_STATUS_OK
ReadX 13010 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13011 NT_STATUS_OK
Close 13011 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
ReadX 13013 4096 4096 4096 NT_STATUS_OK
ReadX 13013 8192 4096 4096 NT_STATUS_OK
ReadX 13013 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13013 16384 4096 4096 NT_STATUS_OK
ReadX 13013 20480 4096 4096 NT_STATUS_OK
ReadX 13013 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13015 NT_STATUS_OK
ReadX 13015 0 4096 4096 NT_STATUS_OK
Close 13015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13016 NT_STATUS_OK
ReadX 13016 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13016 1004 NT_STATUS_OK
WriteX 13016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13016 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13019 NT_STATUS_OK
Close 13019 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13022 NT_STATUS_OK
WriteX 13022 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 258 NT_STATUS_OK
WriteX 13022 0 65536 65536 NT_STATUS_OK
WriteX 13022 65536 19490 19490 NT_STATUS_OK
Close 13022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 0 4096 4096 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
QUERY_FILE_INFORMATION 13023 1004 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
SET_FILE_INFORMATION 13023 1004 NT_STATUS_OK
WriteX 13023 0 4096 4096 NT_STATUS_OK
Flush 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13024 NT_STATUS_OK
SET_FILE_INFORMATION 13024 1004 NT_STATUS_OK
Close 13024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13028 0 4096 4096 NT_STATUS_OK
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13030 NT_STATUS_OK
ReadX 13030 0 4096 4096 NT_STATUS_OK
ReadX 13030 4096 4096 4096 NT_STATUS_OK
ReadX 13030 8192 4096 4096 NT_STATUS_OK
ReadX 13030 12288 4096 4096 NT_STATUS_OK
ReadX 13030 16384 4096 4096 NT_STATUS_OK
ReadX 13030 20480 4096 4096 NT_STATUS_OK
ReadX 13030 24576 4096 4096 NT_STATUS_OK
ReadX 13030 28672 4096 4096 NT_STATUS_OK
ReadX 13030 32768 4096 4096 NT_STATUS_OK
ReadX 13030 36864 4096 4096 NT_STATUS_OK
ReadX 13030 40960 4096 4096 NT_STATUS_OK
ReadX 13030 45056 4096 4096 NT_STATUS_OK
ReadX 13030 49152 4096 4096 NT_STATUS_OK
ReadX 13030 53248 4096 4096 NT_STATUS_OK
ReadX 13030 57344 4096 4096 NT_STATUS_OK
ReadX 13030 61440 4096 4096 NT_STATUS_OK
ReadX 13030 65536 4096 4096 NT_STATUS_OK
ReadX 13030 69632 4096 4096 NT_STATUS_OK
ReadX 13030 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13030 1004 NT_STATUS_OK
WriteX 13030 0 4096 4096 NT_STATUS_OK
Close 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13031 NT_STATUS_OK
SET_FILE_INFORMATION 13031 1004 NT_STATUS_OK
Close 13031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13032 NT_STATUS_OK
ReadX 13032 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13036 NT_STATUS_OK
WriteX 13036 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13036 258 NT_STATUS_OK
WriteX 13036 0 65536 65536 NT_STATUS_OK
WriteX 13036 65536 8866 8866 NT_STATUS_OK
Close 13036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
WriteX 13037 0 4096 4096 NT_STATUS_OK
Flush 13037 NT_STATUS_OK
SET_FILE_INFORMATION 13037 1004 NT_STATUS_OK
WriteX 13037 0 4096 4096 NT_STATUS_OK
Flush 13037 NT_STATUS_OK
Close 13037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
Close 13039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13040 NT_STATUS_OK
ReadX 13040 0 4096 4096 NT_STATUS_OK
Close 13040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13041 NT_STATUS_OK
ReadX 13041 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13041 1004 NT_STATUS_OK
WriteX 13041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13042 NT_STATUS_OK
Close 13042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13041 NT_STATUS_OK
Close 13032 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13044 NT_STATUS_OK
Close 13044 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13047 NT_STATUS_OK
WriteX 13047 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13047 258 NT_STATUS_OK
WriteX 13047 0 65536 65536 NT_STATUS_OK
WriteX 13047 65536 9298 9298 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13048 NT_STATUS_OK
ReadX 13048 0 4096 4096 NT_STATUS_OK
WriteX 13048 0 4096 4096 NT_STATUS_OK
Flush 13048 NT_STATUS_OK
SET_FILE_INFORMATION 13048 1004 NT_STATUS_OK
WriteX 13048 0 4096 4096 NT_STATUS_OK
Flush 13048 NT_STATUS_OK
Close 13048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13049 NT_STATUS_OK
SET_FILE_INFORMATION 13049 1004 NT_STATUS_OK
Close 13049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13050 NT_STATUS_OK
ReadX 13050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13051 NT_STATUS_OK
Close 13051 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13054 0 4096 4096 NT_STATUS_OK
Close 13054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13055 NT_STATUS_OK
ReadX 13055 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13055 4096 4096 4096 NT_STATUS_OK
ReadX 13055 8192 4096 4096 NT_STATUS_OK
ReadX 13055 12288 4096 4096 NT_STATUS_OK
ReadX 13055 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 4096 4096 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13057 NT_STATUS_OK
ReadX 13057 0 4096 4096 NT_STATUS_OK
Close 13057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13058 NT_STATUS_OK
ReadX 13058 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13058 1004 NT_STATUS_OK
WriteX 13058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13059 NT_STATUS_OK
Close 13059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13055 NT_STATUS_OK
Close 13058 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13061 NT_STATUS_OK
Close 13061 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13064 NT_STATUS_OK
WriteX 13064 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13064 258 NT_STATUS_OK
WriteX 13064 0 65536 65536 NT_STATUS_OK
WriteX 13064 65536 11540 11540 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13065 NT_STATUS_OK
ReadX 13065 0 4096 4096 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
SET_FILE_INFORMATION 13065 1004 NT_STATUS_OK
WriteX 13065 0 4096 4096 NT_STATUS_OK
Flush 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13066 NT_STATUS_OK
SET_FILE_INFORMATION 13066 1004 NT_STATUS_OK
Close 13066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13067 NT_STATUS_OK
ReadX 13067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13068 NT_STATUS_OK
Close 13068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 61440 4096 4096 NT_STATUS_OK
ReadX 13070 126976 4096 4096 NT_STATUS_OK
WriteX 13070 0 65536 65536 NT_STATUS_OK
WriteX 13070 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13071 NT_STATUS_OK
ReadX 13071 61440 4096 4096 NT_STATUS_OK
ReadX 13071 126976 4096 4096 NT_STATUS_OK
ReadX 13071 192512 4096 4096 NT_STATUS_OK
ReadX 13071 258048 4096 4096 NT_STATUS_OK
WriteX 13071 0 65536 65536 NT_STATUS_OK
WriteX 13071 65536 65536 65536 NT_STATUS_OK
WriteX 13071 131072 65536 65536 NT_STATUS_OK
WriteX 13071 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13072 NT_STATUS_OK
ReadX 13072 61440 4096 4096 NT_STATUS_OK
ReadX 13072 126976 4096 4096 NT_STATUS_OK
ReadX 13072 192512 4096 4096 NT_STATUS_OK
ReadX 13072 258048 4096 4096 NT_STATUS_OK
ReadX 13072 323584 4096 4096 NT_STATUS_OK
ReadX 13072 389120 4096 4096 NT_STATUS_OK
ReadX 13072 454656 4096 4096 NT_STATUS_OK
ReadX 13072 520192 4096 4096 NT_STATUS_OK
WriteX 13072 0 65536 65536 NT_STATUS_OK
WriteX 13072 65536 65536 65536 NT_STATUS_OK
WriteX 13072 131072 65536 65536 NT_STATUS_OK
WriteX 13072 196608 65536 65536 NT_STATUS_OK
WriteX 13072 262144 65536 65536 NT_STATUS_OK
WriteX 13072 327680 65536 65536 NT_STATUS_OK
WriteX 13072 393216 65536 65536 NT_STATUS_OK
WriteX 13072 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13073 NT_STATUS_OK
ReadX 13073 0 4096 4096 NT_STATUS_OK
ReadX 13073 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13074 NT_STATUS_OK
WriteX 13074 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13074 258 NT_STATUS_OK
WriteX 13074 0 53 53 NT_STATUS_OK
Close 13074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13075 NT_STATUS_OK
Close 13075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13067 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13071 NT_STATUS_OK
Close 13072 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13073 8192 4096 4096 NT_STATUS_OK
ReadX 13073 12288 4096 4096 NT_STATUS_OK
WriteX 13077 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13077 258 NT_STATUS_OK
ReadX 13073 16384 4096 4096 NT_STATUS_OK
ReadX 13073 20480 4096 4096 NT_STATUS_OK
WriteX 13077 0 15360 15360 NT_STATUS_OK
Close 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13078 NT_STATUS_OK
ReadX 13078 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13078 1004 NT_STATUS_OK
WriteX 13078 0 4096 4096 NT_STATUS_OK
Close 13078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13079 NT_STATUS_OK
Close 13079 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13081 NT_STATUS_OK
ReadX 13081 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13082 NT_STATUS_OK
Close 13082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13081 4096 4096 4096 NT_STATUS_OK
ReadX 13081 8192 4096 4096 NT_STATUS_OK
ReadX 13081 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
ReadX 13084 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13085 NT_STATUS_OK
ReadX 13085 0 4096 4096 NT_STATUS_OK
ReadX 13085 4096 4096 4096 NT_STATUS_OK
ReadX 13085 8192 4096 4096 NT_STATUS_OK
Close 13084 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13086 NT_STATUS_OK
WriteX 13086 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13086 258 NT_STATUS_OK
WriteX 13086 0 15360 15360 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13087 NT_STATUS_OK
ReadX 13087 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13087 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13087 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13090 NT_STATUS_OK
ReadX 13090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13091 NT_STATUS_OK
SET_FILE_INFORMATION 13091 1004 NT_STATUS_OK
Close 13091 NT_STATUS_OK
WriteX 13087 0 4096 4096 NT_STATUS_OK
Close 13087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13092 NT_STATUS_OK
Close 13092 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
ReadX 13094 4096 4096 4096 NT_STATUS_OK
ReadX 13094 8192 4096 4096 NT_STATUS_OK
ReadX 13094 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13094 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13094 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13095 NT_STATUS_OK
ReadX 13095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13096 NT_STATUS_OK
WriteX 13096 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13096 258 NT_STATUS_OK
WriteX 13096 0 53 53 NT_STATUS_OK
Close 13096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13097 NT_STATUS_OK
Close 13097 NT_STATUS_OK
WriteX 13094 0 19054 19054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13095 4096 4096 4096 NT_STATUS_OK
ReadX 13095 8192 4096 4096 NT_STATUS_OK
ReadX 13095 12288 4096 4096 NT_STATUS_OK
WriteX 13099 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13099 258 NT_STATUS_OK
WriteX 13099 0 12006 12006 NT_STATUS_OK
Close 13099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13100 NT_STATUS_OK
ReadX 13100 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13100 1004 NT_STATUS_OK
WriteX 13100 0 4096 4096 NT_STATUS_OK
Close 13100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13101 NT_STATUS_OK
Close 13101 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13103 NT_STATUS_OK
ReadX 13103 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13104 NT_STATUS_OK
Close 13104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13103 4096 4096 4096 NT_STATUS_OK
ReadX 13103 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13106 NT_STATUS_OK
WriteX 13106 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13106 258 NT_STATUS_OK
WriteX 13106 0 11991 11991 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13107 NT_STATUS_OK
ReadX 13107 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13107 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13107 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13108 NT_STATUS_OK
Close 13108 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13110 NT_STATUS_OK
ReadX 13110 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13111 NT_STATUS_OK
SET_FILE_INFORMATION 13111 1004 NT_STATUS_OK
Close 13111 NT_STATUS_OK
WriteX 13107 0 4096 4096 NT_STATUS_OK
Close 13107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13112 NT_STATUS_OK
Close 13112 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13114 NT_STATUS_OK
ReadX 13114 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13115 NT_STATUS_OK
Close 13115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13114 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13114 1004 NT_STATUS_OK
ReadX 13114 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13114 1004 NT_STATUS_OK
WriteX 13114 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13114 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13114 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13114 1004 NT_STATUS_OK
Close 13090 NT_STATUS_OK
WriteX 13114 0 12288 12288 NT_STATUS_OK
Close 13110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13117 NT_STATUS_OK
Close 13117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13094 NT_STATUS_OK
Close 13114 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13119 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 61440 61440 NT_STATUS_OK
ReadX 13121 61440 4096 4096 NT_STATUS_OK
ReadX 13121 65536 61440 61440 NT_STATUS_OK
ReadX 13121 126976 4096 4096 NT_STATUS_OK
ReadX 13121 131072 61440 61440 NT_STATUS_OK
ReadX 13121 192512 4096 4096 NT_STATUS_OK
ReadX 13121 196608 61440 61440 NT_STATUS_OK
ReadX 13121 258048 4096 4096 NT_STATUS_OK
ReadX 13121 262144 61440 61440 NT_STATUS_OK
ReadX 13121 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13122 NT_STATUS_OK
ReadX 13122 0 61440 61440 NT_STATUS_OK
ReadX 13122 61440 4096 4096 NT_STATUS_OK
ReadX 13122 65536 61440 61440 NT_STATUS_OK
ReadX 13122 126976 4096 4096 NT_STATUS_OK
ReadX 13122 131072 61440 61440 NT_STATUS_OK
ReadX 13122 192512 4096 4096 NT_STATUS_OK
ReadX 13122 196608 61440 61440 NT_STATUS_OK
ReadX 13122 258048 4096 4096 NT_STATUS_OK
ReadX 13122 262144 61440 61440 NT_STATUS_OK
ReadX 13122 323584 4096 4096 NT_STATUS_OK
ReadX 13122 327680 61440 61440 NT_STATUS_OK
ReadX 13122 389120 4096 4096 NT_STATUS_OK
ReadX 13122 393216 61440 61440 NT_STATUS_OK
ReadX 13122 454656 4096 4096 NT_STATUS_OK
ReadX 13122 458752 61440 61440 NT_STATUS_OK
ReadX 13122 520192 4096 4096 NT_STATUS_OK
ReadX 13122 524288 61440 61440 NT_STATUS_OK
ReadX 13122 585728 4096 4096 NT_STATUS_OK
ReadX 13122 589824 61440 61440 NT_STATUS_OK
ReadX 13122 651264 4096 4096 NT_STATUS_OK
ReadX 13122 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13123 NT_STATUS_OK
ReadX 13123 0 61440 61440 NT_STATUS_OK
ReadX 13123 61440 4096 4096 NT_STATUS_OK
ReadX 13123 65536 61440 61440 NT_STATUS_OK
ReadX 13123 126976 4096 4096 NT_STATUS_OK
ReadX 13123 131072 61440 61440 NT_STATUS_OK
ReadX 13123 192512 4096 4096 NT_STATUS_OK
ReadX 13123 196608 61440 61440 NT_STATUS_OK
ReadX 13123 258048 4096 4096 NT_STATUS_OK
ReadX 13123 262144 61440 61440 NT_STATUS_OK
ReadX 13123 323584 4096 4096 NT_STATUS_OK
ReadX 13123 327680 61440 61440 NT_STATUS_OK
ReadX 13123 389120 4096 4096 NT_STATUS_OK
ReadX 13123 393216 61440 61440 NT_STATUS_OK
ReadX 13123 454656 4096 4096 NT_STATUS_OK
ReadX 13123 458752 61440 61440 NT_STATUS_OK
ReadX 13123 520192 4096 4096 NT_STATUS_OK
ReadX 13123 524288 61440 61440 NT_STATUS_OK
ReadX 13123 585728 4096 4096 NT_STATUS_OK
ReadX 13123 589824 61440 61440 NT_STATUS_OK
ReadX 13123 651264 4096 4096 NT_STATUS_OK
ReadX 13123 655360 61440 61440 NT_STATUS_OK
ReadX 13123 716800 4096 4096 NT_STATUS_OK
ReadX 13123 720896 61440 61440 NT_STATUS_OK
ReadX 13123 782336 4096 4096 NT_STATUS_OK
ReadX 13123 786432 61440 61440 NT_STATUS_OK
ReadX 13123 847872 4096 4096 NT_STATUS_OK
ReadX 13123 851968 61440 61440 NT_STATUS_OK
ReadX 13123 913408 4096 4096 NT_STATUS_OK
ReadX 13123 917504 61440 61440 NT_STATUS_OK
ReadX 13123 978944 4096 4096 NT_STATUS_OK
ReadX 13123 983040 61440 61440 NT_STATUS_OK
ReadX 13123 1044480 4096 4096 NT_STATUS_OK
ReadX 13123 1048576 61440 61440 NT_STATUS_OK
ReadX 13123 1110016 4096 4096 NT_STATUS_OK
ReadX 13123 1114112 61440 61440 NT_STATUS_OK
ReadX 13123 1175552 4096 4096 NT_STATUS_OK
ReadX 13123 1179648 61440 61440 NT_STATUS_OK
ReadX 13123 1241088 4096 4096 NT_STATUS_OK
ReadX 13123 1245184 61440 61440 NT_STATUS_OK
ReadX 13123 1306624 4096 4096 NT_STATUS_OK
ReadX 13123 1310720 61440 61440 NT_STATUS_OK
ReadX 13123 1372160 4096 4096 NT_STATUS_OK
ReadX 13123 1376256 61440 61440 NT_STATUS_OK
ReadX 13123 1437696 4096 4096 NT_STATUS_OK
ReadX 13123 1441792 61440 61440 NT_STATUS_OK
ReadX 13123 1503232 4096 4096 NT_STATUS_OK
ReadX 13123 1507328 61440 61440 NT_STATUS_OK
ReadX 13123 1568768 4096 4096 NT_STATUS_OK
ReadX 13123 1572864 61440 61440 NT_STATUS_OK
ReadX 13123 1634304 4096 4096 NT_STATUS_OK
ReadX 13123 1638400 61440 61440 NT_STATUS_OK
ReadX 13123 1699840 4096 4096 NT_STATUS_OK
ReadX 13123 1703936 61440 61440 NT_STATUS_OK
ReadX 13123 1765376 4096 4096 NT_STATUS_OK
ReadX 13123 1769472 61440 61440 NT_STATUS_OK
ReadX 13123 1830912 4096 4096 NT_STATUS_OK
ReadX 13123 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13124 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13129 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13130 NT_STATUS_OK
QUERY_FILE_INFORMATION 13130 1004 NT_STATUS_OK
WriteX 13130 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13130 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13131 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13132 NT_STATUS_OK
WriteX 13132 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13132 258 NT_STATUS_OK
WriteX 13132 0 491 491 NT_STATUS_OK
Close 13132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13130 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13136 NT_STATUS_OK
WriteX 13136 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13136 258 NT_STATUS_OK
WriteX 13136 0 543 543 NT_STATUS_OK
Close 13136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13137 NT_STATUS_OK
ReadX 13137 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13121 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Close 13123 NT_STATUS_OK
Close 13137 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Close 13128 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13145 NT_STATUS_OK
ReadX 13145 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13149 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13150 NT_STATUS_OK
QUERY_FILE_INFORMATION 13150 1004 NT_STATUS_OK
WriteX 13150 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13150 258 NT_STATUS_OK
WriteX 13150 0 2048 2048 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13151 NT_STATUS_OK
ReadX 13151 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13151 0 4096 4096 NT_STATUS_OK
Flush 13151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13151 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13155 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13156 NT_STATUS_OK
WriteX 13156 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13156 258 NT_STATUS_OK
WriteX 13156 0 2048 2048 NT_STATUS_OK
Close 13156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13161 NT_STATUS_OK
Close 13161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13162 NT_STATUS_OK
WriteX 13162 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13162 258 NT_STATUS_OK
WriteX 13162 0 2048 2048 NT_STATUS_OK
Close 13162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13163 NT_STATUS_OK
ReadX 13163 0 2048 2048 NT_STATUS_OK
ReadX 13141 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13145 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13157 0 4096 4096 NT_STATUS_OK
WriteX 13141 0 8192 8192 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
WriteX 13143 0 4096 4096 NT_STATUS_OK
ReadX 13157 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13166 NT_STATUS_OK
ReadX 13166 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13167 NT_STATUS_OK
QUERY_FILE_INFORMATION 13167 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13166 NT_STATUS_OK
Close 13142 NT_STATUS_OK
Close 13143 NT_STATUS_OK
Close 13144 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Close 13141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13169 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13174 NT_STATUS_OK
ReadX 13174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13175 NT_STATUS_OK
ReadX 13175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13177 NT_STATUS_OK
ReadX 13177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13178 NT_STATUS_OK
ReadX 13178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13187 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 1004 NT_STATUS_OK
WriteX 13187 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13187 258 NT_STATUS_OK
WriteX 13187 0 2048 2048 NT_STATUS_OK
Close 13187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13188 NT_STATUS_OK
ReadX 13188 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13190 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13195 NT_STATUS_OK
QUERY_FILE_INFORMATION 13195 1004 NT_STATUS_OK
WriteX 13195 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13195 258 NT_STATUS_OK
WriteX 13195 0 2048 2048 NT_STATUS_OK
Close 13195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13188 0 4096 4096 NT_STATUS_OK
Flush 13188 NT_STATUS_OK
WriteX 13196 0 4096 4096 NT_STATUS_OK
Flush 13196 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13188 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13196 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13190 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13197 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13198 NT_STATUS_OK
WriteX 13198 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13198 258 NT_STATUS_OK
WriteX 13198 0 4096 4096 NT_STATUS_OK
Close 13198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13199 NT_STATUS_OK
ReadX 13199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13200 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13201 NT_STATUS_OK
WriteX 13201 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13201 258 NT_STATUS_OK
WriteX 13201 0 4096 4096 NT_STATUS_OK
Close 13201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13202 0 4096 4096 NT_STATUS_OK
Close 13199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13182 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Close 13179 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13177 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Close 13171 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Close 13175 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13202 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13205 NT_STATUS_OK
Close 13205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13207 NT_STATUS_OK
ReadX 13207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13208 NT_STATUS_OK
Close 13208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13209 NT_STATUS_OK
WriteX 13209 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13209 258 NT_STATUS_OK
WriteX 13209 0 2048 2048 NT_STATUS_OK
Close 13209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13211 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13215 NT_STATUS_OK
ReadX 13215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13218 NT_STATUS_OK
ReadX 13218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13223 NT_STATUS_OK
ReadX 13223 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13224 NT_STATUS_OK
QUERY_FILE_INFORMATION 13224 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13207 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Close 13217 NT_STATUS_OK
Close 13218 NT_STATUS_OK
Close 13219 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Close 13223 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13215 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13226 NT_STATUS_OK
QUERY_FILE_INFORMATION 13226 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13231 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13233 NT_STATUS_OK
ReadX 13233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13234 NT_STATUS_OK
ReadX 13234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13236 NT_STATUS_OK
ReadX 13236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13241 NT_STATUS_OK
ReadX 13241 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13246 NT_STATUS_OK
QUERY_FILE_INFORMATION 13246 1004 NT_STATUS_OK
WriteX 13246 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13246 258 NT_STATUS_OK
WriteX 13246 0 2048 2048 NT_STATUS_OK
Close 13246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13258 1004 NT_STATUS_OK
WriteX 13258 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13258 258 NT_STATUS_OK
WriteX 13258 0 2048 2048 NT_STATUS_OK
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13259 NT_STATUS_OK
ReadX 13259 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13261 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13265 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13266 NT_STATUS_OK
QUERY_FILE_INFORMATION 13266 1004 NT_STATUS_OK
WriteX 13266 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13266 258 NT_STATUS_OK
WriteX 13266 0 2048 2048 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13267 NT_STATUS_OK
ReadX 13267 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
WriteX 13259 0 4096 4096 NT_STATUS_OK
Flush 13259 NT_STATUS_OK
WriteX 13267 0 4096 4096 NT_STATUS_OK
Flush 13267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13259 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13267 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13249 4096 16384 16384 NT_STATUS_OK
ReadX 13229 4096 16384 16384 NT_STATUS_OK
ReadX 13261 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13268 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 2048 2048 NT_STATUS_OK
WriteX 13269 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13270 NT_STATUS_OK
QUERY_FILE_INFORMATION 13270 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13269 NT_STATUS_OK
Close 13253 NT_STATUS_OK
Close 13241 NT_STATUS_OK
Close 13233 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13251 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13261 NT_STATUS_OK
Close 13235 NT_STATUS_OK
Close 13238 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Close 13236 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Close 13232 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13272 NT_STATUS_OK
QUERY_FILE_INFORMATION 13272 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13274 NT_STATUS_OK
QUERY_FILE_INFORMATION 13274 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13281 NT_STATUS_OK
ReadX 13281 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13277 4096 16384 16384 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13278 0 4096 4096 NT_STATUS_OK
WriteX 13279 0 4096 4096 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13292 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13293 NT_STATUS_OK
ReadX 13293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 8192 8192 NT_STATUS_OK
ReadX 13283 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13297 0 4096 4096 NT_STATUS_OK
ReadX 13297 4096 4096 4096 NT_STATUS_OK
ReadX 13297 8192 4096 4096 NT_STATUS_OK
WriteX 13283 0 4096 4096 NT_STATUS_OK
WriteX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13298 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13298 0 4096 4096 NT_STATUS_OK
ReadX 13298 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13278 0 4096 4096 NT_STATUS_OK
WriteX 13279 0 4096 4096 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13302 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13303 NT_STATUS_OK
QUERY_FILE_INFORMATION 13303 1004 NT_STATUS_OK
WriteX 13303 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13303 258 NT_STATUS_OK
WriteX 13303 0 2048 2048 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13305 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
ReadX 13306 4096 4096 4096 NT_STATUS_OK
WriteX 13306 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13307 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13307 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
ReadX 13308 4096 4096 4096 NT_STATUS_OK
WriteX 13308 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13309 NT_STATUS_OK
QUERY_FILE_INFORMATION 13309 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Close 13281 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Close 13292 NT_STATUS_OK
Close 13293 NT_STATUS_OK
Close 13295 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13311 0 4096 4096 NT_STATUS_OK
ReadX 13311 4096 4096 4096 NT_STATUS_OK
ReadX 13311 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13312 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13317 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13318 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 4096 4096 NT_STATUS_OK
ReadX 13312 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13328 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13329 NT_STATUS_OK
QUERY_FILE_INFORMATION 13329 1004 NT_STATUS_OK
WriteX 13329 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13329 258 NT_STATUS_OK
WriteX 13329 0 2048 2048 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13330 NT_STATUS_OK
ReadX 13330 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13330 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13334 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13335 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 1004 NT_STATUS_OK
WriteX 13335 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 258 NT_STATUS_OK
WriteX 13335 0 2048 2048 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13336 NT_STATUS_OK
ReadX 13336 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13336 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13319 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13337 NT_STATUS_OK
QUERY_FILE_INFORMATION 13337 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13323 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13324 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13316 NT_STATUS_OK
Close 13317 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13339 NT_STATUS_OK
QUERY_FILE_INFORMATION 13339 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13341 NT_STATUS_OK
ReadX 13341 61440 4096 4096 NT_STATUS_OK
ReadX 13341 126976 4096 4096 NT_STATUS_OK
WriteX 13341 0 65536 65536 NT_STATUS_OK
WriteX 13341 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 61440 4096 4096 NT_STATUS_OK
ReadX 13342 126976 4096 4096 NT_STATUS_OK
ReadX 13342 192512 4096 4096 NT_STATUS_OK
ReadX 13342 258048 4096 4096 NT_STATUS_OK
WriteX 13342 0 65536 65536 NT_STATUS_OK
WriteX 13342 65536 65536 65536 NT_STATUS_OK
WriteX 13342 131072 65536 65536 NT_STATUS_OK
WriteX 13342 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 61440 4096 4096 NT_STATUS_OK
ReadX 13343 126976 4096 4096 NT_STATUS_OK
ReadX 13343 192512 4096 4096 NT_STATUS_OK
ReadX 13343 258048 4096 4096 NT_STATUS_OK
ReadX 13343 323584 4096 4096 NT_STATUS_OK
ReadX 13343 389120 4096 4096 NT_STATUS_OK
ReadX 13343 454656 4096 4096 NT_STATUS_OK
ReadX 13343 520192 4096 4096 NT_STATUS_OK
WriteX 13343 0 65536 65536 NT_STATUS_OK
WriteX 13343 65536 65536 65536 NT_STATUS_OK
WriteX 13343 131072 65536 65536 NT_STATUS_OK
WriteX 13343 196608 65536 65536 NT_STATUS_OK
WriteX 13343 262144 65536 65536 NT_STATUS_OK
WriteX 13343 327680 65536 65536 NT_STATUS_OK
WriteX 13343 393216 65536 65536 NT_STATUS_OK
WriteX 13343 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13344 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13344 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13344 8192 4096 4096 NT_STATUS_OK
ReadX 13344 12288 4096 4096 NT_STATUS_OK
ReadX 13344 16384 4096 4096 NT_STATUS_OK
ReadX 13344 20480 4096 4096 NT_STATUS_OK
ReadX 13344 24576 4096 4096 NT_STATUS_OK
ReadX 13344 28672 4096 4096 NT_STATUS_OK
ReadX 13344 32768 4096 4096 NT_STATUS_OK
ReadX 13344 36864 4096 4096 NT_STATUS_OK
ReadX 13344 40960 4096 4096 NT_STATUS_OK
ReadX 13344 45056 4096 4096 NT_STATUS_OK
ReadX 13344 49152 4096 4096 NT_STATUS_OK
ReadX 13344 53248 4096 4096 NT_STATUS_OK
ReadX 13344 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13344 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13345 NT_STATUS_OK
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13341 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13347 NT_STATUS_OK
WriteX 13347 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13347 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13347 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13347 1004 NT_STATUS_OK
WriteX 13347 0 57088 57088 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
Flush 13347 NT_STATUS_OK
Close 13344 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13348 NT_STATUS_OK
SET_FILE_INFORMATION 13348 1004 NT_STATUS_OK
Close 13348 NT_STATUS_OK
SET_FILE_INFORMATION 13347 1004 NT_STATUS_OK
WriteX 13347 0 4096 4096 NT_STATUS_OK
Close 13347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13349 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13351 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13352 NT_STATUS_OK
WriteX 13352 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13352 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13352 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13352 1004 NT_STATUS_OK
WriteX 13352 0 51456 51456 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Flush 13352 NT_STATUS_OK
SET_FILE_INFORMATION 13352 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13352 1004 NT_STATUS_OK
WriteX 13352 0 4096 4096 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13354 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13356 NT_STATUS_OK
ReadX 13356 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13356 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13361 NT_STATUS_OK
WriteX 13361 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13361 258 NT_STATUS_OK
WriteX 13361 0 53077 53077 NT_STATUS_OK
Close 13361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13362 NT_STATUS_OK
WriteX 13362 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13362 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13362 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13362 1004 NT_STATUS_OK
WriteX 13362 0 65536 65536 NT_STATUS_OK
WriteX 13362 65536 1856 1856 NT_STATUS_OK
WriteX 13362 0 4096 4096 NT_STATUS_OK
Flush 13362 NT_STATUS_OK
SET_FILE_INFORMATION 13362 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13362 1004 NT_STATUS_OK
WriteX 13362 0 4096 4096 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13364 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13366 NT_STATUS_OK
ReadX 13366 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13368 NT_STATUS_OK
Close 13368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13371 NT_STATUS_OK
WriteX 13371 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13371 258 NT_STATUS_OK
WriteX 13371 0 7983 7983 NT_STATUS_OK
Close 13371 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13373 NT_STATUS_OK
Close 13373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13376 NT_STATUS_OK
WriteX 13376 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 258 NT_STATUS_OK
WriteX 13376 0 65536 65536 NT_STATUS_OK
WriteX 13376 65536 65536 65536 NT_STATUS_OK
WriteX 13376 131072 65536 65536 NT_STATUS_OK
WriteX 13376 196608 65536 65536 NT_STATUS_OK
WriteX 13376 262144 65536 65536 NT_STATUS_OK
WriteX 13376 327680 65536 65536 NT_STATUS_OK
WriteX 13376 393216 65536 65536 NT_STATUS_OK
WriteX 13376 458752 46731 46731 NT_STATUS_OK
Close 13376 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13377 NT_STATUS_OK
WriteX 13377 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13377 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13366 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13377 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
WriteX 13377 0 65536 65536 NT_STATUS_OK
WriteX 13377 65536 22848 22848 NT_STATUS_OK
WriteX 13377 0 4096 4096 NT_STATUS_OK
Flush 13377 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13377 1004 NT_STATUS_OK
WriteX 13377 0 4096 4096 NT_STATUS_OK
Close 13377 NT_STATUS_OK
Close 13366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13379 NT_STATUS_OK
Close 13379 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13381 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13382 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13382 1004 NT_STATUS_OK
ReadX 13382 8192 4096 4096 NT_STATUS_OK
ReadX 13382 12288 4096 4096 NT_STATUS_OK
ReadX 13382 16384 4096 4096 NT_STATUS_OK
ReadX 13382 20480 4096 4096 NT_STATUS_OK
ReadX 13382 24576 4096 4096 NT_STATUS_OK
ReadX 13382 28672 4096 4096 NT_STATUS_OK
ReadX 13382 32768 4096 4096 NT_STATUS_OK
ReadX 13382 36864 4096 4096 NT_STATUS_OK
ReadX 13382 40960 4096 4096 NT_STATUS_OK
ReadX 13382 45056 4096 4096 NT_STATUS_OK
ReadX 13382 49152 4096 4096 NT_STATUS_OK
ReadX 13382 53248 4096 4096 NT_STATUS_OK
ReadX 13382 57344 4096 4096 NT_STATUS_OK
ReadX 13382 61440 4096 4096 NT_STATUS_OK
ReadX 13382 65536 4096 4096 NT_STATUS_OK
ReadX 13382 69632 4096 4096 NT_STATUS_OK
ReadX 13382 73728 4096 4096 NT_STATUS_OK
ReadX 13382 77824 4096 4096 NT_STATUS_OK
ReadX 13382 81920 4096 4096 NT_STATUS_OK
ReadX 13382 86016 4096 4096 NT_STATUS_OK
ReadX 13382 90112 4096 4096 NT_STATUS_OK
ReadX 13382 94208 4096 4096 NT_STATUS_OK
ReadX 13382 98304 4096 4096 NT_STATUS_OK
ReadX 13382 102400 4096 4096 NT_STATUS_OK
ReadX 13382 106496 4096 4096 NT_STATUS_OK
ReadX 13382 110592 4096 4096 NT_STATUS_OK
ReadX 13382 114688 4096 4096 NT_STATUS_OK
ReadX 13382 118784 4096 4096 NT_STATUS_OK
ReadX 13382 122880 4096 4096 NT_STATUS_OK
ReadX 13382 126976 4096 4096 NT_STATUS_OK
ReadX 13382 131072 4096 4096 NT_STATUS_OK
ReadX 13382 135168 4096 4096 NT_STATUS_OK
ReadX 13382 139264 4096 4096 NT_STATUS_OK
ReadX 13382 143360 4096 4096 NT_STATUS_OK
ReadX 13382 147456 4096 4096 NT_STATUS_OK
ReadX 13382 151552 4096 4096 NT_STATUS_OK
ReadX 13382 155648 4096 4096 NT_STATUS_OK
ReadX 13382 159744 4096 4096 NT_STATUS_OK
ReadX 13382 163840 4096 4096 NT_STATUS_OK
ReadX 13382 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13382 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13383 NT_STATUS_OK
Close 13383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13385 NT_STATUS_OK
WriteX 13385 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13385 258 NT_STATUS_OK
Close 13382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13386 NT_STATUS_OK
SET_FILE_INFORMATION 13386 1004 NT_STATUS_OK
Close 13386 NT_STATUS_OK
WriteX 13385 0 42388 42388 NT_STATUS_OK
Close 13385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13387 NT_STATUS_OK
Close 13387 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13389 NT_STATUS_OK
ReadX 13389 0 4096 4096 NT_STATUS_OK
ReadX 13389 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13390 NT_STATUS_OK
WriteX 13390 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 258 NT_STATUS_OK
SET_FILE_INFORMATION 13390 1004 NT_STATUS_OK
WriteX 13390 0 42652 42652 NT_STATUS_OK
Close 13390 NT_STATUS_OK
Close 13389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13392 NT_STATUS_OK
Close 13392 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13394 NT_STATUS_OK
ReadX 13394 0 4096 4096 NT_STATUS_OK
ReadX 13394 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13396 NT_STATUS_OK
Close 13396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13399 NT_STATUS_OK
WriteX 13399 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13399 258 NT_STATUS_OK
WriteX 13399 0 65536 65536 NT_STATUS_OK
WriteX 13399 65536 49 49 NT_STATUS_OK
Close 13399 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 61440 61440 NT_STATUS_OK
ReadX 13400 61440 4096 4096 NT_STATUS_OK
ReadX 13400 65536 61440 61440 NT_STATUS_OK
ReadX 13400 126976 4096 4096 NT_STATUS_OK
ReadX 13400 131072 61440 61440 NT_STATUS_OK
ReadX 13400 192512 4096 4096 NT_STATUS_OK
ReadX 13400 196608 61440 61440 NT_STATUS_OK
ReadX 13400 258048 4096 4096 NT_STATUS_OK
ReadX 13400 262144 61440 61440 NT_STATUS_OK
ReadX 13400 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 61440 61440 NT_STATUS_OK
ReadX 13401 61440 4096 4096 NT_STATUS_OK
ReadX 13401 65536 61440 61440 NT_STATUS_OK
ReadX 13401 126976 4096 4096 NT_STATUS_OK
ReadX 13401 131072 61440 61440 NT_STATUS_OK
ReadX 13401 192512 4096 4096 NT_STATUS_OK
ReadX 13401 196608 61440 61440 NT_STATUS_OK
ReadX 13401 258048 4096 4096 NT_STATUS_OK
ReadX 13401 262144 61440 61440 NT_STATUS_OK
ReadX 13401 323584 4096 4096 NT_STATUS_OK
ReadX 13401 327680 61440 61440 NT_STATUS_OK
ReadX 13401 389120 4096 4096 NT_STATUS_OK
ReadX 13401 393216 61440 61440 NT_STATUS_OK
ReadX 13401 454656 4096 4096 NT_STATUS_OK
ReadX 13401 458752 61440 61440 NT_STATUS_OK
ReadX 13401 520192 4096 4096 NT_STATUS_OK
ReadX 13401 524288 61440 61440 NT_STATUS_OK
ReadX 13401 585728 4096 4096 NT_STATUS_OK
ReadX 13401 589824 61440 61440 NT_STATUS_OK
ReadX 13401 651264 4096 4096 NT_STATUS_OK
ReadX 13401 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13402 NT_STATUS_OK
ReadX 13402 0 61440 61440 NT_STATUS_OK
ReadX 13402 61440 4096 4096 NT_STATUS_OK
ReadX 13402 65536 61440 61440 NT_STATUS_OK
ReadX 13402 126976 4096 4096 NT_STATUS_OK
ReadX 13402 131072 61440 61440 NT_STATUS_OK
ReadX 13402 192512 4096 4096 NT_STATUS_OK
ReadX 13402 196608 61440 61440 NT_STATUS_OK
ReadX 13402 258048 4096 4096 NT_STATUS_OK
ReadX 13402 262144 61440 61440 NT_STATUS_OK
ReadX 13402 323584 4096 4096 NT_STATUS_OK
ReadX 13402 327680 61440 61440 NT_STATUS_OK
ReadX 13402 389120 4096 4096 NT_STATUS_OK
ReadX 13402 393216 61440 61440 NT_STATUS_OK
ReadX 13402 454656 4096 4096 NT_STATUS_OK
ReadX 13402 458752 61440 61440 NT_STATUS_OK
ReadX 13402 520192 4096 4096 NT_STATUS_OK
ReadX 13402 524288 61440 61440 NT_STATUS_OK
ReadX 13402 585728 4096 4096 NT_STATUS_OK
ReadX 13402 589824 61440 61440 NT_STATUS_OK
ReadX 13402 651264 4096 4096 NT_STATUS_OK
ReadX 13402 655360 61440 61440 NT_STATUS_OK
ReadX 13402 716800 4096 4096 NT_STATUS_OK
ReadX 13402 720896 61440 61440 NT_STATUS_OK
ReadX 13402 782336 4096 4096 NT_STATUS_OK
ReadX 13402 786432 61440 61440 NT_STATUS_OK
ReadX 13402 847872 4096 4096 NT_STATUS_OK
ReadX 13402 851968 61440 61440 NT_STATUS_OK
ReadX 13402 913408 4096 4096 NT_STATUS_OK
ReadX 13402 917504 61440 61440 NT_STATUS_OK
ReadX 13402 978944 4096 4096 NT_STATUS_OK
ReadX 13402 983040 61440 61440 NT_STATUS_OK
ReadX 13402 1044480 4096 4096 NT_STATUS_OK
ReadX 13402 1048576 61440 61440 NT_STATUS_OK
ReadX 13402 1110016 4096 4096 NT_STATUS_OK
ReadX 13402 1114112 61440 61440 NT_STATUS_OK
ReadX 13402 1175552 4096 4096 NT_STATUS_OK
ReadX 13402 1179648 61440 61440 NT_STATUS_OK
ReadX 13402 1241088 4096 4096 NT_STATUS_OK
ReadX 13402 1245184 61440 61440 NT_STATUS_OK
ReadX 13402 1306624 4096 4096 NT_STATUS_OK
ReadX 13402 1310720 61440 61440 NT_STATUS_OK
ReadX 13402 1372160 4096 4096 NT_STATUS_OK
ReadX 13402 1376256 61440 61440 NT_STATUS_OK
ReadX 13402 1437696 4096 4096 NT_STATUS_OK
ReadX 13402 1441792 61440 61440 NT_STATUS_OK
ReadX 13402 1503232 4096 4096 NT_STATUS_OK
ReadX 13402 1507328 61440 61440 NT_STATUS_OK
ReadX 13402 1568768 4096 4096 NT_STATUS_OK
ReadX 13402 1572864 61440 61440 NT_STATUS_OK
ReadX 13402 1634304 4096 4096 NT_STATUS_OK
ReadX 13402 1638400 61440 61440 NT_STATUS_OK
ReadX 13402 1699840 4096 4096 NT_STATUS_OK
ReadX 13402 1703936 61440 61440 NT_STATUS_OK
ReadX 13402 1765376 4096 4096 NT_STATUS_OK
ReadX 13402 1769472 61440 61440 NT_STATUS_OK
ReadX 13402 1830912 4096 4096 NT_STATUS_OK
ReadX 13402 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13404 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1005 NT_STATUS_OK
ReadX 13404 2156 24 24 NT_STATUS_OK
ReadX 13404 2139 276 276 NT_STATUS_OK
ReadX 13404 2136 14 14 NT_STATUS_OK
ReadX 13404 2136 7 7 NT_STATUS_OK
ReadX 13404 2138 12 12 NT_STATUS_OK
ReadX 13404 2137 8 8 NT_STATUS_OK
ReadX 13404 2135 15 15 NT_STATUS_OK
ReadX 13404 0 16 16 NT_STATUS_OK
ReadX 13404 16 2048 2048 NT_STATUS_OK
ReadX 13404 2064 2048 2048 NT_STATUS_OK
ReadX 13404 257 2048 2048 NT_STATUS_OK
ReadX 13404 385 2048 2048 NT_STATUS_OK
ReadX 13404 513 2048 2048 NT_STATUS_OK
ReadX 13404 641 2048 2048 NT_STATUS_OK
ReadX 13404 769 2048 2048 NT_STATUS_OK
ReadX 13404 897 2048 2048 NT_STATUS_OK
ReadX 13404 1025 2048 2048 NT_STATUS_OK
ReadX 13404 1153 2048 2048 NT_STATUS_OK
ReadX 13404 1281 2048 2048 NT_STATUS_OK
ReadX 13404 1409 2048 2048 NT_STATUS_OK
ReadX 13404 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13406 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13400 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13402 NT_STATUS_OK
Close 13394 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13409 NT_STATUS_OK
WriteX 13409 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13409 258 NT_STATUS_OK
WriteX 13409 0 10575 10575 NT_STATUS_OK
Flush 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13410 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 0 4096 4096 NT_STATUS_OK
Close 13404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13414 NT_STATUS_OK
LockX 13414 2147483538 1 NT_STATUS_OK
UnlockX 13414 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1005 NT_STATUS_OK
ReadX 13414 0 512 512 NT_STATUS_OK
ReadX 13414 512 512 512 NT_STATUS_OK
ReadX 13414 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1004 NT_STATUS_OK
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13415 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 1005 NT_STATUS_OK
ReadX 13415 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13416 NT_STATUS_OK
LockX 13416 2147483538 1 NT_STATUS_OK
UnlockX 13416 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13416 1005 NT_STATUS_OK
ReadX 13416 0 512 512 NT_STATUS_OK
ReadX 13416 512 512 512 NT_STATUS_OK
ReadX 13416 1024 512 512 NT_STATUS_OK
ReadX 13416 288 20 20 NT_STATUS_OK
ReadX 13416 308 2084 2084 NT_STATUS_OK
ReadX 13416 388 2084 2084 NT_STATUS_OK
ReadX 13416 388 2084 2084 NT_STATUS_OK
ReadX 13403 2157 1386 1386 NT_STATUS_OK
ReadX 13416 2472 399 399 NT_STATUS_OK
ReadX 13416 3072 1536 1536 NT_STATUS_OK
ReadX 13416 544 149 149 NT_STATUS_OK
ReadX 13416 693 485 485 NT_STATUS_OK
Close 13416 NT_STATUS_OK
ReadX 13403 2157 4096 4096 NT_STATUS_OK
ReadX 13403 6253 4096 4096 NT_STATUS_OK
ReadX 13403 10349 4096 4096 NT_STATUS_OK
ReadX 13403 14445 4096 4096 NT_STATUS_OK
ReadX 13403 18541 4096 4096 NT_STATUS_OK
ReadX 13403 22637 256 256 NT_STATUS_OK
ReadX 13403 22893 4096 4096 NT_STATUS_OK
ReadX 13403 26989 4096 4096 NT_STATUS_OK
ReadX 13403 31085 4096 4096 NT_STATUS_OK
ReadX 13403 35181 4096 4096 NT_STATUS_OK
ReadX 13403 39277 4096 4096 NT_STATUS_OK
ReadX 13403 43373 4096 4096 NT_STATUS_OK
ReadX 13403 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13403 2157 1024 1024 NT_STATUS_OK
ReadX 13403 1667 4688 4688 NT_STATUS_OK
ReadX 13403 6355 3516 3516 NT_STATUS_OK
ReadX 13403 9871 16384 16384 NT_STATUS_OK
ReadX 13403 26255 3771 3771 NT_STATUS_OK
ReadX 13403 30026 2048 2048 NT_STATUS_OK
ReadX 13403 32074 1024 1024 NT_STATUS_OK
ReadX 13403 33098 6652 6652 NT_STATUS_OK
ReadX 13403 39750 16384 16384 NT_STATUS_OK
ReadX 13403 56134 10496 10496 NT_STATUS_OK
ReadX 13403 66630 1784 1784 NT_STATUS_OK
ReadX 13403 68414 90 90 NT_STATUS_OK
ReadX 13403 68504 273 273 NT_STATUS_OK
ReadX 13403 68777 1600 1600 NT_STATUS_OK
ReadX 13403 70377 640 640 NT_STATUS_OK
ReadX 13403 71017 1280 1280 NT_STATUS_OK
ReadX 13403 72297 8464 8464 NT_STATUS_OK
ReadX 13403 80761 158 158 NT_STATUS_OK
ReadX 13403 80919 912 912 NT_STATUS_OK
ReadX 13403 81831 1980 1980 NT_STATUS_OK
ReadX 13403 83811 2256 2256 NT_STATUS_OK
ReadX 13403 86067 400 400 NT_STATUS_OK
ReadX 13403 86467 252 252 NT_STATUS_OK
ReadX 13403 86719 42 42 NT_STATUS_OK
ReadX 13403 86761 725 725 NT_STATUS_OK
ReadX 13403 2009 512 512 NT_STATUS_OK
ReadX 13403 3895 9 9 NT_STATUS_OK
ReadX 13403 3781 46 46 NT_STATUS_OK
ReadX 13403 4059 92 92 NT_STATUS_OK
ReadX 13403 3781 92 92 NT_STATUS_OK
ReadX 13403 3986 184 184 NT_STATUS_OK
ReadX 13403 3987 16384 16384 NT_STATUS_OK
ReadX 13403 3902 16384 16384 NT_STATUS_OK
ReadX 13403 3781 10240 10240 NT_STATUS_OK
ReadX 13403 3821 16384 16384 NT_STATUS_OK
ReadX 13403 3891 935 935 NT_STATUS_OK
ReadX 13403 4060 10240 10240 NT_STATUS_OK
ReadX 13403 4059 184 184 NT_STATUS_OK
ReadX 13403 256 184 184 NT_STATUS_OK
ReadX 13403 256 1026 1026 NT_STATUS_OK
ReadX 13403 3901 326 326 NT_STATUS_OK
ReadX 13403 3899 652 652 NT_STATUS_OK
ReadX 13403 256 2 2 NT_STATUS_OK
ReadX 13403 258 4948 4948 NT_STATUS_OK
Close 13403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13418 NT_STATUS_OK
Close 13418 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13421 NT_STATUS_OK
WriteX 13421 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13421 258 NT_STATUS_OK
WriteX 13421 0 65536 65536 NT_STATUS_OK
WriteX 13421 65536 65536 65536 NT_STATUS_OK
WriteX 13421 131072 65536 65536 NT_STATUS_OK
WriteX 13421 196608 65536 65536 NT_STATUS_OK
WriteX 13421 262144 65536 65536 NT_STATUS_OK
WriteX 13421 327680 65536 65536 NT_STATUS_OK
WriteX 13421 393216 65536 65536 NT_STATUS_OK
WriteX 13421 458752 65536 65536 NT_STATUS_OK
WriteX 13421 524288 65536 65536 NT_STATUS_OK
WriteX 13421 589824 35257 35257 NT_STATUS_OK
Close 13421 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13423 NT_STATUS_OK
Close 13423 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13426 NT_STATUS_OK
WriteX 13426 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 258 NT_STATUS_OK
WriteX 13426 0 65536 65536 NT_STATUS_OK
WriteX 13426 65536 65536 65536 NT_STATUS_OK
WriteX 13426 131072 65536 65536 NT_STATUS_OK
WriteX 13426 196608 65536 65536 NT_STATUS_OK
WriteX 13426 262144 65536 65536 NT_STATUS_OK
WriteX 13426 327680 65536 65536 NT_STATUS_OK
WriteX 13426 393216 65536 65536 NT_STATUS_OK
WriteX 13426 458752 65536 65536 NT_STATUS_OK
WriteX 13426 524288 65536 65536 NT_STATUS_OK
WriteX 13426 589824 57598 57598 NT_STATUS_OK
Close 13426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13428 NT_STATUS_OK
WriteX 13428 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13428 258 NT_STATUS_OK
WriteX 13428 0 12543 12543 NT_STATUS_OK
Flush 13428 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13430 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13432 NT_STATUS_OK
ReadX 13432 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13434 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 1005 NT_STATUS_OK
ReadX 13434 1938 24 24 NT_STATUS_OK
ReadX 13434 1920 276 276 NT_STATUS_OK
ReadX 13434 1918 14 14 NT_STATUS_OK
ReadX 13434 1918 7 7 NT_STATUS_OK
ReadX 13434 1919 12 12 NT_STATUS_OK
ReadX 13434 1919 8 8 NT_STATUS_OK
ReadX 13434 1917 15 15 NT_STATUS_OK
ReadX 13434 0 16 16 NT_STATUS_OK
ReadX 13434 16 2048 2048 NT_STATUS_OK
ReadX 13434 2064 2048 2048 NT_STATUS_OK
ReadX 13434 257 2048 2048 NT_STATUS_OK
ReadX 13434 385 2048 2048 NT_STATUS_OK
ReadX 13434 513 2048 2048 NT_STATUS_OK
ReadX 13434 641 2048 2048 NT_STATUS_OK
ReadX 13434 769 2048 2048 NT_STATUS_OK
ReadX 13434 897 2048 2048 NT_STATUS_OK
ReadX 13434 1025 2048 2048 NT_STATUS_OK
ReadX 13434 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13436 NT_STATUS_OK
Close 13436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13439 NT_STATUS_OK
WriteX 13439 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13439 258 NT_STATUS_OK
WriteX 13439 0 11588 11588 NT_STATUS_OK
Flush 13439 NT_STATUS_OK
Close 13439 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13440 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13442 NT_STATUS_OK
ReadX 13442 0 4096 4096 NT_STATUS_OK
Close 13434 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13444 NT_STATUS_OK
WriteX 13444 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13444 258 NT_STATUS_OK
WriteX 13444 0 11615 11615 NT_STATUS_OK
Flush 13444 NT_STATUS_OK
Close 13444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13446 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13450 NT_STATUS_OK
Close 13450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13453 NT_STATUS_OK
WriteX 13453 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13453 258 NT_STATUS_OK
WriteX 13453 0 65536 65536 NT_STATUS_OK
WriteX 13453 65536 16050 16050 NT_STATUS_OK
Close 13453 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13433 1939 64 64 NT_STATUS_OK
ReadX 13433 128 248 248 NT_STATUS_OK
ReadX 13433 128 568 568 NT_STATUS_OK
ReadX 13433 3872 1536 1536 NT_STATUS_OK
ReadX 13433 3456 2560 2560 NT_STATUS_OK
ReadX 13433 3136 512 512 NT_STATUS_OK
ReadX 13433 2880 4096 4096 NT_STATUS_OK
ReadX 13433 3264 3072 3072 NT_STATUS_OK
ReadX 13433 320 4096 4096 NT_STATUS_OK
ReadX 13433 1024 4096 4096 NT_STATUS_OK
ReadX 13433 3616 4096 4096 NT_STATUS_OK
ReadX 13433 1939 64 64 NT_STATUS_OK
ReadX 13433 128 248 248 NT_STATUS_OK
ReadX 13433 128 608 608 NT_STATUS_OK
ReadX 13433 2858 1024 1024 NT_STATUS_OK
ReadX 13433 2810 4096 4096 NT_STATUS_OK
ReadX 13433 2826 4096 4096 NT_STATUS_OK
ReadX 13433 2580 2048 2048 NT_STATUS_OK
ReadX 13433 2800 2560 2560 NT_STATUS_OK
ReadX 13433 2100 4096 4096 NT_STATUS_OK
ReadX 13433 2084 4096 4096 NT_STATUS_OK
ReadX 13433 868 4096 4096 NT_STATUS_OK
ReadX 13433 2324 4096 4096 NT_STATUS_OK
ReadX 13433 884 4096 4096 NT_STATUS_OK
ReadX 13433 2604 1024 1024 NT_STATUS_OK
ReadX 13433 580 4096 4096 NT_STATUS_OK
ReadX 13433 596 4096 4096 NT_STATUS_OK
ReadX 13433 2752 4096 4096 NT_STATUS_OK
ReadX 13433 2842 1024 1024 NT_STATUS_OK
ReadX 13433 660 4096 4096 NT_STATUS_OK
ReadX 13433 2720 4096 4096 NT_STATUS_OK
ReadX 13433 2736 4096 4096 NT_STATUS_OK
ReadX 13433 628 4096 4096 NT_STATUS_OK
ReadX 13433 2704 4096 4096 NT_STATUS_OK
ReadX 13433 1556 4096 4096 NT_STATUS_OK
ReadX 13433 576 4096 4096 NT_STATUS_OK
ReadX 13433 3168 1536 1536 NT_STATUS_OK
ReadX 13433 832 4096 4096 NT_STATUS_OK
ReadX 13433 1088 4096 4096 NT_STATUS_OK
ReadX 13433 1344 4096 4096 NT_STATUS_OK
ReadX 13433 1600 4096 4096 NT_STATUS_OK
ReadX 13433 1856 4096 4096 NT_STATUS_OK
ReadX 13433 2112 4096 4096 NT_STATUS_OK
ReadX 13433 1892 4096 4096 NT_STATUS_OK
ReadX 13433 820 4096 4096 NT_STATUS_OK
ReadX 13433 788 4096 4096 NT_STATUS_OK
ReadX 13433 1604 4096 4096 NT_STATUS_OK
ReadX 13433 3648 4096 4096 NT_STATUS_OK
ReadX 13433 2608 4096 4096 NT_STATUS_OK
ReadX 13433 548 4096 4096 NT_STATUS_OK
ReadX 13433 740 4096 4096 NT_STATUS_OK
ReadX 13433 1344 4096 4096 NT_STATUS_OK
ReadX 13433 3392 4096 4096 NT_STATUS_OK
ReadX 13433 3904 4096 4096 NT_STATUS_OK
ReadX 13433 644 4096 4096 NT_STATUS_OK
ReadX 13433 676 4096 4096 NT_STATUS_OK
ReadX 13433 2688 4096 4096 NT_STATUS_OK
ReadX 13433 320 4096 4096 NT_STATUS_OK
ReadX 13433 900 4096 4096 NT_STATUS_OK
ReadX 13433 1908 4096 4096 NT_STATUS_OK
ReadX 13433 852 4096 4096 NT_STATUS_OK
ReadX 13433 724 4096 4096 NT_STATUS_OK
ReadX 13433 2292 4096 4096 NT_STATUS_OK
ReadX 13433 612 4096 4096 NT_STATUS_OK
ReadX 13433 388 4096 4096 NT_STATUS_OK
ReadX 13433 2368 4096 4096 NT_STATUS_OK
ReadX 13433 2624 4096 4096 NT_STATUS_OK
ReadX 13433 500 4096 4096 NT_STATUS_OK
ReadX 13433 356 4096 4096 NT_STATUS_OK
ReadX 13433 1024 4096 4096 NT_STATUS_OK
ReadX 13433 576 4096 4096 NT_STATUS_OK
ReadX 13433 340 4096 4096 NT_STATUS_OK
ReadX 13433 420 4096 4096 NT_STATUS_OK
ReadX 13433 1600 4096 4096 NT_STATUS_OK
ReadX 13433 404 4096 4096 NT_STATUS_OK
ReadX 13433 1428 4096 4096 NT_STATUS_OK
ReadX 13433 2656 4096 4096 NT_STATUS_OK
ReadX 13433 2624 4096 4096 NT_STATUS_OK
ReadX 13433 452 4096 4096 NT_STATUS_OK
ReadX 13433 692 4096 4096 NT_STATUS_OK
ReadX 13433 564 4096 4096 NT_STATUS_OK
ReadX 13433 372 4096 4096 NT_STATUS_OK
ReadX 13433 468 4096 4096 NT_STATUS_OK
ReadX 13433 484 4096 4096 NT_STATUS_OK
ReadX 13433 1088 4096 4096 NT_STATUS_OK
ReadX 13433 1924 4096 4096 NT_STATUS_OK
ReadX 13433 2768 4096 4096 NT_STATUS_OK
ReadX 13433 832 4096 4096 NT_STATUS_OK
ReadX 13433 836 4096 4096 NT_STATUS_OK
ReadX 13433 1856 4096 4096 NT_STATUS_OK
ReadX 13433 2640 4096 4096 NT_STATUS_OK
ReadX 13433 436 4096 4096 NT_STATUS_OK
ReadX 13433 1828 4096 4096 NT_STATUS_OK
ReadX 13433 804 4096 4096 NT_STATUS_OK
ReadX 13433 1860 4096 4096 NT_STATUS_OK
ReadX 13433 1812 4096 4096 NT_STATUS_OK
ReadX 13433 756 4096 4096 NT_STATUS_OK
ReadX 13433 1636 4096 4096 NT_STATUS_OK
ReadX 13433 772 4096 4096 NT_STATUS_OK
ReadX 13433 2036 4096 4096 NT_STATUS_OK
ReadX 13433 1220 4096 4096 NT_STATUS_OK
ReadX 13433 1652 4096 4096 NT_STATUS_OK
ReadX 13433 2588 4096 4096 NT_STATUS_OK
ReadX 13433 916 4096 4096 NT_STATUS_OK
ReadX 13433 260 4096 4096 NT_STATUS_OK
ReadX 13433 932 4096 4096 NT_STATUS_OK
ReadX 13433 2624 4096 4096 NT_STATUS_OK
ReadX 13433 308 4096 4096 NT_STATUS_OK
ReadX 13433 292 4096 4096 NT_STATUS_OK
ReadX 13433 1140 4096 4096 NT_STATUS_OK
ReadX 13433 276 4096 4096 NT_STATUS_OK
ReadX 13433 2020 4096 4096 NT_STATUS_OK
ReadX 13433 2880 4096 4096 NT_STATUS_OK
ReadX 13433 516 4096 4096 NT_STATUS_OK
ReadX 13433 1844 4096 4096 NT_STATUS_OK
ReadX 13433 1124 4096 4096 NT_STATUS_OK
ReadX 13433 3136 4096 4096 NT_STATUS_OK
ReadX 13433 324 4096 4096 NT_STATUS_OK
ReadX 13433 1156 4096 4096 NT_STATUS_OK
ReadX 13433 1172 4096 4096 NT_STATUS_OK
ReadX 13433 2112 4096 4096 NT_STATUS_OK
ReadX 13433 2368 4096 4096 NT_STATUS_OK
ReadX 13433 964 4096 4096 NT_STATUS_OK
ReadX 13433 980 4096 4096 NT_STATUS_OK
ReadX 13433 1012 4096 4096 NT_STATUS_OK
ReadX 13433 532 4096 4096 NT_STATUS_OK
ReadX 13433 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13433 1620 4096 4096 NT_STATUS_OK
ReadX 13433 1604 4096 4096 NT_STATUS_OK
ReadX 13433 2116 4096 4096 NT_STATUS_OK
ReadX 13433 2132 4096 4096 NT_STATUS_OK
ReadX 13433 2148 4096 4096 NT_STATUS_OK
ReadX 13433 2276 4096 4096 NT_STATUS_OK
ReadX 13433 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13455 NT_STATUS_OK
Close 13455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13458 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 1004 NT_STATUS_OK
Close 13413 NT_STATUS_OK
WriteX 13458 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13458 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 1004 NT_STATUS_OK
Close 13415 NT_STATUS_OK
WriteX 13458 0 65536 65536 NT_STATUS_OK
WriteX 13458 65536 64850 64850 NT_STATUS_OK
Close 13458 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13460 NT_STATUS_OK
WriteX 13460 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13460 258 NT_STATUS_OK
ReadX 13433 2068 4096 4096 NT_STATUS_OK
ReadX 13433 1588 4096 4096 NT_STATUS_OK
ReadX 13433 1572 4096 4096 NT_STATUS_OK
WriteX 13460 0 18630 18630 NT_STATUS_OK
Flush 13460 NT_STATUS_OK
Close 13460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13462 NT_STATUS_OK
Close 13462 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13464 NT_STATUS_OK
ReadX 13464 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13433 612 4096 4096 NT_STATUS_OK
ReadX 13433 564 4096 4096 NT_STATUS_OK
ReadX 13433 1876 4096 4096 NT_STATUS_OK
ReadX 13433 628 4096 4096 NT_STATUS_OK
ReadX 13433 740 4096 4096 NT_STATUS_OK
ReadX 13433 724 4096 4096 NT_STATUS_OK
ReadX 13433 644 4096 4096 NT_STATUS_OK
ReadX 13433 2324 4096 4096 NT_STATUS_OK
ReadX 13433 660 4096 4096 NT_STATUS_OK
ReadX 13433 852 4096 4096 NT_STATUS_OK
ReadX 13433 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13433 2368 4096 4096 NT_STATUS_OK
ReadX 13433 1024 4096 4096 NT_STATUS_OK
ReadX 13433 320 4096 4096 NT_STATUS_OK
ReadX 13433 580 4096 4096 NT_STATUS_OK
ReadX 13433 3136 512 512 NT_STATUS_OK
ReadX 13433 2880 4096 4096 NT_STATUS_OK
Close 13433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 61440 4096 4096 NT_STATUS_OK
ReadX 13465 126976 4096 4096 NT_STATUS_OK
WriteX 13465 0 65536 65536 NT_STATUS_OK
WriteX 13465 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 61440 4096 4096 NT_STATUS_OK
ReadX 13466 126976 4096 4096 NT_STATUS_OK
ReadX 13466 192512 4096 4096 NT_STATUS_OK
ReadX 13466 258048 4096 4096 NT_STATUS_OK
WriteX 13466 0 65536 65536 NT_STATUS_OK
WriteX 13466 65536 65536 65536 NT_STATUS_OK
WriteX 13466 131072 65536 65536 NT_STATUS_OK
WriteX 13466 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 61440 4096 4096 NT_STATUS_OK
ReadX 13467 126976 4096 4096 NT_STATUS_OK
ReadX 13467 192512 4096 4096 NT_STATUS_OK
ReadX 13467 258048 4096 4096 NT_STATUS_OK
ReadX 13467 323584 4096 4096 NT_STATUS_OK
ReadX 13467 389120 4096 4096 NT_STATUS_OK
ReadX 13467 454656 4096 4096 NT_STATUS_OK
ReadX 13467 520192 4096 4096 NT_STATUS_OK
WriteX 13467 0 65536 65536 NT_STATUS_OK
WriteX 13467 65536 65536 65536 NT_STATUS_OK
WriteX 13467 131072 65536 65536 NT_STATUS_OK
WriteX 13467 196608 65536 65536 NT_STATUS_OK
WriteX 13467 262144 65536 65536 NT_STATUS_OK
WriteX 13467 327680 65536 65536 NT_STATUS_OK
WriteX 13467 393216 65536 65536 NT_STATUS_OK
WriteX 13467 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13469 NT_STATUS_OK
Close 13469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13470 NT_STATUS_OK
WriteX 13470 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13470 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13468 0 8192 8192 NT_STATUS_OK
Flush 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13468 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13468 0 8192 8192 NT_STATUS_OK
Flush 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13468 0 8192 8192 NT_STATUS_OK
Flush 13468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13468 0 8192 8192 NT_STATUS_OK
Flush 13468 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13472 NT_STATUS_OK
Close 13472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13464 NT_STATUS_OK
Close 13432 NT_STATUS_OK
Close 13465 NT_STATUS_OK
Close 13466 NT_STATUS_OK
Close 13467 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13475 NT_STATUS_OK
WriteX 13475 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13475 258 NT_STATUS_OK
WriteX 13475 0 62591 62591 NT_STATUS_OK
Close 13475 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13477 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13480 NT_STATUS_OK
WriteX 13480 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13480 258 NT_STATUS_OK
WriteX 13480 0 10845 10845 NT_STATUS_OK
Close 13480 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13482 NT_STATUS_OK
Close 13482 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13485 NT_STATUS_OK
WriteX 13485 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 258 NT_STATUS_OK
WriteX 13485 0 30118 30118 NT_STATUS_OK
Close 13485 NT_STATUS_OK
WriteX 13468 0 4096 4096 NT_STATUS_OK
WriteX 13470 0 64 64 NT_STATUS_OK
Close 13470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13468 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 61440 61440 NT_STATUS_OK
ReadX 13487 61440 4096 4096 NT_STATUS_OK
ReadX 13487 65536 61440 61440 NT_STATUS_OK
ReadX 13487 126976 4096 4096 NT_STATUS_OK
ReadX 13487 131072 61440 61440 NT_STATUS_OK
ReadX 13487 192512 4096 4096 NT_STATUS_OK
ReadX 13487 196608 61440 61440 NT_STATUS_OK
ReadX 13487 258048 4096 4096 NT_STATUS_OK
ReadX 13487 262144 61440 61440 NT_STATUS_OK
ReadX 13487 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 61440 61440 NT_STATUS_OK
ReadX 13488 61440 4096 4096 NT_STATUS_OK
ReadX 13488 65536 61440 61440 NT_STATUS_OK
ReadX 13488 126976 4096 4096 NT_STATUS_OK
ReadX 13488 131072 61440 61440 NT_STATUS_OK
ReadX 13488 192512 4096 4096 NT_STATUS_OK
ReadX 13488 196608 61440 61440 NT_STATUS_OK
ReadX 13488 258048 4096 4096 NT_STATUS_OK
ReadX 13488 262144 61440 61440 NT_STATUS_OK
ReadX 13488 323584 4096 4096 NT_STATUS_OK
ReadX 13488 327680 61440 61440 NT_STATUS_OK
ReadX 13488 389120 4096 4096 NT_STATUS_OK
ReadX 13488 393216 61440 61440 NT_STATUS_OK
ReadX 13488 454656 4096 4096 NT_STATUS_OK
ReadX 13488 458752 61440 61440 NT_STATUS_OK
ReadX 13488 520192 4096 4096 NT_STATUS_OK
ReadX 13488 524288 61440 61440 NT_STATUS_OK
ReadX 13488 585728 4096 4096 NT_STATUS_OK
ReadX 13488 589824 61440 61440 NT_STATUS_OK
ReadX 13488 651264 4096 4096 NT_STATUS_OK
ReadX 13488 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13489 NT_STATUS_OK
ReadX 13489 0 61440 61440 NT_STATUS_OK
ReadX 13489 61440 4096 4096 NT_STATUS_OK
ReadX 13489 65536 61440 61440 NT_STATUS_OK
ReadX 13489 126976 4096 4096 NT_STATUS_OK
ReadX 13489 131072 61440 61440 NT_STATUS_OK
ReadX 13489 192512 4096 4096 NT_STATUS_OK
ReadX 13489 196608 61440 61440 NT_STATUS_OK
ReadX 13489 258048 4096 4096 NT_STATUS_OK
ReadX 13489 262144 61440 61440 NT_STATUS_OK
ReadX 13489 323584 4096 4096 NT_STATUS_OK
ReadX 13489 327680 61440 61440 NT_STATUS_OK
ReadX 13489 389120 4096 4096 NT_STATUS_OK
ReadX 13489 393216 61440 61440 NT_STATUS_OK
ReadX 13489 454656 4096 4096 NT_STATUS_OK
ReadX 13489 458752 61440 61440 NT_STATUS_OK
ReadX 13489 520192 4096 4096 NT_STATUS_OK
ReadX 13489 524288 61440 61440 NT_STATUS_OK
ReadX 13489 585728 4096 4096 NT_STATUS_OK
ReadX 13489 589824 61440 61440 NT_STATUS_OK
ReadX 13489 651264 4096 4096 NT_STATUS_OK
ReadX 13489 655360 61440 61440 NT_STATUS_OK
ReadX 13489 716800 4096 4096 NT_STATUS_OK
ReadX 13489 720896 61440 61440 NT_STATUS_OK
ReadX 13489 782336 4096 4096 NT_STATUS_OK
ReadX 13489 786432 61440 61440 NT_STATUS_OK
ReadX 13489 847872 4096 4096 NT_STATUS_OK
ReadX 13489 851968 61440 61440 NT_STATUS_OK
ReadX 13489 913408 4096 4096 NT_STATUS_OK
ReadX 13489 917504 61440 61440 NT_STATUS_OK
ReadX 13489 978944 4096 4096 NT_STATUS_OK
ReadX 13489 983040 61440 61440 NT_STATUS_OK
ReadX 13489 1044480 4096 4096 NT_STATUS_OK
ReadX 13489 1048576 61440 61440 NT_STATUS_OK
ReadX 13489 1110016 4096 4096 NT_STATUS_OK
ReadX 13489 1114112 61440 61440 NT_STATUS_OK
ReadX 13489 1175552 4096 4096 NT_STATUS_OK
ReadX 13489 1179648 61440 61440 NT_STATUS_OK
ReadX 13489 1241088 4096 4096 NT_STATUS_OK
ReadX 13489 1245184 61440 61440 NT_STATUS_OK
ReadX 13489 1306624 4096 4096 NT_STATUS_OK
ReadX 13489 1310720 61440 61440 NT_STATUS_OK
ReadX 13489 1372160 4096 4096 NT_STATUS_OK
ReadX 13489 1376256 61440 61440 NT_STATUS_OK
ReadX 13489 1437696 4096 4096 NT_STATUS_OK
ReadX 13489 1441792 61440 61440 NT_STATUS_OK
ReadX 13489 1503232 4096 4096 NT_STATUS_OK
ReadX 13489 1507328 61440 61440 NT_STATUS_OK
ReadX 13489 1568768 4096 4096 NT_STATUS_OK
ReadX 13489 1572864 61440 61440 NT_STATUS_OK
ReadX 13489 1634304 4096 4096 NT_STATUS_OK
ReadX 13489 1638400 61440 61440 NT_STATUS_OK
ReadX 13489 1699840 4096 4096 NT_STATUS_OK
ReadX 13489 1703936 61440 61440 NT_STATUS_OK
ReadX 13489 1765376 4096 4096 NT_STATUS_OK
ReadX 13489 1769472 61440 61440 NT_STATUS_OK
ReadX 13489 1830912 4096 4096 NT_STATUS_OK
ReadX 13489 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13494 NT_STATUS_OK
ReadX 13494 0 4096 4096 NT_STATUS_OK
ReadX 13494 4096 4096 4096 NT_STATUS_OK
ReadX 13494 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13495 NT_STATUS_OK
Close 13495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13497 NT_STATUS_OK
ReadX 13497 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13498 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13499 NT_STATUS_OK
Close 13499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Close 13498 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13502 NT_STATUS_OK
ReadX 13502 0 8192 8192 NT_STATUS_OK
ReadX 13502 8192 8192 8192 NT_STATUS_OK
ReadX 13502 16384 8192 8192 NT_STATUS_OK
ReadX 13502 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13504 NT_STATUS_OK
Close 13504 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13502 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13507 NT_STATUS_OK
WriteX 13507 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13507 258 NT_STATUS_OK
WriteX 13507 0 10438 10438 NT_STATUS_OK
Close 13507 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13508 NT_STATUS_OK
Close 13508 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13510 NT_STATUS_OK
Close 13510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13511 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13512 NT_STATUS_OK
Close 13512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13513 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
ReadX 13516 4096 4096 4096 NT_STATUS_OK
ReadX 13516 8192 4096 4096 NT_STATUS_OK
ReadX 13516 12288 8192 8192 NT_STATUS_OK
ReadX 13516 20480 8192 8192 NT_STATUS_OK
ReadX 13516 28672 8192 8192 NT_STATUS_OK
ReadX 13516 36864 8192 8192 NT_STATUS_OK
ReadX 13516 45056 8192 8192 NT_STATUS_OK
ReadX 13516 53248 8192 8192 NT_STATUS_OK
ReadX 13516 61440 8192 8192 NT_STATUS_OK
ReadX 13516 69632 8192 8192 NT_STATUS_OK
ReadX 13516 77824 8192 8192 NT_STATUS_OK
ReadX 13516 86016 8192 8192 NT_STATUS_OK
ReadX 13516 94208 8192 8192 NT_STATUS_OK
ReadX 13516 102400 8192 8192 NT_STATUS_OK
ReadX 13516 110592 8192 8192 NT_STATUS_OK
ReadX 13516 118784 8192 8192 NT_STATUS_OK
ReadX 13516 126976 8192 8192 NT_STATUS_OK
ReadX 13516 135168 8192 8192 NT_STATUS_OK
ReadX 13516 143360 8192 8192 NT_STATUS_OK
ReadX 13516 151552 8192 8192 NT_STATUS_OK
ReadX 13516 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Close 13511 NT_STATUS_OK
Close 13513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13518 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13521 NT_STATUS_OK
WriteX 13521 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13521 258 NT_STATUS_OK
WriteX 13521 0 28489 28489 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13522 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13524 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13525 NT_STATUS_OK
Close 13525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 8192 8192 NT_STATUS_OK
ReadX 13528 8192 8192 8192 NT_STATUS_OK
ReadX 13528 16384 8192 8192 NT_STATUS_OK
ReadX 13528 24576 8192 8192 NT_STATUS_OK
ReadX 13528 32768 16384 16384 NT_STATUS_OK
ReadX 13528 49152 8192 8192 NT_STATUS_OK
ReadX 13528 57344 8192 8192 NT_STATUS_OK
ReadX 13528 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13530 NT_STATUS_OK
Close 13530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13533 NT_STATUS_OK
WriteX 13533 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13533 258 NT_STATUS_OK
WriteX 13533 0 29253 29253 NT_STATUS_OK
Close 13533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13534 NT_STATUS_OK
Close 13534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13535 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13537 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13540 NT_STATUS_OK
WriteX 13540 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13540 258 NT_STATUS_OK
WriteX 13540 0 30183 30183 NT_STATUS_OK
Close 13540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13543 NT_STATUS_OK
WriteX 13543 0 510 510 NT_STATUS_OK
WriteX 13543 510 512 512 NT_STATUS_OK
WriteX 13543 1022 510 510 NT_STATUS_OK
WriteX 13543 1532 510 510 NT_STATUS_OK
WriteX 13543 2042 168 168 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13544 NT_STATUS_OK
Close 13544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13546 NT_STATUS_OK
ReadX 13546 0 4096 4096 NT_STATUS_OK
WriteX 13546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13547 NT_STATUS_OK
ReadX 13547 61440 4096 4096 NT_STATUS_OK
ReadX 13547 126976 4096 4096 NT_STATUS_OK
WriteX 13547 0 65536 65536 NT_STATUS_OK
WriteX 13547 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 61440 4096 4096 NT_STATUS_OK
ReadX 13548 126976 4096 4096 NT_STATUS_OK
ReadX 13548 192512 4096 4096 NT_STATUS_OK
ReadX 13548 258048 4096 4096 NT_STATUS_OK
WriteX 13548 0 65536 65536 NT_STATUS_OK
WriteX 13548 65536 65536 65536 NT_STATUS_OK
WriteX 13548 131072 65536 65536 NT_STATUS_OK
WriteX 13548 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13549 NT_STATUS_OK
ReadX 13549 61440 4096 4096 NT_STATUS_OK
ReadX 13549 126976 4096 4096 NT_STATUS_OK
ReadX 13549 192512 4096 4096 NT_STATUS_OK
ReadX 13549 258048 4096 4096 NT_STATUS_OK
ReadX 13549 323584 4096 4096 NT_STATUS_OK
ReadX 13549 389120 4096 4096 NT_STATUS_OK
ReadX 13549 454656 4096 4096 NT_STATUS_OK
ReadX 13549 520192 4096 4096 NT_STATUS_OK
WriteX 13549 0 65536 65536 NT_STATUS_OK
WriteX 13549 65536 65536 65536 NT_STATUS_OK
WriteX 13549 131072 65536 65536 NT_STATUS_OK
WriteX 13549 196608 65536 65536 NT_STATUS_OK
WriteX 13549 262144 65536 65536 NT_STATUS_OK
WriteX 13549 327680 65536 65536 NT_STATUS_OK
WriteX 13549 393216 65536 65536 NT_STATUS_OK
WriteX 13549 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13546 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13548 NT_STATUS_OK
Close 13549 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13552 NT_STATUS_OK
Close 13552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13556 NT_STATUS_OK
Close 13556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13559 NT_STATUS_OK
Close 13559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13561 NT_STATUS_OK
Close 13561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13565 NT_STATUS_OK
Close 13565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13570 NT_STATUS_OK
Close 13570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13574 NT_STATUS_OK
Close 13574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13579 NT_STATUS_OK
Close 13579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13589 NT_STATUS_OK
Close 13589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13594 NT_STATUS_OK
Close 13594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13599 NT_STATUS_OK
Close 13599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13604 NT_STATUS_OK
Close 13604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13609 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13612 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13615 NT_STATUS_OK
Close 13615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13618 NT_STATUS_OK
WriteX 13618 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13618 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13618 0 65536 65536 NT_STATUS_OK
WriteX 13618 65536 65536 65536 NT_STATUS_OK
WriteX 13618 131072 65536 65536 NT_STATUS_OK
WriteX 13618 196608 65536 65536 NT_STATUS_OK
WriteX 13618 262144 26634 26634 NT_STATUS_OK
Close 13618 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13623 NT_STATUS_OK
Close 13623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13624 NT_STATUS_OK
Close 13624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
Close 13625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13626 NT_STATUS_OK
ReadX 13626 0 4096 4096 NT_STATUS_OK
ReadX 13626 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13627 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13634 NT_STATUS_OK
Close 13634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13636 NT_STATUS_OK
Close 13636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13640 NT_STATUS_OK
Close 13640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13643 NT_STATUS_OK
Close 13643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13645 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13649 NT_STATUS_OK
Close 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13654 NT_STATUS_OK
Close 13654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13659 NT_STATUS_OK
Close 13659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13664 NT_STATUS_OK
Close 13664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13674 NT_STATUS_OK
Close 13674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13683 NT_STATUS_OK
Close 13683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13688 NT_STATUS_OK
Close 13688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13691 NT_STATUS_OK
Close 13691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13693 NT_STATUS_OK
Close 13693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13703 NT_STATUS_OK
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 4096 4096 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
Close 13706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13707 NT_STATUS_OK
ReadX 13707 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13717 NT_STATUS_OK
Close 13717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13718 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13719 NT_STATUS_OK
ReadX 13719 0 4096 4096 NT_STATUS_OK
Close 13719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13720 NT_STATUS_OK
ReadX 13720 0 4096 4096 NT_STATUS_OK
Close 13720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13721 NT_STATUS_OK
ReadX 13721 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13707 NT_STATUS_OK
Close 13721 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13750 0 4096 4096 NT_STATUS_OK
Close 13750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13752 NT_STATUS_OK
ReadX 13752 0 4096 4096 NT_STATUS_OK
ReadX 13752 4096 4096 4096 NT_STATUS_OK
ReadX 13752 8192 4096 4096 NT_STATUS_OK
ReadX 13752 12288 4096 4096 NT_STATUS_OK
ReadX 13752 16384 4096 4096 NT_STATUS_OK
ReadX 13752 20480 4096 4096 NT_STATUS_OK
ReadX 13752 24576 4096 4096 NT_STATUS_OK
ReadX 13752 28672 4096 4096 NT_STATUS_OK
ReadX 13752 32768 4096 4096 NT_STATUS_OK
ReadX 13752 36864 4096 4096 NT_STATUS_OK
ReadX 13752 40960 4096 4096 NT_STATUS_OK
ReadX 13752 45056 4096 4096 NT_STATUS_OK
ReadX 13752 49152 4096 4096 NT_STATUS_OK
ReadX 13752 53248 4096 4096 NT_STATUS_OK
ReadX 13752 57344 4096 4096 NT_STATUS_OK
ReadX 13752 61440 4096 4096 NT_STATUS_OK
ReadX 13752 65536 4096 4096 NT_STATUS_OK
ReadX 13752 69632 4096 4096 NT_STATUS_OK
ReadX 13752 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
WriteX 13752 0 4096 4096 NT_STATUS_OK
Close 13752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13753 NT_STATUS_OK
SET_FILE_INFORMATION 13753 1004 NT_STATUS_OK
Close 13753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13754 NT_STATUS_OK
ReadX 13754 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13755 NT_STATUS_OK
Close 13755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13758 NT_STATUS_OK
WriteX 13758 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 258 NT_STATUS_OK
WriteX 13758 0 65536 65536 NT_STATUS_OK
WriteX 13758 65536 19979 19979 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
QUERY_FILE_INFORMATION 13759 1004 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
SET_FILE_INFORMATION 13759 1004 NT_STATUS_OK
WriteX 13759 0 4096 4096 NT_STATUS_OK
Flush 13759 NT_STATUS_OK
Close 13759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13760 NT_STATUS_OK
ReadX 13760 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
Close 13760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
Close 13762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13763 NT_STATUS_OK
ReadX 13763 0 4096 4096 NT_STATUS_OK
Close 13763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13764 NT_STATUS_OK
ReadX 13764 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13764 1004 NT_STATUS_OK
WriteX 13764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13765 NT_STATUS_OK
Close 13765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Close 13764 NT_STATUS_OK
Close 13754 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13767 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13770 NT_STATUS_OK
WriteX 13770 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13770 258 NT_STATUS_OK
WriteX 13770 0 65536 65536 NT_STATUS_OK
WriteX 13770 65536 17654 17654 NT_STATUS_OK
Close 13770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13771 NT_STATUS_OK
ReadX 13771 0 4096 4096 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
QUERY_FILE_INFORMATION 13771 1004 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
SET_FILE_INFORMATION 13771 1004 NT_STATUS_OK
WriteX 13771 0 4096 4096 NT_STATUS_OK
Flush 13771 NT_STATUS_OK
Close 13771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13772 NT_STATUS_OK
SET_FILE_INFORMATION 13772 1004 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13773 NT_STATUS_OK
ReadX 13773 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13774 NT_STATUS_OK
Close 13774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
ReadX 13776 4096 4096 4096 NT_STATUS_OK
ReadX 13776 8192 4096 4096 NT_STATUS_OK
ReadX 13776 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13776 16384 4096 4096 NT_STATUS_OK
ReadX 13776 20480 4096 4096 NT_STATUS_OK
ReadX 13776 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13778 NT_STATUS_OK
ReadX 13778 0 4096 4096 NT_STATUS_OK
Close 13778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13779 NT_STATUS_OK
ReadX 13779 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13779 1004 NT_STATUS_OK
WriteX 13779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13782 NT_STATUS_OK
Close 13782 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13785 NT_STATUS_OK
WriteX 13785 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 258 NT_STATUS_OK
WriteX 13785 0 65536 65536 NT_STATUS_OK
WriteX 13785 65536 19490 19490 NT_STATUS_OK
Close 13785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 0 4096 4096 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
QUERY_FILE_INFORMATION 13786 1004 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
SET_FILE_INFORMATION 13786 1004 NT_STATUS_OK
WriteX 13786 0 4096 4096 NT_STATUS_OK
Flush 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13787 NT_STATUS_OK
SET_FILE_INFORMATION 13787 1004 NT_STATUS_OK
Close 13787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13791 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13791 0 4096 4096 NT_STATUS_OK
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13793 NT_STATUS_OK
ReadX 13793 0 4096 4096 NT_STATUS_OK
ReadX 13793 4096 4096 4096 NT_STATUS_OK
ReadX 13793 8192 4096 4096 NT_STATUS_OK
ReadX 13793 12288 4096 4096 NT_STATUS_OK
ReadX 13793 16384 4096 4096 NT_STATUS_OK
ReadX 13793 20480 4096 4096 NT_STATUS_OK
ReadX 13793 24576 4096 4096 NT_STATUS_OK
ReadX 13793 28672 4096 4096 NT_STATUS_OK
ReadX 13793 32768 4096 4096 NT_STATUS_OK
ReadX 13793 36864 4096 4096 NT_STATUS_OK
ReadX 13793 40960 4096 4096 NT_STATUS_OK
ReadX 13793 45056 4096 4096 NT_STATUS_OK
ReadX 13793 49152 4096 4096 NT_STATUS_OK
ReadX 13793 53248 4096 4096 NT_STATUS_OK
ReadX 13793 57344 4096 4096 NT_STATUS_OK
ReadX 13793 61440 4096 4096 NT_STATUS_OK
ReadX 13793 65536 4096 4096 NT_STATUS_OK
ReadX 13793 69632 4096 4096 NT_STATUS_OK
ReadX 13793 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13793 1004 NT_STATUS_OK
WriteX 13793 0 4096 4096 NT_STATUS_OK
Close 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13794 NT_STATUS_OK
SET_FILE_INFORMATION 13794 1004 NT_STATUS_OK
Close 13794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13795 NT_STATUS_OK
ReadX 13795 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13799 NT_STATUS_OK
WriteX 13799 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13799 258 NT_STATUS_OK
WriteX 13799 0 65536 65536 NT_STATUS_OK
WriteX 13799 65536 8866 8866 NT_STATUS_OK
Close 13799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
WriteX 13800 0 4096 4096 NT_STATUS_OK
Flush 13800 NT_STATUS_OK
SET_FILE_INFORMATION 13800 1004 NT_STATUS_OK
WriteX 13800 0 4096 4096 NT_STATUS_OK
Flush 13800 NT_STATUS_OK
Close 13800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
Close 13802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13803 NT_STATUS_OK
ReadX 13803 0 4096 4096 NT_STATUS_OK
Close 13803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13804 NT_STATUS_OK
ReadX 13804 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13804 1004 NT_STATUS_OK
WriteX 13804 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13805 NT_STATUS_OK
Close 13805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13804 NT_STATUS_OK
Close 13795 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13807 NT_STATUS_OK
Close 13807 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13810 NT_STATUS_OK
WriteX 13810 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13810 258 NT_STATUS_OK
WriteX 13810 0 65536 65536 NT_STATUS_OK
WriteX 13810 65536 9298 9298 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13811 NT_STATUS_OK
ReadX 13811 0 4096 4096 NT_STATUS_OK
WriteX 13811 0 4096 4096 NT_STATUS_OK
Flush 13811 NT_STATUS_OK
SET_FILE_INFORMATION 13811 1004 NT_STATUS_OK
WriteX 13811 0 4096 4096 NT_STATUS_OK
Flush 13811 NT_STATUS_OK
Close 13811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13812 NT_STATUS_OK
SET_FILE_INFORMATION 13812 1004 NT_STATUS_OK
Close 13812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13813 NT_STATUS_OK
ReadX 13813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13814 NT_STATUS_OK
Close 13814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13817 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13817 0 4096 4096 NT_STATUS_OK
Close 13817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13818 NT_STATUS_OK
ReadX 13818 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13818 4096 4096 4096 NT_STATUS_OK
ReadX 13818 8192 4096 4096 NT_STATUS_OK
ReadX 13818 12288 4096 4096 NT_STATUS_OK
ReadX 13818 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13813 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 4096 4096 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13820 NT_STATUS_OK
ReadX 13820 0 4096 4096 NT_STATUS_OK
Close 13820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13821 NT_STATUS_OK
ReadX 13821 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13821 1004 NT_STATUS_OK
WriteX 13821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13822 NT_STATUS_OK
Close 13822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13818 NT_STATUS_OK
Close 13821 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13824 NT_STATUS_OK
Close 13824 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13827 NT_STATUS_OK
WriteX 13827 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13827 258 NT_STATUS_OK
WriteX 13827 0 65536 65536 NT_STATUS_OK
WriteX 13827 65536 11540 11540 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13828 NT_STATUS_OK
ReadX 13828 0 4096 4096 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
SET_FILE_INFORMATION 13828 1004 NT_STATUS_OK
WriteX 13828 0 4096 4096 NT_STATUS_OK
Flush 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13829 NT_STATUS_OK
SET_FILE_INFORMATION 13829 1004 NT_STATUS_OK
Close 13829 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13830 NT_STATUS_OK
ReadX 13830 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13831 NT_STATUS_OK
Close 13831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 61440 4096 4096 NT_STATUS_OK
ReadX 13833 126976 4096 4096 NT_STATUS_OK
WriteX 13833 0 65536 65536 NT_STATUS_OK
WriteX 13833 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13834 NT_STATUS_OK
ReadX 13834 61440 4096 4096 NT_STATUS_OK
ReadX 13834 126976 4096 4096 NT_STATUS_OK
ReadX 13834 192512 4096 4096 NT_STATUS_OK
ReadX 13834 258048 4096 4096 NT_STATUS_OK
WriteX 13834 0 65536 65536 NT_STATUS_OK
WriteX 13834 65536 65536 65536 NT_STATUS_OK
WriteX 13834 131072 65536 65536 NT_STATUS_OK
WriteX 13834 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13835 NT_STATUS_OK
ReadX 13835 61440 4096 4096 NT_STATUS_OK
ReadX 13835 126976 4096 4096 NT_STATUS_OK
ReadX 13835 192512 4096 4096 NT_STATUS_OK
ReadX 13835 258048 4096 4096 NT_STATUS_OK
ReadX 13835 323584 4096 4096 NT_STATUS_OK
ReadX 13835 389120 4096 4096 NT_STATUS_OK
ReadX 13835 454656 4096 4096 NT_STATUS_OK
ReadX 13835 520192 4096 4096 NT_STATUS_OK
WriteX 13835 0 65536 65536 NT_STATUS_OK
WriteX 13835 65536 65536 65536 NT_STATUS_OK
WriteX 13835 131072 65536 65536 NT_STATUS_OK
WriteX 13835 196608 65536 65536 NT_STATUS_OK
WriteX 13835 262144 65536 65536 NT_STATUS_OK
WriteX 13835 327680 65536 65536 NT_STATUS_OK
WriteX 13835 393216 65536 65536 NT_STATUS_OK
WriteX 13835 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13836 NT_STATUS_OK
ReadX 13836 0 4096 4096 NT_STATUS_OK
ReadX 13836 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13837 NT_STATUS_OK
WriteX 13837 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13837 258 NT_STATUS_OK
WriteX 13837 0 53 53 NT_STATUS_OK
Close 13837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13838 NT_STATUS_OK
Close 13838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13830 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Close 13833 NT_STATUS_OK
Close 13834 NT_STATUS_OK
Close 13835 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13836 8192 4096 4096 NT_STATUS_OK
ReadX 13836 12288 4096 4096 NT_STATUS_OK
WriteX 13840 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13840 258 NT_STATUS_OK
ReadX 13836 16384 4096 4096 NT_STATUS_OK
ReadX 13836 20480 4096 4096 NT_STATUS_OK
WriteX 13840 0 15360 15360 NT_STATUS_OK
Close 13840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13841 NT_STATUS_OK
ReadX 13841 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13841 1004 NT_STATUS_OK
WriteX 13841 0 4096 4096 NT_STATUS_OK
Close 13841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13842 NT_STATUS_OK
Close 13842 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13844 NT_STATUS_OK
ReadX 13844 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13845 NT_STATUS_OK
Close 13845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13844 4096 4096 4096 NT_STATUS_OK
ReadX 13844 8192 4096 4096 NT_STATUS_OK
ReadX 13844 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13847 NT_STATUS_OK
ReadX 13847 0 4096 4096 NT_STATUS_OK
ReadX 13847 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13848 NT_STATUS_OK
Close 13836 NT_STATUS_OK
ReadX 13848 0 4096 4096 NT_STATUS_OK
ReadX 13848 4096 4096 4096 NT_STATUS_OK
ReadX 13848 8192 4096 4096 NT_STATUS_OK
Close 13847 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13849 NT_STATUS_OK
WriteX 13849 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13849 258 NT_STATUS_OK
WriteX 13849 0 15360 15360 NT_STATUS_OK
Close 13849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13850 NT_STATUS_OK
ReadX 13850 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13850 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13850 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13853 NT_STATUS_OK
ReadX 13853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13854 NT_STATUS_OK
SET_FILE_INFORMATION 13854 1004 NT_STATUS_OK
Close 13854 NT_STATUS_OK
WriteX 13850 0 4096 4096 NT_STATUS_OK
Close 13850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13855 NT_STATUS_OK
Close 13855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13857 NT_STATUS_OK
ReadX 13857 0 4096 4096 NT_STATUS_OK
ReadX 13857 4096 4096 4096 NT_STATUS_OK
ReadX 13857 8192 4096 4096 NT_STATUS_OK
ReadX 13857 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13857 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13857 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13858 NT_STATUS_OK
ReadX 13858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13859 NT_STATUS_OK
WriteX 13859 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13859 258 NT_STATUS_OK
WriteX 13859 0 53 53 NT_STATUS_OK
Close 13859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13860 NT_STATUS_OK
Close 13860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13858 4096 4096 4096 NT_STATUS_OK
ReadX 13858 8192 4096 4096 NT_STATUS_OK
ReadX 13858 12288 4096 4096 NT_STATUS_OK
WriteX 13862 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13862 258 NT_STATUS_OK
WriteX 13862 0 12006 12006 NT_STATUS_OK
Close 13862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13863 NT_STATUS_OK
ReadX 13863 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13863 1004 NT_STATUS_OK
WriteX 13863 0 4096 4096 NT_STATUS_OK
Close 13863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13864 NT_STATUS_OK
Close 13864 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13866 NT_STATUS_OK
ReadX 13866 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13867 NT_STATUS_OK
Close 13867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13866 4096 4096 4096 NT_STATUS_OK
ReadX 13866 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13869 NT_STATUS_OK
WriteX 13869 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13869 258 NT_STATUS_OK
WriteX 13869 0 11991 11991 NT_STATUS_OK
Close 13869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13870 NT_STATUS_OK
ReadX 13870 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13870 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13870 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13871 NT_STATUS_OK
Close 13871 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13873 NT_STATUS_OK
ReadX 13873 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13874 NT_STATUS_OK
SET_FILE_INFORMATION 13874 1004 NT_STATUS_OK
Close 13874 NT_STATUS_OK
WriteX 13870 0 4096 4096 NT_STATUS_OK
Close 13870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13875 NT_STATUS_OK
Close 13875 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13877 NT_STATUS_OK
ReadX 13877 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13878 NT_STATUS_OK
Close 13878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13877 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13877 1004 NT_STATUS_OK
ReadX 13877 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13877 1004 NT_STATUS_OK
WriteX 13877 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13877 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13877 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13877 1004 NT_STATUS_OK
Close 13853 NT_STATUS_OK
WriteX 13857 0 19054 19054 NT_STATUS_OK
WriteX 13877 0 12288 12288 NT_STATUS_OK
Close 13873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13880 NT_STATUS_OK
Close 13880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13857 NT_STATUS_OK
Close 13877 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13882 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 61440 61440 NT_STATUS_OK
ReadX 13884 61440 4096 4096 NT_STATUS_OK
ReadX 13884 65536 61440 61440 NT_STATUS_OK
ReadX 13884 126976 4096 4096 NT_STATUS_OK
ReadX 13884 131072 61440 61440 NT_STATUS_OK
ReadX 13884 192512 4096 4096 NT_STATUS_OK
ReadX 13884 196608 61440 61440 NT_STATUS_OK
ReadX 13884 258048 4096 4096 NT_STATUS_OK
ReadX 13884 262144 61440 61440 NT_STATUS_OK
ReadX 13884 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13885 NT_STATUS_OK
ReadX 13885 0 61440 61440 NT_STATUS_OK
ReadX 13885 61440 4096 4096 NT_STATUS_OK
ReadX 13885 65536 61440 61440 NT_STATUS_OK
ReadX 13885 126976 4096 4096 NT_STATUS_OK
ReadX 13885 131072 61440 61440 NT_STATUS_OK
ReadX 13885 192512 4096 4096 NT_STATUS_OK
ReadX 13885 196608 61440 61440 NT_STATUS_OK
ReadX 13885 258048 4096 4096 NT_STATUS_OK
ReadX 13885 262144 61440 61440 NT_STATUS_OK
ReadX 13885 323584 4096 4096 NT_STATUS_OK
ReadX 13885 327680 61440 61440 NT_STATUS_OK
ReadX 13885 389120 4096 4096 NT_STATUS_OK
ReadX 13885 393216 61440 61440 NT_STATUS_OK
ReadX 13885 454656 4096 4096 NT_STATUS_OK
ReadX 13885 458752 61440 61440 NT_STATUS_OK
ReadX 13885 520192 4096 4096 NT_STATUS_OK
ReadX 13885 524288 61440 61440 NT_STATUS_OK
ReadX 13885 585728 4096 4096 NT_STATUS_OK
ReadX 13885 589824 61440 61440 NT_STATUS_OK
ReadX 13885 651264 4096 4096 NT_STATUS_OK
ReadX 13885 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13886 NT_STATUS_OK
ReadX 13886 0 61440 61440 NT_STATUS_OK
ReadX 13886 61440 4096 4096 NT_STATUS_OK
ReadX 13886 65536 61440 61440 NT_STATUS_OK
ReadX 13886 126976 4096 4096 NT_STATUS_OK
ReadX 13886 131072 61440 61440 NT_STATUS_OK
ReadX 13886 192512 4096 4096 NT_STATUS_OK
ReadX 13886 196608 61440 61440 NT_STATUS_OK
ReadX 13886 258048 4096 4096 NT_STATUS_OK
ReadX 13886 262144 61440 61440 NT_STATUS_OK
ReadX 13886 323584 4096 4096 NT_STATUS_OK
ReadX 13886 327680 61440 61440 NT_STATUS_OK
ReadX 13886 389120 4096 4096 NT_STATUS_OK
ReadX 13886 393216 61440 61440 NT_STATUS_OK
ReadX 13886 454656 4096 4096 NT_STATUS_OK
ReadX 13886 458752 61440 61440 NT_STATUS_OK
ReadX 13886 520192 4096 4096 NT_STATUS_OK
ReadX 13886 524288 61440 61440 NT_STATUS_OK
ReadX 13886 585728 4096 4096 NT_STATUS_OK
ReadX 13886 589824 61440 61440 NT_STATUS_OK
ReadX 13886 651264 4096 4096 NT_STATUS_OK
ReadX 13886 655360 61440 61440 NT_STATUS_OK
ReadX 13886 716800 4096 4096 NT_STATUS_OK
ReadX 13886 720896 61440 61440 NT_STATUS_OK
ReadX 13886 782336 4096 4096 NT_STATUS_OK
ReadX 13886 786432 61440 61440 NT_STATUS_OK
ReadX 13886 847872 4096 4096 NT_STATUS_OK
ReadX 13886 851968 61440 61440 NT_STATUS_OK
ReadX 13886 913408 4096 4096 NT_STATUS_OK
ReadX 13886 917504 61440 61440 NT_STATUS_OK
ReadX 13886 978944 4096 4096 NT_STATUS_OK
ReadX 13886 983040 61440 61440 NT_STATUS_OK
ReadX 13886 1044480 4096 4096 NT_STATUS_OK
ReadX 13886 1048576 61440 61440 NT_STATUS_OK
ReadX 13886 1110016 4096 4096 NT_STATUS_OK
ReadX 13886 1114112 61440 61440 NT_STATUS_OK
ReadX 13886 1175552 4096 4096 NT_STATUS_OK
ReadX 13886 1179648 61440 61440 NT_STATUS_OK
ReadX 13886 1241088 4096 4096 NT_STATUS_OK
ReadX 13886 1245184 61440 61440 NT_STATUS_OK
ReadX 13886 1306624 4096 4096 NT_STATUS_OK
ReadX 13886 1310720 61440 61440 NT_STATUS_OK
ReadX 13886 1372160 4096 4096 NT_STATUS_OK
ReadX 13886 1376256 61440 61440 NT_STATUS_OK
ReadX 13886 1437696 4096 4096 NT_STATUS_OK
ReadX 13886 1441792 61440 61440 NT_STATUS_OK
ReadX 13886 1503232 4096 4096 NT_STATUS_OK
ReadX 13886 1507328 61440 61440 NT_STATUS_OK
ReadX 13886 1568768 4096 4096 NT_STATUS_OK
ReadX 13886 1572864 61440 61440 NT_STATUS_OK
ReadX 13886 1634304 4096 4096 NT_STATUS_OK
ReadX 13886 1638400 61440 61440 NT_STATUS_OK
ReadX 13886 1699840 4096 4096 NT_STATUS_OK
ReadX 13886 1703936 61440 61440 NT_STATUS_OK
ReadX 13886 1765376 4096 4096 NT_STATUS_OK
ReadX 13886 1769472 61440 61440 NT_STATUS_OK
ReadX 13886 1830912 4096 4096 NT_STATUS_OK
ReadX 13886 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13887 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13889 NT_STATUS_OK
ReadX 13889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13890 NT_STATUS_OK
ReadX 13890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13892 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13893 NT_STATUS_OK
QUERY_FILE_INFORMATION 13893 1004 NT_STATUS_OK
WriteX 13893 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13893 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13894 NT_STATUS_OK
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13895 NT_STATUS_OK
WriteX 13895 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13895 258 NT_STATUS_OK
WriteX 13895 0 491 491 NT_STATUS_OK
Close 13895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13893 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13899 NT_STATUS_OK
WriteX 13899 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13899 258 NT_STATUS_OK
WriteX 13899 0 543 543 NT_STATUS_OK
Close 13899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13900 NT_STATUS_OK
ReadX 13900 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13884 NT_STATUS_OK
Close 13885 NT_STATUS_OK
Close 13886 NT_STATUS_OK
Close 13900 NT_STATUS_OK
Close 13888 NT_STATUS_OK
Close 13889 NT_STATUS_OK
Close 13890 NT_STATUS_OK
Close 13891 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13904 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13906 NT_STATUS_OK
ReadX 13906 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13907 NT_STATUS_OK
ReadX 13907 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13908 NT_STATUS_OK
ReadX 13908 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13912 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13913 NT_STATUS_OK
QUERY_FILE_INFORMATION 13913 1004 NT_STATUS_OK
WriteX 13913 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13913 258 NT_STATUS_OK
WriteX 13913 0 2048 2048 NT_STATUS_OK
Close 13913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13914 NT_STATUS_OK
ReadX 13914 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13914 0 4096 4096 NT_STATUS_OK
Flush 13914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13914 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13918 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13919 NT_STATUS_OK
WriteX 13919 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13919 258 NT_STATUS_OK
WriteX 13919 0 2048 2048 NT_STATUS_OK
Close 13919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13924 NT_STATUS_OK
Close 13924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13925 NT_STATUS_OK
WriteX 13925 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13925 258 NT_STATUS_OK
WriteX 13925 0 2048 2048 NT_STATUS_OK
Close 13925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13926 NT_STATUS_OK
ReadX 13926 0 2048 2048 NT_STATUS_OK
ReadX 13904 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13908 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13920 0 4096 4096 NT_STATUS_OK
WriteX 13904 0 8192 8192 NT_STATUS_OK
WriteX 13905 0 4096 4096 NT_STATUS_OK
WriteX 13906 0 4096 4096 NT_STATUS_OK
ReadX 13920 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13904 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13929 NT_STATUS_OK
ReadX 13929 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13930 NT_STATUS_OK
QUERY_FILE_INFORMATION 13930 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13929 NT_STATUS_OK
Close 13905 NT_STATUS_OK
Close 13906 NT_STATUS_OK
Close 13907 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Close 13904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13932 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13937 NT_STATUS_OK
ReadX 13937 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13938 NT_STATUS_OK
ReadX 13938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13939 NT_STATUS_OK
ReadX 13939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13940 NT_STATUS_OK
ReadX 13940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13941 NT_STATUS_OK
ReadX 13941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13942 NT_STATUS_OK
ReadX 13942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13950 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 1004 NT_STATUS_OK
WriteX 13950 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13950 258 NT_STATUS_OK
WriteX 13950 0 2048 2048 NT_STATUS_OK
Close 13950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13951 NT_STATUS_OK
ReadX 13951 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13952 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13953 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13958 NT_STATUS_OK
QUERY_FILE_INFORMATION 13958 1004 NT_STATUS_OK
WriteX 13958 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13958 258 NT_STATUS_OK
WriteX 13958 0 2048 2048 NT_STATUS_OK
Close 13958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13951 0 4096 4096 NT_STATUS_OK
Flush 13951 NT_STATUS_OK
WriteX 13959 0 4096 4096 NT_STATUS_OK
Flush 13959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13951 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13959 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13953 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13960 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13961 NT_STATUS_OK
WriteX 13961 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13961 258 NT_STATUS_OK
WriteX 13961 0 4096 4096 NT_STATUS_OK
Close 13961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13962 NT_STATUS_OK
ReadX 13962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13963 NT_STATUS_OK
Close 13963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13964 NT_STATUS_OK
WriteX 13964 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13964 258 NT_STATUS_OK
WriteX 13964 0 4096 4096 NT_STATUS_OK
Close 13964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13965 0 4096 4096 NT_STATUS_OK
Close 13962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13945 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Close 13942 NT_STATUS_OK
Close 13943 NT_STATUS_OK
Close 13944 NT_STATUS_OK
Close 13940 NT_STATUS_OK
Close 13933 NT_STATUS_OK
Close 13934 NT_STATUS_OK
Close 13937 NT_STATUS_OK
Close 13938 NT_STATUS_OK
Close 13935 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13965 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13968 NT_STATUS_OK
Close 13968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13970 NT_STATUS_OK
ReadX 13970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13971 NT_STATUS_OK
Close 13971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13972 NT_STATUS_OK
WriteX 13972 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13972 258 NT_STATUS_OK
WriteX 13972 0 2048 2048 NT_STATUS_OK
Close 13972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13974 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13975 NT_STATUS_OK
ReadX 13975 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13977 NT_STATUS_OK
ReadX 13977 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13978 NT_STATUS_OK
ReadX 13978 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13980 NT_STATUS_OK
ReadX 13980 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13981 NT_STATUS_OK
ReadX 13981 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13982 NT_STATUS_OK
ReadX 13982 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13983 NT_STATUS_OK
ReadX 13983 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13984 NT_STATUS_OK
ReadX 13984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13986 NT_STATUS_OK
ReadX 13986 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13987 NT_STATUS_OK
QUERY_FILE_INFORMATION 13987 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13970 NT_STATUS_OK
Close 13973 NT_STATUS_OK
Close 13985 NT_STATUS_OK
Close 13980 NT_STATUS_OK
Close 13981 NT_STATUS_OK
Close 13982 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Close 13984 NT_STATUS_OK
Close 13986 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Close 13975 NT_STATUS_OK
Close 13978 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Close 13976 NT_STATUS_OK
Close 13977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13989 NT_STATUS_OK
QUERY_FILE_INFORMATION 13989 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13992 NT_STATUS_OK
ReadX 13992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13994 NT_STATUS_OK
ReadX 13994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13996 NT_STATUS_OK
ReadX 13996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13997 NT_STATUS_OK
ReadX 13997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13999 NT_STATUS_OK
ReadX 13999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14004 NT_STATUS_OK
ReadX 14004 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 14008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14009 NT_STATUS_OK
QUERY_FILE_INFORMATION 14009 1004 NT_STATUS_OK
WriteX 14009 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14009 258 NT_STATUS_OK
WriteX 14009 0 2048 2048 NT_STATUS_OK
Close 14009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14013 NT_STATUS_OK
ReadX 14013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14014 NT_STATUS_OK
ReadX 14014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 14020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14021 NT_STATUS_OK
QUERY_FILE_INFORMATION 14021 1004 NT_STATUS_OK
WriteX 14021 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14021 258 NT_STATUS_OK
WriteX 14021 0 2048 2048 NT_STATUS_OK
Close 14021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14022 NT_STATUS_OK
ReadX 14022 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14024 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 14028 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14029 NT_STATUS_OK
QUERY_FILE_INFORMATION 14029 1004 NT_STATUS_OK
WriteX 14029 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14029 258 NT_STATUS_OK
WriteX 14029 0 2048 2048 NT_STATUS_OK
Close 14029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14030 NT_STATUS_OK
ReadX 14030 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
WriteX 14022 0 4096 4096 NT_STATUS_OK
Flush 14022 NT_STATUS_OK
WriteX 14030 0 4096 4096 NT_STATUS_OK
Flush 14030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 14022 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 14030 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14012 4096 16384 16384 NT_STATUS_OK
ReadX 13992 4096 16384 16384 NT_STATUS_OK
ReadX 14024 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14031 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 2048 2048 NT_STATUS_OK
WriteX 14032 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 14033 NT_STATUS_OK
QUERY_FILE_INFORMATION 14033 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 14033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 14032 NT_STATUS_OK
Close 14016 NT_STATUS_OK
Close 14004 NT_STATUS_OK
Close 13996 NT_STATUS_OK
Close 14012 NT_STATUS_OK
Close 14013 NT_STATUS_OK
Close 14014 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 14024 NT_STATUS_OK
Close 13998 NT_STATUS_OK
Close 14001 NT_STATUS_OK
Close 14002 NT_STATUS_OK
Close 13999 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Close 13992 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Close 13994 NT_STATUS_OK
Close 13995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 14035 NT_STATUS_OK
QUERY_FILE_INFORMATION 14035 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 14035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 14037 NT_STATUS_OK
QUERY_FILE_INFORMATION 14037 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 14037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14044 NT_STATUS_OK
ReadX 14044 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14040 4096 16384 16384 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
WriteX 14041 0 4096 4096 NT_STATUS_OK
WriteX 14042 0 4096 4096 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14047 NT_STATUS_OK
ReadX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14048 NT_STATUS_OK
ReadX 14048 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14049 NT_STATUS_OK
ReadX 14049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14051 NT_STATUS_OK
ReadX 14051 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14053 NT_STATUS_OK
ReadX 14053 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14054 NT_STATUS_OK
ReadX 14054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14055 NT_STATUS_OK
ReadX 14055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14056 NT_STATUS_OK
ReadX 14056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 0 8192 8192 NT_STATUS_OK
ReadX 14046 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14060 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14060 0 4096 4096 NT_STATUS_OK
ReadX 14060 4096 4096 4096 NT_STATUS_OK
ReadX 14060 8192 4096 4096 NT_STATUS_OK
WriteX 14046 0 4096 4096 NT_STATUS_OK
WriteX 14047 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 14061 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14061 0 4096 4096 NT_STATUS_OK
ReadX 14061 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 14040 0 4096 4096 NT_STATUS_OK
WriteX 14041 0 4096 4096 NT_STATUS_OK
WriteX 14042 0 4096 4096 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 14065 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14066 NT_STATUS_OK
QUERY_FILE_INFORMATION 14066 1004 NT_STATUS_OK
WriteX 14066 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14066 258 NT_STATUS_OK
WriteX 14066 0 2048 2048 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14068 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
ReadX 14069 4096 4096 4096 NT_STATUS_OK
WriteX 14069 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14069 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14070 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14070 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
ReadX 14071 4096 4096 4096 NT_STATUS_OK
WriteX 14071 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 14072 NT_STATUS_OK
QUERY_FILE_INFORMATION 14072 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 14072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 14059 NT_STATUS_OK
Close 14044 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Close 14041 NT_STATUS_OK
Close 14042 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14057 NT_STATUS_OK
Close 14053 NT_STATUS_OK
Close 14054 NT_STATUS_OK
Close 14055 NT_STATUS_OK
Close 14056 NT_STATUS_OK
Close 14058 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Close 14047 NT_STATUS_OK
Close 14050 NT_STATUS_OK
Close 14051 NT_STATUS_OK
Close 14048 NT_STATUS_OK
Close 14049 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14060 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 14074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14074 0 4096 4096 NT_STATUS_OK
ReadX 14074 4096 4096 4096 NT_STATUS_OK
ReadX 14074 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14075 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14078 NT_STATUS_OK
ReadX 14078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14079 NT_STATUS_OK
ReadX 14079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14080 NT_STATUS_OK
ReadX 14080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14081 NT_STATUS_OK
ReadX 14081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14082 NT_STATUS_OK
ReadX 14082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14084 NT_STATUS_OK
ReadX 14084 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14085 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 4096 4096 NT_STATUS_OK
ReadX 14075 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 14091 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14092 NT_STATUS_OK
QUERY_FILE_INFORMATION 14092 1004 NT_STATUS_OK
WriteX 14092 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14092 258 NT_STATUS_OK
WriteX 14092 0 2048 2048 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 14093 NT_STATUS_OK
ReadX 14093 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 14093 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 9757 NT_STATUS_OK
Close 9757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9758 NT_STATUS_OK
QUERY_FILE_INFORMATION 9758 1004 NT_STATUS_OK
WriteX 9758 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9758 258 NT_STATUS_OK
WriteX 9758 0 2048 2048 NT_STATUS_OK
Close 9758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9759 NT_STATUS_OK
ReadX 9759 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 9759 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14082 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 9760 NT_STATUS_OK
QUERY_FILE_INFORMATION 9760 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 9760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 14086 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Close 14087 NT_STATUS_OK
Close 14075 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14079 NT_STATUS_OK
Close 14080 NT_STATUS_OK
Close 14077 NT_STATUS_OK
Close 14078 NT_STATUS_OK
Close 14082 NT_STATUS_OK
Close 14083 NT_STATUS_OK
Close 14084 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 9762 NT_STATUS_OK
QUERY_FILE_INFORMATION 9762 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 9762 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9764 NT_STATUS_OK
ReadX 9764 61440 4096 4096 NT_STATUS_OK
ReadX 9764 126976 4096 4096 NT_STATUS_OK
WriteX 9764 0 65536 65536 NT_STATUS_OK
WriteX 9764 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9765 NT_STATUS_OK
ReadX 9765 61440 4096 4096 NT_STATUS_OK
ReadX 9765 126976 4096 4096 NT_STATUS_OK
ReadX 9765 192512 4096 4096 NT_STATUS_OK
ReadX 9765 258048 4096 4096 NT_STATUS_OK
WriteX 9765 0 65536 65536 NT_STATUS_OK
WriteX 9765 65536 65536 65536 NT_STATUS_OK
WriteX 9765 131072 65536 65536 NT_STATUS_OK
WriteX 9765 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9766 NT_STATUS_OK
ReadX 9766 61440 4096 4096 NT_STATUS_OK
ReadX 9766 126976 4096 4096 NT_STATUS_OK
ReadX 9766 192512 4096 4096 NT_STATUS_OK
ReadX 9766 258048 4096 4096 NT_STATUS_OK
ReadX 9766 323584 4096 4096 NT_STATUS_OK
ReadX 9766 389120 4096 4096 NT_STATUS_OK
ReadX 9766 454656 4096 4096 NT_STATUS_OK
ReadX 9766 520192 4096 4096 NT_STATUS_OK
WriteX 9766 0 65536 65536 NT_STATUS_OK
WriteX 9766 65536 65536 65536 NT_STATUS_OK
WriteX 9766 131072 65536 65536 NT_STATUS_OK
WriteX 9766 196608 65536 65536 NT_STATUS_OK
WriteX 9766 262144 65536 65536 NT_STATUS_OK
WriteX 9766 327680 65536 65536 NT_STATUS_OK
WriteX 9766 393216 65536 65536 NT_STATUS_OK
WriteX 9766 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9767 NT_STATUS_OK
ReadX 9767 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9767 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9767 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9767 8192 4096 4096 NT_STATUS_OK
ReadX 9767 12288 4096 4096 NT_STATUS_OK
ReadX 9767 16384 4096 4096 NT_STATUS_OK
ReadX 9767 20480 4096 4096 NT_STATUS_OK
ReadX 9767 24576 4096 4096 NT_STATUS_OK
ReadX 9767 28672 4096 4096 NT_STATUS_OK
ReadX 9767 32768 4096 4096 NT_STATUS_OK
ReadX 9767 36864 4096 4096 NT_STATUS_OK
ReadX 9767 40960 4096 4096 NT_STATUS_OK
ReadX 9767 45056 4096 4096 NT_STATUS_OK
ReadX 9767 49152 4096 4096 NT_STATUS_OK
ReadX 9767 53248 4096 4096 NT_STATUS_OK
ReadX 9767 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9767 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 9768 NT_STATUS_OK
Close 9768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 9764 NT_STATUS_OK
Close 9765 NT_STATUS_OK
Close 9766 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 9770 NT_STATUS_OK
WriteX 9770 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9770 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9770 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9770 1004 NT_STATUS_OK
WriteX 9770 0 57088 57088 NT_STATUS_OK
WriteX 9770 0 4096 4096 NT_STATUS_OK
Flush 9770 NT_STATUS_OK
Close 9767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 9771 NT_STATUS_OK
SET_FILE_INFORMATION 9771 1004 NT_STATUS_OK
Close 9771 NT_STATUS_OK
SET_FILE_INFORMATION 9770 1004 NT_STATUS_OK
WriteX 9770 0 4096 4096 NT_STATUS_OK
Close 9770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 9772 NT_STATUS_OK
Close 9772 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9774 NT_STATUS_OK
ReadX 9774 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9774 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 9775 NT_STATUS_OK
WriteX 9775 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9775 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9775 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9775 1004 NT_STATUS_OK
WriteX 9775 0 51456 51456 NT_STATUS_OK
WriteX 9775 0 4096 4096 NT_STATUS_OK
Flush 9775 NT_STATUS_OK
SET_FILE_INFORMATION 9775 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9775 1004 NT_STATUS_OK
WriteX 9775 0 4096 4096 NT_STATUS_OK
Close 9775 NT_STATUS_OK
Close 9774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 9777 NT_STATUS_OK
Close 9777 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9779 NT_STATUS_OK
ReadX 9779 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9779 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9781 NT_STATUS_OK
Close 9781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 9784 NT_STATUS_OK
WriteX 9784 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9784 258 NT_STATUS_OK
WriteX 9784 0 53077 53077 NT_STATUS_OK
Close 9784 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 9785 NT_STATUS_OK
WriteX 9785 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9785 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 9785 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 65536 65536 NT_STATUS_OK
WriteX 9785 65536 1856 1856 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Flush 9785 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9785 1004 NT_STATUS_OK
WriteX 9785 0 4096 4096 NT_STATUS_OK
Close 9785 NT_STATUS_OK
Close 9779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 9787 NT_STATUS_OK
Close 9787 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9789 NT_STATUS_OK
ReadX 9789 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9791 NT_STATUS_OK
Close 9791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 9794 NT_STATUS_OK
WriteX 9794 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9794 258 NT_STATUS_OK
WriteX 9794 0 7983 7983 NT_STATUS_OK
Close 9794 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9796 NT_STATUS_OK
Close 9796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 9799 NT_STATUS_OK
WriteX 9799 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9799 258 NT_STATUS_OK
WriteX 9799 0 65536 65536 NT_STATUS_OK
WriteX 9799 65536 65536 65536 NT_STATUS_OK
WriteX 9799 131072 65536 65536 NT_STATUS_OK
WriteX 9799 196608 65536 65536 NT_STATUS_OK
WriteX 9799 262144 65536 65536 NT_STATUS_OK
WriteX 9799 327680 65536 65536 NT_STATUS_OK
WriteX 9799 393216 65536 65536 NT_STATUS_OK
WriteX 9799 458752 46731 46731 NT_STATUS_OK
Close 9799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 9800 NT_STATUS_OK
WriteX 9800 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9800 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9789 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 65536 65536 NT_STATUS_OK
WriteX 9800 65536 22848 22848 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Flush 9800 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 9800 1004 NT_STATUS_OK
WriteX 9800 0 4096 4096 NT_STATUS_OK
Close 9800 NT_STATUS_OK
Close 9789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 9802 NT_STATUS_OK
Close 9802 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 9804 NT_STATUS_OK
ReadX 9804 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9804 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9805 NT_STATUS_OK
ReadX 9805 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9805 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 9805 1004 NT_STATUS_OK
ReadX 9805 8192 4096 4096 NT_STATUS_OK
ReadX 9805 12288 4096 4096 NT_STATUS_OK
ReadX 9805 16384 4096 4096 NT_STATUS_OK
ReadX 9805 20480 4096 4096 NT_STATUS_OK
ReadX 9805 24576 4096 4096 NT_STATUS_OK
ReadX 9805 28672 4096 4096 NT_STATUS_OK
ReadX 9805 32768 4096 4096 NT_STATUS_OK
ReadX 9805 36864 4096 4096 NT_STATUS_OK
ReadX 9805 40960 4096 4096 NT_STATUS_OK
ReadX 9805 45056 4096 4096 NT_STATUS_OK
ReadX 9805 49152 4096 4096 NT_STATUS_OK
ReadX 9805 53248 4096 4096 NT_STATUS_OK
ReadX 9805 57344 4096 4096 NT_STATUS_OK
ReadX 9805 61440 4096 4096 NT_STATUS_OK
ReadX 9805 65536 4096 4096 NT_STATUS_OK
ReadX 9805 69632 4096 4096 NT_STATUS_OK
ReadX 9805 73728 4096 4096 NT_STATUS_OK
ReadX 9805 77824 4096 4096 NT_STATUS_OK
ReadX 9805 81920 4096 4096 NT_STATUS_OK
ReadX 9805 86016 4096 4096 NT_STATUS_OK
ReadX 9805 90112 4096 4096 NT_STATUS_OK
ReadX 9805 94208 4096 4096 NT_STATUS_OK
ReadX 9805 98304 4096 4096 NT_STATUS_OK
ReadX 9805 102400 4096 4096 NT_STATUS_OK
ReadX 9805 106496 4096 4096 NT_STATUS_OK
ReadX 9805 110592 4096 4096 NT_STATUS_OK
ReadX 9805 114688 4096 4096 NT_STATUS_OK
ReadX 9805 118784 4096 4096 NT_STATUS_OK
ReadX 9805 122880 4096 4096 NT_STATUS_OK
ReadX 9805 126976 4096 4096 NT_STATUS_OK
ReadX 9805 131072 4096 4096 NT_STATUS_OK
ReadX 9805 135168 4096 4096 NT_STATUS_OK
ReadX 9805 139264 4096 4096 NT_STATUS_OK
ReadX 9805 143360 4096 4096 NT_STATUS_OK
ReadX 9805 147456 4096 4096 NT_STATUS_OK
ReadX 9805 151552 4096 4096 NT_STATUS_OK
ReadX 9805 155648 4096 4096 NT_STATUS_OK
ReadX 9805 159744 4096 4096 NT_STATUS_OK
ReadX 9805 163840 4096 4096 NT_STATUS_OK
ReadX 9805 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9805 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 9806 NT_STATUS_OK
Close 9806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 9804 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 9808 NT_STATUS_OK
WriteX 9808 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9808 258 NT_STATUS_OK
Close 9805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 9809 NT_STATUS_OK
SET_FILE_INFORMATION 9809 1004 NT_STATUS_OK
Close 9809 NT_STATUS_OK
WriteX 9808 0 42388 42388 NT_STATUS_OK
Close 9808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 9810 NT_STATUS_OK
Close 9810 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9812 NT_STATUS_OK
ReadX 9812 0 4096 4096 NT_STATUS_OK
ReadX 9812 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 9813 NT_STATUS_OK
WriteX 9813 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9813 258 NT_STATUS_OK
SET_FILE_INFORMATION 9813 1004 NT_STATUS_OK
WriteX 9813 0 42652 42652 NT_STATUS_OK
Close 9813 NT_STATUS_OK
Close 9812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 9815 NT_STATUS_OK
Close 9815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 9817 NT_STATUS_OK
ReadX 9817 0 4096 4096 NT_STATUS_OK
ReadX 9817 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9819 NT_STATUS_OK
Close 9819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 9822 NT_STATUS_OK
WriteX 9822 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9822 258 NT_STATUS_OK
WriteX 9822 0 65536 65536 NT_STATUS_OK
WriteX 9822 65536 49 49 NT_STATUS_OK
Close 9822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9823 NT_STATUS_OK
ReadX 9823 0 61440 61440 NT_STATUS_OK
ReadX 9823 61440 4096 4096 NT_STATUS_OK
ReadX 9823 65536 61440 61440 NT_STATUS_OK
ReadX 9823 126976 4096 4096 NT_STATUS_OK
ReadX 9823 131072 61440 61440 NT_STATUS_OK
ReadX 9823 192512 4096 4096 NT_STATUS_OK
ReadX 9823 196608 61440 61440 NT_STATUS_OK
ReadX 9823 258048 4096 4096 NT_STATUS_OK
ReadX 9823 262144 61440 61440 NT_STATUS_OK
ReadX 9823 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9824 NT_STATUS_OK
ReadX 9824 0 61440 61440 NT_STATUS_OK
ReadX 9824 61440 4096 4096 NT_STATUS_OK
ReadX 9824 65536 61440 61440 NT_STATUS_OK
ReadX 9824 126976 4096 4096 NT_STATUS_OK
ReadX 9824 131072 61440 61440 NT_STATUS_OK
ReadX 9824 192512 4096 4096 NT_STATUS_OK
ReadX 9824 196608 61440 61440 NT_STATUS_OK
ReadX 9824 258048 4096 4096 NT_STATUS_OK
ReadX 9824 262144 61440 61440 NT_STATUS_OK
ReadX 9824 323584 4096 4096 NT_STATUS_OK
ReadX 9824 327680 61440 61440 NT_STATUS_OK
ReadX 9824 389120 4096 4096 NT_STATUS_OK
ReadX 9824 393216 61440 61440 NT_STATUS_OK
ReadX 9824 454656 4096 4096 NT_STATUS_OK
ReadX 9824 458752 61440 61440 NT_STATUS_OK
ReadX 9824 520192 4096 4096 NT_STATUS_OK
ReadX 9824 524288 61440 61440 NT_STATUS_OK
ReadX 9824 585728 4096 4096 NT_STATUS_OK
ReadX 9824 589824 61440 61440 NT_STATUS_OK
ReadX 9824 651264 4096 4096 NT_STATUS_OK
ReadX 9824 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9825 NT_STATUS_OK
ReadX 9825 0 61440 61440 NT_STATUS_OK
ReadX 9825 61440 4096 4096 NT_STATUS_OK
ReadX 9825 65536 61440 61440 NT_STATUS_OK
ReadX 9825 126976 4096 4096 NT_STATUS_OK
ReadX 9825 131072 61440 61440 NT_STATUS_OK
ReadX 9825 192512 4096 4096 NT_STATUS_OK
ReadX 9825 196608 61440 61440 NT_STATUS_OK
ReadX 9825 258048 4096 4096 NT_STATUS_OK
ReadX 9825 262144 61440 61440 NT_STATUS_OK
ReadX 9825 323584 4096 4096 NT_STATUS_OK
ReadX 9825 327680 61440 61440 NT_STATUS_OK
ReadX 9825 389120 4096 4096 NT_STATUS_OK
ReadX 9825 393216 61440 61440 NT_STATUS_OK
ReadX 9825 454656 4096 4096 NT_STATUS_OK
ReadX 9825 458752 61440 61440 NT_STATUS_OK
ReadX 9825 520192 4096 4096 NT_STATUS_OK
ReadX 9825 524288 61440 61440 NT_STATUS_OK
ReadX 9825 585728 4096 4096 NT_STATUS_OK
ReadX 9825 589824 61440 61440 NT_STATUS_OK
ReadX 9825 651264 4096 4096 NT_STATUS_OK
ReadX 9825 655360 61440 61440 NT_STATUS_OK
ReadX 9825 716800 4096 4096 NT_STATUS_OK
ReadX 9825 720896 61440 61440 NT_STATUS_OK
ReadX 9825 782336 4096 4096 NT_STATUS_OK
ReadX 9825 786432 61440 61440 NT_STATUS_OK
ReadX 9825 847872 4096 4096 NT_STATUS_OK
ReadX 9825 851968 61440 61440 NT_STATUS_OK
ReadX 9825 913408 4096 4096 NT_STATUS_OK
ReadX 9825 917504 61440 61440 NT_STATUS_OK
ReadX 9825 978944 4096 4096 NT_STATUS_OK
ReadX 9825 983040 61440 61440 NT_STATUS_OK
ReadX 9825 1044480 4096 4096 NT_STATUS_OK
ReadX 9825 1048576 61440 61440 NT_STATUS_OK
ReadX 9825 1110016 4096 4096 NT_STATUS_OK
ReadX 9825 1114112 61440 61440 NT_STATUS_OK
ReadX 9825 1175552 4096 4096 NT_STATUS_OK
ReadX 9825 1179648 61440 61440 NT_STATUS_OK
ReadX 9825 1241088 4096 4096 NT_STATUS_OK
ReadX 9825 1245184 61440 61440 NT_STATUS_OK
ReadX 9825 1306624 4096 4096 NT_STATUS_OK
ReadX 9825 1310720 61440 61440 NT_STATUS_OK
ReadX 9825 1372160 4096 4096 NT_STATUS_OK
ReadX 9825 1376256 61440 61440 NT_STATUS_OK
ReadX 9825 1437696 4096 4096 NT_STATUS_OK
ReadX 9825 1441792 61440 61440 NT_STATUS_OK
ReadX 9825 1503232 4096 4096 NT_STATUS_OK
ReadX 9825 1507328 61440 61440 NT_STATUS_OK
ReadX 9825 1568768 4096 4096 NT_STATUS_OK
ReadX 9825 1572864 61440 61440 NT_STATUS_OK
ReadX 9825 1634304 4096 4096 NT_STATUS_OK
ReadX 9825 1638400 61440 61440 NT_STATUS_OK
ReadX 9825 1699840 4096 4096 NT_STATUS_OK
ReadX 9825 1703936 61440 61440 NT_STATUS_OK
ReadX 9825 1765376 4096 4096 NT_STATUS_OK
ReadX 9825 1769472 61440 61440 NT_STATUS_OK
ReadX 9825 1830912 4096 4096 NT_STATUS_OK
ReadX 9825 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 9827 NT_STATUS_OK
QUERY_FILE_INFORMATION 9827 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9827 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9827 1005 NT_STATUS_OK
ReadX 9827 2156 24 24 NT_STATUS_OK
ReadX 9827 2139 276 276 NT_STATUS_OK
ReadX 9827 2136 14 14 NT_STATUS_OK
ReadX 9827 2136 7 7 NT_STATUS_OK
ReadX 9827 2138 12 12 NT_STATUS_OK
ReadX 9827 2137 8 8 NT_STATUS_OK
ReadX 9827 2135 15 15 NT_STATUS_OK
ReadX 9827 0 16 16 NT_STATUS_OK
ReadX 9827 16 2048 2048 NT_STATUS_OK
ReadX 9827 2064 2048 2048 NT_STATUS_OK
ReadX 9827 257 2048 2048 NT_STATUS_OK
ReadX 9827 385 2048 2048 NT_STATUS_OK
ReadX 9827 513 2048 2048 NT_STATUS_OK
ReadX 9827 641 2048 2048 NT_STATUS_OK
ReadX 9827 769 2048 2048 NT_STATUS_OK
ReadX 9827 897 2048 2048 NT_STATUS_OK
ReadX 9827 1025 2048 2048 NT_STATUS_OK
ReadX 9827 1153 2048 2048 NT_STATUS_OK
ReadX 9827 1281 2048 2048 NT_STATUS_OK
ReadX 9827 1409 2048 2048 NT_STATUS_OK
ReadX 9827 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 9829 NT_STATUS_OK
Close 9829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 9823 NT_STATUS_OK
Close 9824 NT_STATUS_OK
Close 9825 NT_STATUS_OK
Close 9817 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9832 NT_STATUS_OK
WriteX 9832 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9832 258 NT_STATUS_OK
WriteX 9832 0 10575 10575 NT_STATUS_OK
Flush 9832 NT_STATUS_OK
Close 9832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9833 NT_STATUS_OK
Close 9833 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9835 NT_STATUS_OK
ReadX 9835 0 4096 4096 NT_STATUS_OK
Close 9827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9837 NT_STATUS_OK
LockX 9837 2147483538 1 NT_STATUS_OK
UnlockX 9837 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 1005 NT_STATUS_OK
ReadX 9837 0 512 512 NT_STATUS_OK
ReadX 9837 512 512 512 NT_STATUS_OK
ReadX 9837 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9837 1004 NT_STATUS_OK
Close 9837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9838 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 1005 NT_STATUS_OK
ReadX 9838 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 9839 NT_STATUS_OK
LockX 9839 2147483538 1 NT_STATUS_OK
UnlockX 9839 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9839 1005 NT_STATUS_OK
ReadX 9839 0 512 512 NT_STATUS_OK
ReadX 9839 512 512 512 NT_STATUS_OK
ReadX 9839 1024 512 512 NT_STATUS_OK
ReadX 9839 288 20 20 NT_STATUS_OK
ReadX 9839 308 2084 2084 NT_STATUS_OK
ReadX 9839 388 2084 2084 NT_STATUS_OK
ReadX 9839 388 2084 2084 NT_STATUS_OK
ReadX 9826 2157 1386 1386 NT_STATUS_OK
ReadX 9839 2472 399 399 NT_STATUS_OK
ReadX 9839 3072 1536 1536 NT_STATUS_OK
ReadX 9839 544 149 149 NT_STATUS_OK
ReadX 9839 693 485 485 NT_STATUS_OK
Close 9839 NT_STATUS_OK
ReadX 9826 2157 4096 4096 NT_STATUS_OK
ReadX 9826 6253 4096 4096 NT_STATUS_OK
ReadX 9826 10349 4096 4096 NT_STATUS_OK
ReadX 9826 14445 4096 4096 NT_STATUS_OK
ReadX 9826 18541 4096 4096 NT_STATUS_OK
ReadX 9826 22637 256 256 NT_STATUS_OK
ReadX 9826 22893 4096 4096 NT_STATUS_OK
ReadX 9826 26989 4096 4096 NT_STATUS_OK
ReadX 9826 31085 4096 4096 NT_STATUS_OK
ReadX 9826 35181 4096 4096 NT_STATUS_OK
ReadX 9826 39277 4096 4096 NT_STATUS_OK
ReadX 9826 43373 4096 4096 NT_STATUS_OK
ReadX 9826 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9826 2157 1024 1024 NT_STATUS_OK
ReadX 9826 1667 4688 4688 NT_STATUS_OK
ReadX 9826 6355 3516 3516 NT_STATUS_OK
ReadX 9826 9871 16384 16384 NT_STATUS_OK
ReadX 9826 26255 3771 3771 NT_STATUS_OK
ReadX 9826 30026 2048 2048 NT_STATUS_OK
ReadX 9826 32074 1024 1024 NT_STATUS_OK
ReadX 9826 33098 6652 6652 NT_STATUS_OK
ReadX 9826 39750 16384 16384 NT_STATUS_OK
ReadX 9826 56134 10496 10496 NT_STATUS_OK
ReadX 9826 66630 1784 1784 NT_STATUS_OK
ReadX 9826 68414 90 90 NT_STATUS_OK
ReadX 9826 68504 273 273 NT_STATUS_OK
ReadX 9826 68777 1600 1600 NT_STATUS_OK
ReadX 9826 70377 640 640 NT_STATUS_OK
ReadX 9826 71017 1280 1280 NT_STATUS_OK
ReadX 9826 72297 8464 8464 NT_STATUS_OK
ReadX 9826 80761 158 158 NT_STATUS_OK
ReadX 9826 80919 912 912 NT_STATUS_OK
ReadX 9826 81831 1980 1980 NT_STATUS_OK
ReadX 9826 83811 2256 2256 NT_STATUS_OK
ReadX 9826 86067 400 400 NT_STATUS_OK
ReadX 9826 86467 252 252 NT_STATUS_OK
ReadX 9826 86719 42 42 NT_STATUS_OK
ReadX 9826 86761 725 725 NT_STATUS_OK
ReadX 9826 2009 512 512 NT_STATUS_OK
ReadX 9826 3895 9 9 NT_STATUS_OK
ReadX 9826 3781 46 46 NT_STATUS_OK
ReadX 9826 4059 92 92 NT_STATUS_OK
ReadX 9826 3781 92 92 NT_STATUS_OK
ReadX 9826 3986 184 184 NT_STATUS_OK
ReadX 9826 3987 16384 16384 NT_STATUS_OK
ReadX 9826 3902 16384 16384 NT_STATUS_OK
ReadX 9826 3781 10240 10240 NT_STATUS_OK
ReadX 9826 3821 16384 16384 NT_STATUS_OK
ReadX 9826 3891 935 935 NT_STATUS_OK
ReadX 9826 4060 10240 10240 NT_STATUS_OK
ReadX 9826 4059 184 184 NT_STATUS_OK
ReadX 9826 256 184 184 NT_STATUS_OK
ReadX 9826 256 1026 1026 NT_STATUS_OK
ReadX 9826 3901 326 326 NT_STATUS_OK
ReadX 9826 3899 652 652 NT_STATUS_OK
ReadX 9826 256 2 2 NT_STATUS_OK
ReadX 9826 258 4948 4948 NT_STATUS_OK
Close 9826 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9841 NT_STATUS_OK
Close 9841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 9844 NT_STATUS_OK
WriteX 9844 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9844 258 NT_STATUS_OK
WriteX 9844 0 65536 65536 NT_STATUS_OK
WriteX 9844 65536 65536 65536 NT_STATUS_OK
WriteX 9844 131072 65536 65536 NT_STATUS_OK
WriteX 9844 196608 65536 65536 NT_STATUS_OK
WriteX 9844 262144 65536 65536 NT_STATUS_OK
WriteX 9844 327680 65536 65536 NT_STATUS_OK
WriteX 9844 393216 65536 65536 NT_STATUS_OK
WriteX 9844 458752 65536 65536 NT_STATUS_OK
WriteX 9844 524288 65536 65536 NT_STATUS_OK
WriteX 9844 589824 35257 35257 NT_STATUS_OK
Close 9844 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9846 NT_STATUS_OK
Close 9846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 9849 NT_STATUS_OK
WriteX 9849 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9849 258 NT_STATUS_OK
WriteX 9849 0 65536 65536 NT_STATUS_OK
WriteX 9849 65536 65536 65536 NT_STATUS_OK
WriteX 9849 131072 65536 65536 NT_STATUS_OK
WriteX 9849 196608 65536 65536 NT_STATUS_OK
WriteX 9849 262144 65536 65536 NT_STATUS_OK
WriteX 9849 327680 65536 65536 NT_STATUS_OK
WriteX 9849 393216 65536 65536 NT_STATUS_OK
WriteX 9849 458752 65536 65536 NT_STATUS_OK
WriteX 9849 524288 65536 65536 NT_STATUS_OK
WriteX 9849 589824 57598 57598 NT_STATUS_OK
Close 9849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9851 NT_STATUS_OK
WriteX 9851 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9851 258 NT_STATUS_OK
WriteX 9851 0 12543 12543 NT_STATUS_OK
Flush 9851 NT_STATUS_OK
Close 9851 NT_STATUS_OK
Close 9835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9853 NT_STATUS_OK
Close 9853 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 9855 NT_STATUS_OK
ReadX 9855 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9856 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 9857 NT_STATUS_OK
QUERY_FILE_INFORMATION 9857 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9857 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 9857 1005 NT_STATUS_OK
ReadX 9857 1938 24 24 NT_STATUS_OK
ReadX 9857 1920 276 276 NT_STATUS_OK
ReadX 9857 1918 14 14 NT_STATUS_OK
ReadX 9857 1918 7 7 NT_STATUS_OK
ReadX 9857 1919 12 12 NT_STATUS_OK
ReadX 9857 1919 8 8 NT_STATUS_OK
ReadX 9857 1917 15 15 NT_STATUS_OK
ReadX 9857 0 16 16 NT_STATUS_OK
ReadX 9857 16 2048 2048 NT_STATUS_OK
ReadX 9857 2064 2048 2048 NT_STATUS_OK
ReadX 9857 257 2048 2048 NT_STATUS_OK
ReadX 9857 385 2048 2048 NT_STATUS_OK
ReadX 9857 513 2048 2048 NT_STATUS_OK
ReadX 9857 641 2048 2048 NT_STATUS_OK
ReadX 9857 769 2048 2048 NT_STATUS_OK
ReadX 9857 897 2048 2048 NT_STATUS_OK
ReadX 9857 1025 2048 2048 NT_STATUS_OK
ReadX 9857 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 9859 NT_STATUS_OK
Close 9859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9862 NT_STATUS_OK
WriteX 9862 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9862 258 NT_STATUS_OK
WriteX 9862 0 11588 11588 NT_STATUS_OK
Flush 9862 NT_STATUS_OK
Close 9862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9863 NT_STATUS_OK
Close 9863 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9865 NT_STATUS_OK
ReadX 9865 0 4096 4096 NT_STATUS_OK
Close 9857 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9867 NT_STATUS_OK
WriteX 9867 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9867 258 NT_STATUS_OK
WriteX 9867 0 11615 11615 NT_STATUS_OK
Flush 9867 NT_STATUS_OK
Close 9867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9869 NT_STATUS_OK
Close 9869 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9871 NT_STATUS_OK
ReadX 9871 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9873 NT_STATUS_OK
Close 9873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 9876 NT_STATUS_OK
WriteX 9876 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9876 258 NT_STATUS_OK
WriteX 9876 0 65536 65536 NT_STATUS_OK
WriteX 9876 65536 16050 16050 NT_STATUS_OK
Close 9876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9856 1939 64 64 NT_STATUS_OK
ReadX 9856 128 248 248 NT_STATUS_OK
ReadX 9856 128 568 568 NT_STATUS_OK
ReadX 9856 3872 1536 1536 NT_STATUS_OK
ReadX 9856 3456 2560 2560 NT_STATUS_OK
ReadX 9856 3136 512 512 NT_STATUS_OK
ReadX 9856 2880 4096 4096 NT_STATUS_OK
ReadX 9856 3264 3072 3072 NT_STATUS_OK
ReadX 9856 320 4096 4096 NT_STATUS_OK
ReadX 9856 1024 4096 4096 NT_STATUS_OK
ReadX 9856 3616 4096 4096 NT_STATUS_OK
ReadX 9856 1939 64 64 NT_STATUS_OK
ReadX 9856 128 248 248 NT_STATUS_OK
ReadX 9856 128 608 608 NT_STATUS_OK
ReadX 9856 2858 1024 1024 NT_STATUS_OK
ReadX 9856 2810 4096 4096 NT_STATUS_OK
ReadX 9856 2826 4096 4096 NT_STATUS_OK
ReadX 9856 2580 2048 2048 NT_STATUS_OK
ReadX 9856 2800 2560 2560 NT_STATUS_OK
ReadX 9856 2100 4096 4096 NT_STATUS_OK
ReadX 9856 2084 4096 4096 NT_STATUS_OK
ReadX 9856 868 4096 4096 NT_STATUS_OK
ReadX 9856 2324 4096 4096 NT_STATUS_OK
ReadX 9856 884 4096 4096 NT_STATUS_OK
ReadX 9856 2604 1024 1024 NT_STATUS_OK
ReadX 9856 580 4096 4096 NT_STATUS_OK
ReadX 9856 596 4096 4096 NT_STATUS_OK
ReadX 9856 2752 4096 4096 NT_STATUS_OK
ReadX 9856 2842 1024 1024 NT_STATUS_OK
ReadX 9856 660 4096 4096 NT_STATUS_OK
ReadX 9856 2720 4096 4096 NT_STATUS_OK
ReadX 9856 2736 4096 4096 NT_STATUS_OK
ReadX 9856 628 4096 4096 NT_STATUS_OK
ReadX 9856 2704 4096 4096 NT_STATUS_OK
ReadX 9856 1556 4096 4096 NT_STATUS_OK
ReadX 9856 576 4096 4096 NT_STATUS_OK
ReadX 9856 3168 1536 1536 NT_STATUS_OK
ReadX 9856 832 4096 4096 NT_STATUS_OK
ReadX 9856 1088 4096 4096 NT_STATUS_OK
ReadX 9856 1344 4096 4096 NT_STATUS_OK
ReadX 9856 1600 4096 4096 NT_STATUS_OK
ReadX 9856 1856 4096 4096 NT_STATUS_OK
ReadX 9856 2112 4096 4096 NT_STATUS_OK
ReadX 9856 1892 4096 4096 NT_STATUS_OK
ReadX 9856 820 4096 4096 NT_STATUS_OK
ReadX 9856 788 4096 4096 NT_STATUS_OK
ReadX 9856 1604 4096 4096 NT_STATUS_OK
ReadX 9856 3648 4096 4096 NT_STATUS_OK
ReadX 9856 2608 4096 4096 NT_STATUS_OK
ReadX 9856 548 4096 4096 NT_STATUS_OK
ReadX 9856 740 4096 4096 NT_STATUS_OK
ReadX 9856 1344 4096 4096 NT_STATUS_OK
ReadX 9856 3392 4096 4096 NT_STATUS_OK
ReadX 9856 3904 4096 4096 NT_STATUS_OK
ReadX 9856 644 4096 4096 NT_STATUS_OK
ReadX 9856 676 4096 4096 NT_STATUS_OK
ReadX 9856 2688 4096 4096 NT_STATUS_OK
ReadX 9856 320 4096 4096 NT_STATUS_OK
ReadX 9856 900 4096 4096 NT_STATUS_OK
ReadX 9856 1908 4096 4096 NT_STATUS_OK
ReadX 9856 852 4096 4096 NT_STATUS_OK
ReadX 9856 724 4096 4096 NT_STATUS_OK
ReadX 9856 2292 4096 4096 NT_STATUS_OK
ReadX 9856 612 4096 4096 NT_STATUS_OK
ReadX 9856 388 4096 4096 NT_STATUS_OK
ReadX 9856 2368 4096 4096 NT_STATUS_OK
ReadX 9856 2624 4096 4096 NT_STATUS_OK
ReadX 9856 500 4096 4096 NT_STATUS_OK
ReadX 9856 356 4096 4096 NT_STATUS_OK
ReadX 9856 1024 4096 4096 NT_STATUS_OK
ReadX 9856 576 4096 4096 NT_STATUS_OK
ReadX 9856 340 4096 4096 NT_STATUS_OK
ReadX 9856 420 4096 4096 NT_STATUS_OK
ReadX 9856 1600 4096 4096 NT_STATUS_OK
ReadX 9856 404 4096 4096 NT_STATUS_OK
ReadX 9856 1428 4096 4096 NT_STATUS_OK
ReadX 9856 2656 4096 4096 NT_STATUS_OK
ReadX 9856 2624 4096 4096 NT_STATUS_OK
ReadX 9856 452 4096 4096 NT_STATUS_OK
ReadX 9856 692 4096 4096 NT_STATUS_OK
ReadX 9856 564 4096 4096 NT_STATUS_OK
ReadX 9856 372 4096 4096 NT_STATUS_OK
ReadX 9856 468 4096 4096 NT_STATUS_OK
ReadX 9856 484 4096 4096 NT_STATUS_OK
ReadX 9856 1088 4096 4096 NT_STATUS_OK
ReadX 9856 1924 4096 4096 NT_STATUS_OK
ReadX 9856 2768 4096 4096 NT_STATUS_OK
ReadX 9856 832 4096 4096 NT_STATUS_OK
ReadX 9856 836 4096 4096 NT_STATUS_OK
ReadX 9856 1856 4096 4096 NT_STATUS_OK
ReadX 9856 2640 4096 4096 NT_STATUS_OK
ReadX 9856 436 4096 4096 NT_STATUS_OK
ReadX 9856 1828 4096 4096 NT_STATUS_OK
ReadX 9856 804 4096 4096 NT_STATUS_OK
ReadX 9856 1860 4096 4096 NT_STATUS_OK
ReadX 9856 1812 4096 4096 NT_STATUS_OK
ReadX 9856 756 4096 4096 NT_STATUS_OK
ReadX 9856 1636 4096 4096 NT_STATUS_OK
ReadX 9856 772 4096 4096 NT_STATUS_OK
ReadX 9856 2036 4096 4096 NT_STATUS_OK
ReadX 9856 1220 4096 4096 NT_STATUS_OK
ReadX 9856 1652 4096 4096 NT_STATUS_OK
ReadX 9856 2588 4096 4096 NT_STATUS_OK
ReadX 9856 916 4096 4096 NT_STATUS_OK
ReadX 9856 260 4096 4096 NT_STATUS_OK
ReadX 9856 932 4096 4096 NT_STATUS_OK
ReadX 9856 2624 4096 4096 NT_STATUS_OK
ReadX 9856 308 4096 4096 NT_STATUS_OK
ReadX 9856 292 4096 4096 NT_STATUS_OK
ReadX 9856 1140 4096 4096 NT_STATUS_OK
ReadX 9856 276 4096 4096 NT_STATUS_OK
ReadX 9856 2020 4096 4096 NT_STATUS_OK
ReadX 9856 2880 4096 4096 NT_STATUS_OK
ReadX 9856 516 4096 4096 NT_STATUS_OK
ReadX 9856 1844 4096 4096 NT_STATUS_OK
ReadX 9856 1124 4096 4096 NT_STATUS_OK
ReadX 9856 3136 4096 4096 NT_STATUS_OK
ReadX 9856 324 4096 4096 NT_STATUS_OK
ReadX 9856 1156 4096 4096 NT_STATUS_OK
ReadX 9856 1172 4096 4096 NT_STATUS_OK
ReadX 9856 2112 4096 4096 NT_STATUS_OK
ReadX 9856 2368 4096 4096 NT_STATUS_OK
ReadX 9856 964 4096 4096 NT_STATUS_OK
ReadX 9856 980 4096 4096 NT_STATUS_OK
ReadX 9856 1012 4096 4096 NT_STATUS_OK
ReadX 9856 532 4096 4096 NT_STATUS_OK
ReadX 9856 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 9856 1620 4096 4096 NT_STATUS_OK
ReadX 9856 1604 4096 4096 NT_STATUS_OK
ReadX 9856 2116 4096 4096 NT_STATUS_OK
ReadX 9856 2132 4096 4096 NT_STATUS_OK
ReadX 9856 2148 4096 4096 NT_STATUS_OK
ReadX 9856 2276 4096 4096 NT_STATUS_OK
ReadX 9856 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9878 NT_STATUS_OK
Close 9878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 9881 NT_STATUS_OK
QUERY_FILE_INFORMATION 9836 1004 NT_STATUS_OK
Close 9836 NT_STATUS_OK
WriteX 9881 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9881 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 9838 1004 NT_STATUS_OK
Close 9838 NT_STATUS_OK
WriteX 9881 0 65536 65536 NT_STATUS_OK
WriteX 9881 65536 64850 64850 NT_STATUS_OK
Close 9881 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 9883 NT_STATUS_OK
WriteX 9883 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9883 258 NT_STATUS_OK
ReadX 9856 2068 4096 4096 NT_STATUS_OK
ReadX 9856 1588 4096 4096 NT_STATUS_OK
ReadX 9856 1572 4096 4096 NT_STATUS_OK
WriteX 9883 0 18630 18630 NT_STATUS_OK
Flush 9883 NT_STATUS_OK
Close 9883 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 9871 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 9885 NT_STATUS_OK
Close 9885 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 9887 NT_STATUS_OK
ReadX 9887 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9856 612 4096 4096 NT_STATUS_OK
ReadX 9856 564 4096 4096 NT_STATUS_OK
ReadX 9856 1876 4096 4096 NT_STATUS_OK
ReadX 9856 628 4096 4096 NT_STATUS_OK
ReadX 9856 740 4096 4096 NT_STATUS_OK
ReadX 9856 724 4096 4096 NT_STATUS_OK
ReadX 9856 644 4096 4096 NT_STATUS_OK
ReadX 9856 2324 4096 4096 NT_STATUS_OK
ReadX 9856 660 4096 4096 NT_STATUS_OK
ReadX 9856 852 4096 4096 NT_STATUS_OK
ReadX 9856 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 9856 2368 4096 4096 NT_STATUS_OK
ReadX 9856 1024 4096 4096 NT_STATUS_OK
ReadX 9856 320 4096 4096 NT_STATUS_OK
ReadX 9856 580 4096 4096 NT_STATUS_OK
ReadX 9856 3136 512 512 NT_STATUS_OK
ReadX 9856 2880 4096 4096 NT_STATUS_OK
Close 9856 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9888 NT_STATUS_OK
ReadX 9888 61440 4096 4096 NT_STATUS_OK
ReadX 9888 126976 4096 4096 NT_STATUS_OK
WriteX 9888 0 65536 65536 NT_STATUS_OK
WriteX 9888 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9889 NT_STATUS_OK
ReadX 9889 61440 4096 4096 NT_STATUS_OK
ReadX 9889 126976 4096 4096 NT_STATUS_OK
ReadX 9889 192512 4096 4096 NT_STATUS_OK
ReadX 9889 258048 4096 4096 NT_STATUS_OK
WriteX 9889 0 65536 65536 NT_STATUS_OK
WriteX 9889 65536 65536 65536 NT_STATUS_OK
WriteX 9889 131072 65536 65536 NT_STATUS_OK
WriteX 9889 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9890 NT_STATUS_OK
ReadX 9890 61440 4096 4096 NT_STATUS_OK
ReadX 9890 126976 4096 4096 NT_STATUS_OK
ReadX 9890 192512 4096 4096 NT_STATUS_OK
ReadX 9890 258048 4096 4096 NT_STATUS_OK
ReadX 9890 323584 4096 4096 NT_STATUS_OK
ReadX 9890 389120 4096 4096 NT_STATUS_OK
ReadX 9890 454656 4096 4096 NT_STATUS_OK
ReadX 9890 520192 4096 4096 NT_STATUS_OK
WriteX 9890 0 65536 65536 NT_STATUS_OK
WriteX 9890 65536 65536 65536 NT_STATUS_OK
WriteX 9890 131072 65536 65536 NT_STATUS_OK
WriteX 9890 196608 65536 65536 NT_STATUS_OK
WriteX 9890 262144 65536 65536 NT_STATUS_OK
WriteX 9890 327680 65536 65536 NT_STATUS_OK
WriteX 9890 393216 65536 65536 NT_STATUS_OK
WriteX 9890 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 9891 NT_STATUS_OK
ReadX 9891 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 9892 NT_STATUS_OK
Close 9892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 9893 NT_STATUS_OK
WriteX 9893 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9893 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9891 0 8192 8192 NT_STATUS_OK
Flush 9891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 9891 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9891 0 8192 8192 NT_STATUS_OK
Flush 9891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9891 0 8192 8192 NT_STATUS_OK
Flush 9891 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 9891 0 8192 8192 NT_STATUS_OK
Flush 9891 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9895 NT_STATUS_OK
Close 9895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 9887 NT_STATUS_OK
Close 9855 NT_STATUS_OK
Close 9888 NT_STATUS_OK
Close 9889 NT_STATUS_OK
Close 9890 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 9898 NT_STATUS_OK
WriteX 9898 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9898 258 NT_STATUS_OK
WriteX 9898 0 62591 62591 NT_STATUS_OK
Close 9898 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9900 NT_STATUS_OK
Close 9900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 9903 NT_STATUS_OK
WriteX 9903 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9903 258 NT_STATUS_OK
WriteX 9903 0 10845 10845 NT_STATUS_OK
Close 9903 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9905 NT_STATUS_OK
Close 9905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 9908 NT_STATUS_OK
WriteX 9908 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9908 258 NT_STATUS_OK
WriteX 9908 0 30118 30118 NT_STATUS_OK
Close 9908 NT_STATUS_OK
WriteX 9891 0 4096 4096 NT_STATUS_OK
WriteX 9893 0 64 64 NT_STATUS_OK
Close 9893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 9891 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9910 NT_STATUS_OK
ReadX 9910 0 61440 61440 NT_STATUS_OK
ReadX 9910 61440 4096 4096 NT_STATUS_OK
ReadX 9910 65536 61440 61440 NT_STATUS_OK
ReadX 9910 126976 4096 4096 NT_STATUS_OK
ReadX 9910 131072 61440 61440 NT_STATUS_OK
ReadX 9910 192512 4096 4096 NT_STATUS_OK
ReadX 9910 196608 61440 61440 NT_STATUS_OK
ReadX 9910 258048 4096 4096 NT_STATUS_OK
ReadX 9910 262144 61440 61440 NT_STATUS_OK
ReadX 9910 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9911 NT_STATUS_OK
ReadX 9911 0 61440 61440 NT_STATUS_OK
ReadX 9911 61440 4096 4096 NT_STATUS_OK
ReadX 9911 65536 61440 61440 NT_STATUS_OK
ReadX 9911 126976 4096 4096 NT_STATUS_OK
ReadX 9911 131072 61440 61440 NT_STATUS_OK
ReadX 9911 192512 4096 4096 NT_STATUS_OK
ReadX 9911 196608 61440 61440 NT_STATUS_OK
ReadX 9911 258048 4096 4096 NT_STATUS_OK
ReadX 9911 262144 61440 61440 NT_STATUS_OK
ReadX 9911 323584 4096 4096 NT_STATUS_OK
ReadX 9911 327680 61440 61440 NT_STATUS_OK
ReadX 9911 389120 4096 4096 NT_STATUS_OK
ReadX 9911 393216 61440 61440 NT_STATUS_OK
ReadX 9911 454656 4096 4096 NT_STATUS_OK
ReadX 9911 458752 61440 61440 NT_STATUS_OK
ReadX 9911 520192 4096 4096 NT_STATUS_OK
ReadX 9911 524288 61440 61440 NT_STATUS_OK
ReadX 9911 585728 4096 4096 NT_STATUS_OK
ReadX 9911 589824 61440 61440 NT_STATUS_OK
ReadX 9911 651264 4096 4096 NT_STATUS_OK
ReadX 9911 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9912 NT_STATUS_OK
ReadX 9912 0 61440 61440 NT_STATUS_OK
ReadX 9912 61440 4096 4096 NT_STATUS_OK
ReadX 9912 65536 61440 61440 NT_STATUS_OK
ReadX 9912 126976 4096 4096 NT_STATUS_OK
ReadX 9912 131072 61440 61440 NT_STATUS_OK
ReadX 9912 192512 4096 4096 NT_STATUS_OK
ReadX 9912 196608 61440 61440 NT_STATUS_OK
ReadX 9912 258048 4096 4096 NT_STATUS_OK
ReadX 9912 262144 61440 61440 NT_STATUS_OK
ReadX 9912 323584 4096 4096 NT_STATUS_OK
ReadX 9912 327680 61440 61440 NT_STATUS_OK
ReadX 9912 389120 4096 4096 NT_STATUS_OK
ReadX 9912 393216 61440 61440 NT_STATUS_OK
ReadX 9912 454656 4096 4096 NT_STATUS_OK
ReadX 9912 458752 61440 61440 NT_STATUS_OK
ReadX 9912 520192 4096 4096 NT_STATUS_OK
ReadX 9912 524288 61440 61440 NT_STATUS_OK
ReadX 9912 585728 4096 4096 NT_STATUS_OK
ReadX 9912 589824 61440 61440 NT_STATUS_OK
ReadX 9912 651264 4096 4096 NT_STATUS_OK
ReadX 9912 655360 61440 61440 NT_STATUS_OK
ReadX 9912 716800 4096 4096 NT_STATUS_OK
ReadX 9912 720896 61440 61440 NT_STATUS_OK
ReadX 9912 782336 4096 4096 NT_STATUS_OK
ReadX 9912 786432 61440 61440 NT_STATUS_OK
ReadX 9912 847872 4096 4096 NT_STATUS_OK
ReadX 9912 851968 61440 61440 NT_STATUS_OK
ReadX 9912 913408 4096 4096 NT_STATUS_OK
ReadX 9912 917504 61440 61440 NT_STATUS_OK
ReadX 9912 978944 4096 4096 NT_STATUS_OK
ReadX 9912 983040 61440 61440 NT_STATUS_OK
ReadX 9912 1044480 4096 4096 NT_STATUS_OK
ReadX 9912 1048576 61440 61440 NT_STATUS_OK
ReadX 9912 1110016 4096 4096 NT_STATUS_OK
ReadX 9912 1114112 61440 61440 NT_STATUS_OK
ReadX 9912 1175552 4096 4096 NT_STATUS_OK
ReadX 9912 1179648 61440 61440 NT_STATUS_OK
ReadX 9912 1241088 4096 4096 NT_STATUS_OK
ReadX 9912 1245184 61440 61440 NT_STATUS_OK
ReadX 9912 1306624 4096 4096 NT_STATUS_OK
ReadX 9912 1310720 61440 61440 NT_STATUS_OK
ReadX 9912 1372160 4096 4096 NT_STATUS_OK
ReadX 9912 1376256 61440 61440 NT_STATUS_OK
ReadX 9912 1437696 4096 4096 NT_STATUS_OK
ReadX 9912 1441792 61440 61440 NT_STATUS_OK
ReadX 9912 1503232 4096 4096 NT_STATUS_OK
ReadX 9912 1507328 61440 61440 NT_STATUS_OK
ReadX 9912 1568768 4096 4096 NT_STATUS_OK
ReadX 9912 1572864 61440 61440 NT_STATUS_OK
ReadX 9912 1634304 4096 4096 NT_STATUS_OK
ReadX 9912 1638400 61440 61440 NT_STATUS_OK
ReadX 9912 1699840 4096 4096 NT_STATUS_OK
ReadX 9912 1703936 61440 61440 NT_STATUS_OK
ReadX 9912 1765376 4096 4096 NT_STATUS_OK
ReadX 9912 1769472 61440 61440 NT_STATUS_OK
ReadX 9912 1830912 4096 4096 NT_STATUS_OK
ReadX 9912 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9913 NT_STATUS_OK
Close 9913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9910 NT_STATUS_OK
Close 9911 NT_STATUS_OK
Close 9912 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9915 NT_STATUS_OK
ReadX 9915 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9916 NT_STATUS_OK
ReadX 9916 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 9917 NT_STATUS_OK
ReadX 9917 0 4096 4096 NT_STATUS_OK
ReadX 9917 4096 4096 4096 NT_STATUS_OK
ReadX 9917 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9918 NT_STATUS_OK
Close 9918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9915 NT_STATUS_OK
Close 9916 NT_STATUS_OK
Close 9917 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9920 NT_STATUS_OK
ReadX 9920 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9921 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9922 NT_STATUS_OK
Close 9922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9920 NT_STATUS_OK
Close 9921 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9924 NT_STATUS_OK
ReadX 9924 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 9925 NT_STATUS_OK
ReadX 9925 0 8192 8192 NT_STATUS_OK
ReadX 9925 8192 8192 8192 NT_STATUS_OK
ReadX 9925 16384 8192 8192 NT_STATUS_OK
ReadX 9925 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9927 NT_STATUS_OK
Close 9927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9925 NT_STATUS_OK
Close 9924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9930 NT_STATUS_OK
WriteX 9930 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9930 258 NT_STATUS_OK
WriteX 9930 0 10438 10438 NT_STATUS_OK
Close 9930 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9931 NT_STATUS_OK
Close 9931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 9932 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9933 NT_STATUS_OK
Close 9933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 9934 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9935 NT_STATUS_OK
Close 9935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 9936 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9937 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 9937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9938 NT_STATUS_OK
Close 9938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 9939 NT_STATUS_OK
ReadX 9939 0 4096 4096 NT_STATUS_OK
ReadX 9939 4096 4096 4096 NT_STATUS_OK
ReadX 9939 8192 4096 4096 NT_STATUS_OK
ReadX 9939 12288 8192 8192 NT_STATUS_OK
ReadX 9939 20480 8192 8192 NT_STATUS_OK
ReadX 9939 28672 8192 8192 NT_STATUS_OK
ReadX 9939 36864 8192 8192 NT_STATUS_OK
ReadX 9939 45056 8192 8192 NT_STATUS_OK
ReadX 9939 53248 8192 8192 NT_STATUS_OK
ReadX 9939 61440 8192 8192 NT_STATUS_OK
ReadX 9939 69632 8192 8192 NT_STATUS_OK
ReadX 9939 77824 8192 8192 NT_STATUS_OK
ReadX 9939 86016 8192 8192 NT_STATUS_OK
ReadX 9939 94208 8192 8192 NT_STATUS_OK
ReadX 9939 102400 8192 8192 NT_STATUS_OK
ReadX 9939 110592 8192 8192 NT_STATUS_OK
ReadX 9939 118784 8192 8192 NT_STATUS_OK
ReadX 9939 126976 8192 8192 NT_STATUS_OK
ReadX 9939 135168 8192 8192 NT_STATUS_OK
ReadX 9939 143360 8192 8192 NT_STATUS_OK
ReadX 9939 151552 8192 8192 NT_STATUS_OK
ReadX 9939 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 9940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 9939 NT_STATUS_OK
Close 9932 NT_STATUS_OK
Close 9934 NT_STATUS_OK
Close 9936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 9941 NT_STATUS_OK
Close 9941 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 9944 NT_STATUS_OK
WriteX 9944 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9944 258 NT_STATUS_OK
WriteX 9944 0 28489 28489 NT_STATUS_OK
Close 9944 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9945 NT_STATUS_OK
Close 9945 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9947 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 9947 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9948 NT_STATUS_OK
Close 9948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 9947 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 9950 NT_STATUS_OK
ReadX 9950 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 9951 NT_STATUS_OK
ReadX 9951 0 8192 8192 NT_STATUS_OK
ReadX 9951 8192 8192 8192 NT_STATUS_OK
ReadX 9951 16384 8192 8192 NT_STATUS_OK
ReadX 9951 24576 8192 8192 NT_STATUS_OK
ReadX 9951 32768 16384 16384 NT_STATUS_OK
ReadX 9951 49152 8192 8192 NT_STATUS_OK
ReadX 9951 57344 8192 8192 NT_STATUS_OK
ReadX 9951 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9953 NT_STATUS_OK
Close 9953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9951 NT_STATUS_OK
Close 9950 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9956 NT_STATUS_OK
WriteX 9956 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9956 258 NT_STATUS_OK
WriteX 9956 0 29253 29253 NT_STATUS_OK
Close 9956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9957 NT_STATUS_OK
Close 9957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 9958 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 9959 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 9958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 9960 NT_STATUS_OK
Close 9960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 9963 NT_STATUS_OK
WriteX 9963 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 9963 258 NT_STATUS_OK
WriteX 9963 0 30183 30183 NT_STATUS_OK
Close 9963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 9964 NT_STATUS_OK
Close 9964 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 9966 NT_STATUS_OK
WriteX 9966 0 510 510 NT_STATUS_OK
WriteX 9966 510 512 512 NT_STATUS_OK
WriteX 9966 1022 510 510 NT_STATUS_OK
WriteX 9966 1532 510 510 NT_STATUS_OK
WriteX 9966 2042 168 168 NT_STATUS_OK
Close 9966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 9967 NT_STATUS_OK
Close 9967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 9969 NT_STATUS_OK
ReadX 9969 0 4096 4096 NT_STATUS_OK
WriteX 9969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 9970 NT_STATUS_OK
ReadX 9970 61440 4096 4096 NT_STATUS_OK
ReadX 9970 126976 4096 4096 NT_STATUS_OK
WriteX 9970 0 65536 65536 NT_STATUS_OK
WriteX 9970 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 9971 NT_STATUS_OK
ReadX 9971 61440 4096 4096 NT_STATUS_OK
ReadX 9971 126976 4096 4096 NT_STATUS_OK
ReadX 9971 192512 4096 4096 NT_STATUS_OK
ReadX 9971 258048 4096 4096 NT_STATUS_OK
WriteX 9971 0 65536 65536 NT_STATUS_OK
WriteX 9971 65536 65536 65536 NT_STATUS_OK
WriteX 9971 131072 65536 65536 NT_STATUS_OK
WriteX 9971 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 9972 NT_STATUS_OK
ReadX 9972 61440 4096 4096 NT_STATUS_OK
ReadX 9972 126976 4096 4096 NT_STATUS_OK
ReadX 9972 192512 4096 4096 NT_STATUS_OK
ReadX 9972 258048 4096 4096 NT_STATUS_OK
ReadX 9972 323584 4096 4096 NT_STATUS_OK
ReadX 9972 389120 4096 4096 NT_STATUS_OK
ReadX 9972 454656 4096 4096 NT_STATUS_OK
ReadX 9972 520192 4096 4096 NT_STATUS_OK
WriteX 9972 0 65536 65536 NT_STATUS_OK
WriteX 9972 65536 65536 65536 NT_STATUS_OK
WriteX 9972 131072 65536 65536 NT_STATUS_OK
WriteX 9972 196608 65536 65536 NT_STATUS_OK
WriteX 9972 262144 65536 65536 NT_STATUS_OK
WriteX 9972 327680 65536 65536 NT_STATUS_OK
WriteX 9972 393216 65536 65536 NT_STATUS_OK
WriteX 9972 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9973 NT_STATUS_OK
Close 9973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 9969 NT_STATUS_OK
Close 9970 NT_STATUS_OK
Close 9971 NT_STATUS_OK
Close 9972 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 9975 NT_STATUS_OK
Close 9975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 9979 NT_STATUS_OK
Close 9979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 9982 NT_STATUS_OK
Close 9982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 9984 NT_STATUS_OK
Close 9984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9988 NT_STATUS_OK
Close 9988 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9991 NT_STATUS_OK
Close 9991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 9993 NT_STATUS_OK
Close 9993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 9997 NT_STATUS_OK
Close 9997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10002 NT_STATUS_OK
Close 10002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10007 NT_STATUS_OK
Close 10007 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10012 NT_STATUS_OK
Close 10012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10017 NT_STATUS_OK
Close 10017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10022 NT_STATUS_OK
Close 10022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10027 NT_STATUS_OK
Close 10027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10032 NT_STATUS_OK
Close 10032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10035 NT_STATUS_OK
Close 10035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10038 NT_STATUS_OK
Close 10038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10041 NT_STATUS_OK
WriteX 10041 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10041 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10041 0 65536 65536 NT_STATUS_OK
WriteX 10041 65536 65536 65536 NT_STATUS_OK
WriteX 10041 131072 65536 65536 NT_STATUS_OK
WriteX 10041 196608 65536 65536 NT_STATUS_OK
WriteX 10041 262144 26634 26634 NT_STATUS_OK
Close 10041 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10046 NT_STATUS_OK
Close 10046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10047 NT_STATUS_OK
Close 10047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10048 NT_STATUS_OK
ReadX 10048 0 4096 4096 NT_STATUS_OK
Close 10048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10049 NT_STATUS_OK
ReadX 10049 0 4096 4096 NT_STATUS_OK
ReadX 10049 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10050 NT_STATUS_OK
Close 10050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10049 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10054 NT_STATUS_OK
Close 10054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10057 NT_STATUS_OK
Close 10057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10059 NT_STATUS_OK
Close 10059 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10063 NT_STATUS_OK
Close 10063 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10066 NT_STATUS_OK
Close 10066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10068 NT_STATUS_OK
Close 10068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10072 NT_STATUS_OK
Close 10072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10077 NT_STATUS_OK
Close 10077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10082 NT_STATUS_OK
Close 10082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10087 NT_STATUS_OK
Close 10087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10092 NT_STATUS_OK
Close 10092 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10097 NT_STATUS_OK
Close 10097 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10101 NT_STATUS_OK
Close 10101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10106 NT_STATUS_OK
Close 10106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10111 NT_STATUS_OK
Close 10111 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10114 NT_STATUS_OK
Close 10114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10116 NT_STATUS_OK
Close 10116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10126 NT_STATUS_OK
Close 10126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10127 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10128 NT_STATUS_OK
ReadX 10128 0 4096 4096 NT_STATUS_OK
Close 10128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10129 NT_STATUS_OK
ReadX 10129 0 4096 4096 NT_STATUS_OK
Close 10129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10130 NT_STATUS_OK
ReadX 10130 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10140 NT_STATUS_OK
Close 10140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10142 NT_STATUS_OK
ReadX 10142 0 4096 4096 NT_STATUS_OK
Close 10142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10143 NT_STATUS_OK
ReadX 10143 0 4096 4096 NT_STATUS_OK
Close 10143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10144 NT_STATUS_OK
ReadX 10144 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10130 NT_STATUS_OK
Close 10144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10173 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10173 0 4096 4096 NT_STATUS_OK
Close 10173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10174 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
ReadX 10175 4096 4096 4096 NT_STATUS_OK
ReadX 10175 8192 4096 4096 NT_STATUS_OK
ReadX 10175 12288 4096 4096 NT_STATUS_OK
ReadX 10175 16384 4096 4096 NT_STATUS_OK
ReadX 10175 20480 4096 4096 NT_STATUS_OK
ReadX 10175 24576 4096 4096 NT_STATUS_OK
ReadX 10175 28672 4096 4096 NT_STATUS_OK
ReadX 10175 32768 4096 4096 NT_STATUS_OK
ReadX 10175 36864 4096 4096 NT_STATUS_OK
ReadX 10175 40960 4096 4096 NT_STATUS_OK
ReadX 10175 45056 4096 4096 NT_STATUS_OK
ReadX 10175 49152 4096 4096 NT_STATUS_OK
ReadX 10175 53248 4096 4096 NT_STATUS_OK
ReadX 10175 57344 4096 4096 NT_STATUS_OK
ReadX 10175 61440 4096 4096 NT_STATUS_OK
ReadX 10175 65536 4096 4096 NT_STATUS_OK
ReadX 10175 69632 4096 4096 NT_STATUS_OK
ReadX 10175 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10175 1004 NT_STATUS_OK
WriteX 10175 0 4096 4096 NT_STATUS_OK
Close 10175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10176 NT_STATUS_OK
SET_FILE_INFORMATION 10176 1004 NT_STATUS_OK
Close 10176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10178 NT_STATUS_OK
Close 10178 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10181 NT_STATUS_OK
WriteX 10181 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10181 258 NT_STATUS_OK
WriteX 10181 0 65536 65536 NT_STATUS_OK
WriteX 10181 65536 19979 19979 NT_STATUS_OK
Close 10181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 4096 4096 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
QUERY_FILE_INFORMATION 10182 1004 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
SET_FILE_INFORMATION 10182 1004 NT_STATUS_OK
WriteX 10182 0 4096 4096 NT_STATUS_OK
Flush 10182 NT_STATUS_OK
Close 10182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10184 NT_STATUS_OK
ReadX 10184 0 4096 4096 NT_STATUS_OK
Close 10183 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 4096 4096 NT_STATUS_OK
Close 10185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
Close 10186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10187 1004 NT_STATUS_OK
WriteX 10187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10188 NT_STATUS_OK
Close 10188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10184 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10190 NT_STATUS_OK
Close 10190 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10193 NT_STATUS_OK
WriteX 10193 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10193 258 NT_STATUS_OK
WriteX 10193 0 65536 65536 NT_STATUS_OK
WriteX 10193 65536 17654 17654 NT_STATUS_OK
Close 10193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 4096 4096 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
QUERY_FILE_INFORMATION 10194 1004 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10195 NT_STATUS_OK
SET_FILE_INFORMATION 10195 1004 NT_STATUS_OK
Close 10195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10196 NT_STATUS_OK
ReadX 10196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
ReadX 10199 4096 4096 4096 NT_STATUS_OK
ReadX 10199 8192 4096 4096 NT_STATUS_OK
ReadX 10199 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10199 16384 4096 4096 NT_STATUS_OK
ReadX 10199 20480 4096 4096 NT_STATUS_OK
ReadX 10199 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 4096 4096 NT_STATUS_OK
Close 10200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 4096 4096 NT_STATUS_OK
Close 10201 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10202 1004 NT_STATUS_OK
WriteX 10202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10203 NT_STATUS_OK
Close 10203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10202 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10205 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10208 NT_STATUS_OK
WriteX 10208 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10208 258 NT_STATUS_OK
WriteX 10208 0 65536 65536 NT_STATUS_OK
WriteX 10208 65536 19490 19490 NT_STATUS_OK
Close 10208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10209 NT_STATUS_OK
ReadX 10209 0 4096 4096 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
QUERY_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
SET_FILE_INFORMATION 10209 1004 NT_STATUS_OK
WriteX 10209 0 4096 4096 NT_STATUS_OK
Flush 10209 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10210 NT_STATUS_OK
SET_FILE_INFORMATION 10210 1004 NT_STATUS_OK
Close 10210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10211 NT_STATUS_OK
ReadX 10211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10212 NT_STATUS_OK
Close 10212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10214 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10214 0 4096 4096 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10215 NT_STATUS_OK
ReadX 10215 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 4096 4096 NT_STATUS_OK
ReadX 10216 4096 4096 4096 NT_STATUS_OK
ReadX 10216 8192 4096 4096 NT_STATUS_OK
ReadX 10216 12288 4096 4096 NT_STATUS_OK
ReadX 10216 16384 4096 4096 NT_STATUS_OK
ReadX 10216 20480 4096 4096 NT_STATUS_OK
ReadX 10216 24576 4096 4096 NT_STATUS_OK
ReadX 10216 28672 4096 4096 NT_STATUS_OK
ReadX 10216 32768 4096 4096 NT_STATUS_OK
ReadX 10216 36864 4096 4096 NT_STATUS_OK
ReadX 10216 40960 4096 4096 NT_STATUS_OK
ReadX 10216 45056 4096 4096 NT_STATUS_OK
ReadX 10216 49152 4096 4096 NT_STATUS_OK
ReadX 10216 53248 4096 4096 NT_STATUS_OK
ReadX 10216 57344 4096 4096 NT_STATUS_OK
ReadX 10216 61440 4096 4096 NT_STATUS_OK
ReadX 10216 65536 4096 4096 NT_STATUS_OK
ReadX 10216 69632 4096 4096 NT_STATUS_OK
ReadX 10216 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10216 1004 NT_STATUS_OK
WriteX 10216 0 4096 4096 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10217 NT_STATUS_OK
SET_FILE_INFORMATION 10217 1004 NT_STATUS_OK
Close 10217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10218 NT_STATUS_OK
ReadX 10218 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10219 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10222 NT_STATUS_OK
WriteX 10222 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10222 258 NT_STATUS_OK
WriteX 10222 0 65536 65536 NT_STATUS_OK
WriteX 10222 65536 8866 8866 NT_STATUS_OK
Close 10222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
WriteX 10223 0 4096 4096 NT_STATUS_OK
Flush 10223 NT_STATUS_OK
SET_FILE_INFORMATION 10223 1004 NT_STATUS_OK
WriteX 10223 0 4096 4096 NT_STATUS_OK
Flush 10223 NT_STATUS_OK
Close 10223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
Close 10225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
Close 10226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10227 1004 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10228 NT_STATUS_OK
Close 10228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10218 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10230 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10233 NT_STATUS_OK
WriteX 10233 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10233 258 NT_STATUS_OK
WriteX 10233 0 65536 65536 NT_STATUS_OK
WriteX 10233 65536 9298 9298 NT_STATUS_OK
Close 10233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
WriteX 10234 0 4096 4096 NT_STATUS_OK
Flush 10234 NT_STATUS_OK
SET_FILE_INFORMATION 10234 1004 NT_STATUS_OK
WriteX 10234 0 4096 4096 NT_STATUS_OK
Flush 10234 NT_STATUS_OK
Close 10234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10235 NT_STATUS_OK
SET_FILE_INFORMATION 10235 1004 NT_STATUS_OK
Close 10235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10237 NT_STATUS_OK
Close 10237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10240 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10240 0 4096 4096 NT_STATUS_OK
Close 10240 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10241 4096 4096 4096 NT_STATUS_OK
ReadX 10241 8192 4096 4096 NT_STATUS_OK
ReadX 10241 12288 4096 4096 NT_STATUS_OK
ReadX 10241 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
Close 10242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 4096 4096 NT_STATUS_OK
Close 10243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10244 NT_STATUS_OK
ReadX 10244 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10244 1004 NT_STATUS_OK
WriteX 10244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10245 NT_STATUS_OK
Close 10245 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10241 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10247 NT_STATUS_OK
Close 10247 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10250 NT_STATUS_OK
WriteX 10250 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 258 NT_STATUS_OK
WriteX 10250 0 65536 65536 NT_STATUS_OK
WriteX 10250 65536 11540 11540 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
Flush 10251 NT_STATUS_OK
SET_FILE_INFORMATION 10251 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
Flush 10251 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10252 NT_STATUS_OK
SET_FILE_INFORMATION 10252 1004 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10254 NT_STATUS_OK
Close 10254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 61440 4096 4096 NT_STATUS_OK
ReadX 10256 126976 4096 4096 NT_STATUS_OK
WriteX 10256 0 65536 65536 NT_STATUS_OK
WriteX 10256 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 61440 4096 4096 NT_STATUS_OK
ReadX 10257 126976 4096 4096 NT_STATUS_OK
ReadX 10257 192512 4096 4096 NT_STATUS_OK
ReadX 10257 258048 4096 4096 NT_STATUS_OK
WriteX 10257 0 65536 65536 NT_STATUS_OK
WriteX 10257 65536 65536 65536 NT_STATUS_OK
WriteX 10257 131072 65536 65536 NT_STATUS_OK
WriteX 10257 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 61440 4096 4096 NT_STATUS_OK
ReadX 10258 126976 4096 4096 NT_STATUS_OK
ReadX 10258 192512 4096 4096 NT_STATUS_OK
ReadX 10258 258048 4096 4096 NT_STATUS_OK
ReadX 10258 323584 4096 4096 NT_STATUS_OK
ReadX 10258 389120 4096 4096 NT_STATUS_OK
ReadX 10258 454656 4096 4096 NT_STATUS_OK
ReadX 10258 520192 4096 4096 NT_STATUS_OK
WriteX 10258 0 65536 65536 NT_STATUS_OK
WriteX 10258 65536 65536 65536 NT_STATUS_OK
WriteX 10258 131072 65536 65536 NT_STATUS_OK
WriteX 10258 196608 65536 65536 NT_STATUS_OK
WriteX 10258 262144 65536 65536 NT_STATUS_OK
WriteX 10258 327680 65536 65536 NT_STATUS_OK
WriteX 10258 393216 65536 65536 NT_STATUS_OK
WriteX 10258 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
ReadX 10259 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10260 NT_STATUS_OK
WriteX 10260 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10260 258 NT_STATUS_OK
WriteX 10260 0 53 53 NT_STATUS_OK
Close 10260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10261 NT_STATUS_OK
Close 10261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10258 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10259 8192 4096 4096 NT_STATUS_OK
ReadX 10259 12288 4096 4096 NT_STATUS_OK
WriteX 10263 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10263 258 NT_STATUS_OK
ReadX 10259 16384 4096 4096 NT_STATUS_OK
ReadX 10259 20480 4096 4096 NT_STATUS_OK
WriteX 10263 0 15360 15360 NT_STATUS_OK
Close 10263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10264 NT_STATUS_OK
ReadX 10264 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10264 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10264 1004 NT_STATUS_OK
WriteX 10264 0 4096 4096 NT_STATUS_OK
Close 10264 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10265 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10268 NT_STATUS_OK
Close 10268 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10267 4096 4096 4096 NT_STATUS_OK
ReadX 10267 8192 4096 4096 NT_STATUS_OK
ReadX 10267 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
ReadX 10270 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
ReadX 10271 4096 4096 4096 NT_STATUS_OK
ReadX 10271 8192 4096 4096 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10272 NT_STATUS_OK
WriteX 10272 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10272 258 NT_STATUS_OK
WriteX 10272 0 15360 15360 NT_STATUS_OK
Close 10272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10273 NT_STATUS_OK
ReadX 10273 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10273 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10273 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10267 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10274 NT_STATUS_OK
Close 10274 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10276 NT_STATUS_OK
ReadX 10276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10277 NT_STATUS_OK
SET_FILE_INFORMATION 10277 1004 NT_STATUS_OK
Close 10277 NT_STATUS_OK
WriteX 10273 0 4096 4096 NT_STATUS_OK
Close 10273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10278 NT_STATUS_OK
Close 10278 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10280 NT_STATUS_OK
ReadX 10280 0 4096 4096 NT_STATUS_OK
ReadX 10280 4096 4096 4096 NT_STATUS_OK
ReadX 10280 8192 4096 4096 NT_STATUS_OK
ReadX 10280 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10280 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10280 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10281 NT_STATUS_OK
ReadX 10281 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10282 NT_STATUS_OK
WriteX 10282 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 258 NT_STATUS_OK
WriteX 10282 0 53 53 NT_STATUS_OK
Close 10282 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10283 NT_STATUS_OK
Close 10283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10281 4096 4096 4096 NT_STATUS_OK
ReadX 10281 8192 4096 4096 NT_STATUS_OK
ReadX 10281 12288 4096 4096 NT_STATUS_OK
WriteX 10285 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10285 258 NT_STATUS_OK
WriteX 10285 0 12006 12006 NT_STATUS_OK
Close 10285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10286 NT_STATUS_OK
ReadX 10286 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10286 1004 NT_STATUS_OK
WriteX 10286 0 4096 4096 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10287 NT_STATUS_OK
Close 10287 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10290 NT_STATUS_OK
Close 10290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10289 4096 4096 4096 NT_STATUS_OK
ReadX 10289 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10292 NT_STATUS_OK
WriteX 10292 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10292 258 NT_STATUS_OK
WriteX 10292 0 11991 11991 NT_STATUS_OK
Close 10292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10293 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10293 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10294 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10297 NT_STATUS_OK
SET_FILE_INFORMATION 10297 1004 NT_STATUS_OK
Close 10297 NT_STATUS_OK
WriteX 10293 0 4096 4096 NT_STATUS_OK
Close 10293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10298 NT_STATUS_OK
Close 10298 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10301 NT_STATUS_OK
Close 10301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10300 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
ReadX 10300 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
WriteX 10300 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10300 1004 NT_STATUS_OK
Close 10276 NT_STATUS_OK
WriteX 10280 0 19054 19054 NT_STATUS_OK
WriteX 10300 0 12288 12288 NT_STATUS_OK
Close 10296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10303 NT_STATUS_OK
Close 10303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10280 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10305 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10307 NT_STATUS_OK
ReadX 10307 0 61440 61440 NT_STATUS_OK
ReadX 10307 61440 4096 4096 NT_STATUS_OK
ReadX 10307 65536 61440 61440 NT_STATUS_OK
ReadX 10307 126976 4096 4096 NT_STATUS_OK
ReadX 10307 131072 61440 61440 NT_STATUS_OK
ReadX 10307 192512 4096 4096 NT_STATUS_OK
ReadX 10307 196608 61440 61440 NT_STATUS_OK
ReadX 10307 258048 4096 4096 NT_STATUS_OK
ReadX 10307 262144 61440 61440 NT_STATUS_OK
ReadX 10307 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10308 NT_STATUS_OK
ReadX 10308 0 61440 61440 NT_STATUS_OK
ReadX 10308 61440 4096 4096 NT_STATUS_OK
ReadX 10308 65536 61440 61440 NT_STATUS_OK
ReadX 10308 126976 4096 4096 NT_STATUS_OK
ReadX 10308 131072 61440 61440 NT_STATUS_OK
ReadX 10308 192512 4096 4096 NT_STATUS_OK
ReadX 10308 196608 61440 61440 NT_STATUS_OK
ReadX 10308 258048 4096 4096 NT_STATUS_OK
ReadX 10308 262144 61440 61440 NT_STATUS_OK
ReadX 10308 323584 4096 4096 NT_STATUS_OK
ReadX 10308 327680 61440 61440 NT_STATUS_OK
ReadX 10308 389120 4096 4096 NT_STATUS_OK
ReadX 10308 393216 61440 61440 NT_STATUS_OK
ReadX 10308 454656 4096 4096 NT_STATUS_OK
ReadX 10308 458752 61440 61440 NT_STATUS_OK
ReadX 10308 520192 4096 4096 NT_STATUS_OK
ReadX 10308 524288 61440 61440 NT_STATUS_OK
ReadX 10308 585728 4096 4096 NT_STATUS_OK
ReadX 10308 589824 61440 61440 NT_STATUS_OK
ReadX 10308 651264 4096 4096 NT_STATUS_OK
ReadX 10308 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 0 61440 61440 NT_STATUS_OK
ReadX 10309 61440 4096 4096 NT_STATUS_OK
ReadX 10309 65536 61440 61440 NT_STATUS_OK
ReadX 10309 126976 4096 4096 NT_STATUS_OK
ReadX 10309 131072 61440 61440 NT_STATUS_OK
ReadX 10309 192512 4096 4096 NT_STATUS_OK
ReadX 10309 196608 61440 61440 NT_STATUS_OK
ReadX 10309 258048 4096 4096 NT_STATUS_OK
ReadX 10309 262144 61440 61440 NT_STATUS_OK
ReadX 10309 323584 4096 4096 NT_STATUS_OK
ReadX 10309 327680 61440 61440 NT_STATUS_OK
ReadX 10309 389120 4096 4096 NT_STATUS_OK
ReadX 10309 393216 61440 61440 NT_STATUS_OK
ReadX 10309 454656 4096 4096 NT_STATUS_OK
ReadX 10309 458752 61440 61440 NT_STATUS_OK
ReadX 10309 520192 4096 4096 NT_STATUS_OK
ReadX 10309 524288 61440 61440 NT_STATUS_OK
ReadX 10309 585728 4096 4096 NT_STATUS_OK
ReadX 10309 589824 61440 61440 NT_STATUS_OK
ReadX 10309 651264 4096 4096 NT_STATUS_OK
ReadX 10309 655360 61440 61440 NT_STATUS_OK
ReadX 10309 716800 4096 4096 NT_STATUS_OK
ReadX 10309 720896 61440 61440 NT_STATUS_OK
ReadX 10309 782336 4096 4096 NT_STATUS_OK
ReadX 10309 786432 61440 61440 NT_STATUS_OK
ReadX 10309 847872 4096 4096 NT_STATUS_OK
ReadX 10309 851968 61440 61440 NT_STATUS_OK
ReadX 10309 913408 4096 4096 NT_STATUS_OK
ReadX 10309 917504 61440 61440 NT_STATUS_OK
ReadX 10309 978944 4096 4096 NT_STATUS_OK
ReadX 10309 983040 61440 61440 NT_STATUS_OK
ReadX 10309 1044480 4096 4096 NT_STATUS_OK
ReadX 10309 1048576 61440 61440 NT_STATUS_OK
ReadX 10309 1110016 4096 4096 NT_STATUS_OK
ReadX 10309 1114112 61440 61440 NT_STATUS_OK
ReadX 10309 1175552 4096 4096 NT_STATUS_OK
ReadX 10309 1179648 61440 61440 NT_STATUS_OK
ReadX 10309 1241088 4096 4096 NT_STATUS_OK
ReadX 10309 1245184 61440 61440 NT_STATUS_OK
ReadX 10309 1306624 4096 4096 NT_STATUS_OK
ReadX 10309 1310720 61440 61440 NT_STATUS_OK
ReadX 10309 1372160 4096 4096 NT_STATUS_OK
ReadX 10309 1376256 61440 61440 NT_STATUS_OK
ReadX 10309 1437696 4096 4096 NT_STATUS_OK
ReadX 10309 1441792 61440 61440 NT_STATUS_OK
ReadX 10309 1503232 4096 4096 NT_STATUS_OK
ReadX 10309 1507328 61440 61440 NT_STATUS_OK
ReadX 10309 1568768 4096 4096 NT_STATUS_OK
ReadX 10309 1572864 61440 61440 NT_STATUS_OK
ReadX 10309 1634304 4096 4096 NT_STATUS_OK
ReadX 10309 1638400 61440 61440 NT_STATUS_OK
ReadX 10309 1699840 4096 4096 NT_STATUS_OK
ReadX 10309 1703936 61440 61440 NT_STATUS_OK
ReadX 10309 1765376 4096 4096 NT_STATUS_OK
ReadX 10309 1769472 61440 61440 NT_STATUS_OK
ReadX 10309 1830912 4096 4096 NT_STATUS_OK
ReadX 10309 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10313 NT_STATUS_OK
ReadX 10313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10315 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10315 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10316 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 1004 NT_STATUS_OK
WriteX 10316 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10316 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10317 NT_STATUS_OK
Close 10317 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10318 NT_STATUS_OK
WriteX 10318 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10318 258 NT_STATUS_OK
WriteX 10318 0 491 491 NT_STATUS_OK
Close 10318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10316 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10321 NT_STATUS_OK
Close 10321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10322 NT_STATUS_OK
WriteX 10322 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10322 258 NT_STATUS_OK
WriteX 10322 0 543 543 NT_STATUS_OK
Close 10322 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10323 NT_STATUS_OK
ReadX 10323 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10307 NT_STATUS_OK
Close 10308 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10323 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Close 10314 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10336 NT_STATUS_OK
QUERY_FILE_INFORMATION 10336 1004 NT_STATUS_OK
WriteX 10336 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10336 258 NT_STATUS_OK
WriteX 10336 0 2048 2048 NT_STATUS_OK
Close 10336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10337 NT_STATUS_OK
ReadX 10337 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10337 0 4096 4096 NT_STATUS_OK
Flush 10337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10337 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10342 NT_STATUS_OK
WriteX 10342 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10342 258 NT_STATUS_OK
WriteX 10342 0 2048 2048 NT_STATUS_OK
Close 10342 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10343 NT_STATUS_OK
ReadX 10343 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10347 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10348 NT_STATUS_OK
WriteX 10348 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10348 258 NT_STATUS_OK
WriteX 10348 0 2048 2048 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 2048 2048 NT_STATUS_OK
ReadX 10327 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10343 0 4096 4096 NT_STATUS_OK
WriteX 10327 0 8192 8192 NT_STATUS_OK
WriteX 10328 0 4096 4096 NT_STATUS_OK
WriteX 10329 0 4096 4096 NT_STATUS_OK
ReadX 10343 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10327 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10352 NT_STATUS_OK
ReadX 10352 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10353 NT_STATUS_OK
QUERY_FILE_INFORMATION 10353 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10352 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10343 NT_STATUS_OK
Close 10327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10355 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10356 NT_STATUS_OK
ReadX 10356 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10361 NT_STATUS_OK
ReadX 10361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10362 NT_STATUS_OK
ReadX 10362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10363 NT_STATUS_OK
ReadX 10363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10365 NT_STATUS_OK
ReadX 10365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10366 NT_STATUS_OK
ReadX 10366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10368 NT_STATUS_OK
ReadX 10368 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10372 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10373 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 1004 NT_STATUS_OK
WriteX 10373 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 258 NT_STATUS_OK
WriteX 10373 0 2048 2048 NT_STATUS_OK
Close 10373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10375 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10376 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10380 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10381 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 1004 NT_STATUS_OK
WriteX 10381 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 258 NT_STATUS_OK
WriteX 10381 0 2048 2048 NT_STATUS_OK
Close 10381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10382 NT_STATUS_OK
ReadX 10382 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10374 0 4096 4096 NT_STATUS_OK
Flush 10374 NT_STATUS_OK
WriteX 10382 0 4096 4096 NT_STATUS_OK
Flush 10382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10374 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10382 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10376 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10384 NT_STATUS_OK
WriteX 10384 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10384 258 NT_STATUS_OK
WriteX 10384 0 4096 4096 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10385 NT_STATUS_OK
ReadX 10385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10386 NT_STATUS_OK
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10387 NT_STATUS_OK
WriteX 10387 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10387 258 NT_STATUS_OK
WriteX 10387 0 4096 4096 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10388 NT_STATUS_OK
ReadX 10388 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10388 0 4096 4096 NT_STATUS_OK
Close 10385 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Close 10362 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Close 10366 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10363 NT_STATUS_OK
Close 10356 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Close 10360 NT_STATUS_OK
Close 10361 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10359 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10391 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10393 NT_STATUS_OK
ReadX 10393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10394 NT_STATUS_OK
Close 10394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10395 NT_STATUS_OK
WriteX 10395 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10395 258 NT_STATUS_OK
WriteX 10395 0 2048 2048 NT_STATUS_OK
Close 10395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10402 NT_STATUS_OK
ReadX 10402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10405 NT_STATUS_OK
ReadX 10405 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10406 NT_STATUS_OK
ReadX 10406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10407 NT_STATUS_OK
ReadX 10407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10408 NT_STATUS_OK
ReadX 10408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10409 NT_STATUS_OK
ReadX 10409 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10410 NT_STATUS_OK
QUERY_FILE_INFORMATION 10410 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Close 10396 NT_STATUS_OK
Close 10408 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Close 10405 NT_STATUS_OK
Close 10406 NT_STATUS_OK
Close 10407 NT_STATUS_OK
Close 10409 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Close 10398 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Close 10402 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10412 NT_STATUS_OK
QUERY_FILE_INFORMATION 10412 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10412 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10417 NT_STATUS_OK
ReadX 10417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10418 NT_STATUS_OK
ReadX 10418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10419 NT_STATUS_OK
ReadX 10419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10420 NT_STATUS_OK
ReadX 10420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10422 NT_STATUS_OK
ReadX 10422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10424 NT_STATUS_OK
ReadX 10424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10425 NT_STATUS_OK
ReadX 10425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10426 NT_STATUS_OK
ReadX 10426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10427 NT_STATUS_OK
ReadX 10427 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10432 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 1004 NT_STATUS_OK
WriteX 10432 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 258 NT_STATUS_OK
WriteX 10432 0 2048 2048 NT_STATUS_OK
Close 10432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10433 NT_STATUS_OK
ReadX 10433 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10435 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10437 NT_STATUS_OK
ReadX 10437 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10438 NT_STATUS_OK
ReadX 10438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10443 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10443 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10444 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 1004 NT_STATUS_OK
WriteX 10444 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10444 258 NT_STATUS_OK
WriteX 10444 0 2048 2048 NT_STATUS_OK
Close 10444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10445 NT_STATUS_OK
ReadX 10445 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10420 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10446 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10446 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10447 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10447 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10451 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10451 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10452 NT_STATUS_OK
QUERY_FILE_INFORMATION 10452 1004 NT_STATUS_OK
WriteX 10452 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10452 258 NT_STATUS_OK
WriteX 10452 0 2048 2048 NT_STATUS_OK
Close 10452 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10453 NT_STATUS_OK
ReadX 10453 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10433 0 4096 4096 NT_STATUS_OK
Flush 10433 NT_STATUS_OK
WriteX 10445 0 4096 4096 NT_STATUS_OK
Flush 10445 NT_STATUS_OK
WriteX 10453 0 4096 4096 NT_STATUS_OK
Flush 10453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10433 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10445 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10453 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10435 4096 16384 16384 NT_STATUS_OK
ReadX 10415 4096 16384 16384 NT_STATUS_OK
ReadX 10447 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10454 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10454 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10455 NT_STATUS_OK
ReadX 10455 0 2048 2048 NT_STATUS_OK
WriteX 10455 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10456 NT_STATUS_OK
QUERY_FILE_INFORMATION 10456 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10455 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10427 NT_STATUS_OK
Close 10419 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Close 10437 NT_STATUS_OK
Close 10438 NT_STATUS_OK
Close 10426 NT_STATUS_OK
Close 10447 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Close 10424 NT_STATUS_OK
Close 10425 NT_STATUS_OK
Close 10422 NT_STATUS_OK
Close 10423 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Close 10416 NT_STATUS_OK
Close 10417 NT_STATUS_OK
Close 10418 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10458 NT_STATUS_OK
QUERY_FILE_INFORMATION 10458 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10453 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10460 NT_STATUS_OK
QUERY_FILE_INFORMATION 10460 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10462 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10463 NT_STATUS_OK
ReadX 10463 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10464 NT_STATUS_OK
ReadX 10464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10465 NT_STATUS_OK
ReadX 10465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10466 NT_STATUS_OK
ReadX 10466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10467 NT_STATUS_OK
ReadX 10467 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10463 4096 16384 16384 NT_STATUS_OK
WriteX 10463 0 4096 4096 NT_STATUS_OK
WriteX 10464 0 4096 4096 NT_STATUS_OK
WriteX 10465 0 4096 4096 NT_STATUS_OK
WriteX 10466 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10468 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10470 NT_STATUS_OK
ReadX 10470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10471 NT_STATUS_OK
ReadX 10471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10472 NT_STATUS_OK
ReadX 10472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10473 NT_STATUS_OK
ReadX 10473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10476 NT_STATUS_OK
ReadX 10476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10477 NT_STATUS_OK
ReadX 10477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10478 NT_STATUS_OK
ReadX 10478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10479 NT_STATUS_OK
ReadX 10479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 8192 8192 NT_STATUS_OK
ReadX 10469 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10483 0 4096 4096 NT_STATUS_OK
ReadX 10483 4096 4096 4096 NT_STATUS_OK
ReadX 10483 8192 4096 4096 NT_STATUS_OK
WriteX 10469 0 4096 4096 NT_STATUS_OK
WriteX 10470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10484 0 4096 4096 NT_STATUS_OK
ReadX 10484 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10463 0 4096 4096 NT_STATUS_OK
WriteX 10464 0 4096 4096 NT_STATUS_OK
WriteX 10465 0 4096 4096 NT_STATUS_OK
WriteX 10466 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10489 NT_STATUS_OK
QUERY_FILE_INFORMATION 10489 1004 NT_STATUS_OK
WriteX 10489 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10489 258 NT_STATUS_OK
WriteX 10489 0 2048 2048 NT_STATUS_OK
Close 10489 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10490 NT_STATUS_OK
ReadX 10490 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10491 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
ReadX 10492 4096 4096 4096 NT_STATUS_OK
WriteX 10492 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10490 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10492 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 0 4096 4096 NT_STATUS_OK
ReadX 10494 4096 4096 4096 NT_STATUS_OK
WriteX 10494 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10495 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10495 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10467 NT_STATUS_OK
Close 10463 NT_STATUS_OK
Close 10464 NT_STATUS_OK
Close 10465 NT_STATUS_OK
Close 10466 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10476 NT_STATUS_OK
Close 10477 NT_STATUS_OK
Close 10478 NT_STATUS_OK
Close 10479 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10469 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10473 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10483 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10497 0 4096 4096 NT_STATUS_OK
ReadX 10497 4096 4096 4096 NT_STATUS_OK
ReadX 10497 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10499 NT_STATUS_OK
ReadX 10499 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10500 NT_STATUS_OK
ReadX 10500 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10501 NT_STATUS_OK
ReadX 10501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10502 NT_STATUS_OK
ReadX 10502 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10503 NT_STATUS_OK
ReadX 10503 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10504 NT_STATUS_OK
ReadX 10504 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10505 NT_STATUS_OK
ReadX 10505 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10506 NT_STATUS_OK
ReadX 10506 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10507 NT_STATUS_OK
ReadX 10507 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10508 NT_STATUS_OK
ReadX 10508 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10509 NT_STATUS_OK
ReadX 10509 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10510 NT_STATUS_OK
ReadX 10510 0 4096 4096 NT_STATUS_OK
ReadX 10498 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10514 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10515 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 1004 NT_STATUS_OK
WriteX 10515 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10515 258 NT_STATUS_OK
WriteX 10515 0 2048 2048 NT_STATUS_OK
Close 10515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10516 NT_STATUS_OK
ReadX 10516 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10516 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10521 NT_STATUS_OK
QUERY_FILE_INFORMATION 10521 1004 NT_STATUS_OK
WriteX 10521 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10521 258 NT_STATUS_OK
WriteX 10521 0 2048 2048 NT_STATUS_OK
Close 10521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10522 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10505 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10523 NT_STATUS_OK
QUERY_FILE_INFORMATION 10523 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10523 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10509 NT_STATUS_OK
Close 10504 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Close 10498 NT_STATUS_OK
Close 10499 NT_STATUS_OK
Close 10502 NT_STATUS_OK
Close 10503 NT_STATUS_OK
Close 10500 NT_STATUS_OK
Close 10501 NT_STATUS_OK
Close 10505 NT_STATUS_OK
Close 10506 NT_STATUS_OK
Close 10507 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Close 10497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10525 NT_STATUS_OK
QUERY_FILE_INFORMATION 10525 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10525 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10527 NT_STATUS_OK
ReadX 10527 61440 4096 4096 NT_STATUS_OK
ReadX 10527 126976 4096 4096 NT_STATUS_OK
WriteX 10527 0 65536 65536 NT_STATUS_OK
WriteX 10527 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 61440 4096 4096 NT_STATUS_OK
ReadX 10528 126976 4096 4096 NT_STATUS_OK
ReadX 10528 192512 4096 4096 NT_STATUS_OK
ReadX 10528 258048 4096 4096 NT_STATUS_OK
WriteX 10528 0 65536 65536 NT_STATUS_OK
WriteX 10528 65536 65536 65536 NT_STATUS_OK
WriteX 10528 131072 65536 65536 NT_STATUS_OK
WriteX 10528 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10529 NT_STATUS_OK
ReadX 10529 61440 4096 4096 NT_STATUS_OK
ReadX 10529 126976 4096 4096 NT_STATUS_OK
ReadX 10529 192512 4096 4096 NT_STATUS_OK
ReadX 10529 258048 4096 4096 NT_STATUS_OK
ReadX 10529 323584 4096 4096 NT_STATUS_OK
ReadX 10529 389120 4096 4096 NT_STATUS_OK
ReadX 10529 454656 4096 4096 NT_STATUS_OK
ReadX 10529 520192 4096 4096 NT_STATUS_OK
WriteX 10529 0 65536 65536 NT_STATUS_OK
WriteX 10529 65536 65536 65536 NT_STATUS_OK
WriteX 10529 131072 65536 65536 NT_STATUS_OK
WriteX 10529 196608 65536 65536 NT_STATUS_OK
WriteX 10529 262144 65536 65536 NT_STATUS_OK
WriteX 10529 327680 65536 65536 NT_STATUS_OK
WriteX 10529 393216 65536 65536 NT_STATUS_OK
WriteX 10529 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10530 NT_STATUS_OK
ReadX 10530 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10530 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10530 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10530 8192 4096 4096 NT_STATUS_OK
ReadX 10530 12288 4096 4096 NT_STATUS_OK
ReadX 10530 16384 4096 4096 NT_STATUS_OK
ReadX 10530 20480 4096 4096 NT_STATUS_OK
ReadX 10530 24576 4096 4096 NT_STATUS_OK
ReadX 10530 28672 4096 4096 NT_STATUS_OK
ReadX 10530 32768 4096 4096 NT_STATUS_OK
ReadX 10530 36864 4096 4096 NT_STATUS_OK
ReadX 10530 40960 4096 4096 NT_STATUS_OK
ReadX 10530 45056 4096 4096 NT_STATUS_OK
ReadX 10530 49152 4096 4096 NT_STATUS_OK
ReadX 10530 53248 4096 4096 NT_STATUS_OK
ReadX 10530 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10530 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10527 NT_STATUS_OK
Close 10528 NT_STATUS_OK
Close 10529 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10533 NT_STATUS_OK
WriteX 10533 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10533 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10533 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10533 1004 NT_STATUS_OK
WriteX 10533 0 57088 57088 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
Flush 10533 NT_STATUS_OK
Close 10530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10534 NT_STATUS_OK
SET_FILE_INFORMATION 10534 1004 NT_STATUS_OK
Close 10534 NT_STATUS_OK
SET_FILE_INFORMATION 10533 1004 NT_STATUS_OK
WriteX 10533 0 4096 4096 NT_STATUS_OK
Close 10533 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10535 NT_STATUS_OK
Close 10535 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10537 NT_STATUS_OK
ReadX 10537 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10537 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10538 NT_STATUS_OK
WriteX 10538 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10538 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10538 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10538 1004 NT_STATUS_OK
WriteX 10538 0 51456 51456 NT_STATUS_OK
WriteX 10538 0 4096 4096 NT_STATUS_OK
Flush 10538 NT_STATUS_OK
SET_FILE_INFORMATION 10538 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10538 1004 NT_STATUS_OK
WriteX 10538 0 4096 4096 NT_STATUS_OK
Close 10538 NT_STATUS_OK
Close 10537 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10540 NT_STATUS_OK
Close 10540 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10542 NT_STATUS_OK
ReadX 10542 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10542 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10544 NT_STATUS_OK
Close 10544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10547 NT_STATUS_OK
WriteX 10547 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10547 258 NT_STATUS_OK
WriteX 10547 0 53077 53077 NT_STATUS_OK
Close 10547 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10548 NT_STATUS_OK
WriteX 10548 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10548 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10548 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 65536 65536 NT_STATUS_OK
WriteX 10548 65536 1856 1856 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10548 1004 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Close 10542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10550 NT_STATUS_OK
Close 10550 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10552 NT_STATUS_OK
ReadX 10552 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10554 NT_STATUS_OK
Close 10554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10557 NT_STATUS_OK
WriteX 10557 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10557 258 NT_STATUS_OK
WriteX 10557 0 7983 7983 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10562 NT_STATUS_OK
WriteX 10562 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10562 258 NT_STATUS_OK
WriteX 10562 0 65536 65536 NT_STATUS_OK
WriteX 10562 65536 65536 65536 NT_STATUS_OK
WriteX 10562 131072 65536 65536 NT_STATUS_OK
WriteX 10562 196608 65536 65536 NT_STATUS_OK
WriteX 10562 262144 65536 65536 NT_STATUS_OK
WriteX 10562 327680 65536 65536 NT_STATUS_OK
WriteX 10562 393216 65536 65536 NT_STATUS_OK
WriteX 10562 458752 46731 46731 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10563 NT_STATUS_OK
WriteX 10563 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10563 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10552 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 65536 65536 NT_STATUS_OK
WriteX 10563 65536 22848 22848 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Flush 10563 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10563 1004 NT_STATUS_OK
WriteX 10563 0 4096 4096 NT_STATUS_OK
Close 10563 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10565 NT_STATUS_OK
Close 10565 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10567 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10568 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10568 1004 NT_STATUS_OK
ReadX 10568 8192 4096 4096 NT_STATUS_OK
ReadX 10568 12288 4096 4096 NT_STATUS_OK
ReadX 10568 16384 4096 4096 NT_STATUS_OK
ReadX 10568 20480 4096 4096 NT_STATUS_OK
ReadX 10568 24576 4096 4096 NT_STATUS_OK
ReadX 10568 28672 4096 4096 NT_STATUS_OK
ReadX 10568 32768 4096 4096 NT_STATUS_OK
ReadX 10568 36864 4096 4096 NT_STATUS_OK
ReadX 10568 40960 4096 4096 NT_STATUS_OK
ReadX 10568 45056 4096 4096 NT_STATUS_OK
ReadX 10568 49152 4096 4096 NT_STATUS_OK
ReadX 10568 53248 4096 4096 NT_STATUS_OK
ReadX 10568 57344 4096 4096 NT_STATUS_OK
ReadX 10568 61440 4096 4096 NT_STATUS_OK
ReadX 10568 65536 4096 4096 NT_STATUS_OK
ReadX 10568 69632 4096 4096 NT_STATUS_OK
ReadX 10568 73728 4096 4096 NT_STATUS_OK
ReadX 10568 77824 4096 4096 NT_STATUS_OK
ReadX 10568 81920 4096 4096 NT_STATUS_OK
ReadX 10568 86016 4096 4096 NT_STATUS_OK
ReadX 10568 90112 4096 4096 NT_STATUS_OK
ReadX 10568 94208 4096 4096 NT_STATUS_OK
ReadX 10568 98304 4096 4096 NT_STATUS_OK
ReadX 10568 102400 4096 4096 NT_STATUS_OK
ReadX 10568 106496 4096 4096 NT_STATUS_OK
ReadX 10568 110592 4096 4096 NT_STATUS_OK
ReadX 10568 114688 4096 4096 NT_STATUS_OK
ReadX 10568 118784 4096 4096 NT_STATUS_OK
ReadX 10568 122880 4096 4096 NT_STATUS_OK
ReadX 10568 126976 4096 4096 NT_STATUS_OK
ReadX 10568 131072 4096 4096 NT_STATUS_OK
ReadX 10568 135168 4096 4096 NT_STATUS_OK
ReadX 10568 139264 4096 4096 NT_STATUS_OK
ReadX 10568 143360 4096 4096 NT_STATUS_OK
ReadX 10568 147456 4096 4096 NT_STATUS_OK
ReadX 10568 151552 4096 4096 NT_STATUS_OK
ReadX 10568 155648 4096 4096 NT_STATUS_OK
ReadX 10568 159744 4096 4096 NT_STATUS_OK
ReadX 10568 163840 4096 4096 NT_STATUS_OK
ReadX 10568 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10568 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10569 NT_STATUS_OK
Close 10569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10571 NT_STATUS_OK
WriteX 10571 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10571 258 NT_STATUS_OK
Close 10568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10572 NT_STATUS_OK
SET_FILE_INFORMATION 10572 1004 NT_STATUS_OK
Close 10572 NT_STATUS_OK
WriteX 10571 0 42388 42388 NT_STATUS_OK
Close 10571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10573 NT_STATUS_OK
Close 10573 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10575 NT_STATUS_OK
ReadX 10575 0 4096 4096 NT_STATUS_OK
ReadX 10575 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10576 NT_STATUS_OK
WriteX 10576 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10576 258 NT_STATUS_OK
SET_FILE_INFORMATION 10576 1004 NT_STATUS_OK
WriteX 10576 0 42652 42652 NT_STATUS_OK
Close 10576 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10578 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10580 NT_STATUS_OK
ReadX 10580 0 4096 4096 NT_STATUS_OK
ReadX 10580 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10582 NT_STATUS_OK
Close 10582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10585 NT_STATUS_OK
WriteX 10585 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10585 258 NT_STATUS_OK
WriteX 10585 0 65536 65536 NT_STATUS_OK
WriteX 10585 65536 49 49 NT_STATUS_OK
Close 10585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10586 NT_STATUS_OK
ReadX 10586 0 61440 61440 NT_STATUS_OK
ReadX 10586 61440 4096 4096 NT_STATUS_OK
ReadX 10586 65536 61440 61440 NT_STATUS_OK
ReadX 10586 126976 4096 4096 NT_STATUS_OK
ReadX 10586 131072 61440 61440 NT_STATUS_OK
ReadX 10586 192512 4096 4096 NT_STATUS_OK
ReadX 10586 196608 61440 61440 NT_STATUS_OK
ReadX 10586 258048 4096 4096 NT_STATUS_OK
ReadX 10586 262144 61440 61440 NT_STATUS_OK
ReadX 10586 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10587 NT_STATUS_OK
ReadX 10587 0 61440 61440 NT_STATUS_OK
ReadX 10587 61440 4096 4096 NT_STATUS_OK
ReadX 10587 65536 61440 61440 NT_STATUS_OK
ReadX 10587 126976 4096 4096 NT_STATUS_OK
ReadX 10587 131072 61440 61440 NT_STATUS_OK
ReadX 10587 192512 4096 4096 NT_STATUS_OK
ReadX 10587 196608 61440 61440 NT_STATUS_OK
ReadX 10587 258048 4096 4096 NT_STATUS_OK
ReadX 10587 262144 61440 61440 NT_STATUS_OK
ReadX 10587 323584 4096 4096 NT_STATUS_OK
ReadX 10587 327680 61440 61440 NT_STATUS_OK
ReadX 10587 389120 4096 4096 NT_STATUS_OK
ReadX 10587 393216 61440 61440 NT_STATUS_OK
ReadX 10587 454656 4096 4096 NT_STATUS_OK
ReadX 10587 458752 61440 61440 NT_STATUS_OK
ReadX 10587 520192 4096 4096 NT_STATUS_OK
ReadX 10587 524288 61440 61440 NT_STATUS_OK
ReadX 10587 585728 4096 4096 NT_STATUS_OK
ReadX 10587 589824 61440 61440 NT_STATUS_OK
ReadX 10587 651264 4096 4096 NT_STATUS_OK
ReadX 10587 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10588 NT_STATUS_OK
ReadX 10588 0 61440 61440 NT_STATUS_OK
ReadX 10588 61440 4096 4096 NT_STATUS_OK
ReadX 10588 65536 61440 61440 NT_STATUS_OK
ReadX 10588 126976 4096 4096 NT_STATUS_OK
ReadX 10588 131072 61440 61440 NT_STATUS_OK
ReadX 10588 192512 4096 4096 NT_STATUS_OK
ReadX 10588 196608 61440 61440 NT_STATUS_OK
ReadX 10588 258048 4096 4096 NT_STATUS_OK
ReadX 10588 262144 61440 61440 NT_STATUS_OK
ReadX 10588 323584 4096 4096 NT_STATUS_OK
ReadX 10588 327680 61440 61440 NT_STATUS_OK
ReadX 10588 389120 4096 4096 NT_STATUS_OK
ReadX 10588 393216 61440 61440 NT_STATUS_OK
ReadX 10588 454656 4096 4096 NT_STATUS_OK
ReadX 10588 458752 61440 61440 NT_STATUS_OK
ReadX 10588 520192 4096 4096 NT_STATUS_OK
ReadX 10588 524288 61440 61440 NT_STATUS_OK
ReadX 10588 585728 4096 4096 NT_STATUS_OK
ReadX 10588 589824 61440 61440 NT_STATUS_OK
ReadX 10588 651264 4096 4096 NT_STATUS_OK
ReadX 10588 655360 61440 61440 NT_STATUS_OK
ReadX 10588 716800 4096 4096 NT_STATUS_OK
ReadX 10588 720896 61440 61440 NT_STATUS_OK
ReadX 10588 782336 4096 4096 NT_STATUS_OK
ReadX 10588 786432 61440 61440 NT_STATUS_OK
ReadX 10588 847872 4096 4096 NT_STATUS_OK
ReadX 10588 851968 61440 61440 NT_STATUS_OK
ReadX 10588 913408 4096 4096 NT_STATUS_OK
ReadX 10588 917504 61440 61440 NT_STATUS_OK
ReadX 10588 978944 4096 4096 NT_STATUS_OK
ReadX 10588 983040 61440 61440 NT_STATUS_OK
ReadX 10588 1044480 4096 4096 NT_STATUS_OK
ReadX 10588 1048576 61440 61440 NT_STATUS_OK
ReadX 10588 1110016 4096 4096 NT_STATUS_OK
ReadX 10588 1114112 61440 61440 NT_STATUS_OK
ReadX 10588 1175552 4096 4096 NT_STATUS_OK
ReadX 10588 1179648 61440 61440 NT_STATUS_OK
ReadX 10588 1241088 4096 4096 NT_STATUS_OK
ReadX 10588 1245184 61440 61440 NT_STATUS_OK
ReadX 10588 1306624 4096 4096 NT_STATUS_OK
ReadX 10588 1310720 61440 61440 NT_STATUS_OK
ReadX 10588 1372160 4096 4096 NT_STATUS_OK
ReadX 10588 1376256 61440 61440 NT_STATUS_OK
ReadX 10588 1437696 4096 4096 NT_STATUS_OK
ReadX 10588 1441792 61440 61440 NT_STATUS_OK
ReadX 10588 1503232 4096 4096 NT_STATUS_OK
ReadX 10588 1507328 61440 61440 NT_STATUS_OK
ReadX 10588 1568768 4096 4096 NT_STATUS_OK
ReadX 10588 1572864 61440 61440 NT_STATUS_OK
ReadX 10588 1634304 4096 4096 NT_STATUS_OK
ReadX 10588 1638400 61440 61440 NT_STATUS_OK
ReadX 10588 1699840 4096 4096 NT_STATUS_OK
ReadX 10588 1703936 61440 61440 NT_STATUS_OK
ReadX 10588 1765376 4096 4096 NT_STATUS_OK
ReadX 10588 1769472 61440 61440 NT_STATUS_OK
ReadX 10588 1830912 4096 4096 NT_STATUS_OK
ReadX 10588 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10590 NT_STATUS_OK
QUERY_FILE_INFORMATION 10590 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10590 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10590 1005 NT_STATUS_OK
ReadX 10590 2156 24 24 NT_STATUS_OK
ReadX 10590 2139 276 276 NT_STATUS_OK
ReadX 10590 2136 14 14 NT_STATUS_OK
ReadX 10590 2136 7 7 NT_STATUS_OK
ReadX 10590 2138 12 12 NT_STATUS_OK
ReadX 10590 2137 8 8 NT_STATUS_OK
ReadX 10590 2135 15 15 NT_STATUS_OK
ReadX 10590 0 16 16 NT_STATUS_OK
ReadX 10590 16 2048 2048 NT_STATUS_OK
ReadX 10590 2064 2048 2048 NT_STATUS_OK
ReadX 10590 257 2048 2048 NT_STATUS_OK
ReadX 10590 385 2048 2048 NT_STATUS_OK
ReadX 10590 513 2048 2048 NT_STATUS_OK
ReadX 10590 641 2048 2048 NT_STATUS_OK
ReadX 10590 769 2048 2048 NT_STATUS_OK
ReadX 10590 897 2048 2048 NT_STATUS_OK
ReadX 10590 1025 2048 2048 NT_STATUS_OK
ReadX 10590 1153 2048 2048 NT_STATUS_OK
ReadX 10590 1281 2048 2048 NT_STATUS_OK
ReadX 10590 1409 2048 2048 NT_STATUS_OK
ReadX 10590 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10592 NT_STATUS_OK
Close 10592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10586 NT_STATUS_OK
Close 10587 NT_STATUS_OK
Close 10588 NT_STATUS_OK
Close 10580 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10595 NT_STATUS_OK
WriteX 10595 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10595 258 NT_STATUS_OK
WriteX 10595 0 10575 10575 NT_STATUS_OK
Flush 10595 NT_STATUS_OK
Close 10595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10598 NT_STATUS_OK
ReadX 10598 0 4096 4096 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10599 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10600 NT_STATUS_OK
LockX 10600 2147483538 1 NT_STATUS_OK
UnlockX 10600 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 1005 NT_STATUS_OK
ReadX 10600 0 512 512 NT_STATUS_OK
ReadX 10600 512 512 512 NT_STATUS_OK
ReadX 10600 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10600 1004 NT_STATUS_OK
Close 10600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10601 NT_STATUS_OK
QUERY_FILE_INFORMATION 10601 1005 NT_STATUS_OK
ReadX 10601 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10602 NT_STATUS_OK
LockX 10602 2147483538 1 NT_STATUS_OK
UnlockX 10602 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10602 1005 NT_STATUS_OK
ReadX 10602 0 512 512 NT_STATUS_OK
ReadX 10602 512 512 512 NT_STATUS_OK
ReadX 10602 1024 512 512 NT_STATUS_OK
ReadX 10602 288 20 20 NT_STATUS_OK
ReadX 10602 308 2084 2084 NT_STATUS_OK
ReadX 10602 388 2084 2084 NT_STATUS_OK
ReadX 10602 388 2084 2084 NT_STATUS_OK
ReadX 10589 2157 1386 1386 NT_STATUS_OK
ReadX 10602 2472 399 399 NT_STATUS_OK
ReadX 10602 3072 1536 1536 NT_STATUS_OK
ReadX 10602 544 149 149 NT_STATUS_OK
ReadX 10602 693 485 485 NT_STATUS_OK
Close 10602 NT_STATUS_OK
ReadX 10589 2157 4096 4096 NT_STATUS_OK
ReadX 10589 6253 4096 4096 NT_STATUS_OK
ReadX 10589 10349 4096 4096 NT_STATUS_OK
ReadX 10589 14445 4096 4096 NT_STATUS_OK
ReadX 10589 18541 4096 4096 NT_STATUS_OK
ReadX 10589 22637 256 256 NT_STATUS_OK
ReadX 10589 22893 4096 4096 NT_STATUS_OK
ReadX 10589 26989 4096 4096 NT_STATUS_OK
ReadX 10589 31085 4096 4096 NT_STATUS_OK
ReadX 10589 35181 4096 4096 NT_STATUS_OK
ReadX 10589 39277 4096 4096 NT_STATUS_OK
ReadX 10589 43373 4096 4096 NT_STATUS_OK
ReadX 10589 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10589 2157 1024 1024 NT_STATUS_OK
ReadX 10589 1667 4688 4688 NT_STATUS_OK
ReadX 10589 6355 3516 3516 NT_STATUS_OK
ReadX 10589 9871 16384 16384 NT_STATUS_OK
ReadX 10589 26255 3771 3771 NT_STATUS_OK
ReadX 10589 30026 2048 2048 NT_STATUS_OK
ReadX 10589 32074 1024 1024 NT_STATUS_OK
ReadX 10589 33098 6652 6652 NT_STATUS_OK
ReadX 10589 39750 16384 16384 NT_STATUS_OK
ReadX 10589 56134 10496 10496 NT_STATUS_OK
ReadX 10589 66630 1784 1784 NT_STATUS_OK
ReadX 10589 68414 90 90 NT_STATUS_OK
ReadX 10589 68504 273 273 NT_STATUS_OK
ReadX 10589 68777 1600 1600 NT_STATUS_OK
ReadX 10589 70377 640 640 NT_STATUS_OK
ReadX 10589 71017 1280 1280 NT_STATUS_OK
ReadX 10589 72297 8464 8464 NT_STATUS_OK
ReadX 10589 80761 158 158 NT_STATUS_OK
ReadX 10589 80919 912 912 NT_STATUS_OK
ReadX 10589 81831 1980 1980 NT_STATUS_OK
ReadX 10589 83811 2256 2256 NT_STATUS_OK
ReadX 10589 86067 400 400 NT_STATUS_OK
ReadX 10589 86467 252 252 NT_STATUS_OK
ReadX 10589 86719 42 42 NT_STATUS_OK
ReadX 10589 86761 725 725 NT_STATUS_OK
ReadX 10589 2009 512 512 NT_STATUS_OK
ReadX 10589 3895 9 9 NT_STATUS_OK
ReadX 10589 3781 46 46 NT_STATUS_OK
ReadX 10589 4059 92 92 NT_STATUS_OK
ReadX 10589 3781 92 92 NT_STATUS_OK
ReadX 10589 3986 184 184 NT_STATUS_OK
ReadX 10589 3987 16384 16384 NT_STATUS_OK
ReadX 10589 3902 16384 16384 NT_STATUS_OK
ReadX 10589 3781 10240 10240 NT_STATUS_OK
ReadX 10589 3821 16384 16384 NT_STATUS_OK
ReadX 10589 3891 935 935 NT_STATUS_OK
ReadX 10589 4060 10240 10240 NT_STATUS_OK
ReadX 10589 4059 184 184 NT_STATUS_OK
ReadX 10589 256 184 184 NT_STATUS_OK
ReadX 10589 256 1026 1026 NT_STATUS_OK
ReadX 10589 3901 326 326 NT_STATUS_OK
ReadX 10589 3899 652 652 NT_STATUS_OK
ReadX 10589 256 2 2 NT_STATUS_OK
ReadX 10589 258 4948 4948 NT_STATUS_OK
Close 10589 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10604 NT_STATUS_OK
Close 10604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10607 NT_STATUS_OK
WriteX 10607 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10607 258 NT_STATUS_OK
WriteX 10607 0 65536 65536 NT_STATUS_OK
WriteX 10607 65536 65536 65536 NT_STATUS_OK
WriteX 10607 131072 65536 65536 NT_STATUS_OK
WriteX 10607 196608 65536 65536 NT_STATUS_OK
WriteX 10607 262144 65536 65536 NT_STATUS_OK
WriteX 10607 327680 65536 65536 NT_STATUS_OK
WriteX 10607 393216 65536 65536 NT_STATUS_OK
WriteX 10607 458752 65536 65536 NT_STATUS_OK
WriteX 10607 524288 65536 65536 NT_STATUS_OK
WriteX 10607 589824 35257 35257 NT_STATUS_OK
Close 10607 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10609 NT_STATUS_OK
Close 10609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10612 NT_STATUS_OK
WriteX 10612 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10612 258 NT_STATUS_OK
WriteX 10612 0 65536 65536 NT_STATUS_OK
WriteX 10612 65536 65536 65536 NT_STATUS_OK
WriteX 10612 131072 65536 65536 NT_STATUS_OK
WriteX 10612 196608 65536 65536 NT_STATUS_OK
WriteX 10612 262144 65536 65536 NT_STATUS_OK
WriteX 10612 327680 65536 65536 NT_STATUS_OK
WriteX 10612 393216 65536 65536 NT_STATUS_OK
WriteX 10612 458752 65536 65536 NT_STATUS_OK
WriteX 10612 524288 65536 65536 NT_STATUS_OK
WriteX 10612 589824 57598 57598 NT_STATUS_OK
Close 10612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10614 NT_STATUS_OK
WriteX 10614 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10614 258 NT_STATUS_OK
WriteX 10614 0 12543 12543 NT_STATUS_OK
Flush 10614 NT_STATUS_OK
Close 10614 NT_STATUS_OK
Close 10598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10616 NT_STATUS_OK
Close 10616 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10618 NT_STATUS_OK
ReadX 10618 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10619 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10620 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 1005 NT_STATUS_OK
ReadX 10620 1938 24 24 NT_STATUS_OK
ReadX 10620 1920 276 276 NT_STATUS_OK
ReadX 10620 1918 14 14 NT_STATUS_OK
ReadX 10620 1918 7 7 NT_STATUS_OK
ReadX 10620 1919 12 12 NT_STATUS_OK
ReadX 10620 1919 8 8 NT_STATUS_OK
ReadX 10620 1917 15 15 NT_STATUS_OK
ReadX 10620 0 16 16 NT_STATUS_OK
ReadX 10620 16 2048 2048 NT_STATUS_OK
ReadX 10620 2064 2048 2048 NT_STATUS_OK
ReadX 10620 257 2048 2048 NT_STATUS_OK
ReadX 10620 385 2048 2048 NT_STATUS_OK
ReadX 10620 513 2048 2048 NT_STATUS_OK
ReadX 10620 641 2048 2048 NT_STATUS_OK
ReadX 10620 769 2048 2048 NT_STATUS_OK
ReadX 10620 897 2048 2048 NT_STATUS_OK
ReadX 10620 1025 2048 2048 NT_STATUS_OK
ReadX 10620 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10622 NT_STATUS_OK
Close 10622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10625 NT_STATUS_OK
WriteX 10625 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10625 258 NT_STATUS_OK
WriteX 10625 0 11588 11588 NT_STATUS_OK
Flush 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10626 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 0 4096 4096 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10630 NT_STATUS_OK
WriteX 10630 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10630 258 NT_STATUS_OK
WriteX 10630 0 11615 11615 NT_STATUS_OK
Flush 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10632 NT_STATUS_OK
Close 10632 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10634 NT_STATUS_OK
ReadX 10634 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10636 NT_STATUS_OK
Close 10636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10639 NT_STATUS_OK
WriteX 10639 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10639 258 NT_STATUS_OK
WriteX 10639 0 65536 65536 NT_STATUS_OK
WriteX 10639 65536 16050 16050 NT_STATUS_OK
Close 10639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10619 1939 64 64 NT_STATUS_OK
ReadX 10619 128 248 248 NT_STATUS_OK
ReadX 10619 128 568 568 NT_STATUS_OK
ReadX 10619 3872 1536 1536 NT_STATUS_OK
ReadX 10619 3456 2560 2560 NT_STATUS_OK
ReadX 10619 3136 512 512 NT_STATUS_OK
ReadX 10619 2880 4096 4096 NT_STATUS_OK
ReadX 10619 3264 3072 3072 NT_STATUS_OK
ReadX 10619 320 4096 4096 NT_STATUS_OK
ReadX 10619 1024 4096 4096 NT_STATUS_OK
ReadX 10619 3616 4096 4096 NT_STATUS_OK
ReadX 10619 1939 64 64 NT_STATUS_OK
ReadX 10619 128 248 248 NT_STATUS_OK
ReadX 10619 128 608 608 NT_STATUS_OK
ReadX 10619 2858 1024 1024 NT_STATUS_OK
ReadX 10619 2810 4096 4096 NT_STATUS_OK
ReadX 10619 2826 4096 4096 NT_STATUS_OK
ReadX 10619 2580 2048 2048 NT_STATUS_OK
ReadX 10619 2800 2560 2560 NT_STATUS_OK
ReadX 10619 2100 4096 4096 NT_STATUS_OK
ReadX 10619 2084 4096 4096 NT_STATUS_OK
ReadX 10619 868 4096 4096 NT_STATUS_OK
ReadX 10619 2324 4096 4096 NT_STATUS_OK
ReadX 10619 884 4096 4096 NT_STATUS_OK
ReadX 10619 2604 1024 1024 NT_STATUS_OK
ReadX 10619 580 4096 4096 NT_STATUS_OK
ReadX 10619 596 4096 4096 NT_STATUS_OK
ReadX 10619 2752 4096 4096 NT_STATUS_OK
ReadX 10619 2842 1024 1024 NT_STATUS_OK
ReadX 10619 660 4096 4096 NT_STATUS_OK
ReadX 10619 2720 4096 4096 NT_STATUS_OK
ReadX 10619 2736 4096 4096 NT_STATUS_OK
ReadX 10619 628 4096 4096 NT_STATUS_OK
ReadX 10619 2704 4096 4096 NT_STATUS_OK
ReadX 10619 1556 4096 4096 NT_STATUS_OK
ReadX 10619 576 4096 4096 NT_STATUS_OK
ReadX 10619 3168 1536 1536 NT_STATUS_OK
ReadX 10619 832 4096 4096 NT_STATUS_OK
ReadX 10619 1088 4096 4096 NT_STATUS_OK
ReadX 10619 1344 4096 4096 NT_STATUS_OK
ReadX 10619 1600 4096 4096 NT_STATUS_OK
ReadX 10619 1856 4096 4096 NT_STATUS_OK
ReadX 10619 2112 4096 4096 NT_STATUS_OK
ReadX 10619 1892 4096 4096 NT_STATUS_OK
ReadX 10619 820 4096 4096 NT_STATUS_OK
ReadX 10619 788 4096 4096 NT_STATUS_OK
ReadX 10619 1604 4096 4096 NT_STATUS_OK
ReadX 10619 3648 4096 4096 NT_STATUS_OK
ReadX 10619 2608 4096 4096 NT_STATUS_OK
ReadX 10619 548 4096 4096 NT_STATUS_OK
ReadX 10619 740 4096 4096 NT_STATUS_OK
ReadX 10619 1344 4096 4096 NT_STATUS_OK
ReadX 10619 3392 4096 4096 NT_STATUS_OK
ReadX 10619 3904 4096 4096 NT_STATUS_OK
ReadX 10619 644 4096 4096 NT_STATUS_OK
ReadX 10619 676 4096 4096 NT_STATUS_OK
ReadX 10619 2688 4096 4096 NT_STATUS_OK
ReadX 10619 320 4096 4096 NT_STATUS_OK
ReadX 10619 900 4096 4096 NT_STATUS_OK
ReadX 10619 1908 4096 4096 NT_STATUS_OK
ReadX 10619 852 4096 4096 NT_STATUS_OK
ReadX 10619 724 4096 4096 NT_STATUS_OK
ReadX 10619 2292 4096 4096 NT_STATUS_OK
ReadX 10619 612 4096 4096 NT_STATUS_OK
ReadX 10619 388 4096 4096 NT_STATUS_OK
ReadX 10619 2368 4096 4096 NT_STATUS_OK
ReadX 10619 2624 4096 4096 NT_STATUS_OK
ReadX 10619 500 4096 4096 NT_STATUS_OK
ReadX 10619 356 4096 4096 NT_STATUS_OK
ReadX 10619 1024 4096 4096 NT_STATUS_OK
ReadX 10619 576 4096 4096 NT_STATUS_OK
ReadX 10619 340 4096 4096 NT_STATUS_OK
ReadX 10619 420 4096 4096 NT_STATUS_OK
ReadX 10619 1600 4096 4096 NT_STATUS_OK
ReadX 10619 404 4096 4096 NT_STATUS_OK
ReadX 10619 1428 4096 4096 NT_STATUS_OK
ReadX 10619 2656 4096 4096 NT_STATUS_OK
ReadX 10619 2624 4096 4096 NT_STATUS_OK
ReadX 10619 452 4096 4096 NT_STATUS_OK
ReadX 10619 692 4096 4096 NT_STATUS_OK
ReadX 10619 564 4096 4096 NT_STATUS_OK
ReadX 10619 372 4096 4096 NT_STATUS_OK
ReadX 10619 468 4096 4096 NT_STATUS_OK
ReadX 10619 484 4096 4096 NT_STATUS_OK
ReadX 10619 1088 4096 4096 NT_STATUS_OK
ReadX 10619 1924 4096 4096 NT_STATUS_OK
ReadX 10619 2768 4096 4096 NT_STATUS_OK
ReadX 10619 832 4096 4096 NT_STATUS_OK
ReadX 10619 836 4096 4096 NT_STATUS_OK
ReadX 10619 1856 4096 4096 NT_STATUS_OK
ReadX 10619 2640 4096 4096 NT_STATUS_OK
ReadX 10619 436 4096 4096 NT_STATUS_OK
ReadX 10619 1828 4096 4096 NT_STATUS_OK
ReadX 10619 804 4096 4096 NT_STATUS_OK
ReadX 10619 1860 4096 4096 NT_STATUS_OK
ReadX 10619 1812 4096 4096 NT_STATUS_OK
ReadX 10619 756 4096 4096 NT_STATUS_OK
ReadX 10619 1636 4096 4096 NT_STATUS_OK
ReadX 10619 772 4096 4096 NT_STATUS_OK
ReadX 10619 2036 4096 4096 NT_STATUS_OK
ReadX 10619 1220 4096 4096 NT_STATUS_OK
ReadX 10619 1652 4096 4096 NT_STATUS_OK
ReadX 10619 2588 4096 4096 NT_STATUS_OK
ReadX 10619 916 4096 4096 NT_STATUS_OK
ReadX 10619 260 4096 4096 NT_STATUS_OK
ReadX 10619 932 4096 4096 NT_STATUS_OK
ReadX 10619 2624 4096 4096 NT_STATUS_OK
ReadX 10619 308 4096 4096 NT_STATUS_OK
ReadX 10619 292 4096 4096 NT_STATUS_OK
ReadX 10619 1140 4096 4096 NT_STATUS_OK
ReadX 10619 276 4096 4096 NT_STATUS_OK
ReadX 10619 2020 4096 4096 NT_STATUS_OK
ReadX 10619 2880 4096 4096 NT_STATUS_OK
ReadX 10619 516 4096 4096 NT_STATUS_OK
ReadX 10619 1844 4096 4096 NT_STATUS_OK
ReadX 10619 1124 4096 4096 NT_STATUS_OK
ReadX 10619 3136 4096 4096 NT_STATUS_OK
ReadX 10619 324 4096 4096 NT_STATUS_OK
ReadX 10619 1156 4096 4096 NT_STATUS_OK
ReadX 10619 1172 4096 4096 NT_STATUS_OK
ReadX 10619 2112 4096 4096 NT_STATUS_OK
ReadX 10619 2368 4096 4096 NT_STATUS_OK
ReadX 10619 964 4096 4096 NT_STATUS_OK
ReadX 10619 980 4096 4096 NT_STATUS_OK
ReadX 10619 1012 4096 4096 NT_STATUS_OK
ReadX 10619 532 4096 4096 NT_STATUS_OK
ReadX 10619 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10619 1620 4096 4096 NT_STATUS_OK
ReadX 10619 1604 4096 4096 NT_STATUS_OK
ReadX 10619 2116 4096 4096 NT_STATUS_OK
ReadX 10619 2132 4096 4096 NT_STATUS_OK
ReadX 10619 2148 4096 4096 NT_STATUS_OK
ReadX 10619 2276 4096 4096 NT_STATUS_OK
ReadX 10619 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10644 NT_STATUS_OK
QUERY_FILE_INFORMATION 10599 1004 NT_STATUS_OK
Close 10599 NT_STATUS_OK
WriteX 10644 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10644 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10601 1004 NT_STATUS_OK
Close 10601 NT_STATUS_OK
WriteX 10644 0 65536 65536 NT_STATUS_OK
WriteX 10644 65536 64850 64850 NT_STATUS_OK
Close 10644 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10646 NT_STATUS_OK
WriteX 10646 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10646 258 NT_STATUS_OK
ReadX 10619 2068 4096 4096 NT_STATUS_OK
ReadX 10619 1588 4096 4096 NT_STATUS_OK
ReadX 10619 1572 4096 4096 NT_STATUS_OK
WriteX 10646 0 18630 18630 NT_STATUS_OK
Flush 10646 NT_STATUS_OK
Close 10646 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10634 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10648 NT_STATUS_OK
Close 10648 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10650 NT_STATUS_OK
ReadX 10650 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10619 612 4096 4096 NT_STATUS_OK
ReadX 10619 564 4096 4096 NT_STATUS_OK
ReadX 10619 1876 4096 4096 NT_STATUS_OK
ReadX 10619 628 4096 4096 NT_STATUS_OK
ReadX 10619 740 4096 4096 NT_STATUS_OK
ReadX 10619 724 4096 4096 NT_STATUS_OK
ReadX 10619 644 4096 4096 NT_STATUS_OK
ReadX 10619 2324 4096 4096 NT_STATUS_OK
ReadX 10619 660 4096 4096 NT_STATUS_OK
ReadX 10619 852 4096 4096 NT_STATUS_OK
ReadX 10619 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10619 2368 4096 4096 NT_STATUS_OK
ReadX 10619 1024 4096 4096 NT_STATUS_OK
ReadX 10619 320 4096 4096 NT_STATUS_OK
ReadX 10619 580 4096 4096 NT_STATUS_OK
ReadX 10619 3136 512 512 NT_STATUS_OK
ReadX 10619 2880 4096 4096 NT_STATUS_OK
Close 10619 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10651 NT_STATUS_OK
ReadX 10651 61440 4096 4096 NT_STATUS_OK
ReadX 10651 126976 4096 4096 NT_STATUS_OK
WriteX 10651 0 65536 65536 NT_STATUS_OK
WriteX 10651 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 61440 4096 4096 NT_STATUS_OK
ReadX 10652 126976 4096 4096 NT_STATUS_OK
ReadX 10652 192512 4096 4096 NT_STATUS_OK
ReadX 10652 258048 4096 4096 NT_STATUS_OK
WriteX 10652 0 65536 65536 NT_STATUS_OK
WriteX 10652 65536 65536 65536 NT_STATUS_OK
WriteX 10652 131072 65536 65536 NT_STATUS_OK
WriteX 10652 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 61440 4096 4096 NT_STATUS_OK
ReadX 10653 126976 4096 4096 NT_STATUS_OK
ReadX 10653 192512 4096 4096 NT_STATUS_OK
ReadX 10653 258048 4096 4096 NT_STATUS_OK
ReadX 10653 323584 4096 4096 NT_STATUS_OK
ReadX 10653 389120 4096 4096 NT_STATUS_OK
ReadX 10653 454656 4096 4096 NT_STATUS_OK
ReadX 10653 520192 4096 4096 NT_STATUS_OK
WriteX 10653 0 65536 65536 NT_STATUS_OK
WriteX 10653 65536 65536 65536 NT_STATUS_OK
WriteX 10653 131072 65536 65536 NT_STATUS_OK
WriteX 10653 196608 65536 65536 NT_STATUS_OK
WriteX 10653 262144 65536 65536 NT_STATUS_OK
WriteX 10653 327680 65536 65536 NT_STATUS_OK
WriteX 10653 393216 65536 65536 NT_STATUS_OK
WriteX 10653 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10655 NT_STATUS_OK
Close 10655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10656 NT_STATUS_OK
WriteX 10656 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10656 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10654 0 8192 8192 NT_STATUS_OK
Flush 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10654 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10654 0 8192 8192 NT_STATUS_OK
Flush 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10654 0 8192 8192 NT_STATUS_OK
Flush 10654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10654 0 8192 8192 NT_STATUS_OK
Flush 10654 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10658 NT_STATUS_OK
Close 10658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10650 NT_STATUS_OK
Close 10618 NT_STATUS_OK
Close 10651 NT_STATUS_OK
Close 10652 NT_STATUS_OK
Close 10653 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10661 NT_STATUS_OK
WriteX 10661 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10661 258 NT_STATUS_OK
WriteX 10661 0 62591 62591 NT_STATUS_OK
Close 10661 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10663 NT_STATUS_OK
Close 10663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10666 NT_STATUS_OK
WriteX 10666 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10666 258 NT_STATUS_OK
WriteX 10666 0 10845 10845 NT_STATUS_OK
Close 10666 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10668 NT_STATUS_OK
Close 10668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10671 NT_STATUS_OK
WriteX 10671 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10671 258 NT_STATUS_OK
WriteX 10671 0 30118 30118 NT_STATUS_OK
Close 10671 NT_STATUS_OK
WriteX 10654 0 4096 4096 NT_STATUS_OK
WriteX 10656 0 64 64 NT_STATUS_OK
Close 10656 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10654 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10673 NT_STATUS_OK
ReadX 10673 0 61440 61440 NT_STATUS_OK
ReadX 10673 61440 4096 4096 NT_STATUS_OK
ReadX 10673 65536 61440 61440 NT_STATUS_OK
ReadX 10673 126976 4096 4096 NT_STATUS_OK
ReadX 10673 131072 61440 61440 NT_STATUS_OK
ReadX 10673 192512 4096 4096 NT_STATUS_OK
ReadX 10673 196608 61440 61440 NT_STATUS_OK
ReadX 10673 258048 4096 4096 NT_STATUS_OK
ReadX 10673 262144 61440 61440 NT_STATUS_OK
ReadX 10673 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10674 NT_STATUS_OK
ReadX 10674 0 61440 61440 NT_STATUS_OK
ReadX 10674 61440 4096 4096 NT_STATUS_OK
ReadX 10674 65536 61440 61440 NT_STATUS_OK
ReadX 10674 126976 4096 4096 NT_STATUS_OK
ReadX 10674 131072 61440 61440 NT_STATUS_OK
ReadX 10674 192512 4096 4096 NT_STATUS_OK
ReadX 10674 196608 61440 61440 NT_STATUS_OK
ReadX 10674 258048 4096 4096 NT_STATUS_OK
ReadX 10674 262144 61440 61440 NT_STATUS_OK
ReadX 10674 323584 4096 4096 NT_STATUS_OK
ReadX 10674 327680 61440 61440 NT_STATUS_OK
ReadX 10674 389120 4096 4096 NT_STATUS_OK
ReadX 10674 393216 61440 61440 NT_STATUS_OK
ReadX 10674 454656 4096 4096 NT_STATUS_OK
ReadX 10674 458752 61440 61440 NT_STATUS_OK
ReadX 10674 520192 4096 4096 NT_STATUS_OK
ReadX 10674 524288 61440 61440 NT_STATUS_OK
ReadX 10674 585728 4096 4096 NT_STATUS_OK
ReadX 10674 589824 61440 61440 NT_STATUS_OK
ReadX 10674 651264 4096 4096 NT_STATUS_OK
ReadX 10674 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10675 NT_STATUS_OK
ReadX 10675 0 61440 61440 NT_STATUS_OK
ReadX 10675 61440 4096 4096 NT_STATUS_OK
ReadX 10675 65536 61440 61440 NT_STATUS_OK
ReadX 10675 126976 4096 4096 NT_STATUS_OK
ReadX 10675 131072 61440 61440 NT_STATUS_OK
ReadX 10675 192512 4096 4096 NT_STATUS_OK
ReadX 10675 196608 61440 61440 NT_STATUS_OK
ReadX 10675 258048 4096 4096 NT_STATUS_OK
ReadX 10675 262144 61440 61440 NT_STATUS_OK
ReadX 10675 323584 4096 4096 NT_STATUS_OK
ReadX 10675 327680 61440 61440 NT_STATUS_OK
ReadX 10675 389120 4096 4096 NT_STATUS_OK
ReadX 10675 393216 61440 61440 NT_STATUS_OK
ReadX 10675 454656 4096 4096 NT_STATUS_OK
ReadX 10675 458752 61440 61440 NT_STATUS_OK
ReadX 10675 520192 4096 4096 NT_STATUS_OK
ReadX 10675 524288 61440 61440 NT_STATUS_OK
ReadX 10675 585728 4096 4096 NT_STATUS_OK
ReadX 10675 589824 61440 61440 NT_STATUS_OK
ReadX 10675 651264 4096 4096 NT_STATUS_OK
ReadX 10675 655360 61440 61440 NT_STATUS_OK
ReadX 10675 716800 4096 4096 NT_STATUS_OK
ReadX 10675 720896 61440 61440 NT_STATUS_OK
ReadX 10675 782336 4096 4096 NT_STATUS_OK
ReadX 10675 786432 61440 61440 NT_STATUS_OK
ReadX 10675 847872 4096 4096 NT_STATUS_OK
ReadX 10675 851968 61440 61440 NT_STATUS_OK
ReadX 10675 913408 4096 4096 NT_STATUS_OK
ReadX 10675 917504 61440 61440 NT_STATUS_OK
ReadX 10675 978944 4096 4096 NT_STATUS_OK
ReadX 10675 983040 61440 61440 NT_STATUS_OK
ReadX 10675 1044480 4096 4096 NT_STATUS_OK
ReadX 10675 1048576 61440 61440 NT_STATUS_OK
ReadX 10675 1110016 4096 4096 NT_STATUS_OK
ReadX 10675 1114112 61440 61440 NT_STATUS_OK
ReadX 10675 1175552 4096 4096 NT_STATUS_OK
ReadX 10675 1179648 61440 61440 NT_STATUS_OK
ReadX 10675 1241088 4096 4096 NT_STATUS_OK
ReadX 10675 1245184 61440 61440 NT_STATUS_OK
ReadX 10675 1306624 4096 4096 NT_STATUS_OK
ReadX 10675 1310720 61440 61440 NT_STATUS_OK
ReadX 10675 1372160 4096 4096 NT_STATUS_OK
ReadX 10675 1376256 61440 61440 NT_STATUS_OK
ReadX 10675 1437696 4096 4096 NT_STATUS_OK
ReadX 10675 1441792 61440 61440 NT_STATUS_OK
ReadX 10675 1503232 4096 4096 NT_STATUS_OK
ReadX 10675 1507328 61440 61440 NT_STATUS_OK
ReadX 10675 1568768 4096 4096 NT_STATUS_OK
ReadX 10675 1572864 61440 61440 NT_STATUS_OK
ReadX 10675 1634304 4096 4096 NT_STATUS_OK
ReadX 10675 1638400 61440 61440 NT_STATUS_OK
ReadX 10675 1699840 4096 4096 NT_STATUS_OK
ReadX 10675 1703936 61440 61440 NT_STATUS_OK
ReadX 10675 1765376 4096 4096 NT_STATUS_OK
ReadX 10675 1769472 61440 61440 NT_STATUS_OK
ReadX 10675 1830912 4096 4096 NT_STATUS_OK
ReadX 10675 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10676 NT_STATUS_OK
Close 10676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10673 NT_STATUS_OK
Close 10674 NT_STATUS_OK
Close 10675 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10678 NT_STATUS_OK
ReadX 10678 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10679 NT_STATUS_OK
ReadX 10679 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10680 NT_STATUS_OK
ReadX 10680 0 4096 4096 NT_STATUS_OK
ReadX 10680 4096 4096 4096 NT_STATUS_OK
ReadX 10680 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10681 NT_STATUS_OK
Close 10681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10678 NT_STATUS_OK
Close 10679 NT_STATUS_OK
Close 10680 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10683 NT_STATUS_OK
ReadX 10683 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10684 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10685 NT_STATUS_OK
Close 10685 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10683 NT_STATUS_OK
Close 10684 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10687 NT_STATUS_OK
ReadX 10687 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10688 NT_STATUS_OK
ReadX 10688 0 8192 8192 NT_STATUS_OK
ReadX 10688 8192 8192 8192 NT_STATUS_OK
ReadX 10688 16384 8192 8192 NT_STATUS_OK
ReadX 10688 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10690 NT_STATUS_OK
Close 10690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10688 NT_STATUS_OK
Close 10687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10693 NT_STATUS_OK
WriteX 10693 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10693 258 NT_STATUS_OK
WriteX 10693 0 10438 10438 NT_STATUS_OK
Close 10693 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10694 NT_STATUS_OK
Close 10694 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10695 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10696 NT_STATUS_OK
Close 10696 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10697 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10698 NT_STATUS_OK
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10699 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10701 NT_STATUS_OK
Close 10701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10702 NT_STATUS_OK
ReadX 10702 0 4096 4096 NT_STATUS_OK
ReadX 10702 4096 4096 4096 NT_STATUS_OK
ReadX 10702 8192 4096 4096 NT_STATUS_OK
ReadX 10702 12288 8192 8192 NT_STATUS_OK
ReadX 10702 20480 8192 8192 NT_STATUS_OK
ReadX 10702 28672 8192 8192 NT_STATUS_OK
ReadX 10702 36864 8192 8192 NT_STATUS_OK
ReadX 10702 45056 8192 8192 NT_STATUS_OK
ReadX 10702 53248 8192 8192 NT_STATUS_OK
ReadX 10702 61440 8192 8192 NT_STATUS_OK
ReadX 10702 69632 8192 8192 NT_STATUS_OK
ReadX 10702 77824 8192 8192 NT_STATUS_OK
ReadX 10702 86016 8192 8192 NT_STATUS_OK
ReadX 10702 94208 8192 8192 NT_STATUS_OK
ReadX 10702 102400 8192 8192 NT_STATUS_OK
ReadX 10702 110592 8192 8192 NT_STATUS_OK
ReadX 10702 118784 8192 8192 NT_STATUS_OK
ReadX 10702 126976 8192 8192 NT_STATUS_OK
ReadX 10702 135168 8192 8192 NT_STATUS_OK
ReadX 10702 143360 8192 8192 NT_STATUS_OK
ReadX 10702 151552 8192 8192 NT_STATUS_OK
ReadX 10702 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10702 NT_STATUS_OK
Close 10695 NT_STATUS_OK
Close 10697 NT_STATUS_OK
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10707 NT_STATUS_OK
WriteX 10707 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10707 258 NT_STATUS_OK
WriteX 10707 0 28489 28489 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10708 NT_STATUS_OK
Close 10708 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10710 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10710 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10710 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10713 NT_STATUS_OK
ReadX 10713 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10714 NT_STATUS_OK
ReadX 10714 0 8192 8192 NT_STATUS_OK
ReadX 10714 8192 8192 8192 NT_STATUS_OK
ReadX 10714 16384 8192 8192 NT_STATUS_OK
ReadX 10714 24576 8192 8192 NT_STATUS_OK
ReadX 10714 32768 16384 16384 NT_STATUS_OK
ReadX 10714 49152 8192 8192 NT_STATUS_OK
ReadX 10714 57344 8192 8192 NT_STATUS_OK
ReadX 10714 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10714 NT_STATUS_OK
Close 10713 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10719 NT_STATUS_OK
WriteX 10719 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10719 258 NT_STATUS_OK
WriteX 10719 0 29253 29253 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10720 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10721 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10722 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10723 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10726 NT_STATUS_OK
WriteX 10726 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10726 258 NT_STATUS_OK
WriteX 10726 0 30183 30183 NT_STATUS_OK
Close 10726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10729 NT_STATUS_OK
WriteX 10729 0 510 510 NT_STATUS_OK
WriteX 10729 510 512 512 NT_STATUS_OK
WriteX 10729 1022 510 510 NT_STATUS_OK
WriteX 10729 1532 510 510 NT_STATUS_OK
WriteX 10729 2042 168 168 NT_STATUS_OK
Close 10729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10730 NT_STATUS_OK
Close 10730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10732 NT_STATUS_OK
ReadX 10732 0 4096 4096 NT_STATUS_OK
WriteX 10732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10733 NT_STATUS_OK
ReadX 10733 61440 4096 4096 NT_STATUS_OK
ReadX 10733 126976 4096 4096 NT_STATUS_OK
WriteX 10733 0 65536 65536 NT_STATUS_OK
WriteX 10733 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10734 NT_STATUS_OK
ReadX 10734 61440 4096 4096 NT_STATUS_OK
ReadX 10734 126976 4096 4096 NT_STATUS_OK
ReadX 10734 192512 4096 4096 NT_STATUS_OK
ReadX 10734 258048 4096 4096 NT_STATUS_OK
WriteX 10734 0 65536 65536 NT_STATUS_OK
WriteX 10734 65536 65536 65536 NT_STATUS_OK
WriteX 10734 131072 65536 65536 NT_STATUS_OK
WriteX 10734 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 61440 4096 4096 NT_STATUS_OK
ReadX 10735 126976 4096 4096 NT_STATUS_OK
ReadX 10735 192512 4096 4096 NT_STATUS_OK
ReadX 10735 258048 4096 4096 NT_STATUS_OK
ReadX 10735 323584 4096 4096 NT_STATUS_OK
ReadX 10735 389120 4096 4096 NT_STATUS_OK
ReadX 10735 454656 4096 4096 NT_STATUS_OK
ReadX 10735 520192 4096 4096 NT_STATUS_OK
WriteX 10735 0 65536 65536 NT_STATUS_OK
WriteX 10735 65536 65536 65536 NT_STATUS_OK
WriteX 10735 131072 65536 65536 NT_STATUS_OK
WriteX 10735 196608 65536 65536 NT_STATUS_OK
WriteX 10735 262144 65536 65536 NT_STATUS_OK
WriteX 10735 327680 65536 65536 NT_STATUS_OK
WriteX 10735 393216 65536 65536 NT_STATUS_OK
WriteX 10735 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10736 NT_STATUS_OK
Close 10736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10732 NT_STATUS_OK
Close 10733 NT_STATUS_OK
Close 10734 NT_STATUS_OK
Close 10735 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10738 NT_STATUS_OK
Close 10738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10742 NT_STATUS_OK
Close 10742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10745 NT_STATUS_OK
Close 10745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10747 NT_STATUS_OK
Close 10747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10751 NT_STATUS_OK
Close 10751 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10756 NT_STATUS_OK
Close 10756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10760 NT_STATUS_OK
Close 10760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10765 NT_STATUS_OK
Close 10765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10770 NT_STATUS_OK
Close 10770 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10780 NT_STATUS_OK
Close 10780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10785 NT_STATUS_OK
Close 10785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10790 NT_STATUS_OK
Close 10790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10795 NT_STATUS_OK
Close 10795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10801 NT_STATUS_OK
Close 10801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10804 NT_STATUS_OK
WriteX 10804 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10804 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10804 0 65536 65536 NT_STATUS_OK
WriteX 10804 65536 65536 65536 NT_STATUS_OK
WriteX 10804 131072 65536 65536 NT_STATUS_OK
WriteX 10804 196608 65536 65536 NT_STATUS_OK
WriteX 10804 262144 26634 26634 NT_STATUS_OK
Close 10804 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10809 NT_STATUS_OK
Close 10809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10810 NT_STATUS_OK
Close 10810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10811 NT_STATUS_OK
ReadX 10811 0 4096 4096 NT_STATUS_OK
Close 10811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10812 NT_STATUS_OK
ReadX 10812 0 4096 4096 NT_STATUS_OK
ReadX 10812 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10813 NT_STATUS_OK
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10812 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10817 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10820 NT_STATUS_OK
Close 10820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10822 NT_STATUS_OK
Close 10822 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10826 NT_STATUS_OK
Close 10826 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10829 NT_STATUS_OK
Close 10829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10831 NT_STATUS_OK
Close 10831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10840 NT_STATUS_OK
Close 10840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10845 NT_STATUS_OK
Close 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10850 NT_STATUS_OK
Close 10850 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10855 NT_STATUS_OK
Close 10855 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10864 NT_STATUS_OK
Close 10864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10869 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10874 NT_STATUS_OK
Close 10874 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10877 NT_STATUS_OK
Close 10877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10879 NT_STATUS_OK
Close 10879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10889 NT_STATUS_OK
Close 10889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10890 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
Close 10891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
Close 10892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10903 NT_STATUS_OK
Close 10903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10905 NT_STATUS_OK
ReadX 10905 0 4096 4096 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 4096 4096 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10907 NT_STATUS_OK
ReadX 10907 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10893 NT_STATUS_OK
Close 10907 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10936 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10936 0 4096 4096 NT_STATUS_OK
Close 10936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10937 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
ReadX 10938 4096 4096 4096 NT_STATUS_OK
ReadX 10938 8192 4096 4096 NT_STATUS_OK
ReadX 10938 12288 4096 4096 NT_STATUS_OK
ReadX 10938 16384 4096 4096 NT_STATUS_OK
ReadX 10938 20480 4096 4096 NT_STATUS_OK
ReadX 10938 24576 4096 4096 NT_STATUS_OK
ReadX 10938 28672 4096 4096 NT_STATUS_OK
ReadX 10938 32768 4096 4096 NT_STATUS_OK
ReadX 10938 36864 4096 4096 NT_STATUS_OK
ReadX 10938 40960 4096 4096 NT_STATUS_OK
ReadX 10938 45056 4096 4096 NT_STATUS_OK
ReadX 10938 49152 4096 4096 NT_STATUS_OK
ReadX 10938 53248 4096 4096 NT_STATUS_OK
ReadX 10938 57344 4096 4096 NT_STATUS_OK
ReadX 10938 61440 4096 4096 NT_STATUS_OK
ReadX 10938 65536 4096 4096 NT_STATUS_OK
ReadX 10938 69632 4096 4096 NT_STATUS_OK
ReadX 10938 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10938 1004 NT_STATUS_OK
WriteX 10938 0 4096 4096 NT_STATUS_OK
Close 10938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10939 NT_STATUS_OK
SET_FILE_INFORMATION 10939 1004 NT_STATUS_OK
Close 10939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10941 NT_STATUS_OK
Close 10941 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10944 NT_STATUS_OK
WriteX 10944 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10944 258 NT_STATUS_OK
WriteX 10944 0 65536 65536 NT_STATUS_OK
WriteX 10944 65536 19979 19979 NT_STATUS_OK
Close 10944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 4096 4096 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
QUERY_FILE_INFORMATION 10945 1004 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
SET_FILE_INFORMATION 10945 1004 NT_STATUS_OK
WriteX 10945 0 4096 4096 NT_STATUS_OK
Flush 10945 NT_STATUS_OK
Close 10945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10947 NT_STATUS_OK
ReadX 10947 0 4096 4096 NT_STATUS_OK
Close 10946 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 4096 4096 NT_STATUS_OK
Close 10948 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
Close 10949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10950 1004 NT_STATUS_OK
WriteX 10950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10951 NT_STATUS_OK
Close 10951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10947 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10953 NT_STATUS_OK
Close 10953 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10956 NT_STATUS_OK
WriteX 10956 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10956 258 NT_STATUS_OK
WriteX 10956 0 65536 65536 NT_STATUS_OK
WriteX 10956 65536 17654 17654 NT_STATUS_OK
Close 10956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 4096 4096 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
QUERY_FILE_INFORMATION 10957 1004 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10958 NT_STATUS_OK
SET_FILE_INFORMATION 10958 1004 NT_STATUS_OK
Close 10958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10959 NT_STATUS_OK
ReadX 10959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
ReadX 10962 4096 4096 4096 NT_STATUS_OK
ReadX 10962 8192 4096 4096 NT_STATUS_OK
ReadX 10962 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10962 16384 4096 4096 NT_STATUS_OK
ReadX 10962 20480 4096 4096 NT_STATUS_OK
ReadX 10962 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 4096 4096 NT_STATUS_OK
Close 10963 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 4096 4096 NT_STATUS_OK
Close 10964 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10965 1004 NT_STATUS_OK
WriteX 10965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10966 NT_STATUS_OK
Close 10966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10965 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10968 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10971 NT_STATUS_OK
WriteX 10971 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10971 258 NT_STATUS_OK
WriteX 10971 0 65536 65536 NT_STATUS_OK
WriteX 10971 65536 19490 19490 NT_STATUS_OK
Close 10971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10972 NT_STATUS_OK
ReadX 10972 0 4096 4096 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
QUERY_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
SET_FILE_INFORMATION 10972 1004 NT_STATUS_OK
WriteX 10972 0 4096 4096 NT_STATUS_OK
Flush 10972 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10973 NT_STATUS_OK
SET_FILE_INFORMATION 10973 1004 NT_STATUS_OK
Close 10973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10974 NT_STATUS_OK
ReadX 10974 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10975 NT_STATUS_OK
Close 10975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10977 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10977 0 4096 4096 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10978 NT_STATUS_OK
ReadX 10978 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 4096 4096 NT_STATUS_OK
ReadX 10979 4096 4096 4096 NT_STATUS_OK
ReadX 10979 8192 4096 4096 NT_STATUS_OK
ReadX 10979 12288 4096 4096 NT_STATUS_OK
ReadX 10979 16384 4096 4096 NT_STATUS_OK
ReadX 10979 20480 4096 4096 NT_STATUS_OK
ReadX 10979 24576 4096 4096 NT_STATUS_OK
ReadX 10979 28672 4096 4096 NT_STATUS_OK
ReadX 10979 32768 4096 4096 NT_STATUS_OK
ReadX 10979 36864 4096 4096 NT_STATUS_OK
ReadX 10979 40960 4096 4096 NT_STATUS_OK
ReadX 10979 45056 4096 4096 NT_STATUS_OK
ReadX 10979 49152 4096 4096 NT_STATUS_OK
ReadX 10979 53248 4096 4096 NT_STATUS_OK
ReadX 10979 57344 4096 4096 NT_STATUS_OK
ReadX 10979 61440 4096 4096 NT_STATUS_OK
ReadX 10979 65536 4096 4096 NT_STATUS_OK
ReadX 10979 69632 4096 4096 NT_STATUS_OK
ReadX 10979 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10979 1004 NT_STATUS_OK
WriteX 10979 0 4096 4096 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10980 NT_STATUS_OK
SET_FILE_INFORMATION 10980 1004 NT_STATUS_OK
Close 10980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10981 NT_STATUS_OK
ReadX 10981 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10982 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10985 NT_STATUS_OK
WriteX 10985 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10985 258 NT_STATUS_OK
WriteX 10985 0 65536 65536 NT_STATUS_OK
WriteX 10985 65536 8866 8866 NT_STATUS_OK
Close 10985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
WriteX 10986 0 4096 4096 NT_STATUS_OK
Flush 10986 NT_STATUS_OK
SET_FILE_INFORMATION 10986 1004 NT_STATUS_OK
WriteX 10986 0 4096 4096 NT_STATUS_OK
Flush 10986 NT_STATUS_OK
Close 10986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
Close 10988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
Close 10989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10990 1004 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10991 NT_STATUS_OK
Close 10991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10981 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10993 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10996 NT_STATUS_OK
WriteX 10996 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10996 258 NT_STATUS_OK
WriteX 10996 0 65536 65536 NT_STATUS_OK
WriteX 10996 65536 9298 9298 NT_STATUS_OK
Close 10996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
WriteX 10997 0 4096 4096 NT_STATUS_OK
Flush 10997 NT_STATUS_OK
SET_FILE_INFORMATION 10997 1004 NT_STATUS_OK
WriteX 10997 0 4096 4096 NT_STATUS_OK
Flush 10997 NT_STATUS_OK
Close 10997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10998 NT_STATUS_OK
SET_FILE_INFORMATION 10998 1004 NT_STATUS_OK
Close 10998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11000 NT_STATUS_OK
Close 11000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11003 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11003 0 4096 4096 NT_STATUS_OK
Close 11003 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11004 4096 4096 4096 NT_STATUS_OK
ReadX 11004 8192 4096 4096 NT_STATUS_OK
ReadX 11004 12288 4096 4096 NT_STATUS_OK
ReadX 11004 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
Close 11005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 4096 4096 NT_STATUS_OK
Close 11006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11007 NT_STATUS_OK
ReadX 11007 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11007 1004 NT_STATUS_OK
WriteX 11007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11008 NT_STATUS_OK
Close 11008 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11004 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11010 NT_STATUS_OK
Close 11010 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11013 NT_STATUS_OK
WriteX 11013 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 258 NT_STATUS_OK
WriteX 11013 0 65536 65536 NT_STATUS_OK
WriteX 11013 65536 11540 11540 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
Flush 11014 NT_STATUS_OK
SET_FILE_INFORMATION 11014 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
Flush 11014 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11015 NT_STATUS_OK
SET_FILE_INFORMATION 11015 1004 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11017 NT_STATUS_OK
Close 11017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 61440 4096 4096 NT_STATUS_OK
ReadX 11019 126976 4096 4096 NT_STATUS_OK
WriteX 11019 0 65536 65536 NT_STATUS_OK
WriteX 11019 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 61440 4096 4096 NT_STATUS_OK
ReadX 11020 126976 4096 4096 NT_STATUS_OK
ReadX 11020 192512 4096 4096 NT_STATUS_OK
ReadX 11020 258048 4096 4096 NT_STATUS_OK
WriteX 11020 0 65536 65536 NT_STATUS_OK
WriteX 11020 65536 65536 65536 NT_STATUS_OK
WriteX 11020 131072 65536 65536 NT_STATUS_OK
WriteX 11020 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 61440 4096 4096 NT_STATUS_OK
ReadX 11021 126976 4096 4096 NT_STATUS_OK
ReadX 11021 192512 4096 4096 NT_STATUS_OK
ReadX 11021 258048 4096 4096 NT_STATUS_OK
ReadX 11021 323584 4096 4096 NT_STATUS_OK
ReadX 11021 389120 4096 4096 NT_STATUS_OK
ReadX 11021 454656 4096 4096 NT_STATUS_OK
ReadX 11021 520192 4096 4096 NT_STATUS_OK
WriteX 11021 0 65536 65536 NT_STATUS_OK
WriteX 11021 65536 65536 65536 NT_STATUS_OK
WriteX 11021 131072 65536 65536 NT_STATUS_OK
WriteX 11021 196608 65536 65536 NT_STATUS_OK
WriteX 11021 262144 65536 65536 NT_STATUS_OK
WriteX 11021 327680 65536 65536 NT_STATUS_OK
WriteX 11021 393216 65536 65536 NT_STATUS_OK
WriteX 11021 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
ReadX 11022 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11023 NT_STATUS_OK
WriteX 11023 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11023 258 NT_STATUS_OK
WriteX 11023 0 53 53 NT_STATUS_OK
Close 11023 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11024 NT_STATUS_OK
Close 11024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11021 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11022 8192 4096 4096 NT_STATUS_OK
ReadX 11022 12288 4096 4096 NT_STATUS_OK
WriteX 11026 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11026 258 NT_STATUS_OK
ReadX 11022 16384 4096 4096 NT_STATUS_OK
ReadX 11022 20480 4096 4096 NT_STATUS_OK
WriteX 11026 0 15360 15360 NT_STATUS_OK
Close 11026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11027 NT_STATUS_OK
ReadX 11027 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11027 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11027 1004 NT_STATUS_OK
WriteX 11027 0 4096 4096 NT_STATUS_OK
Close 11027 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11028 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11031 NT_STATUS_OK
Close 11031 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11030 4096 4096 4096 NT_STATUS_OK
ReadX 11030 8192 4096 4096 NT_STATUS_OK
ReadX 11030 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
ReadX 11033 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
ReadX 11034 4096 4096 4096 NT_STATUS_OK
ReadX 11034 8192 4096 4096 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11035 NT_STATUS_OK
WriteX 11035 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11035 258 NT_STATUS_OK
WriteX 11035 0 15360 15360 NT_STATUS_OK
Close 11035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11036 NT_STATUS_OK
ReadX 11036 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11036 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11036 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11030 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11037 NT_STATUS_OK
Close 11037 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11039 NT_STATUS_OK
ReadX 11039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11040 NT_STATUS_OK
SET_FILE_INFORMATION 11040 1004 NT_STATUS_OK
Close 11040 NT_STATUS_OK
WriteX 11036 0 4096 4096 NT_STATUS_OK
Close 11036 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11041 NT_STATUS_OK
Close 11041 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11043 NT_STATUS_OK
ReadX 11043 0 4096 4096 NT_STATUS_OK
ReadX 11043 4096 4096 4096 NT_STATUS_OK
ReadX 11043 8192 4096 4096 NT_STATUS_OK
ReadX 11043 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11043 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11043 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11044 NT_STATUS_OK
ReadX 11044 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11045 NT_STATUS_OK
WriteX 11045 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 258 NT_STATUS_OK
WriteX 11045 0 53 53 NT_STATUS_OK
Close 11045 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11046 NT_STATUS_OK
Close 11046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11044 4096 4096 4096 NT_STATUS_OK
ReadX 11044 8192 4096 4096 NT_STATUS_OK
ReadX 11044 12288 4096 4096 NT_STATUS_OK
WriteX 11048 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11048 258 NT_STATUS_OK
WriteX 11048 0 12006 12006 NT_STATUS_OK
Close 11048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11049 NT_STATUS_OK
ReadX 11049 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11049 1004 NT_STATUS_OK
WriteX 11049 0 4096 4096 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11050 NT_STATUS_OK
Close 11050 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11053 NT_STATUS_OK
Close 11053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11052 4096 4096 4096 NT_STATUS_OK
ReadX 11052 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11055 NT_STATUS_OK
WriteX 11055 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11055 258 NT_STATUS_OK
WriteX 11055 0 11991 11991 NT_STATUS_OK
Close 11055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11056 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11056 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11057 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11060 NT_STATUS_OK
WriteX 11043 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 11060 1004 NT_STATUS_OK
Close 11060 NT_STATUS_OK
WriteX 11056 0 4096 4096 NT_STATUS_OK
Close 11056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11061 NT_STATUS_OK
Close 11061 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11064 NT_STATUS_OK
Close 11064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11063 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
ReadX 11063 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
WriteX 11063 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11063 1004 NT_STATUS_OK
Close 11039 NT_STATUS_OK
WriteX 11063 0 12288 12288 NT_STATUS_OK
Close 11059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11066 NT_STATUS_OK
Close 11066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11043 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11068 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11070 NT_STATUS_OK
ReadX 11070 0 61440 61440 NT_STATUS_OK
ReadX 11070 61440 4096 4096 NT_STATUS_OK
ReadX 11070 65536 61440 61440 NT_STATUS_OK
ReadX 11070 126976 4096 4096 NT_STATUS_OK
ReadX 11070 131072 61440 61440 NT_STATUS_OK
ReadX 11070 192512 4096 4096 NT_STATUS_OK
ReadX 11070 196608 61440 61440 NT_STATUS_OK
ReadX 11070 258048 4096 4096 NT_STATUS_OK
ReadX 11070 262144 61440 61440 NT_STATUS_OK
ReadX 11070 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11071 NT_STATUS_OK
ReadX 11071 0 61440 61440 NT_STATUS_OK
ReadX 11071 61440 4096 4096 NT_STATUS_OK
ReadX 11071 65536 61440 61440 NT_STATUS_OK
ReadX 11071 126976 4096 4096 NT_STATUS_OK
ReadX 11071 131072 61440 61440 NT_STATUS_OK
ReadX 11071 192512 4096 4096 NT_STATUS_OK
ReadX 11071 196608 61440 61440 NT_STATUS_OK
ReadX 11071 258048 4096 4096 NT_STATUS_OK
ReadX 11071 262144 61440 61440 NT_STATUS_OK
ReadX 11071 323584 4096 4096 NT_STATUS_OK
ReadX 11071 327680 61440 61440 NT_STATUS_OK
ReadX 11071 389120 4096 4096 NT_STATUS_OK
ReadX 11071 393216 61440 61440 NT_STATUS_OK
ReadX 11071 454656 4096 4096 NT_STATUS_OK
ReadX 11071 458752 61440 61440 NT_STATUS_OK
ReadX 11071 520192 4096 4096 NT_STATUS_OK
ReadX 11071 524288 61440 61440 NT_STATUS_OK
ReadX 11071 585728 4096 4096 NT_STATUS_OK
ReadX 11071 589824 61440 61440 NT_STATUS_OK
ReadX 11071 651264 4096 4096 NT_STATUS_OK
ReadX 11071 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 0 61440 61440 NT_STATUS_OK
ReadX 11072 61440 4096 4096 NT_STATUS_OK
ReadX 11072 65536 61440 61440 NT_STATUS_OK
ReadX 11072 126976 4096 4096 NT_STATUS_OK
ReadX 11072 131072 61440 61440 NT_STATUS_OK
ReadX 11072 192512 4096 4096 NT_STATUS_OK
ReadX 11072 196608 61440 61440 NT_STATUS_OK
ReadX 11072 258048 4096 4096 NT_STATUS_OK
ReadX 11072 262144 61440 61440 NT_STATUS_OK
ReadX 11072 323584 4096 4096 NT_STATUS_OK
ReadX 11072 327680 61440 61440 NT_STATUS_OK
ReadX 11072 389120 4096 4096 NT_STATUS_OK
ReadX 11072 393216 61440 61440 NT_STATUS_OK
ReadX 11072 454656 4096 4096 NT_STATUS_OK
ReadX 11072 458752 61440 61440 NT_STATUS_OK
ReadX 11072 520192 4096 4096 NT_STATUS_OK
ReadX 11072 524288 61440 61440 NT_STATUS_OK
ReadX 11072 585728 4096 4096 NT_STATUS_OK
ReadX 11072 589824 61440 61440 NT_STATUS_OK
ReadX 11072 651264 4096 4096 NT_STATUS_OK
ReadX 11072 655360 61440 61440 NT_STATUS_OK
ReadX 11072 716800 4096 4096 NT_STATUS_OK
ReadX 11072 720896 61440 61440 NT_STATUS_OK
ReadX 11072 782336 4096 4096 NT_STATUS_OK
ReadX 11072 786432 61440 61440 NT_STATUS_OK
ReadX 11072 847872 4096 4096 NT_STATUS_OK
ReadX 11072 851968 61440 61440 NT_STATUS_OK
ReadX 11072 913408 4096 4096 NT_STATUS_OK
ReadX 11072 917504 61440 61440 NT_STATUS_OK
ReadX 11072 978944 4096 4096 NT_STATUS_OK
ReadX 11072 983040 61440 61440 NT_STATUS_OK
ReadX 11072 1044480 4096 4096 NT_STATUS_OK
ReadX 11072 1048576 61440 61440 NT_STATUS_OK
ReadX 11072 1110016 4096 4096 NT_STATUS_OK
ReadX 11072 1114112 61440 61440 NT_STATUS_OK
ReadX 11072 1175552 4096 4096 NT_STATUS_OK
ReadX 11072 1179648 61440 61440 NT_STATUS_OK
ReadX 11072 1241088 4096 4096 NT_STATUS_OK
ReadX 11072 1245184 61440 61440 NT_STATUS_OK
ReadX 11072 1306624 4096 4096 NT_STATUS_OK
ReadX 11072 1310720 61440 61440 NT_STATUS_OK
ReadX 11072 1372160 4096 4096 NT_STATUS_OK
ReadX 11072 1376256 61440 61440 NT_STATUS_OK
ReadX 11072 1437696 4096 4096 NT_STATUS_OK
ReadX 11072 1441792 61440 61440 NT_STATUS_OK
ReadX 11072 1503232 4096 4096 NT_STATUS_OK
ReadX 11072 1507328 61440 61440 NT_STATUS_OK
ReadX 11072 1568768 4096 4096 NT_STATUS_OK
ReadX 11072 1572864 61440 61440 NT_STATUS_OK
ReadX 11072 1634304 4096 4096 NT_STATUS_OK
ReadX 11072 1638400 61440 61440 NT_STATUS_OK
ReadX 11072 1699840 4096 4096 NT_STATUS_OK
ReadX 11072 1703936 61440 61440 NT_STATUS_OK
ReadX 11072 1765376 4096 4096 NT_STATUS_OK
ReadX 11072 1769472 61440 61440 NT_STATUS_OK
ReadX 11072 1830912 4096 4096 NT_STATUS_OK
ReadX 11072 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11075 NT_STATUS_OK
ReadX 11075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11076 NT_STATUS_OK
ReadX 11076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11077 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11078 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11078 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11079 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 1004 NT_STATUS_OK
WriteX 11079 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11079 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11080 NT_STATUS_OK
Close 11080 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11081 NT_STATUS_OK
WriteX 11081 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11081 258 NT_STATUS_OK
WriteX 11081 0 491 491 NT_STATUS_OK
Close 11081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11082 NT_STATUS_OK
ReadX 11082 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11079 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11084 NT_STATUS_OK
Close 11084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11085 NT_STATUS_OK
WriteX 11085 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11085 258 NT_STATUS_OK
WriteX 11085 0 543 543 NT_STATUS_OK
Close 11085 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11086 NT_STATUS_OK
ReadX 11086 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11070 NT_STATUS_OK
Close 11071 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11086 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Close 11077 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11098 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11099 NT_STATUS_OK
QUERY_FILE_INFORMATION 11099 1004 NT_STATUS_OK
WriteX 11099 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11099 258 NT_STATUS_OK
WriteX 11099 0 2048 2048 NT_STATUS_OK
Close 11099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11100 NT_STATUS_OK
ReadX 11100 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11100 0 4096 4096 NT_STATUS_OK
Flush 11100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11100 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11101 NT_STATUS_OK
ReadX 11101 0 543 543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 7936 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11105 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11105 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11106 NT_STATUS_OK
WriteX 11106 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11106 258 NT_STATUS_OK
WriteX 11106 0 2048 2048 NT_STATUS_OK
Close 11106 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11107 NT_STATUS_OK
ReadX 11107 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11111 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11112 NT_STATUS_OK
WriteX 11112 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11112 258 NT_STATUS_OK
WriteX 11112 0 2048 2048 NT_STATUS_OK
Close 11112 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11113 NT_STATUS_OK
ReadX 11113 0 2048 2048 NT_STATUS_OK
ReadX 11090 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11101 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11107 0 4096 4096 NT_STATUS_OK
WriteX 11090 0 8192 8192 NT_STATUS_OK
WriteX 11091 0 4096 4096 NT_STATUS_OK
WriteX 11092 0 4096 4096 NT_STATUS_OK
ReadX 11107 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11090 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11116 NT_STATUS_OK
ReadX 11116 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11117 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11116 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11107 NT_STATUS_OK
Close 11090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11124 NT_STATUS_OK
ReadX 11124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11125 NT_STATUS_OK
ReadX 11125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11131 NT_STATUS_OK
ReadX 11131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11132 NT_STATUS_OK
ReadX 11132 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11136 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11137 NT_STATUS_OK
QUERY_FILE_INFORMATION 11137 1004 NT_STATUS_OK
WriteX 11137 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11137 258 NT_STATUS_OK
WriteX 11137 0 2048 2048 NT_STATUS_OK
Close 11137 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11138 NT_STATUS_OK
ReadX 11138 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11140 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11144 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11144 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11145 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 1004 NT_STATUS_OK
WriteX 11145 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11145 258 NT_STATUS_OK
WriteX 11145 0 2048 2048 NT_STATUS_OK
Close 11145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11146 NT_STATUS_OK
ReadX 11146 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11138 0 4096 4096 NT_STATUS_OK
Flush 11138 NT_STATUS_OK
WriteX 11146 0 4096 4096 NT_STATUS_OK
Flush 11146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11138 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11146 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11140 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11147 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11148 NT_STATUS_OK
WriteX 11148 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11148 258 NT_STATUS_OK
WriteX 11148 0 4096 4096 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11150 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11151 NT_STATUS_OK
WriteX 11151 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11151 258 NT_STATUS_OK
WriteX 11151 0 4096 4096 NT_STATUS_OK
Close 11151 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11152 0 4096 4096 NT_STATUS_OK
Close 11149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Close 11126 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Close 11129 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Close 11125 NT_STATUS_OK
Close 11122 NT_STATUS_OK
Close 11123 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11155 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11157 NT_STATUS_OK
ReadX 11157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11158 NT_STATUS_OK
Close 11158 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11159 NT_STATUS_OK
WriteX 11159 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11159 258 NT_STATUS_OK
WriteX 11159 0 2048 2048 NT_STATUS_OK
Close 11159 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11161 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11165 NT_STATUS_OK
ReadX 11165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11168 NT_STATUS_OK
ReadX 11168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11169 NT_STATUS_OK
ReadX 11169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11170 NT_STATUS_OK
ReadX 11170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11171 NT_STATUS_OK
ReadX 11171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11172 NT_STATUS_OK
ReadX 11172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11173 NT_STATUS_OK
ReadX 11173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11138 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11174 NT_STATUS_OK
QUERY_FILE_INFORMATION 11174 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11157 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Close 11168 NT_STATUS_OK
Close 11169 NT_STATUS_OK
Close 11170 NT_STATUS_OK
Close 11171 NT_STATUS_OK
Close 11173 NT_STATUS_OK
Close 11161 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Close 11165 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11176 NT_STATUS_OK
QUERY_FILE_INFORMATION 11176 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11180 NT_STATUS_OK
ReadX 11180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11181 NT_STATUS_OK
ReadX 11181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11182 NT_STATUS_OK
ReadX 11182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11183 NT_STATUS_OK
ReadX 11183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11185 NT_STATUS_OK
ReadX 11185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11187 NT_STATUS_OK
ReadX 11187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11188 NT_STATUS_OK
ReadX 11188 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11189 NT_STATUS_OK
ReadX 11189 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11190 NT_STATUS_OK
ReadX 11190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11191 NT_STATUS_OK
ReadX 11191 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11196 NT_STATUS_OK
QUERY_FILE_INFORMATION 11196 1004 NT_STATUS_OK
WriteX 11196 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11196 258 NT_STATUS_OK
WriteX 11196 0 2048 2048 NT_STATUS_OK
Close 11196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11197 NT_STATUS_OK
ReadX 11197 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11198 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11199 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11200 NT_STATUS_OK
ReadX 11200 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11201 NT_STATUS_OK
ReadX 11201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11208 NT_STATUS_OK
QUERY_FILE_INFORMATION 11208 1004 NT_STATUS_OK
WriteX 11208 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11208 258 NT_STATUS_OK
WriteX 11208 0 2048 2048 NT_STATUS_OK
Close 11208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11209 NT_STATUS_OK
ReadX 11209 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11184 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11210 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11211 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11211 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11216 NT_STATUS_OK
QUERY_FILE_INFORMATION 11216 1004 NT_STATUS_OK
WriteX 11216 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11216 258 NT_STATUS_OK
WriteX 11216 0 2048 2048 NT_STATUS_OK
Close 11216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11217 NT_STATUS_OK
ReadX 11217 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
Flush 11197 NT_STATUS_OK
WriteX 11209 0 4096 4096 NT_STATUS_OK
Flush 11209 NT_STATUS_OK
WriteX 11217 0 4096 4096 NT_STATUS_OK
Flush 11217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11197 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11209 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11217 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11199 4096 16384 16384 NT_STATUS_OK
ReadX 11179 4096 16384 16384 NT_STATUS_OK
ReadX 11211 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11218 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11219 NT_STATUS_OK
ReadX 11219 0 2048 2048 NT_STATUS_OK
WriteX 11219 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11220 NT_STATUS_OK
QUERY_FILE_INFORMATION 11220 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11220 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11191 NT_STATUS_OK
Close 11183 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Close 11200 NT_STATUS_OK
Close 11201 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11190 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Close 11185 NT_STATUS_OK
Close 11188 NT_STATUS_OK
Close 11189 NT_STATUS_OK
Close 11186 NT_STATUS_OK
Close 11187 NT_STATUS_OK
Close 11179 NT_STATUS_OK
Close 11180 NT_STATUS_OK
Close 11181 NT_STATUS_OK
Close 11182 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11222 NT_STATUS_OK
QUERY_FILE_INFORMATION 11222 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11222 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11217 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11224 NT_STATUS_OK
QUERY_FILE_INFORMATION 11224 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11224 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11227 NT_STATUS_OK
ReadX 11227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11228 NT_STATUS_OK
ReadX 11228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11229 NT_STATUS_OK
ReadX 11229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11230 NT_STATUS_OK
ReadX 11230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11231 NT_STATUS_OK
ReadX 11231 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11227 4096 16384 16384 NT_STATUS_OK
WriteX 11227 0 4096 4096 NT_STATUS_OK
WriteX 11228 0 4096 4096 NT_STATUS_OK
WriteX 11229 0 4096 4096 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11232 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11233 NT_STATUS_OK
ReadX 11233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11234 NT_STATUS_OK
ReadX 11234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11235 NT_STATUS_OK
ReadX 11235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11236 NT_STATUS_OK
ReadX 11236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11239 NT_STATUS_OK
ReadX 11239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11240 NT_STATUS_OK
ReadX 11240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11241 NT_STATUS_OK
ReadX 11241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11242 NT_STATUS_OK
ReadX 11242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11246 NT_STATUS_OK
ReadX 11246 0 8192 8192 NT_STATUS_OK
ReadX 11233 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11247 0 4096 4096 NT_STATUS_OK
ReadX 11247 4096 4096 4096 NT_STATUS_OK
ReadX 11247 8192 4096 4096 NT_STATUS_OK
WriteX 11233 0 4096 4096 NT_STATUS_OK
WriteX 11234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11248 0 4096 4096 NT_STATUS_OK
ReadX 11248 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11227 0 4096 4096 NT_STATUS_OK
WriteX 11228 0 4096 4096 NT_STATUS_OK
WriteX 11229 0 4096 4096 NT_STATUS_OK
WriteX 11230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11253 NT_STATUS_OK
QUERY_FILE_INFORMATION 11253 1004 NT_STATUS_OK
WriteX 11253 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11253 258 NT_STATUS_OK
WriteX 11253 0 2048 2048 NT_STATUS_OK
Close 11253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11254 NT_STATUS_OK
ReadX 11254 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11255 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11255 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 4096 4096 NT_STATUS_OK
ReadX 11256 4096 4096 4096 NT_STATUS_OK
WriteX 11256 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11254 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 0 4096 4096 NT_STATUS_OK
ReadX 11258 4096 4096 4096 NT_STATUS_OK
WriteX 11258 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11259 NT_STATUS_OK
QUERY_FILE_INFORMATION 11259 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11246 NT_STATUS_OK
Close 11231 NT_STATUS_OK
Close 11227 NT_STATUS_OK
Close 11228 NT_STATUS_OK
Close 11229 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Close 11239 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11240 NT_STATUS_OK
Close 11241 NT_STATUS_OK
Close 11242 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Close 11236 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Close 11248 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11261 0 4096 4096 NT_STATUS_OK
ReadX 11261 4096 4096 4096 NT_STATUS_OK
ReadX 11261 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11262 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11263 NT_STATUS_OK
ReadX 11263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11264 NT_STATUS_OK
ReadX 11264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11265 NT_STATUS_OK
ReadX 11265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11266 NT_STATUS_OK
ReadX 11266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11267 NT_STATUS_OK
ReadX 11267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11268 NT_STATUS_OK
ReadX 11268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11269 NT_STATUS_OK
ReadX 11269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11270 NT_STATUS_OK
ReadX 11270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11271 NT_STATUS_OK
ReadX 11271 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11272 NT_STATUS_OK
ReadX 11272 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11273 NT_STATUS_OK
ReadX 11273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11274 NT_STATUS_OK
ReadX 11274 0 4096 4096 NT_STATUS_OK
ReadX 11262 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11278 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11279 NT_STATUS_OK
QUERY_FILE_INFORMATION 11279 1004 NT_STATUS_OK
WriteX 11279 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11279 258 NT_STATUS_OK
WriteX 11279 0 2048 2048 NT_STATUS_OK
Close 11279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11280 NT_STATUS_OK
ReadX 11280 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11280 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11284 NT_STATUS_OK
Close 11284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11285 NT_STATUS_OK
QUERY_FILE_INFORMATION 11285 1004 NT_STATUS_OK
WriteX 11285 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11285 258 NT_STATUS_OK
WriteX 11285 0 2048 2048 NT_STATUS_OK
Close 11285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11286 NT_STATUS_OK
ReadX 11286 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11286 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11269 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11287 NT_STATUS_OK
QUERY_FILE_INFORMATION 11287 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Close 11268 NT_STATUS_OK
Close 11274 NT_STATUS_OK
Close 11262 NT_STATUS_OK
Close 11263 NT_STATUS_OK
Close 11266 NT_STATUS_OK
Close 11267 NT_STATUS_OK
Close 11264 NT_STATUS_OK
Close 11265 NT_STATUS_OK
Close 11269 NT_STATUS_OK
Close 11270 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11272 NT_STATUS_OK
Close 11261 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11289 NT_STATUS_OK
QUERY_FILE_INFORMATION 11289 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 61440 4096 4096 NT_STATUS_OK
ReadX 11291 126976 4096 4096 NT_STATUS_OK
WriteX 11291 0 65536 65536 NT_STATUS_OK
WriteX 11291 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11292 NT_STATUS_OK
ReadX 11292 61440 4096 4096 NT_STATUS_OK
ReadX 11292 126976 4096 4096 NT_STATUS_OK
ReadX 11292 192512 4096 4096 NT_STATUS_OK
ReadX 11292 258048 4096 4096 NT_STATUS_OK
WriteX 11292 0 65536 65536 NT_STATUS_OK
WriteX 11292 65536 65536 65536 NT_STATUS_OK
WriteX 11292 131072 65536 65536 NT_STATUS_OK
WriteX 11292 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11293 NT_STATUS_OK
ReadX 11293 61440 4096 4096 NT_STATUS_OK
ReadX 11293 126976 4096 4096 NT_STATUS_OK
ReadX 11293 192512 4096 4096 NT_STATUS_OK
ReadX 11293 258048 4096 4096 NT_STATUS_OK
ReadX 11293 323584 4096 4096 NT_STATUS_OK
ReadX 11293 389120 4096 4096 NT_STATUS_OK
ReadX 11293 454656 4096 4096 NT_STATUS_OK
ReadX 11293 520192 4096 4096 NT_STATUS_OK
WriteX 11293 0 65536 65536 NT_STATUS_OK
WriteX 11293 65536 65536 65536 NT_STATUS_OK
WriteX 11293 131072 65536 65536 NT_STATUS_OK
WriteX 11293 196608 65536 65536 NT_STATUS_OK
WriteX 11293 262144 65536 65536 NT_STATUS_OK
WriteX 11293 327680 65536 65536 NT_STATUS_OK
WriteX 11293 393216 65536 65536 NT_STATUS_OK
WriteX 11293 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11294 NT_STATUS_OK
ReadX 11294 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11294 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11294 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11294 8192 4096 4096 NT_STATUS_OK
ReadX 11294 12288 4096 4096 NT_STATUS_OK
ReadX 11294 16384 4096 4096 NT_STATUS_OK
ReadX 11294 20480 4096 4096 NT_STATUS_OK
ReadX 11294 24576 4096 4096 NT_STATUS_OK
ReadX 11294 28672 4096 4096 NT_STATUS_OK
ReadX 11294 32768 4096 4096 NT_STATUS_OK
ReadX 11294 36864 4096 4096 NT_STATUS_OK
ReadX 11294 40960 4096 4096 NT_STATUS_OK
ReadX 11294 45056 4096 4096 NT_STATUS_OK
ReadX 11294 49152 4096 4096 NT_STATUS_OK
ReadX 11294 53248 4096 4096 NT_STATUS_OK
ReadX 11294 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11294 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11295 NT_STATUS_OK
Close 11295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11291 NT_STATUS_OK
Close 11292 NT_STATUS_OK
Close 11293 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11297 NT_STATUS_OK
WriteX 11297 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11297 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11297 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11297 1004 NT_STATUS_OK
WriteX 11297 0 57088 57088 NT_STATUS_OK
WriteX 11297 0 4096 4096 NT_STATUS_OK
Flush 11297 NT_STATUS_OK
Close 11294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11298 NT_STATUS_OK
SET_FILE_INFORMATION 11298 1004 NT_STATUS_OK
Close 11298 NT_STATUS_OK
SET_FILE_INFORMATION 11297 1004 NT_STATUS_OK
WriteX 11297 0 4096 4096 NT_STATUS_OK
Close 11297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11299 NT_STATUS_OK
Close 11299 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11301 NT_STATUS_OK
ReadX 11301 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11301 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11302 NT_STATUS_OK
WriteX 11302 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11302 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11302 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11302 1004 NT_STATUS_OK
WriteX 11302 0 51456 51456 NT_STATUS_OK
WriteX 11302 0 4096 4096 NT_STATUS_OK
Flush 11302 NT_STATUS_OK
SET_FILE_INFORMATION 11302 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11302 1004 NT_STATUS_OK
WriteX 11302 0 4096 4096 NT_STATUS_OK
Close 11302 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11306 NT_STATUS_OK
ReadX 11306 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11306 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11308 NT_STATUS_OK
Close 11308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11311 NT_STATUS_OK
WriteX 11311 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11311 258 NT_STATUS_OK
WriteX 11311 0 53077 53077 NT_STATUS_OK
Close 11311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11312 NT_STATUS_OK
WriteX 11312 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11312 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11312 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
WriteX 11312 0 65536 65536 NT_STATUS_OK
WriteX 11312 65536 1856 1856 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
Flush 11312 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11312 1004 NT_STATUS_OK
WriteX 11312 0 4096 4096 NT_STATUS_OK
Close 11312 NT_STATUS_OK
Close 11306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11314 NT_STATUS_OK
Close 11314 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11316 NT_STATUS_OK
ReadX 11316 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11318 NT_STATUS_OK
Close 11318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11321 NT_STATUS_OK
WriteX 11321 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11321 258 NT_STATUS_OK
WriteX 11321 0 7983 7983 NT_STATUS_OK
Close 11321 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11323 NT_STATUS_OK
Close 11323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11326 NT_STATUS_OK
WriteX 11326 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11326 258 NT_STATUS_OK
WriteX 11326 0 65536 65536 NT_STATUS_OK
WriteX 11326 65536 65536 65536 NT_STATUS_OK
WriteX 11326 131072 65536 65536 NT_STATUS_OK
WriteX 11326 196608 65536 65536 NT_STATUS_OK
WriteX 11326 262144 65536 65536 NT_STATUS_OK
WriteX 11326 327680 65536 65536 NT_STATUS_OK
WriteX 11326 393216 65536 65536 NT_STATUS_OK
WriteX 11326 458752 46731 46731 NT_STATUS_OK
Close 11326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11327 NT_STATUS_OK
WriteX 11327 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11316 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11327 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11327 1004 NT_STATUS_OK
WriteX 11327 0 65536 65536 NT_STATUS_OK
WriteX 11327 65536 22848 22848 NT_STATUS_OK
WriteX 11327 0 4096 4096 NT_STATUS_OK
Flush 11327 NT_STATUS_OK
SET_FILE_INFORMATION 11327 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11327 1004 NT_STATUS_OK
WriteX 11327 0 4096 4096 NT_STATUS_OK
Close 11327 NT_STATUS_OK
Close 11316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11329 NT_STATUS_OK
Close 11329 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11331 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11332 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11332 1004 NT_STATUS_OK
ReadX 11332 8192 4096 4096 NT_STATUS_OK
ReadX 11332 12288 4096 4096 NT_STATUS_OK
ReadX 11332 16384 4096 4096 NT_STATUS_OK
ReadX 11332 20480 4096 4096 NT_STATUS_OK
ReadX 11332 24576 4096 4096 NT_STATUS_OK
ReadX 11332 28672 4096 4096 NT_STATUS_OK
ReadX 11332 32768 4096 4096 NT_STATUS_OK
ReadX 11332 36864 4096 4096 NT_STATUS_OK
ReadX 11332 40960 4096 4096 NT_STATUS_OK
ReadX 11332 45056 4096 4096 NT_STATUS_OK
ReadX 11332 49152 4096 4096 NT_STATUS_OK
ReadX 11332 53248 4096 4096 NT_STATUS_OK
ReadX 11332 57344 4096 4096 NT_STATUS_OK
ReadX 11332 61440 4096 4096 NT_STATUS_OK
ReadX 11332 65536 4096 4096 NT_STATUS_OK
ReadX 11332 69632 4096 4096 NT_STATUS_OK
ReadX 11332 73728 4096 4096 NT_STATUS_OK
ReadX 11332 77824 4096 4096 NT_STATUS_OK
ReadX 11332 81920 4096 4096 NT_STATUS_OK
ReadX 11332 86016 4096 4096 NT_STATUS_OK
ReadX 11332 90112 4096 4096 NT_STATUS_OK
ReadX 11332 94208 4096 4096 NT_STATUS_OK
ReadX 11332 98304 4096 4096 NT_STATUS_OK
ReadX 11332 102400 4096 4096 NT_STATUS_OK
ReadX 11332 106496 4096 4096 NT_STATUS_OK
ReadX 11332 110592 4096 4096 NT_STATUS_OK
ReadX 11332 114688 4096 4096 NT_STATUS_OK
ReadX 11332 118784 4096 4096 NT_STATUS_OK
ReadX 11332 122880 4096 4096 NT_STATUS_OK
ReadX 11332 126976 4096 4096 NT_STATUS_OK
ReadX 11332 131072 4096 4096 NT_STATUS_OK
ReadX 11332 135168 4096 4096 NT_STATUS_OK
ReadX 11332 139264 4096 4096 NT_STATUS_OK
ReadX 11332 143360 4096 4096 NT_STATUS_OK
ReadX 11332 147456 4096 4096 NT_STATUS_OK
ReadX 11332 151552 4096 4096 NT_STATUS_OK
ReadX 11332 155648 4096 4096 NT_STATUS_OK
ReadX 11332 159744 4096 4096 NT_STATUS_OK
ReadX 11332 163840 4096 4096 NT_STATUS_OK
ReadX 11332 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11332 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11335 NT_STATUS_OK
WriteX 11335 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11335 258 NT_STATUS_OK
Close 11332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11336 NT_STATUS_OK
SET_FILE_INFORMATION 11336 1004 NT_STATUS_OK
Close 11336 NT_STATUS_OK
WriteX 11335 0 42388 42388 NT_STATUS_OK
Close 11335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11337 NT_STATUS_OK
Close 11337 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11339 NT_STATUS_OK
ReadX 11339 0 4096 4096 NT_STATUS_OK
ReadX 11339 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11340 NT_STATUS_OK
WriteX 11340 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11340 258 NT_STATUS_OK
SET_FILE_INFORMATION 11340 1004 NT_STATUS_OK
WriteX 11340 0 42652 42652 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Close 11339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11342 NT_STATUS_OK
Close 11342 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 4096 4096 NT_STATUS_OK
ReadX 11344 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11349 NT_STATUS_OK
WriteX 11349 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11349 258 NT_STATUS_OK
WriteX 11349 0 65536 65536 NT_STATUS_OK
WriteX 11349 65536 49 49 NT_STATUS_OK
Close 11349 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11350 NT_STATUS_OK
ReadX 11350 0 61440 61440 NT_STATUS_OK
ReadX 11350 61440 4096 4096 NT_STATUS_OK
ReadX 11350 65536 61440 61440 NT_STATUS_OK
ReadX 11350 126976 4096 4096 NT_STATUS_OK
ReadX 11350 131072 61440 61440 NT_STATUS_OK
ReadX 11350 192512 4096 4096 NT_STATUS_OK
ReadX 11350 196608 61440 61440 NT_STATUS_OK
ReadX 11350 258048 4096 4096 NT_STATUS_OK
ReadX 11350 262144 61440 61440 NT_STATUS_OK
ReadX 11350 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11351 NT_STATUS_OK
ReadX 11351 0 61440 61440 NT_STATUS_OK
ReadX 11351 61440 4096 4096 NT_STATUS_OK
ReadX 11351 65536 61440 61440 NT_STATUS_OK
ReadX 11351 126976 4096 4096 NT_STATUS_OK
ReadX 11351 131072 61440 61440 NT_STATUS_OK
ReadX 11351 192512 4096 4096 NT_STATUS_OK
ReadX 11351 196608 61440 61440 NT_STATUS_OK
ReadX 11351 258048 4096 4096 NT_STATUS_OK
ReadX 11351 262144 61440 61440 NT_STATUS_OK
ReadX 11351 323584 4096 4096 NT_STATUS_OK
ReadX 11351 327680 61440 61440 NT_STATUS_OK
ReadX 11351 389120 4096 4096 NT_STATUS_OK
ReadX 11351 393216 61440 61440 NT_STATUS_OK
ReadX 11351 454656 4096 4096 NT_STATUS_OK
ReadX 11351 458752 61440 61440 NT_STATUS_OK
ReadX 11351 520192 4096 4096 NT_STATUS_OK
ReadX 11351 524288 61440 61440 NT_STATUS_OK
ReadX 11351 585728 4096 4096 NT_STATUS_OK
ReadX 11351 589824 61440 61440 NT_STATUS_OK
ReadX 11351 651264 4096 4096 NT_STATUS_OK
ReadX 11351 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11352 NT_STATUS_OK
ReadX 11352 0 61440 61440 NT_STATUS_OK
ReadX 11352 61440 4096 4096 NT_STATUS_OK
ReadX 11352 65536 61440 61440 NT_STATUS_OK
ReadX 11352 126976 4096 4096 NT_STATUS_OK
ReadX 11352 131072 61440 61440 NT_STATUS_OK
ReadX 11352 192512 4096 4096 NT_STATUS_OK
ReadX 11352 196608 61440 61440 NT_STATUS_OK
ReadX 11352 258048 4096 4096 NT_STATUS_OK
ReadX 11352 262144 61440 61440 NT_STATUS_OK
ReadX 11352 323584 4096 4096 NT_STATUS_OK
ReadX 11352 327680 61440 61440 NT_STATUS_OK
ReadX 11352 389120 4096 4096 NT_STATUS_OK
ReadX 11352 393216 61440 61440 NT_STATUS_OK
ReadX 11352 454656 4096 4096 NT_STATUS_OK
ReadX 11352 458752 61440 61440 NT_STATUS_OK
ReadX 11352 520192 4096 4096 NT_STATUS_OK
ReadX 11352 524288 61440 61440 NT_STATUS_OK
ReadX 11352 585728 4096 4096 NT_STATUS_OK
ReadX 11352 589824 61440 61440 NT_STATUS_OK
ReadX 11352 651264 4096 4096 NT_STATUS_OK
ReadX 11352 655360 61440 61440 NT_STATUS_OK
ReadX 11352 716800 4096 4096 NT_STATUS_OK
ReadX 11352 720896 61440 61440 NT_STATUS_OK
ReadX 11352 782336 4096 4096 NT_STATUS_OK
ReadX 11352 786432 61440 61440 NT_STATUS_OK
ReadX 11352 847872 4096 4096 NT_STATUS_OK
ReadX 11352 851968 61440 61440 NT_STATUS_OK
ReadX 11352 913408 4096 4096 NT_STATUS_OK
ReadX 11352 917504 61440 61440 NT_STATUS_OK
ReadX 11352 978944 4096 4096 NT_STATUS_OK
ReadX 11352 983040 61440 61440 NT_STATUS_OK
ReadX 11352 1044480 4096 4096 NT_STATUS_OK
ReadX 11352 1048576 61440 61440 NT_STATUS_OK
ReadX 11352 1110016 4096 4096 NT_STATUS_OK
ReadX 11352 1114112 61440 61440 NT_STATUS_OK
ReadX 11352 1175552 4096 4096 NT_STATUS_OK
ReadX 11352 1179648 61440 61440 NT_STATUS_OK
ReadX 11352 1241088 4096 4096 NT_STATUS_OK
ReadX 11352 1245184 61440 61440 NT_STATUS_OK
ReadX 11352 1306624 4096 4096 NT_STATUS_OK
ReadX 11352 1310720 61440 61440 NT_STATUS_OK
ReadX 11352 1372160 4096 4096 NT_STATUS_OK
ReadX 11352 1376256 61440 61440 NT_STATUS_OK
ReadX 11352 1437696 4096 4096 NT_STATUS_OK
ReadX 11352 1441792 61440 61440 NT_STATUS_OK
ReadX 11352 1503232 4096 4096 NT_STATUS_OK
ReadX 11352 1507328 61440 61440 NT_STATUS_OK
ReadX 11352 1568768 4096 4096 NT_STATUS_OK
ReadX 11352 1572864 61440 61440 NT_STATUS_OK
ReadX 11352 1634304 4096 4096 NT_STATUS_OK
ReadX 11352 1638400 61440 61440 NT_STATUS_OK
ReadX 11352 1699840 4096 4096 NT_STATUS_OK
ReadX 11352 1703936 61440 61440 NT_STATUS_OK
ReadX 11352 1765376 4096 4096 NT_STATUS_OK
ReadX 11352 1769472 61440 61440 NT_STATUS_OK
ReadX 11352 1830912 4096 4096 NT_STATUS_OK
ReadX 11352 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11354 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11354 1005 NT_STATUS_OK
ReadX 11354 2156 24 24 NT_STATUS_OK
ReadX 11354 2139 276 276 NT_STATUS_OK
ReadX 11354 2136 14 14 NT_STATUS_OK
ReadX 11354 2136 7 7 NT_STATUS_OK
ReadX 11354 2138 12 12 NT_STATUS_OK
ReadX 11354 2137 8 8 NT_STATUS_OK
ReadX 11354 2135 15 15 NT_STATUS_OK
ReadX 11354 0 16 16 NT_STATUS_OK
ReadX 11354 16 2048 2048 NT_STATUS_OK
ReadX 11354 2064 2048 2048 NT_STATUS_OK
ReadX 11354 257 2048 2048 NT_STATUS_OK
ReadX 11354 385 2048 2048 NT_STATUS_OK
ReadX 11354 513 2048 2048 NT_STATUS_OK
ReadX 11354 641 2048 2048 NT_STATUS_OK
ReadX 11354 769 2048 2048 NT_STATUS_OK
ReadX 11354 897 2048 2048 NT_STATUS_OK
ReadX 11354 1025 2048 2048 NT_STATUS_OK
ReadX 11354 1153 2048 2048 NT_STATUS_OK
ReadX 11354 1281 2048 2048 NT_STATUS_OK
ReadX 11354 1409 2048 2048 NT_STATUS_OK
ReadX 11354 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11356 NT_STATUS_OK
Close 11356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11350 NT_STATUS_OK
Close 11351 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11359 NT_STATUS_OK
WriteX 11359 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11359 258 NT_STATUS_OK
WriteX 11359 0 10575 10575 NT_STATUS_OK
Flush 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11360 NT_STATUS_OK
Close 11360 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11362 NT_STATUS_OK
ReadX 11362 0 4096 4096 NT_STATUS_OK
Close 11354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11364 NT_STATUS_OK
LockX 11364 2147483538 1 NT_STATUS_OK
UnlockX 11364 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11364 1005 NT_STATUS_OK
ReadX 11364 0 512 512 NT_STATUS_OK
ReadX 11364 512 512 512 NT_STATUS_OK
ReadX 11364 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11364 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11364 1004 NT_STATUS_OK
Close 11364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11365 NT_STATUS_OK
QUERY_FILE_INFORMATION 11365 1005 NT_STATUS_OK
ReadX 11365 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11366 NT_STATUS_OK
LockX 11366 2147483538 1 NT_STATUS_OK
UnlockX 11366 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11366 1005 NT_STATUS_OK
ReadX 11366 0 512 512 NT_STATUS_OK
ReadX 11366 512 512 512 NT_STATUS_OK
ReadX 11366 1024 512 512 NT_STATUS_OK
ReadX 11366 288 20 20 NT_STATUS_OK
ReadX 11366 308 2084 2084 NT_STATUS_OK
ReadX 11366 388 2084 2084 NT_STATUS_OK
ReadX 11366 388 2084 2084 NT_STATUS_OK
ReadX 11353 2157 1386 1386 NT_STATUS_OK
ReadX 11366 2472 399 399 NT_STATUS_OK
ReadX 11366 3072 1536 1536 NT_STATUS_OK
ReadX 11366 544 149 149 NT_STATUS_OK
ReadX 11366 693 485 485 NT_STATUS_OK
Close 11366 NT_STATUS_OK
ReadX 11353 2157 4096 4096 NT_STATUS_OK
ReadX 11353 6253 4096 4096 NT_STATUS_OK
ReadX 11353 10349 4096 4096 NT_STATUS_OK
ReadX 11353 14445 4096 4096 NT_STATUS_OK
ReadX 11353 18541 4096 4096 NT_STATUS_OK
ReadX 11353 22637 256 256 NT_STATUS_OK
ReadX 11353 22893 4096 4096 NT_STATUS_OK
ReadX 11353 26989 4096 4096 NT_STATUS_OK
ReadX 11353 31085 4096 4096 NT_STATUS_OK
ReadX 11353 35181 4096 4096 NT_STATUS_OK
ReadX 11353 39277 4096 4096 NT_STATUS_OK
ReadX 11353 43373 4096 4096 NT_STATUS_OK
ReadX 11353 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11353 2157 1024 1024 NT_STATUS_OK
ReadX 11353 1667 4688 4688 NT_STATUS_OK
ReadX 11353 6355 3516 3516 NT_STATUS_OK
ReadX 11353 9871 16384 16384 NT_STATUS_OK
ReadX 11353 26255 3771 3771 NT_STATUS_OK
ReadX 11353 30026 2048 2048 NT_STATUS_OK
ReadX 11353 32074 1024 1024 NT_STATUS_OK
ReadX 11353 33098 6652 6652 NT_STATUS_OK
ReadX 11353 39750 16384 16384 NT_STATUS_OK
ReadX 11353 56134 10496 10496 NT_STATUS_OK
ReadX 11353 66630 1784 1784 NT_STATUS_OK
ReadX 11353 68414 90 90 NT_STATUS_OK
ReadX 11353 68504 273 273 NT_STATUS_OK
ReadX 11353 68777 1600 1600 NT_STATUS_OK
ReadX 11353 70377 640 640 NT_STATUS_OK
ReadX 11353 71017 1280 1280 NT_STATUS_OK
ReadX 11353 72297 8464 8464 NT_STATUS_OK
ReadX 11353 80761 158 158 NT_STATUS_OK
ReadX 11353 80919 912 912 NT_STATUS_OK
ReadX 11353 81831 1980 1980 NT_STATUS_OK
ReadX 11353 83811 2256 2256 NT_STATUS_OK
ReadX 11353 86067 400 400 NT_STATUS_OK
ReadX 11353 86467 252 252 NT_STATUS_OK
ReadX 11353 86719 42 42 NT_STATUS_OK
ReadX 11353 86761 725 725 NT_STATUS_OK
ReadX 11353 2009 512 512 NT_STATUS_OK
ReadX 11353 3895 9 9 NT_STATUS_OK
ReadX 11353 3781 46 46 NT_STATUS_OK
ReadX 11353 4059 92 92 NT_STATUS_OK
ReadX 11353 3781 92 92 NT_STATUS_OK
ReadX 11353 3986 184 184 NT_STATUS_OK
ReadX 11353 3987 16384 16384 NT_STATUS_OK
ReadX 11353 3902 16384 16384 NT_STATUS_OK
ReadX 11353 3781 10240 10240 NT_STATUS_OK
ReadX 11353 3821 16384 16384 NT_STATUS_OK
ReadX 11353 3891 935 935 NT_STATUS_OK
ReadX 11353 4060 10240 10240 NT_STATUS_OK
ReadX 11353 4059 184 184 NT_STATUS_OK
ReadX 11353 256 184 184 NT_STATUS_OK
ReadX 11353 256 1026 1026 NT_STATUS_OK
ReadX 11353 3901 326 326 NT_STATUS_OK
ReadX 11353 3899 652 652 NT_STATUS_OK
ReadX 11353 256 2 2 NT_STATUS_OK
ReadX 11353 258 4948 4948 NT_STATUS_OK
Close 11353 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11371 NT_STATUS_OK
WriteX 11371 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11371 258 NT_STATUS_OK
WriteX 11371 0 65536 65536 NT_STATUS_OK
WriteX 11371 65536 65536 65536 NT_STATUS_OK
WriteX 11371 131072 65536 65536 NT_STATUS_OK
WriteX 11371 196608 65536 65536 NT_STATUS_OK
WriteX 11371 262144 65536 65536 NT_STATUS_OK
WriteX 11371 327680 65536 65536 NT_STATUS_OK
WriteX 11371 393216 65536 65536 NT_STATUS_OK
WriteX 11371 458752 65536 65536 NT_STATUS_OK
WriteX 11371 524288 65536 65536 NT_STATUS_OK
WriteX 11371 589824 35257 35257 NT_STATUS_OK
Close 11371 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11376 NT_STATUS_OK
WriteX 11376 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11376 258 NT_STATUS_OK
WriteX 11376 0 65536 65536 NT_STATUS_OK
WriteX 11376 65536 65536 65536 NT_STATUS_OK
WriteX 11376 131072 65536 65536 NT_STATUS_OK
WriteX 11376 196608 65536 65536 NT_STATUS_OK
WriteX 11376 262144 65536 65536 NT_STATUS_OK
WriteX 11376 327680 65536 65536 NT_STATUS_OK
WriteX 11376 393216 65536 65536 NT_STATUS_OK
WriteX 11376 458752 65536 65536 NT_STATUS_OK
WriteX 11376 524288 65536 65536 NT_STATUS_OK
WriteX 11376 589824 57598 57598 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11378 NT_STATUS_OK
WriteX 11378 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11378 258 NT_STATUS_OK
WriteX 11378 0 12543 12543 NT_STATUS_OK
Flush 11378 NT_STATUS_OK
Close 11378 NT_STATUS_OK
Close 11362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11382 NT_STATUS_OK
ReadX 11382 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11383 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11384 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11384 1005 NT_STATUS_OK
ReadX 11384 1938 24 24 NT_STATUS_OK
ReadX 11384 1920 276 276 NT_STATUS_OK
ReadX 11384 1918 14 14 NT_STATUS_OK
ReadX 11384 1918 7 7 NT_STATUS_OK
ReadX 11384 1919 12 12 NT_STATUS_OK
ReadX 11384 1919 8 8 NT_STATUS_OK
ReadX 11384 1917 15 15 NT_STATUS_OK
ReadX 11384 0 16 16 NT_STATUS_OK
ReadX 11384 16 2048 2048 NT_STATUS_OK
ReadX 11384 2064 2048 2048 NT_STATUS_OK
ReadX 11384 257 2048 2048 NT_STATUS_OK
ReadX 11384 385 2048 2048 NT_STATUS_OK
ReadX 11384 513 2048 2048 NT_STATUS_OK
ReadX 11384 641 2048 2048 NT_STATUS_OK
ReadX 11384 769 2048 2048 NT_STATUS_OK
ReadX 11384 897 2048 2048 NT_STATUS_OK
ReadX 11384 1025 2048 2048 NT_STATUS_OK
ReadX 11384 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11386 NT_STATUS_OK
Close 11386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11389 NT_STATUS_OK
WriteX 11389 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11389 258 NT_STATUS_OK
WriteX 11389 0 11588 11588 NT_STATUS_OK
Flush 11389 NT_STATUS_OK
Close 11389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11390 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 0 4096 4096 NT_STATUS_OK
Close 11384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11394 NT_STATUS_OK
WriteX 11394 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11394 258 NT_STATUS_OK
WriteX 11394 0 11615 11615 NT_STATUS_OK
Flush 11394 NT_STATUS_OK
Close 11394 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11392 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11396 NT_STATUS_OK
Close 11396 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11398 NT_STATUS_OK
ReadX 11398 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11400 NT_STATUS_OK
Close 11400 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11403 NT_STATUS_OK
WriteX 11403 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11403 258 NT_STATUS_OK
WriteX 11403 0 65536 65536 NT_STATUS_OK
WriteX 11403 65536 16050 16050 NT_STATUS_OK
Close 11403 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11383 1939 64 64 NT_STATUS_OK
ReadX 11383 128 248 248 NT_STATUS_OK
ReadX 11383 128 568 568 NT_STATUS_OK
ReadX 11383 3872 1536 1536 NT_STATUS_OK
ReadX 11383 3456 2560 2560 NT_STATUS_OK
ReadX 11383 3136 512 512 NT_STATUS_OK
ReadX 11383 2880 4096 4096 NT_STATUS_OK
ReadX 11383 3264 3072 3072 NT_STATUS_OK
ReadX 11383 320 4096 4096 NT_STATUS_OK
ReadX 11383 1024 4096 4096 NT_STATUS_OK
ReadX 11383 3616 4096 4096 NT_STATUS_OK
ReadX 11383 1939 64 64 NT_STATUS_OK
ReadX 11383 128 248 248 NT_STATUS_OK
ReadX 11383 128 608 608 NT_STATUS_OK
ReadX 11383 2858 1024 1024 NT_STATUS_OK
ReadX 11383 2810 4096 4096 NT_STATUS_OK
ReadX 11383 2826 4096 4096 NT_STATUS_OK
ReadX 11383 2580 2048 2048 NT_STATUS_OK
ReadX 11383 2800 2560 2560 NT_STATUS_OK
ReadX 11383 2100 4096 4096 NT_STATUS_OK
ReadX 11383 2084 4096 4096 NT_STATUS_OK
ReadX 11383 868 4096 4096 NT_STATUS_OK
ReadX 11383 2324 4096 4096 NT_STATUS_OK
ReadX 11383 884 4096 4096 NT_STATUS_OK
ReadX 11383 2604 1024 1024 NT_STATUS_OK
ReadX 11383 580 4096 4096 NT_STATUS_OK
ReadX 11383 596 4096 4096 NT_STATUS_OK
ReadX 11383 2752 4096 4096 NT_STATUS_OK
ReadX 11383 2842 1024 1024 NT_STATUS_OK
ReadX 11383 660 4096 4096 NT_STATUS_OK
ReadX 11383 2720 4096 4096 NT_STATUS_OK
ReadX 11383 2736 4096 4096 NT_STATUS_OK
ReadX 11383 628 4096 4096 NT_STATUS_OK
ReadX 11383 2704 4096 4096 NT_STATUS_OK
ReadX 11383 1556 4096 4096 NT_STATUS_OK
ReadX 11383 576 4096 4096 NT_STATUS_OK
ReadX 11383 3168 1536 1536 NT_STATUS_OK
ReadX 11383 832 4096 4096 NT_STATUS_OK
ReadX 11383 1088 4096 4096 NT_STATUS_OK
ReadX 11383 1344 4096 4096 NT_STATUS_OK
ReadX 11383 1600 4096 4096 NT_STATUS_OK
ReadX 11383 1856 4096 4096 NT_STATUS_OK
ReadX 11383 2112 4096 4096 NT_STATUS_OK
ReadX 11383 1892 4096 4096 NT_STATUS_OK
ReadX 11383 820 4096 4096 NT_STATUS_OK
ReadX 11383 788 4096 4096 NT_STATUS_OK
ReadX 11383 1604 4096 4096 NT_STATUS_OK
ReadX 11383 3648 4096 4096 NT_STATUS_OK
ReadX 11383 2608 4096 4096 NT_STATUS_OK
ReadX 11383 548 4096 4096 NT_STATUS_OK
ReadX 11383 740 4096 4096 NT_STATUS_OK
ReadX 11383 1344 4096 4096 NT_STATUS_OK
ReadX 11383 3392 4096 4096 NT_STATUS_OK
ReadX 11383 3904 4096 4096 NT_STATUS_OK
ReadX 11383 644 4096 4096 NT_STATUS_OK
ReadX 11383 676 4096 4096 NT_STATUS_OK
ReadX 11383 2688 4096 4096 NT_STATUS_OK
ReadX 11383 320 4096 4096 NT_STATUS_OK
ReadX 11383 900 4096 4096 NT_STATUS_OK
ReadX 11383 1908 4096 4096 NT_STATUS_OK
ReadX 11383 852 4096 4096 NT_STATUS_OK
ReadX 11383 724 4096 4096 NT_STATUS_OK
ReadX 11383 2292 4096 4096 NT_STATUS_OK
ReadX 11383 612 4096 4096 NT_STATUS_OK
ReadX 11383 388 4096 4096 NT_STATUS_OK
ReadX 11383 2368 4096 4096 NT_STATUS_OK
ReadX 11383 2624 4096 4096 NT_STATUS_OK
ReadX 11383 500 4096 4096 NT_STATUS_OK
ReadX 11383 356 4096 4096 NT_STATUS_OK
ReadX 11383 1024 4096 4096 NT_STATUS_OK
ReadX 11383 576 4096 4096 NT_STATUS_OK
ReadX 11383 340 4096 4096 NT_STATUS_OK
ReadX 11383 420 4096 4096 NT_STATUS_OK
ReadX 11383 1600 4096 4096 NT_STATUS_OK
ReadX 11383 404 4096 4096 NT_STATUS_OK
ReadX 11383 1428 4096 4096 NT_STATUS_OK
ReadX 11383 2656 4096 4096 NT_STATUS_OK
ReadX 11383 2624 4096 4096 NT_STATUS_OK
ReadX 11383 452 4096 4096 NT_STATUS_OK
ReadX 11383 692 4096 4096 NT_STATUS_OK
ReadX 11383 564 4096 4096 NT_STATUS_OK
ReadX 11383 372 4096 4096 NT_STATUS_OK
ReadX 11383 468 4096 4096 NT_STATUS_OK
ReadX 11383 484 4096 4096 NT_STATUS_OK
ReadX 11383 1088 4096 4096 NT_STATUS_OK
ReadX 11383 1924 4096 4096 NT_STATUS_OK
ReadX 11383 2768 4096 4096 NT_STATUS_OK
ReadX 11383 832 4096 4096 NT_STATUS_OK
ReadX 11383 836 4096 4096 NT_STATUS_OK
ReadX 11383 1856 4096 4096 NT_STATUS_OK
ReadX 11383 2640 4096 4096 NT_STATUS_OK
ReadX 11383 436 4096 4096 NT_STATUS_OK
ReadX 11383 1828 4096 4096 NT_STATUS_OK
ReadX 11383 804 4096 4096 NT_STATUS_OK
ReadX 11383 1860 4096 4096 NT_STATUS_OK
ReadX 11383 1812 4096 4096 NT_STATUS_OK
ReadX 11383 756 4096 4096 NT_STATUS_OK
ReadX 11383 1636 4096 4096 NT_STATUS_OK
ReadX 11383 772 4096 4096 NT_STATUS_OK
ReadX 11383 2036 4096 4096 NT_STATUS_OK
ReadX 11383 1220 4096 4096 NT_STATUS_OK
ReadX 11383 1652 4096 4096 NT_STATUS_OK
ReadX 11383 2588 4096 4096 NT_STATUS_OK
ReadX 11383 916 4096 4096 NT_STATUS_OK
ReadX 11383 260 4096 4096 NT_STATUS_OK
ReadX 11383 932 4096 4096 NT_STATUS_OK
ReadX 11383 2624 4096 4096 NT_STATUS_OK
ReadX 11383 308 4096 4096 NT_STATUS_OK
ReadX 11383 292 4096 4096 NT_STATUS_OK
ReadX 11383 1140 4096 4096 NT_STATUS_OK
ReadX 11383 276 4096 4096 NT_STATUS_OK
ReadX 11383 2020 4096 4096 NT_STATUS_OK
ReadX 11383 2880 4096 4096 NT_STATUS_OK
ReadX 11383 516 4096 4096 NT_STATUS_OK
ReadX 11383 1844 4096 4096 NT_STATUS_OK
ReadX 11383 1124 4096 4096 NT_STATUS_OK
ReadX 11383 3136 4096 4096 NT_STATUS_OK
ReadX 11383 324 4096 4096 NT_STATUS_OK
ReadX 11383 1156 4096 4096 NT_STATUS_OK
ReadX 11383 1172 4096 4096 NT_STATUS_OK
ReadX 11383 2112 4096 4096 NT_STATUS_OK
ReadX 11383 2368 4096 4096 NT_STATUS_OK
ReadX 11383 964 4096 4096 NT_STATUS_OK
ReadX 11383 980 4096 4096 NT_STATUS_OK
ReadX 11383 1012 4096 4096 NT_STATUS_OK
ReadX 11383 532 4096 4096 NT_STATUS_OK
ReadX 11383 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11383 1620 4096 4096 NT_STATUS_OK
ReadX 11383 1604 4096 4096 NT_STATUS_OK
ReadX 11383 2116 4096 4096 NT_STATUS_OK
ReadX 11383 2132 4096 4096 NT_STATUS_OK
ReadX 11383 2148 4096 4096 NT_STATUS_OK
ReadX 11383 2276 4096 4096 NT_STATUS_OK
ReadX 11383 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11405 NT_STATUS_OK
Close 11405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11408 NT_STATUS_OK
QUERY_FILE_INFORMATION 11363 1004 NT_STATUS_OK
Close 11363 NT_STATUS_OK
WriteX 11408 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11408 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11365 1004 NT_STATUS_OK
Close 11365 NT_STATUS_OK
WriteX 11408 0 65536 65536 NT_STATUS_OK
WriteX 11408 65536 64850 64850 NT_STATUS_OK
Close 11408 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11410 NT_STATUS_OK
WriteX 11410 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11410 258 NT_STATUS_OK
ReadX 11383 2068 4096 4096 NT_STATUS_OK
ReadX 11383 1588 4096 4096 NT_STATUS_OK
ReadX 11383 1572 4096 4096 NT_STATUS_OK
WriteX 11410 0 18630 18630 NT_STATUS_OK
Flush 11410 NT_STATUS_OK
Close 11410 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11412 NT_STATUS_OK
Close 11412 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11414 NT_STATUS_OK
ReadX 11414 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11383 612 4096 4096 NT_STATUS_OK
ReadX 11383 564 4096 4096 NT_STATUS_OK
ReadX 11383 1876 4096 4096 NT_STATUS_OK
ReadX 11383 628 4096 4096 NT_STATUS_OK
ReadX 11383 740 4096 4096 NT_STATUS_OK
ReadX 11383 724 4096 4096 NT_STATUS_OK
ReadX 11383 644 4096 4096 NT_STATUS_OK
ReadX 11383 2324 4096 4096 NT_STATUS_OK
ReadX 11383 660 4096 4096 NT_STATUS_OK
ReadX 11383 852 4096 4096 NT_STATUS_OK
ReadX 11383 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11383 2368 4096 4096 NT_STATUS_OK
ReadX 11383 1024 4096 4096 NT_STATUS_OK
ReadX 11383 320 4096 4096 NT_STATUS_OK
ReadX 11383 580 4096 4096 NT_STATUS_OK
ReadX 11383 3136 512 512 NT_STATUS_OK
ReadX 11383 2880 4096 4096 NT_STATUS_OK
Close 11383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 61440 4096 4096 NT_STATUS_OK
ReadX 11415 126976 4096 4096 NT_STATUS_OK
WriteX 11415 0 65536 65536 NT_STATUS_OK
WriteX 11415 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 61440 4096 4096 NT_STATUS_OK
ReadX 11416 126976 4096 4096 NT_STATUS_OK
ReadX 11416 192512 4096 4096 NT_STATUS_OK
ReadX 11416 258048 4096 4096 NT_STATUS_OK
WriteX 11416 0 65536 65536 NT_STATUS_OK
WriteX 11416 65536 65536 65536 NT_STATUS_OK
WriteX 11416 131072 65536 65536 NT_STATUS_OK
WriteX 11416 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 61440 4096 4096 NT_STATUS_OK
ReadX 11417 126976 4096 4096 NT_STATUS_OK
ReadX 11417 192512 4096 4096 NT_STATUS_OK
ReadX 11417 258048 4096 4096 NT_STATUS_OK
ReadX 11417 323584 4096 4096 NT_STATUS_OK
ReadX 11417 389120 4096 4096 NT_STATUS_OK
ReadX 11417 454656 4096 4096 NT_STATUS_OK
ReadX 11417 520192 4096 4096 NT_STATUS_OK
WriteX 11417 0 65536 65536 NT_STATUS_OK
WriteX 11417 65536 65536 65536 NT_STATUS_OK
WriteX 11417 131072 65536 65536 NT_STATUS_OK
WriteX 11417 196608 65536 65536 NT_STATUS_OK
WriteX 11417 262144 65536 65536 NT_STATUS_OK
WriteX 11417 327680 65536 65536 NT_STATUS_OK
WriteX 11417 393216 65536 65536 NT_STATUS_OK
WriteX 11417 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11418 NT_STATUS_OK
ReadX 11418 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11419 NT_STATUS_OK
Close 11419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11420 NT_STATUS_OK
WriteX 11420 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11420 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11418 0 8192 8192 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11418 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11418 0 8192 8192 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11418 0 8192 8192 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11418 0 8192 8192 NT_STATUS_OK
Flush 11418 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11414 NT_STATUS_OK
Close 11382 NT_STATUS_OK
Close 11415 NT_STATUS_OK
Close 11416 NT_STATUS_OK
Close 11417 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11425 NT_STATUS_OK
WriteX 11425 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11425 258 NT_STATUS_OK
WriteX 11425 0 62591 62591 NT_STATUS_OK
Close 11425 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11427 NT_STATUS_OK
Close 11427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11430 NT_STATUS_OK
WriteX 11430 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11430 258 NT_STATUS_OK
WriteX 11430 0 10845 10845 NT_STATUS_OK
Close 11430 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11432 NT_STATUS_OK
Close 11432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11435 NT_STATUS_OK
WriteX 11435 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11435 258 NT_STATUS_OK
WriteX 11435 0 30118 30118 NT_STATUS_OK
Close 11435 NT_STATUS_OK
WriteX 11418 0 4096 4096 NT_STATUS_OK
WriteX 11420 0 64 64 NT_STATUS_OK
Close 11420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11418 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11437 NT_STATUS_OK
ReadX 11437 0 61440 61440 NT_STATUS_OK
ReadX 11437 61440 4096 4096 NT_STATUS_OK
ReadX 11437 65536 61440 61440 NT_STATUS_OK
ReadX 11437 126976 4096 4096 NT_STATUS_OK
ReadX 11437 131072 61440 61440 NT_STATUS_OK
ReadX 11437 192512 4096 4096 NT_STATUS_OK
ReadX 11437 196608 61440 61440 NT_STATUS_OK
ReadX 11437 258048 4096 4096 NT_STATUS_OK
ReadX 11437 262144 61440 61440 NT_STATUS_OK
ReadX 11437 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11438 NT_STATUS_OK
ReadX 11438 0 61440 61440 NT_STATUS_OK
ReadX 11438 61440 4096 4096 NT_STATUS_OK
ReadX 11438 65536 61440 61440 NT_STATUS_OK
ReadX 11438 126976 4096 4096 NT_STATUS_OK
ReadX 11438 131072 61440 61440 NT_STATUS_OK
ReadX 11438 192512 4096 4096 NT_STATUS_OK
ReadX 11438 196608 61440 61440 NT_STATUS_OK
ReadX 11438 258048 4096 4096 NT_STATUS_OK
ReadX 11438 262144 61440 61440 NT_STATUS_OK
ReadX 11438 323584 4096 4096 NT_STATUS_OK
ReadX 11438 327680 61440 61440 NT_STATUS_OK
ReadX 11438 389120 4096 4096 NT_STATUS_OK
ReadX 11438 393216 61440 61440 NT_STATUS_OK
ReadX 11438 454656 4096 4096 NT_STATUS_OK
ReadX 11438 458752 61440 61440 NT_STATUS_OK
ReadX 11438 520192 4096 4096 NT_STATUS_OK
ReadX 11438 524288 61440 61440 NT_STATUS_OK
ReadX 11438 585728 4096 4096 NT_STATUS_OK
ReadX 11438 589824 61440 61440 NT_STATUS_OK
ReadX 11438 651264 4096 4096 NT_STATUS_OK
ReadX 11438 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11439 NT_STATUS_OK
ReadX 11439 0 61440 61440 NT_STATUS_OK
ReadX 11439 61440 4096 4096 NT_STATUS_OK
ReadX 11439 65536 61440 61440 NT_STATUS_OK
ReadX 11439 126976 4096 4096 NT_STATUS_OK
ReadX 11439 131072 61440 61440 NT_STATUS_OK
ReadX 11439 192512 4096 4096 NT_STATUS_OK
ReadX 11439 196608 61440 61440 NT_STATUS_OK
ReadX 11439 258048 4096 4096 NT_STATUS_OK
ReadX 11439 262144 61440 61440 NT_STATUS_OK
ReadX 11439 323584 4096 4096 NT_STATUS_OK
ReadX 11439 327680 61440 61440 NT_STATUS_OK
ReadX 11439 389120 4096 4096 NT_STATUS_OK
ReadX 11439 393216 61440 61440 NT_STATUS_OK
ReadX 11439 454656 4096 4096 NT_STATUS_OK
ReadX 11439 458752 61440 61440 NT_STATUS_OK
ReadX 11439 520192 4096 4096 NT_STATUS_OK
ReadX 11439 524288 61440 61440 NT_STATUS_OK
ReadX 11439 585728 4096 4096 NT_STATUS_OK
ReadX 11439 589824 61440 61440 NT_STATUS_OK
ReadX 11439 651264 4096 4096 NT_STATUS_OK
ReadX 11439 655360 61440 61440 NT_STATUS_OK
ReadX 11439 716800 4096 4096 NT_STATUS_OK
ReadX 11439 720896 61440 61440 NT_STATUS_OK
ReadX 11439 782336 4096 4096 NT_STATUS_OK
ReadX 11439 786432 61440 61440 NT_STATUS_OK
ReadX 11439 847872 4096 4096 NT_STATUS_OK
ReadX 11439 851968 61440 61440 NT_STATUS_OK
ReadX 11439 913408 4096 4096 NT_STATUS_OK
ReadX 11439 917504 61440 61440 NT_STATUS_OK
ReadX 11439 978944 4096 4096 NT_STATUS_OK
ReadX 11439 983040 61440 61440 NT_STATUS_OK
ReadX 11439 1044480 4096 4096 NT_STATUS_OK
ReadX 11439 1048576 61440 61440 NT_STATUS_OK
ReadX 11439 1110016 4096 4096 NT_STATUS_OK
ReadX 11439 1114112 61440 61440 NT_STATUS_OK
ReadX 11439 1175552 4096 4096 NT_STATUS_OK
ReadX 11439 1179648 61440 61440 NT_STATUS_OK
ReadX 11439 1241088 4096 4096 NT_STATUS_OK
ReadX 11439 1245184 61440 61440 NT_STATUS_OK
ReadX 11439 1306624 4096 4096 NT_STATUS_OK
ReadX 11439 1310720 61440 61440 NT_STATUS_OK
ReadX 11439 1372160 4096 4096 NT_STATUS_OK
ReadX 11439 1376256 61440 61440 NT_STATUS_OK
ReadX 11439 1437696 4096 4096 NT_STATUS_OK
ReadX 11439 1441792 61440 61440 NT_STATUS_OK
ReadX 11439 1503232 4096 4096 NT_STATUS_OK
ReadX 11439 1507328 61440 61440 NT_STATUS_OK
ReadX 11439 1568768 4096 4096 NT_STATUS_OK
ReadX 11439 1572864 61440 61440 NT_STATUS_OK
ReadX 11439 1634304 4096 4096 NT_STATUS_OK
ReadX 11439 1638400 61440 61440 NT_STATUS_OK
ReadX 11439 1699840 4096 4096 NT_STATUS_OK
ReadX 11439 1703936 61440 61440 NT_STATUS_OK
ReadX 11439 1765376 4096 4096 NT_STATUS_OK
ReadX 11439 1769472 61440 61440 NT_STATUS_OK
ReadX 11439 1830912 4096 4096 NT_STATUS_OK
ReadX 11439 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11440 NT_STATUS_OK
Close 11440 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11437 NT_STATUS_OK
Close 11438 NT_STATUS_OK
Close 11439 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11442 NT_STATUS_OK
ReadX 11442 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11443 NT_STATUS_OK
ReadX 11443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11444 NT_STATUS_OK
ReadX 11444 0 4096 4096 NT_STATUS_OK
ReadX 11444 4096 4096 4096 NT_STATUS_OK
ReadX 11444 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11445 NT_STATUS_OK
Close 11445 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11442 NT_STATUS_OK
Close 11443 NT_STATUS_OK
Close 11444 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11447 NT_STATUS_OK
ReadX 11447 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11448 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11448 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11449 NT_STATUS_OK
Close 11449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11447 NT_STATUS_OK
Close 11448 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11451 NT_STATUS_OK
ReadX 11451 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11452 NT_STATUS_OK
ReadX 11452 0 8192 8192 NT_STATUS_OK
ReadX 11452 8192 8192 8192 NT_STATUS_OK
ReadX 11452 16384 8192 8192 NT_STATUS_OK
ReadX 11452 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11454 NT_STATUS_OK
Close 11454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11452 NT_STATUS_OK
Close 11451 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11457 NT_STATUS_OK
WriteX 11457 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11457 258 NT_STATUS_OK
WriteX 11457 0 10438 10438 NT_STATUS_OK
Close 11457 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11458 NT_STATUS_OK
Close 11458 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11459 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11460 NT_STATUS_OK
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11461 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11462 NT_STATUS_OK
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11463 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11464 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11465 NT_STATUS_OK
Close 11465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11466 NT_STATUS_OK
ReadX 11466 0 4096 4096 NT_STATUS_OK
ReadX 11466 4096 4096 4096 NT_STATUS_OK
ReadX 11466 8192 4096 4096 NT_STATUS_OK
ReadX 11466 12288 8192 8192 NT_STATUS_OK
ReadX 11466 20480 8192 8192 NT_STATUS_OK
ReadX 11466 28672 8192 8192 NT_STATUS_OK
ReadX 11466 36864 8192 8192 NT_STATUS_OK
ReadX 11466 45056 8192 8192 NT_STATUS_OK
ReadX 11466 53248 8192 8192 NT_STATUS_OK
ReadX 11466 61440 8192 8192 NT_STATUS_OK
ReadX 11466 69632 8192 8192 NT_STATUS_OK
ReadX 11466 77824 8192 8192 NT_STATUS_OK
ReadX 11466 86016 8192 8192 NT_STATUS_OK
ReadX 11466 94208 8192 8192 NT_STATUS_OK
ReadX 11466 102400 8192 8192 NT_STATUS_OK
ReadX 11466 110592 8192 8192 NT_STATUS_OK
ReadX 11466 118784 8192 8192 NT_STATUS_OK
ReadX 11466 126976 8192 8192 NT_STATUS_OK
ReadX 11466 135168 8192 8192 NT_STATUS_OK
ReadX 11466 143360 8192 8192 NT_STATUS_OK
ReadX 11466 151552 8192 8192 NT_STATUS_OK
ReadX 11466 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11467 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11466 NT_STATUS_OK
Close 11459 NT_STATUS_OK
Close 11461 NT_STATUS_OK
Close 11463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11468 NT_STATUS_OK
Close 11468 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11471 NT_STATUS_OK
WriteX 11471 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11471 258 NT_STATUS_OK
WriteX 11471 0 28489 28489 NT_STATUS_OK
Close 11471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11472 NT_STATUS_OK
Close 11472 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11474 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11474 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11475 NT_STATUS_OK
Close 11475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11474 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11477 NT_STATUS_OK
ReadX 11477 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11478 NT_STATUS_OK
ReadX 11478 0 8192 8192 NT_STATUS_OK
ReadX 11478 8192 8192 8192 NT_STATUS_OK
ReadX 11478 16384 8192 8192 NT_STATUS_OK
ReadX 11478 24576 8192 8192 NT_STATUS_OK
ReadX 11478 32768 16384 16384 NT_STATUS_OK
ReadX 11478 49152 8192 8192 NT_STATUS_OK
ReadX 11478 57344 8192 8192 NT_STATUS_OK
ReadX 11478 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11480 NT_STATUS_OK
Close 11480 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11478 NT_STATUS_OK
Close 11477 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11483 NT_STATUS_OK
WriteX 11483 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11483 258 NT_STATUS_OK
WriteX 11483 0 29253 29253 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11487 NT_STATUS_OK
Close 11487 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11490 NT_STATUS_OK
WriteX 11490 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11490 258 NT_STATUS_OK
WriteX 11490 0 30183 30183 NT_STATUS_OK
Close 11490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11491 NT_STATUS_OK
Close 11491 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11493 NT_STATUS_OK
WriteX 11493 0 510 510 NT_STATUS_OK
WriteX 11493 510 512 512 NT_STATUS_OK
WriteX 11493 1022 510 510 NT_STATUS_OK
WriteX 11493 1532 510 510 NT_STATUS_OK
WriteX 11493 2042 168 168 NT_STATUS_OK
Close 11493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11494 NT_STATUS_OK
Close 11494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11496 NT_STATUS_OK
ReadX 11496 0 4096 4096 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11497 NT_STATUS_OK
ReadX 11497 61440 4096 4096 NT_STATUS_OK
ReadX 11497 126976 4096 4096 NT_STATUS_OK
WriteX 11497 0 65536 65536 NT_STATUS_OK
WriteX 11497 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 61440 4096 4096 NT_STATUS_OK
ReadX 11498 126976 4096 4096 NT_STATUS_OK
ReadX 11498 192512 4096 4096 NT_STATUS_OK
ReadX 11498 258048 4096 4096 NT_STATUS_OK
WriteX 11498 0 65536 65536 NT_STATUS_OK
WriteX 11498 65536 65536 65536 NT_STATUS_OK
WriteX 11498 131072 65536 65536 NT_STATUS_OK
WriteX 11498 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11499 NT_STATUS_OK
ReadX 11499 61440 4096 4096 NT_STATUS_OK
ReadX 11499 126976 4096 4096 NT_STATUS_OK
ReadX 11499 192512 4096 4096 NT_STATUS_OK
ReadX 11499 258048 4096 4096 NT_STATUS_OK
ReadX 11499 323584 4096 4096 NT_STATUS_OK
ReadX 11499 389120 4096 4096 NT_STATUS_OK
ReadX 11499 454656 4096 4096 NT_STATUS_OK
ReadX 11499 520192 4096 4096 NT_STATUS_OK
WriteX 11499 0 65536 65536 NT_STATUS_OK
WriteX 11499 65536 65536 65536 NT_STATUS_OK
WriteX 11499 131072 65536 65536 NT_STATUS_OK
WriteX 11499 196608 65536 65536 NT_STATUS_OK
WriteX 11499 262144 65536 65536 NT_STATUS_OK
WriteX 11499 327680 65536 65536 NT_STATUS_OK
WriteX 11499 393216 65536 65536 NT_STATUS_OK
WriteX 11499 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11500 NT_STATUS_OK
Close 11500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11496 NT_STATUS_OK
Close 11497 NT_STATUS_OK
Close 11498 NT_STATUS_OK
Close 11499 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11506 NT_STATUS_OK
Close 11506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11509 NT_STATUS_OK
Close 11509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11511 NT_STATUS_OK
Close 11511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11515 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11518 NT_STATUS_OK
Close 11518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11520 NT_STATUS_OK
Close 11520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11524 NT_STATUS_OK
Close 11524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11529 NT_STATUS_OK
Close 11529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11539 NT_STATUS_OK
Close 11539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11544 NT_STATUS_OK
Close 11544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11549 NT_STATUS_OK
Close 11549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11554 NT_STATUS_OK
Close 11554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11559 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11562 NT_STATUS_OK
Close 11562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11565 NT_STATUS_OK
Close 11565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11568 NT_STATUS_OK
WriteX 11568 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11568 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11568 0 65536 65536 NT_STATUS_OK
WriteX 11568 65536 65536 65536 NT_STATUS_OK
WriteX 11568 131072 65536 65536 NT_STATUS_OK
WriteX 11568 196608 65536 65536 NT_STATUS_OK
WriteX 11568 262144 26634 26634 NT_STATUS_OK
Close 11568 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11573 NT_STATUS_OK
Close 11573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11574 NT_STATUS_OK
Close 11574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11575 NT_STATUS_OK
ReadX 11575 0 4096 4096 NT_STATUS_OK
Close 11575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11576 NT_STATUS_OK
ReadX 11576 0 4096 4096 NT_STATUS_OK
ReadX 11576 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11576 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11581 NT_STATUS_OK
Close 11581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11584 NT_STATUS_OK
Close 11584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11586 NT_STATUS_OK
Close 11586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11593 NT_STATUS_OK
Close 11593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11595 NT_STATUS_OK
Close 11595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11599 NT_STATUS_OK
Close 11599 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11604 NT_STATUS_OK
Close 11604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11609 NT_STATUS_OK
Close 11609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11614 NT_STATUS_OK
Close 11614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11619 NT_STATUS_OK
Close 11619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11624 NT_STATUS_OK
Close 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11628 NT_STATUS_OK
Close 11628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11633 NT_STATUS_OK
Close 11633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11638 NT_STATUS_OK
Close 11638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11641 NT_STATUS_OK
Close 11641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11643 NT_STATUS_OK
Close 11643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11653 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11654 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
Close 11655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
Close 11656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11657 NT_STATUS_OK
ReadX 11657 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11668 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 4096 4096 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11670 NT_STATUS_OK
ReadX 11670 0 4096 4096 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11657 NT_STATUS_OK
Close 11671 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11700 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11700 0 4096 4096 NT_STATUS_OK
Close 11700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
ReadX 11702 4096 4096 4096 NT_STATUS_OK
ReadX 11702 8192 4096 4096 NT_STATUS_OK
ReadX 11702 12288 4096 4096 NT_STATUS_OK
ReadX 11702 16384 4096 4096 NT_STATUS_OK
ReadX 11702 20480 4096 4096 NT_STATUS_OK
ReadX 11702 24576 4096 4096 NT_STATUS_OK
ReadX 11702 28672 4096 4096 NT_STATUS_OK
ReadX 11702 32768 4096 4096 NT_STATUS_OK
ReadX 11702 36864 4096 4096 NT_STATUS_OK
ReadX 11702 40960 4096 4096 NT_STATUS_OK
ReadX 11702 45056 4096 4096 NT_STATUS_OK
ReadX 11702 49152 4096 4096 NT_STATUS_OK
ReadX 11702 53248 4096 4096 NT_STATUS_OK
ReadX 11702 57344 4096 4096 NT_STATUS_OK
ReadX 11702 61440 4096 4096 NT_STATUS_OK
ReadX 11702 65536 4096 4096 NT_STATUS_OK
ReadX 11702 69632 4096 4096 NT_STATUS_OK
ReadX 11702 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11702 1004 NT_STATUS_OK
WriteX 11702 0 4096 4096 NT_STATUS_OK
Close 11702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11703 NT_STATUS_OK
SET_FILE_INFORMATION 11703 1004 NT_STATUS_OK
Close 11703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11705 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11708 NT_STATUS_OK
WriteX 11708 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11708 258 NT_STATUS_OK
WriteX 11708 0 65536 65536 NT_STATUS_OK
WriteX 11708 65536 19979 19979 NT_STATUS_OK
Close 11708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
QUERY_FILE_INFORMATION 11709 1004 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
SET_FILE_INFORMATION 11709 1004 NT_STATUS_OK
WriteX 11709 0 4096 4096 NT_STATUS_OK
Flush 11709 NT_STATUS_OK
Close 11709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11710 NT_STATUS_OK
ReadX 11710 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 4096 4096 NT_STATUS_OK
Close 11710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
Close 11712 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
Close 11713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11714 1004 NT_STATUS_OK
WriteX 11714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11715 NT_STATUS_OK
Close 11715 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11717 NT_STATUS_OK
Close 11717 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11720 NT_STATUS_OK
WriteX 11720 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11720 258 NT_STATUS_OK
WriteX 11720 0 65536 65536 NT_STATUS_OK
WriteX 11720 65536 17654 17654 NT_STATUS_OK
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11721 NT_STATUS_OK
ReadX 11721 0 4096 4096 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
QUERY_FILE_INFORMATION 11721 1004 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
SET_FILE_INFORMATION 11721 1004 NT_STATUS_OK
WriteX 11721 0 4096 4096 NT_STATUS_OK
Flush 11721 NT_STATUS_OK
Close 11721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11722 NT_STATUS_OK
SET_FILE_INFORMATION 11722 1004 NT_STATUS_OK
Close 11722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11724 NT_STATUS_OK
Close 11724 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 4096 4096 NT_STATUS_OK
ReadX 11726 4096 4096 4096 NT_STATUS_OK
ReadX 11726 8192 4096 4096 NT_STATUS_OK
ReadX 11726 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11726 16384 4096 4096 NT_STATUS_OK
ReadX 11726 20480 4096 4096 NT_STATUS_OK
ReadX 11726 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 4096 4096 NT_STATUS_OK
Close 11727 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 4096 4096 NT_STATUS_OK
Close 11728 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11729 NT_STATUS_OK
ReadX 11729 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11729 1004 NT_STATUS_OK
WriteX 11729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11730 NT_STATUS_OK
Close 11730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11729 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11732 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11735 NT_STATUS_OK
WriteX 11735 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11735 258 NT_STATUS_OK
WriteX 11735 0 65536 65536 NT_STATUS_OK
WriteX 11735 65536 19490 19490 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11736 NT_STATUS_OK
ReadX 11736 0 4096 4096 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
QUERY_FILE_INFORMATION 11736 1004 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
SET_FILE_INFORMATION 11736 1004 NT_STATUS_OK
WriteX 11736 0 4096 4096 NT_STATUS_OK
Flush 11736 NT_STATUS_OK
Close 11736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11737 NT_STATUS_OK
SET_FILE_INFORMATION 11737 1004 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11738 NT_STATUS_OK
ReadX 11738 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11739 NT_STATUS_OK
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11741 0 4096 4096 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 4096 4096 NT_STATUS_OK
ReadX 11743 4096 4096 4096 NT_STATUS_OK
ReadX 11743 8192 4096 4096 NT_STATUS_OK
ReadX 11743 12288 4096 4096 NT_STATUS_OK
ReadX 11743 16384 4096 4096 NT_STATUS_OK
ReadX 11743 20480 4096 4096 NT_STATUS_OK
ReadX 11743 24576 4096 4096 NT_STATUS_OK
ReadX 11743 28672 4096 4096 NT_STATUS_OK
ReadX 11743 32768 4096 4096 NT_STATUS_OK
ReadX 11743 36864 4096 4096 NT_STATUS_OK
ReadX 11743 40960 4096 4096 NT_STATUS_OK
ReadX 11743 45056 4096 4096 NT_STATUS_OK
ReadX 11743 49152 4096 4096 NT_STATUS_OK
ReadX 11743 53248 4096 4096 NT_STATUS_OK
ReadX 11743 57344 4096 4096 NT_STATUS_OK
ReadX 11743 61440 4096 4096 NT_STATUS_OK
ReadX 11743 65536 4096 4096 NT_STATUS_OK
ReadX 11743 69632 4096 4096 NT_STATUS_OK
ReadX 11743 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11743 1004 NT_STATUS_OK
WriteX 11743 0 4096 4096 NT_STATUS_OK
Close 11743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11744 NT_STATUS_OK
SET_FILE_INFORMATION 11744 1004 NT_STATUS_OK
Close 11744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11745 NT_STATUS_OK
ReadX 11745 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11746 NT_STATUS_OK
Close 11746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11738 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11749 NT_STATUS_OK
WriteX 11749 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11749 258 NT_STATUS_OK
WriteX 11749 0 65536 65536 NT_STATUS_OK
WriteX 11749 65536 8866 8866 NT_STATUS_OK
Close 11749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
SET_FILE_INFORMATION 11750 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
Flush 11750 NT_STATUS_OK
Close 11750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
Close 11752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
Close 11753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11754 1004 NT_STATUS_OK
WriteX 11754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11755 NT_STATUS_OK
Close 11755 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11745 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11757 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11760 NT_STATUS_OK
WriteX 11760 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11760 258 NT_STATUS_OK
WriteX 11760 0 65536 65536 NT_STATUS_OK
WriteX 11760 65536 9298 9298 NT_STATUS_OK
Close 11760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
WriteX 11761 0 4096 4096 NT_STATUS_OK
Flush 11761 NT_STATUS_OK
SET_FILE_INFORMATION 11761 1004 NT_STATUS_OK
WriteX 11761 0 4096 4096 NT_STATUS_OK
Flush 11761 NT_STATUS_OK
Close 11761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11762 NT_STATUS_OK
SET_FILE_INFORMATION 11762 1004 NT_STATUS_OK
Close 11762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11764 NT_STATUS_OK
Close 11764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11767 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11767 0 4096 4096 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11768 4096 4096 4096 NT_STATUS_OK
ReadX 11768 8192 4096 4096 NT_STATUS_OK
ReadX 11768 12288 4096 4096 NT_STATUS_OK
ReadX 11768 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11763 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 4096 4096 NT_STATUS_OK
Close 11769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11770 NT_STATUS_OK
ReadX 11770 0 4096 4096 NT_STATUS_OK
Close 11770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11771 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11771 1004 NT_STATUS_OK
WriteX 11771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11772 NT_STATUS_OK
Close 11772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11774 NT_STATUS_OK
Close 11774 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11777 NT_STATUS_OK
WriteX 11777 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11777 258 NT_STATUS_OK
WriteX 11777 0 65536 65536 NT_STATUS_OK
WriteX 11777 65536 11540 11540 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
SET_FILE_INFORMATION 11778 1004 NT_STATUS_OK
WriteX 11778 0 4096 4096 NT_STATUS_OK
Flush 11778 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11779 NT_STATUS_OK
SET_FILE_INFORMATION 11779 1004 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11781 NT_STATUS_OK
Close 11781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 61440 4096 4096 NT_STATUS_OK
ReadX 11783 126976 4096 4096 NT_STATUS_OK
WriteX 11783 0 65536 65536 NT_STATUS_OK
WriteX 11783 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 61440 4096 4096 NT_STATUS_OK
ReadX 11784 126976 4096 4096 NT_STATUS_OK
ReadX 11784 192512 4096 4096 NT_STATUS_OK
ReadX 11784 258048 4096 4096 NT_STATUS_OK
WriteX 11784 0 65536 65536 NT_STATUS_OK
WriteX 11784 65536 65536 65536 NT_STATUS_OK
WriteX 11784 131072 65536 65536 NT_STATUS_OK
WriteX 11784 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 61440 4096 4096 NT_STATUS_OK
ReadX 11785 126976 4096 4096 NT_STATUS_OK
ReadX 11785 192512 4096 4096 NT_STATUS_OK
ReadX 11785 258048 4096 4096 NT_STATUS_OK
ReadX 11785 323584 4096 4096 NT_STATUS_OK
ReadX 11785 389120 4096 4096 NT_STATUS_OK
ReadX 11785 454656 4096 4096 NT_STATUS_OK
ReadX 11785 520192 4096 4096 NT_STATUS_OK
WriteX 11785 0 65536 65536 NT_STATUS_OK
WriteX 11785 65536 65536 65536 NT_STATUS_OK
WriteX 11785 131072 65536 65536 NT_STATUS_OK
WriteX 11785 196608 65536 65536 NT_STATUS_OK
WriteX 11785 262144 65536 65536 NT_STATUS_OK
WriteX 11785 327680 65536 65536 NT_STATUS_OK
WriteX 11785 393216 65536 65536 NT_STATUS_OK
WriteX 11785 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
ReadX 11786 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11787 NT_STATUS_OK
WriteX 11787 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11787 258 NT_STATUS_OK
WriteX 11787 0 53 53 NT_STATUS_OK
Close 11787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11788 NT_STATUS_OK
Close 11788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11784 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11786 8192 4096 4096 NT_STATUS_OK
ReadX 11786 12288 4096 4096 NT_STATUS_OK
WriteX 11790 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11790 258 NT_STATUS_OK
ReadX 11786 16384 4096 4096 NT_STATUS_OK
ReadX 11786 20480 4096 4096 NT_STATUS_OK
WriteX 11790 0 15360 15360 NT_STATUS_OK
Close 11790 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11791 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11791 1004 NT_STATUS_OK
WriteX 11791 0 4096 4096 NT_STATUS_OK
Close 11791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11792 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11795 NT_STATUS_OK
Close 11795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11794 4096 4096 4096 NT_STATUS_OK
ReadX 11794 8192 4096 4096 NT_STATUS_OK
ReadX 11794 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
ReadX 11797 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11798 NT_STATUS_OK
ReadX 11798 0 4096 4096 NT_STATUS_OK
ReadX 11798 4096 4096 4096 NT_STATUS_OK
ReadX 11798 8192 4096 4096 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11799 NT_STATUS_OK
WriteX 11799 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11799 258 NT_STATUS_OK
WriteX 11799 0 15360 15360 NT_STATUS_OK
Close 11799 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11800 NT_STATUS_OK
ReadX 11800 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11800 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11800 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11794 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11801 NT_STATUS_OK
Close 11801 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11803 NT_STATUS_OK
ReadX 11803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11804 NT_STATUS_OK
SET_FILE_INFORMATION 11804 1004 NT_STATUS_OK
Close 11804 NT_STATUS_OK
WriteX 11800 0 4096 4096 NT_STATUS_OK
Close 11800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11805 NT_STATUS_OK
Close 11805 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11807 NT_STATUS_OK
ReadX 11807 0 4096 4096 NT_STATUS_OK
ReadX 11807 4096 4096 4096 NT_STATUS_OK
ReadX 11807 8192 4096 4096 NT_STATUS_OK
ReadX 11807 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11807 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11807 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11809 NT_STATUS_OK
WriteX 11809 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11809 258 NT_STATUS_OK
WriteX 11809 0 53 53 NT_STATUS_OK
Close 11809 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11810 NT_STATUS_OK
Close 11810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11808 4096 4096 4096 NT_STATUS_OK
ReadX 11808 8192 4096 4096 NT_STATUS_OK
ReadX 11808 12288 4096 4096 NT_STATUS_OK
WriteX 11812 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 258 NT_STATUS_OK
WriteX 11812 0 12006 12006 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11813 NT_STATUS_OK
ReadX 11813 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11813 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11813 1004 NT_STATUS_OK
WriteX 11813 0 4096 4096 NT_STATUS_OK
Close 11813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11817 NT_STATUS_OK
Close 11817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11816 4096 4096 4096 NT_STATUS_OK
ReadX 11816 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11819 NT_STATUS_OK
WriteX 11819 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11819 258 NT_STATUS_OK
WriteX 11819 0 11991 11991 NT_STATUS_OK
Close 11819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11820 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11820 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11821 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11824 NT_STATUS_OK
WriteX 11807 0 19054 19054 NT_STATUS_OK
SET_FILE_INFORMATION 11824 1004 NT_STATUS_OK
Close 11824 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
Close 11820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11825 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11828 NT_STATUS_OK
Close 11828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11827 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
ReadX 11827 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
WriteX 11827 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11827 1004 NT_STATUS_OK
Close 11803 NT_STATUS_OK
WriteX 11827 0 12288 12288 NT_STATUS_OK
Close 11823 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11830 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11807 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11832 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11834 NT_STATUS_OK
ReadX 11834 0 61440 61440 NT_STATUS_OK
ReadX 11834 61440 4096 4096 NT_STATUS_OK
ReadX 11834 65536 61440 61440 NT_STATUS_OK
ReadX 11834 126976 4096 4096 NT_STATUS_OK
ReadX 11834 131072 61440 61440 NT_STATUS_OK
ReadX 11834 192512 4096 4096 NT_STATUS_OK
ReadX 11834 196608 61440 61440 NT_STATUS_OK
ReadX 11834 258048 4096 4096 NT_STATUS_OK
ReadX 11834 262144 61440 61440 NT_STATUS_OK
ReadX 11834 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 0 61440 61440 NT_STATUS_OK
ReadX 11835 61440 4096 4096 NT_STATUS_OK
ReadX 11835 65536 61440 61440 NT_STATUS_OK
ReadX 11835 126976 4096 4096 NT_STATUS_OK
ReadX 11835 131072 61440 61440 NT_STATUS_OK
ReadX 11835 192512 4096 4096 NT_STATUS_OK
ReadX 11835 196608 61440 61440 NT_STATUS_OK
ReadX 11835 258048 4096 4096 NT_STATUS_OK
ReadX 11835 262144 61440 61440 NT_STATUS_OK
ReadX 11835 323584 4096 4096 NT_STATUS_OK
ReadX 11835 327680 61440 61440 NT_STATUS_OK
ReadX 11835 389120 4096 4096 NT_STATUS_OK
ReadX 11835 393216 61440 61440 NT_STATUS_OK
ReadX 11835 454656 4096 4096 NT_STATUS_OK
ReadX 11835 458752 61440 61440 NT_STATUS_OK
ReadX 11835 520192 4096 4096 NT_STATUS_OK
ReadX 11835 524288 61440 61440 NT_STATUS_OK
ReadX 11835 585728 4096 4096 NT_STATUS_OK
ReadX 11835 589824 61440 61440 NT_STATUS_OK
ReadX 11835 651264 4096 4096 NT_STATUS_OK
ReadX 11835 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 0 61440 61440 NT_STATUS_OK
ReadX 11836 61440 4096 4096 NT_STATUS_OK
ReadX 11836 65536 61440 61440 NT_STATUS_OK
ReadX 11836 126976 4096 4096 NT_STATUS_OK
ReadX 11836 131072 61440 61440 NT_STATUS_OK
ReadX 11836 192512 4096 4096 NT_STATUS_OK
ReadX 11836 196608 61440 61440 NT_STATUS_OK
ReadX 11836 258048 4096 4096 NT_STATUS_OK
ReadX 11836 262144 61440 61440 NT_STATUS_OK
ReadX 11836 323584 4096 4096 NT_STATUS_OK
ReadX 11836 327680 61440 61440 NT_STATUS_OK
ReadX 11836 389120 4096 4096 NT_STATUS_OK
ReadX 11836 393216 61440 61440 NT_STATUS_OK
ReadX 11836 454656 4096 4096 NT_STATUS_OK
ReadX 11836 458752 61440 61440 NT_STATUS_OK
ReadX 11836 520192 4096 4096 NT_STATUS_OK
ReadX 11836 524288 61440 61440 NT_STATUS_OK
ReadX 11836 585728 4096 4096 NT_STATUS_OK
ReadX 11836 589824 61440 61440 NT_STATUS_OK
ReadX 11836 651264 4096 4096 NT_STATUS_OK
ReadX 11836 655360 61440 61440 NT_STATUS_OK
ReadX 11836 716800 4096 4096 NT_STATUS_OK
ReadX 11836 720896 61440 61440 NT_STATUS_OK
ReadX 11836 782336 4096 4096 NT_STATUS_OK
ReadX 11836 786432 61440 61440 NT_STATUS_OK
ReadX 11836 847872 4096 4096 NT_STATUS_OK
ReadX 11836 851968 61440 61440 NT_STATUS_OK
ReadX 11836 913408 4096 4096 NT_STATUS_OK
ReadX 11836 917504 61440 61440 NT_STATUS_OK
ReadX 11836 978944 4096 4096 NT_STATUS_OK
ReadX 11836 983040 61440 61440 NT_STATUS_OK
ReadX 11836 1044480 4096 4096 NT_STATUS_OK
ReadX 11836 1048576 61440 61440 NT_STATUS_OK
ReadX 11836 1110016 4096 4096 NT_STATUS_OK
ReadX 11836 1114112 61440 61440 NT_STATUS_OK
ReadX 11836 1175552 4096 4096 NT_STATUS_OK
ReadX 11836 1179648 61440 61440 NT_STATUS_OK
ReadX 11836 1241088 4096 4096 NT_STATUS_OK
ReadX 11836 1245184 61440 61440 NT_STATUS_OK
ReadX 11836 1306624 4096 4096 NT_STATUS_OK
ReadX 11836 1310720 61440 61440 NT_STATUS_OK
ReadX 11836 1372160 4096 4096 NT_STATUS_OK
ReadX 11836 1376256 61440 61440 NT_STATUS_OK
ReadX 11836 1437696 4096 4096 NT_STATUS_OK
ReadX 11836 1441792 61440 61440 NT_STATUS_OK
ReadX 11836 1503232 4096 4096 NT_STATUS_OK
ReadX 11836 1507328 61440 61440 NT_STATUS_OK
ReadX 11836 1568768 4096 4096 NT_STATUS_OK
ReadX 11836 1572864 61440 61440 NT_STATUS_OK
ReadX 11836 1634304 4096 4096 NT_STATUS_OK
ReadX 11836 1638400 61440 61440 NT_STATUS_OK
ReadX 11836 1699840 4096 4096 NT_STATUS_OK
ReadX 11836 1703936 61440 61440 NT_STATUS_OK
ReadX 11836 1765376 4096 4096 NT_STATUS_OK
ReadX 11836 1769472 61440 61440 NT_STATUS_OK
ReadX 11836 1830912 4096 4096 NT_STATUS_OK
ReadX 11836 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11838 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11839 NT_STATUS_OK
ReadX 11839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11840 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11841 NT_STATUS_OK
ReadX 11841 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11842 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11843 NT_STATUS_OK
QUERY_FILE_INFORMATION 11843 1004 NT_STATUS_OK
WriteX 11843 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11843 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11844 NT_STATUS_OK
Close 11844 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11845 NT_STATUS_OK
WriteX 11845 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11845 258 NT_STATUS_OK
WriteX 11845 0 491 491 NT_STATUS_OK
Close 11845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11843 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11848 NT_STATUS_OK
Close 11848 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11849 NT_STATUS_OK
WriteX 11849 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11849 258 NT_STATUS_OK
WriteX 11849 0 543 543 NT_STATUS_OK
Close 11849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11850 NT_STATUS_OK
ReadX 11850 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11834 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Close 11840 NT_STATUS_OK
Close 11841 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11853 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11862 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11863 NT_STATUS_OK
QUERY_FILE_INFORMATION 11863 1004 NT_STATUS_OK
WriteX 11863 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11863 258 NT_STATUS_OK
WriteX 11863 0 2048 2048 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11864 NT_STATUS_OK
ReadX 11864 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11864 0 4096 4096 NT_STATUS_OK
Flush 11864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11864 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11868 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11868 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11869 NT_STATUS_OK
WriteX 11869 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11869 258 NT_STATUS_OK
WriteX 11869 0 2048 2048 NT_STATUS_OK
Close 11869 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11870 NT_STATUS_OK
ReadX 11870 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11874 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11875 NT_STATUS_OK
WriteX 11875 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11875 258 NT_STATUS_OK
WriteX 11875 0 2048 2048 NT_STATUS_OK
Close 11875 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11876 NT_STATUS_OK
ReadX 11876 0 2048 2048 NT_STATUS_OK
ReadX 11854 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11870 0 4096 4096 NT_STATUS_OK
WriteX 11854 0 8192 8192 NT_STATUS_OK
WriteX 11855 0 4096 4096 NT_STATUS_OK
WriteX 11856 0 4096 4096 NT_STATUS_OK
ReadX 11870 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11879 NT_STATUS_OK
ReadX 11879 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11880 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11879 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11870 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11887 NT_STATUS_OK
ReadX 11887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11888 NT_STATUS_OK
ReadX 11888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11891 NT_STATUS_OK
ReadX 11891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11892 NT_STATUS_OK
ReadX 11892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11894 NT_STATUS_OK
ReadX 11894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11895 NT_STATUS_OK
ReadX 11895 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11899 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11900 NT_STATUS_OK
QUERY_FILE_INFORMATION 11900 1004 NT_STATUS_OK
WriteX 11900 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11900 258 NT_STATUS_OK
WriteX 11900 0 2048 2048 NT_STATUS_OK
Close 11900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11901 NT_STATUS_OK
ReadX 11901 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11902 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11903 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11908 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 1004 NT_STATUS_OK
WriteX 11908 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11908 258 NT_STATUS_OK
WriteX 11908 0 2048 2048 NT_STATUS_OK
Close 11908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11909 NT_STATUS_OK
ReadX 11909 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11901 0 4096 4096 NT_STATUS_OK
Flush 11901 NT_STATUS_OK
WriteX 11909 0 4096 4096 NT_STATUS_OK
Flush 11909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11901 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11909 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11903 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11910 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11911 NT_STATUS_OK
WriteX 11911 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11911 258 NT_STATUS_OK
WriteX 11911 0 4096 4096 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11913 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11914 NT_STATUS_OK
WriteX 11914 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11914 258 NT_STATUS_OK
WriteX 11914 0 4096 4096 NT_STATUS_OK
Close 11914 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11915 0 4096 4096 NT_STATUS_OK
Close 11912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Close 11889 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Close 11892 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11887 NT_STATUS_OK
Close 11888 NT_STATUS_OK
Close 11885 NT_STATUS_OK
Close 11886 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11918 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11920 NT_STATUS_OK
ReadX 11920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11921 NT_STATUS_OK
Close 11921 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11922 NT_STATUS_OK
WriteX 11922 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11922 258 NT_STATUS_OK
WriteX 11922 0 2048 2048 NT_STATUS_OK
Close 11922 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11924 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11928 NT_STATUS_OK
ReadX 11928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11931 NT_STATUS_OK
ReadX 11931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11932 NT_STATUS_OK
ReadX 11932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11933 NT_STATUS_OK
ReadX 11933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11934 NT_STATUS_OK
ReadX 11934 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11935 NT_STATUS_OK
ReadX 11935 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11936 NT_STATUS_OK
ReadX 11936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11901 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11937 NT_STATUS_OK
QUERY_FILE_INFORMATION 11937 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11920 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Close 11931 NT_STATUS_OK
Close 11932 NT_STATUS_OK
Close 11933 NT_STATUS_OK
Close 11934 NT_STATUS_OK
Close 11936 NT_STATUS_OK
Close 11924 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Close 11928 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11939 NT_STATUS_OK
QUERY_FILE_INFORMATION 11939 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11943 NT_STATUS_OK
ReadX 11943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11944 NT_STATUS_OK
ReadX 11944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11945 NT_STATUS_OK
ReadX 11945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11946 NT_STATUS_OK
ReadX 11946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11948 NT_STATUS_OK
ReadX 11948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11950 NT_STATUS_OK
ReadX 11950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11951 NT_STATUS_OK
ReadX 11951 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11952 NT_STATUS_OK
ReadX 11952 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11953 NT_STATUS_OK
ReadX 11953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11954 NT_STATUS_OK
ReadX 11954 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11958 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11959 NT_STATUS_OK
QUERY_FILE_INFORMATION 11959 1004 NT_STATUS_OK
WriteX 11959 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11959 258 NT_STATUS_OK
WriteX 11959 0 2048 2048 NT_STATUS_OK
Close 11959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11961 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11962 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11963 NT_STATUS_OK
ReadX 11963 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11964 NT_STATUS_OK
ReadX 11964 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11971 NT_STATUS_OK
QUERY_FILE_INFORMATION 11971 1004 NT_STATUS_OK
WriteX 11971 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11971 258 NT_STATUS_OK
WriteX 11971 0 2048 2048 NT_STATUS_OK
Close 11971 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11972 NT_STATUS_OK
ReadX 11972 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11947 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11973 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11973 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11974 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11974 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11979 NT_STATUS_OK
QUERY_FILE_INFORMATION 11979 1004 NT_STATUS_OK
WriteX 11979 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11979 258 NT_STATUS_OK
WriteX 11979 0 2048 2048 NT_STATUS_OK
Close 11979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11980 NT_STATUS_OK
ReadX 11980 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
Flush 11960 NT_STATUS_OK
WriteX 11972 0 4096 4096 NT_STATUS_OK
Flush 11972 NT_STATUS_OK
WriteX 11980 0 4096 4096 NT_STATUS_OK
Flush 11980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11960 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11972 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11980 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11962 4096 16384 16384 NT_STATUS_OK
ReadX 11942 4096 16384 16384 NT_STATUS_OK
ReadX 11974 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11981 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11982 NT_STATUS_OK
ReadX 11982 0 2048 2048 NT_STATUS_OK
WriteX 11982 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11983 NT_STATUS_OK
QUERY_FILE_INFORMATION 11983 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11983 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11954 NT_STATUS_OK
Close 11946 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Close 11963 NT_STATUS_OK
Close 11964 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 11953 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Close 11948 NT_STATUS_OK
Close 11951 NT_STATUS_OK
Close 11952 NT_STATUS_OK
Close 11949 NT_STATUS_OK
Close 11950 NT_STATUS_OK
Close 11942 NT_STATUS_OK
Close 11943 NT_STATUS_OK
Close 11944 NT_STATUS_OK
Close 11945 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11985 NT_STATUS_OK
QUERY_FILE_INFORMATION 11985 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11985 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11980 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11987 NT_STATUS_OK
QUERY_FILE_INFORMATION 11987 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11987 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11990 NT_STATUS_OK
ReadX 11990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11991 NT_STATUS_OK
ReadX 11991 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11992 NT_STATUS_OK
ReadX 11992 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11993 NT_STATUS_OK
ReadX 11993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11994 NT_STATUS_OK
ReadX 11994 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11990 4096 16384 16384 NT_STATUS_OK
WriteX 11990 0 4096 4096 NT_STATUS_OK
WriteX 11991 0 4096 4096 NT_STATUS_OK
WriteX 11992 0 4096 4096 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11995 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11996 NT_STATUS_OK
ReadX 11996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11997 NT_STATUS_OK
ReadX 11997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11998 NT_STATUS_OK
ReadX 11998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11999 NT_STATUS_OK
ReadX 11999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12002 NT_STATUS_OK
ReadX 12002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12003 NT_STATUS_OK
ReadX 12003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12004 NT_STATUS_OK
ReadX 12004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12005 NT_STATUS_OK
ReadX 12005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12009 NT_STATUS_OK
ReadX 12009 0 8192 8192 NT_STATUS_OK
ReadX 11996 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12010 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12010 0 4096 4096 NT_STATUS_OK
ReadX 12010 4096 4096 4096 NT_STATUS_OK
ReadX 12010 8192 4096 4096 NT_STATUS_OK
WriteX 11996 0 4096 4096 NT_STATUS_OK
WriteX 11997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12011 0 4096 4096 NT_STATUS_OK
ReadX 12011 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11990 0 4096 4096 NT_STATUS_OK
WriteX 11991 0 4096 4096 NT_STATUS_OK
WriteX 11992 0 4096 4096 NT_STATUS_OK
WriteX 11993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12016 NT_STATUS_OK
QUERY_FILE_INFORMATION 12016 1004 NT_STATUS_OK
WriteX 12016 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12016 258 NT_STATUS_OK
WriteX 12016 0 2048 2048 NT_STATUS_OK
Close 12016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12017 NT_STATUS_OK
ReadX 12017 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12018 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12018 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 4096 4096 NT_STATUS_OK
ReadX 12019 4096 4096 4096 NT_STATUS_OK
WriteX 12019 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12017 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 0 4096 4096 NT_STATUS_OK
ReadX 12021 4096 4096 4096 NT_STATUS_OK
WriteX 12021 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12022 NT_STATUS_OK
QUERY_FILE_INFORMATION 12022 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12022 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12009 NT_STATUS_OK
Close 11994 NT_STATUS_OK
Close 11990 NT_STATUS_OK
Close 11991 NT_STATUS_OK
Close 11992 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Close 12002 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12003 NT_STATUS_OK
Close 12004 NT_STATUS_OK
Close 12005 NT_STATUS_OK
Close 12006 NT_STATUS_OK
Close 12008 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Close 11999 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Close 12011 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12024 0 4096 4096 NT_STATUS_OK
ReadX 12024 4096 4096 4096 NT_STATUS_OK
ReadX 12024 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12025 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12026 NT_STATUS_OK
ReadX 12026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12027 NT_STATUS_OK
ReadX 12027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12028 NT_STATUS_OK
ReadX 12028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12029 NT_STATUS_OK
ReadX 12029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12030 NT_STATUS_OK
ReadX 12030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12031 NT_STATUS_OK
ReadX 12031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12032 NT_STATUS_OK
ReadX 12032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12033 NT_STATUS_OK
ReadX 12033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12034 NT_STATUS_OK
ReadX 12034 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12035 NT_STATUS_OK
ReadX 12035 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12036 NT_STATUS_OK
ReadX 12036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12037 NT_STATUS_OK
ReadX 12037 0 4096 4096 NT_STATUS_OK
ReadX 12025 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12041 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12042 NT_STATUS_OK
QUERY_FILE_INFORMATION 12042 1004 NT_STATUS_OK
WriteX 12042 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12042 258 NT_STATUS_OK
WriteX 12042 0 2048 2048 NT_STATUS_OK
Close 12042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12043 NT_STATUS_OK
ReadX 12043 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12043 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12047 NT_STATUS_OK
Close 12047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12048 NT_STATUS_OK
QUERY_FILE_INFORMATION 12048 1004 NT_STATUS_OK
WriteX 12048 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12048 258 NT_STATUS_OK
WriteX 12048 0 2048 2048 NT_STATUS_OK
Close 12048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12049 NT_STATUS_OK
ReadX 12049 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12049 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12032 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12050 NT_STATUS_OK
QUERY_FILE_INFORMATION 12050 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Close 12031 NT_STATUS_OK
Close 12037 NT_STATUS_OK
Close 12025 NT_STATUS_OK
Close 12026 NT_STATUS_OK
Close 12029 NT_STATUS_OK
Close 12030 NT_STATUS_OK
Close 12027 NT_STATUS_OK
Close 12028 NT_STATUS_OK
Close 12032 NT_STATUS_OK
Close 12033 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12035 NT_STATUS_OK
Close 12024 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12052 NT_STATUS_OK
QUERY_FILE_INFORMATION 12052 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 61440 4096 4096 NT_STATUS_OK
ReadX 12054 126976 4096 4096 NT_STATUS_OK
WriteX 12054 0 65536 65536 NT_STATUS_OK
WriteX 12054 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12055 NT_STATUS_OK
ReadX 12055 61440 4096 4096 NT_STATUS_OK
ReadX 12055 126976 4096 4096 NT_STATUS_OK
ReadX 12055 192512 4096 4096 NT_STATUS_OK
ReadX 12055 258048 4096 4096 NT_STATUS_OK
WriteX 12055 0 65536 65536 NT_STATUS_OK
WriteX 12055 65536 65536 65536 NT_STATUS_OK
WriteX 12055 131072 65536 65536 NT_STATUS_OK
WriteX 12055 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12056 NT_STATUS_OK
ReadX 12056 61440 4096 4096 NT_STATUS_OK
ReadX 12056 126976 4096 4096 NT_STATUS_OK
ReadX 12056 192512 4096 4096 NT_STATUS_OK
ReadX 12056 258048 4096 4096 NT_STATUS_OK
ReadX 12056 323584 4096 4096 NT_STATUS_OK
ReadX 12056 389120 4096 4096 NT_STATUS_OK
ReadX 12056 454656 4096 4096 NT_STATUS_OK
ReadX 12056 520192 4096 4096 NT_STATUS_OK
WriteX 12056 0 65536 65536 NT_STATUS_OK
WriteX 12056 65536 65536 65536 NT_STATUS_OK
WriteX 12056 131072 65536 65536 NT_STATUS_OK
WriteX 12056 196608 65536 65536 NT_STATUS_OK
WriteX 12056 262144 65536 65536 NT_STATUS_OK
WriteX 12056 327680 65536 65536 NT_STATUS_OK
WriteX 12056 393216 65536 65536 NT_STATUS_OK
WriteX 12056 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12057 NT_STATUS_OK
ReadX 12057 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12057 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12057 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12057 8192 4096 4096 NT_STATUS_OK
ReadX 12057 12288 4096 4096 NT_STATUS_OK
ReadX 12057 16384 4096 4096 NT_STATUS_OK
ReadX 12057 20480 4096 4096 NT_STATUS_OK
ReadX 12057 24576 4096 4096 NT_STATUS_OK
ReadX 12057 28672 4096 4096 NT_STATUS_OK
ReadX 12057 32768 4096 4096 NT_STATUS_OK
ReadX 12057 36864 4096 4096 NT_STATUS_OK
ReadX 12057 40960 4096 4096 NT_STATUS_OK
ReadX 12057 45056 4096 4096 NT_STATUS_OK
ReadX 12057 49152 4096 4096 NT_STATUS_OK
ReadX 12057 53248 4096 4096 NT_STATUS_OK
ReadX 12057 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12057 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12058 NT_STATUS_OK
Close 12058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12054 NT_STATUS_OK
Close 12055 NT_STATUS_OK
Close 12056 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12060 NT_STATUS_OK
WriteX 12060 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12060 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12060 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12060 1004 NT_STATUS_OK
WriteX 12060 0 57088 57088 NT_STATUS_OK
WriteX 12060 0 4096 4096 NT_STATUS_OK
Flush 12060 NT_STATUS_OK
Close 12057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12061 NT_STATUS_OK
SET_FILE_INFORMATION 12061 1004 NT_STATUS_OK
Close 12061 NT_STATUS_OK
SET_FILE_INFORMATION 12060 1004 NT_STATUS_OK
WriteX 12060 0 4096 4096 NT_STATUS_OK
Close 12060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12062 NT_STATUS_OK
Close 12062 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12064 NT_STATUS_OK
ReadX 12064 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12064 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12065 NT_STATUS_OK
WriteX 12065 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12065 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12065 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12065 1004 NT_STATUS_OK
WriteX 12065 0 51456 51456 NT_STATUS_OK
WriteX 12065 0 4096 4096 NT_STATUS_OK
Flush 12065 NT_STATUS_OK
SET_FILE_INFORMATION 12065 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12065 1004 NT_STATUS_OK
WriteX 12065 0 4096 4096 NT_STATUS_OK
Close 12065 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12069 NT_STATUS_OK
ReadX 12069 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12069 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12071 NT_STATUS_OK
Close 12071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12074 NT_STATUS_OK
WriteX 12074 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12074 258 NT_STATUS_OK
WriteX 12074 0 53077 53077 NT_STATUS_OK
Close 12074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12075 NT_STATUS_OK
WriteX 12075 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12075 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12075 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
WriteX 12075 0 65536 65536 NT_STATUS_OK
WriteX 12075 65536 1856 1856 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
Flush 12075 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12075 1004 NT_STATUS_OK
WriteX 12075 0 4096 4096 NT_STATUS_OK
Close 12075 NT_STATUS_OK
Close 12069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12079 NT_STATUS_OK
ReadX 12079 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12081 NT_STATUS_OK
Close 12081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12084 NT_STATUS_OK
WriteX 12084 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12084 258 NT_STATUS_OK
WriteX 12084 0 7983 7983 NT_STATUS_OK
Close 12084 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12086 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12089 NT_STATUS_OK
WriteX 12089 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12089 258 NT_STATUS_OK
WriteX 12089 0 65536 65536 NT_STATUS_OK
WriteX 12089 65536 65536 65536 NT_STATUS_OK
WriteX 12089 131072 65536 65536 NT_STATUS_OK
WriteX 12089 196608 65536 65536 NT_STATUS_OK
WriteX 12089 262144 65536 65536 NT_STATUS_OK
WriteX 12089 327680 65536 65536 NT_STATUS_OK
WriteX 12089 393216 65536 65536 NT_STATUS_OK
WriteX 12089 458752 46731 46731 NT_STATUS_OK
Close 12089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12090 NT_STATUS_OK
WriteX 12090 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12079 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12090 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12090 1004 NT_STATUS_OK
WriteX 12090 0 65536 65536 NT_STATUS_OK
WriteX 12090 65536 22848 22848 NT_STATUS_OK
WriteX 12090 0 4096 4096 NT_STATUS_OK
Flush 12090 NT_STATUS_OK
SET_FILE_INFORMATION 12090 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12090 1004 NT_STATUS_OK
WriteX 12090 0 4096 4096 NT_STATUS_OK
Close 12090 NT_STATUS_OK
Close 12079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12092 NT_STATUS_OK
Close 12092 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12094 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12095 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12095 1004 NT_STATUS_OK
ReadX 12095 8192 4096 4096 NT_STATUS_OK
ReadX 12095 12288 4096 4096 NT_STATUS_OK
ReadX 12095 16384 4096 4096 NT_STATUS_OK
ReadX 12095 20480 4096 4096 NT_STATUS_OK
ReadX 12095 24576 4096 4096 NT_STATUS_OK
ReadX 12095 28672 4096 4096 NT_STATUS_OK
ReadX 12095 32768 4096 4096 NT_STATUS_OK
ReadX 12095 36864 4096 4096 NT_STATUS_OK
ReadX 12095 40960 4096 4096 NT_STATUS_OK
ReadX 12095 45056 4096 4096 NT_STATUS_OK
ReadX 12095 49152 4096 4096 NT_STATUS_OK
ReadX 12095 53248 4096 4096 NT_STATUS_OK
ReadX 12095 57344 4096 4096 NT_STATUS_OK
ReadX 12095 61440 4096 4096 NT_STATUS_OK
ReadX 12095 65536 4096 4096 NT_STATUS_OK
ReadX 12095 69632 4096 4096 NT_STATUS_OK
ReadX 12095 73728 4096 4096 NT_STATUS_OK
ReadX 12095 77824 4096 4096 NT_STATUS_OK
ReadX 12095 81920 4096 4096 NT_STATUS_OK
ReadX 12095 86016 4096 4096 NT_STATUS_OK
ReadX 12095 90112 4096 4096 NT_STATUS_OK
ReadX 12095 94208 4096 4096 NT_STATUS_OK
ReadX 12095 98304 4096 4096 NT_STATUS_OK
ReadX 12095 102400 4096 4096 NT_STATUS_OK
ReadX 12095 106496 4096 4096 NT_STATUS_OK
ReadX 12095 110592 4096 4096 NT_STATUS_OK
ReadX 12095 114688 4096 4096 NT_STATUS_OK
ReadX 12095 118784 4096 4096 NT_STATUS_OK
ReadX 12095 122880 4096 4096 NT_STATUS_OK
ReadX 12095 126976 4096 4096 NT_STATUS_OK
ReadX 12095 131072 4096 4096 NT_STATUS_OK
ReadX 12095 135168 4096 4096 NT_STATUS_OK
ReadX 12095 139264 4096 4096 NT_STATUS_OK
ReadX 12095 143360 4096 4096 NT_STATUS_OK
ReadX 12095 147456 4096 4096 NT_STATUS_OK
ReadX 12095 151552 4096 4096 NT_STATUS_OK
ReadX 12095 155648 4096 4096 NT_STATUS_OK
ReadX 12095 159744 4096 4096 NT_STATUS_OK
ReadX 12095 163840 4096 4096 NT_STATUS_OK
ReadX 12095 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12095 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12098 NT_STATUS_OK
WriteX 12098 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12098 258 NT_STATUS_OK
Close 12095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12099 NT_STATUS_OK
SET_FILE_INFORMATION 12099 1004 NT_STATUS_OK
Close 12099 NT_STATUS_OK
WriteX 12098 0 42388 42388 NT_STATUS_OK
Close 12098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12100 NT_STATUS_OK
Close 12100 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12102 NT_STATUS_OK
ReadX 12102 0 4096 4096 NT_STATUS_OK
ReadX 12102 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12103 NT_STATUS_OK
WriteX 12103 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12103 258 NT_STATUS_OK
SET_FILE_INFORMATION 12103 1004 NT_STATUS_OK
WriteX 12103 0 42652 42652 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Close 12102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12105 NT_STATUS_OK
Close 12105 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 4096 4096 NT_STATUS_OK
ReadX 12107 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12109 NT_STATUS_OK
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12112 NT_STATUS_OK
WriteX 12112 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12112 258 NT_STATUS_OK
WriteX 12112 0 65536 65536 NT_STATUS_OK
WriteX 12112 65536 49 49 NT_STATUS_OK
Close 12112 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12113 NT_STATUS_OK
ReadX 12113 0 61440 61440 NT_STATUS_OK
ReadX 12113 61440 4096 4096 NT_STATUS_OK
ReadX 12113 65536 61440 61440 NT_STATUS_OK
ReadX 12113 126976 4096 4096 NT_STATUS_OK
ReadX 12113 131072 61440 61440 NT_STATUS_OK
ReadX 12113 192512 4096 4096 NT_STATUS_OK
ReadX 12113 196608 61440 61440 NT_STATUS_OK
ReadX 12113 258048 4096 4096 NT_STATUS_OK
ReadX 12113 262144 61440 61440 NT_STATUS_OK
ReadX 12113 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12114 NT_STATUS_OK
ReadX 12114 0 61440 61440 NT_STATUS_OK
ReadX 12114 61440 4096 4096 NT_STATUS_OK
ReadX 12114 65536 61440 61440 NT_STATUS_OK
ReadX 12114 126976 4096 4096 NT_STATUS_OK
ReadX 12114 131072 61440 61440 NT_STATUS_OK
ReadX 12114 192512 4096 4096 NT_STATUS_OK
ReadX 12114 196608 61440 61440 NT_STATUS_OK
ReadX 12114 258048 4096 4096 NT_STATUS_OK
ReadX 12114 262144 61440 61440 NT_STATUS_OK
ReadX 12114 323584 4096 4096 NT_STATUS_OK
ReadX 12114 327680 61440 61440 NT_STATUS_OK
ReadX 12114 389120 4096 4096 NT_STATUS_OK
ReadX 12114 393216 61440 61440 NT_STATUS_OK
ReadX 12114 454656 4096 4096 NT_STATUS_OK
ReadX 12114 458752 61440 61440 NT_STATUS_OK
ReadX 12114 520192 4096 4096 NT_STATUS_OK
ReadX 12114 524288 61440 61440 NT_STATUS_OK
ReadX 12114 585728 4096 4096 NT_STATUS_OK
ReadX 12114 589824 61440 61440 NT_STATUS_OK
ReadX 12114 651264 4096 4096 NT_STATUS_OK
ReadX 12114 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12115 NT_STATUS_OK
ReadX 12115 0 61440 61440 NT_STATUS_OK
ReadX 12115 61440 4096 4096 NT_STATUS_OK
ReadX 12115 65536 61440 61440 NT_STATUS_OK
ReadX 12115 126976 4096 4096 NT_STATUS_OK
ReadX 12115 131072 61440 61440 NT_STATUS_OK
ReadX 12115 192512 4096 4096 NT_STATUS_OK
ReadX 12115 196608 61440 61440 NT_STATUS_OK
ReadX 12115 258048 4096 4096 NT_STATUS_OK
ReadX 12115 262144 61440 61440 NT_STATUS_OK
ReadX 12115 323584 4096 4096 NT_STATUS_OK
ReadX 12115 327680 61440 61440 NT_STATUS_OK
ReadX 12115 389120 4096 4096 NT_STATUS_OK
ReadX 12115 393216 61440 61440 NT_STATUS_OK
ReadX 12115 454656 4096 4096 NT_STATUS_OK
ReadX 12115 458752 61440 61440 NT_STATUS_OK
ReadX 12115 520192 4096 4096 NT_STATUS_OK
ReadX 12115 524288 61440 61440 NT_STATUS_OK
ReadX 12115 585728 4096 4096 NT_STATUS_OK
ReadX 12115 589824 61440 61440 NT_STATUS_OK
ReadX 12115 651264 4096 4096 NT_STATUS_OK
ReadX 12115 655360 61440 61440 NT_STATUS_OK
ReadX 12115 716800 4096 4096 NT_STATUS_OK
ReadX 12115 720896 61440 61440 NT_STATUS_OK
ReadX 12115 782336 4096 4096 NT_STATUS_OK
ReadX 12115 786432 61440 61440 NT_STATUS_OK
ReadX 12115 847872 4096 4096 NT_STATUS_OK
ReadX 12115 851968 61440 61440 NT_STATUS_OK
ReadX 12115 913408 4096 4096 NT_STATUS_OK
ReadX 12115 917504 61440 61440 NT_STATUS_OK
ReadX 12115 978944 4096 4096 NT_STATUS_OK
ReadX 12115 983040 61440 61440 NT_STATUS_OK
ReadX 12115 1044480 4096 4096 NT_STATUS_OK
ReadX 12115 1048576 61440 61440 NT_STATUS_OK
ReadX 12115 1110016 4096 4096 NT_STATUS_OK
ReadX 12115 1114112 61440 61440 NT_STATUS_OK
ReadX 12115 1175552 4096 4096 NT_STATUS_OK
ReadX 12115 1179648 61440 61440 NT_STATUS_OK
ReadX 12115 1241088 4096 4096 NT_STATUS_OK
ReadX 12115 1245184 61440 61440 NT_STATUS_OK
ReadX 12115 1306624 4096 4096 NT_STATUS_OK
ReadX 12115 1310720 61440 61440 NT_STATUS_OK
ReadX 12115 1372160 4096 4096 NT_STATUS_OK
ReadX 12115 1376256 61440 61440 NT_STATUS_OK
ReadX 12115 1437696 4096 4096 NT_STATUS_OK
ReadX 12115 1441792 61440 61440 NT_STATUS_OK
ReadX 12115 1503232 4096 4096 NT_STATUS_OK
ReadX 12115 1507328 61440 61440 NT_STATUS_OK
ReadX 12115 1568768 4096 4096 NT_STATUS_OK
ReadX 12115 1572864 61440 61440 NT_STATUS_OK
ReadX 12115 1634304 4096 4096 NT_STATUS_OK
ReadX 12115 1638400 61440 61440 NT_STATUS_OK
ReadX 12115 1699840 4096 4096 NT_STATUS_OK
ReadX 12115 1703936 61440 61440 NT_STATUS_OK
ReadX 12115 1765376 4096 4096 NT_STATUS_OK
ReadX 12115 1769472 61440 61440 NT_STATUS_OK
ReadX 12115 1830912 4096 4096 NT_STATUS_OK
ReadX 12115 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12117 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12117 1005 NT_STATUS_OK
ReadX 12117 2156 24 24 NT_STATUS_OK
ReadX 12117 2139 276 276 NT_STATUS_OK
ReadX 12117 2136 14 14 NT_STATUS_OK
ReadX 12117 2136 7 7 NT_STATUS_OK
ReadX 12117 2138 12 12 NT_STATUS_OK
ReadX 12117 2137 8 8 NT_STATUS_OK
ReadX 12117 2135 15 15 NT_STATUS_OK
ReadX 12117 0 16 16 NT_STATUS_OK
ReadX 12117 16 2048 2048 NT_STATUS_OK
ReadX 12117 2064 2048 2048 NT_STATUS_OK
ReadX 12117 257 2048 2048 NT_STATUS_OK
ReadX 12117 385 2048 2048 NT_STATUS_OK
ReadX 12117 513 2048 2048 NT_STATUS_OK
ReadX 12117 641 2048 2048 NT_STATUS_OK
ReadX 12117 769 2048 2048 NT_STATUS_OK
ReadX 12117 897 2048 2048 NT_STATUS_OK
ReadX 12117 1025 2048 2048 NT_STATUS_OK
ReadX 12117 1153 2048 2048 NT_STATUS_OK
ReadX 12117 1281 2048 2048 NT_STATUS_OK
ReadX 12117 1409 2048 2048 NT_STATUS_OK
ReadX 12117 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12119 NT_STATUS_OK
Close 12119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12113 NT_STATUS_OK
Close 12114 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12122 NT_STATUS_OK
WriteX 12122 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12122 258 NT_STATUS_OK
WriteX 12122 0 10575 10575 NT_STATUS_OK
Flush 12122 NT_STATUS_OK
Close 12122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12123 NT_STATUS_OK
Close 12123 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12125 NT_STATUS_OK
ReadX 12125 0 4096 4096 NT_STATUS_OK
Close 12117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12126 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12127 NT_STATUS_OK
LockX 12127 2147483538 1 NT_STATUS_OK
UnlockX 12127 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12127 1005 NT_STATUS_OK
ReadX 12127 0 512 512 NT_STATUS_OK
ReadX 12127 512 512 512 NT_STATUS_OK
ReadX 12127 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12127 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12127 1004 NT_STATUS_OK
Close 12127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12128 NT_STATUS_OK
QUERY_FILE_INFORMATION 12128 1005 NT_STATUS_OK
ReadX 12128 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12129 NT_STATUS_OK
LockX 12129 2147483538 1 NT_STATUS_OK
UnlockX 12129 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12129 1005 NT_STATUS_OK
ReadX 12129 0 512 512 NT_STATUS_OK
ReadX 12129 512 512 512 NT_STATUS_OK
ReadX 12129 1024 512 512 NT_STATUS_OK
ReadX 12129 288 20 20 NT_STATUS_OK
ReadX 12129 308 2084 2084 NT_STATUS_OK
ReadX 12129 388 2084 2084 NT_STATUS_OK
ReadX 12129 388 2084 2084 NT_STATUS_OK
ReadX 12116 2157 1386 1386 NT_STATUS_OK
ReadX 12129 2472 399 399 NT_STATUS_OK
ReadX 12129 3072 1536 1536 NT_STATUS_OK
ReadX 12129 544 149 149 NT_STATUS_OK
ReadX 12129 693 485 485 NT_STATUS_OK
Close 12129 NT_STATUS_OK
ReadX 12116 2157 4096 4096 NT_STATUS_OK
ReadX 12116 6253 4096 4096 NT_STATUS_OK
ReadX 12116 10349 4096 4096 NT_STATUS_OK
ReadX 12116 14445 4096 4096 NT_STATUS_OK
ReadX 12116 18541 4096 4096 NT_STATUS_OK
ReadX 12116 22637 256 256 NT_STATUS_OK
ReadX 12116 22893 4096 4096 NT_STATUS_OK
ReadX 12116 26989 4096 4096 NT_STATUS_OK
ReadX 12116 31085 4096 4096 NT_STATUS_OK
ReadX 12116 35181 4096 4096 NT_STATUS_OK
ReadX 12116 39277 4096 4096 NT_STATUS_OK
ReadX 12116 43373 4096 4096 NT_STATUS_OK
ReadX 12116 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12116 2157 1024 1024 NT_STATUS_OK
ReadX 12116 1667 4688 4688 NT_STATUS_OK
ReadX 12116 6355 3516 3516 NT_STATUS_OK
ReadX 12116 9871 16384 16384 NT_STATUS_OK
ReadX 12116 26255 3771 3771 NT_STATUS_OK
ReadX 12116 30026 2048 2048 NT_STATUS_OK
ReadX 12116 32074 1024 1024 NT_STATUS_OK
ReadX 12116 33098 6652 6652 NT_STATUS_OK
ReadX 12116 39750 16384 16384 NT_STATUS_OK
ReadX 12116 56134 10496 10496 NT_STATUS_OK
ReadX 12116 66630 1784 1784 NT_STATUS_OK
ReadX 12116 68414 90 90 NT_STATUS_OK
ReadX 12116 68504 273 273 NT_STATUS_OK
ReadX 12116 68777 1600 1600 NT_STATUS_OK
ReadX 12116 70377 640 640 NT_STATUS_OK
ReadX 12116 71017 1280 1280 NT_STATUS_OK
ReadX 12116 72297 8464 8464 NT_STATUS_OK
ReadX 12116 80761 158 158 NT_STATUS_OK
ReadX 12116 80919 912 912 NT_STATUS_OK
ReadX 12116 81831 1980 1980 NT_STATUS_OK
ReadX 12116 83811 2256 2256 NT_STATUS_OK
ReadX 12116 86067 400 400 NT_STATUS_OK
ReadX 12116 86467 252 252 NT_STATUS_OK
ReadX 12116 86719 42 42 NT_STATUS_OK
ReadX 12116 86761 725 725 NT_STATUS_OK
ReadX 12116 2009 512 512 NT_STATUS_OK
ReadX 12116 3895 9 9 NT_STATUS_OK
ReadX 12116 3781 46 46 NT_STATUS_OK
ReadX 12116 4059 92 92 NT_STATUS_OK
ReadX 12116 3781 92 92 NT_STATUS_OK
ReadX 12116 3986 184 184 NT_STATUS_OK
ReadX 12116 3987 16384 16384 NT_STATUS_OK
ReadX 12116 3902 16384 16384 NT_STATUS_OK
ReadX 12116 3781 10240 10240 NT_STATUS_OK
ReadX 12116 3821 16384 16384 NT_STATUS_OK
ReadX 12116 3891 935 935 NT_STATUS_OK
ReadX 12116 4060 10240 10240 NT_STATUS_OK
ReadX 12116 4059 184 184 NT_STATUS_OK
ReadX 12116 256 184 184 NT_STATUS_OK
ReadX 12116 256 1026 1026 NT_STATUS_OK
ReadX 12116 3901 326 326 NT_STATUS_OK
ReadX 12116 3899 652 652 NT_STATUS_OK
ReadX 12116 256 2 2 NT_STATUS_OK
ReadX 12116 258 4948 4948 NT_STATUS_OK
Close 12116 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12134 NT_STATUS_OK
WriteX 12134 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12134 258 NT_STATUS_OK
WriteX 12134 0 65536 65536 NT_STATUS_OK
WriteX 12134 65536 65536 65536 NT_STATUS_OK
WriteX 12134 131072 65536 65536 NT_STATUS_OK
WriteX 12134 196608 65536 65536 NT_STATUS_OK
WriteX 12134 262144 65536 65536 NT_STATUS_OK
WriteX 12134 327680 65536 65536 NT_STATUS_OK
WriteX 12134 393216 65536 65536 NT_STATUS_OK
WriteX 12134 458752 65536 65536 NT_STATUS_OK
WriteX 12134 524288 65536 65536 NT_STATUS_OK
WriteX 12134 589824 35257 35257 NT_STATUS_OK
Close 12134 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12139 NT_STATUS_OK
WriteX 12139 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12139 258 NT_STATUS_OK
WriteX 12139 0 65536 65536 NT_STATUS_OK
WriteX 12139 65536 65536 65536 NT_STATUS_OK
WriteX 12139 131072 65536 65536 NT_STATUS_OK
WriteX 12139 196608 65536 65536 NT_STATUS_OK
WriteX 12139 262144 65536 65536 NT_STATUS_OK
WriteX 12139 327680 65536 65536 NT_STATUS_OK
WriteX 12139 393216 65536 65536 NT_STATUS_OK
WriteX 12139 458752 65536 65536 NT_STATUS_OK
WriteX 12139 524288 65536 65536 NT_STATUS_OK
WriteX 12139 589824 57598 57598 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12141 NT_STATUS_OK
WriteX 12141 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12141 258 NT_STATUS_OK
WriteX 12141 0 12543 12543 NT_STATUS_OK
Flush 12141 NT_STATUS_OK
Close 12141 NT_STATUS_OK
Close 12125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12145 NT_STATUS_OK
ReadX 12145 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12146 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12147 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12147 1005 NT_STATUS_OK
ReadX 12147 1938 24 24 NT_STATUS_OK
ReadX 12147 1920 276 276 NT_STATUS_OK
ReadX 12147 1918 14 14 NT_STATUS_OK
ReadX 12147 1918 7 7 NT_STATUS_OK
ReadX 12147 1919 12 12 NT_STATUS_OK
ReadX 12147 1919 8 8 NT_STATUS_OK
ReadX 12147 1917 15 15 NT_STATUS_OK
ReadX 12147 0 16 16 NT_STATUS_OK
ReadX 12147 16 2048 2048 NT_STATUS_OK
ReadX 12147 2064 2048 2048 NT_STATUS_OK
ReadX 12147 257 2048 2048 NT_STATUS_OK
ReadX 12147 385 2048 2048 NT_STATUS_OK
ReadX 12147 513 2048 2048 NT_STATUS_OK
ReadX 12147 641 2048 2048 NT_STATUS_OK
ReadX 12147 769 2048 2048 NT_STATUS_OK
ReadX 12147 897 2048 2048 NT_STATUS_OK
ReadX 12147 1025 2048 2048 NT_STATUS_OK
ReadX 12147 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12149 NT_STATUS_OK
Close 12149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12152 NT_STATUS_OK
WriteX 12152 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12152 258 NT_STATUS_OK
WriteX 12152 0 11588 11588 NT_STATUS_OK
Flush 12152 NT_STATUS_OK
Close 12152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12153 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 0 4096 4096 NT_STATUS_OK
Close 12147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12157 NT_STATUS_OK
WriteX 12157 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12157 258 NT_STATUS_OK
WriteX 12157 0 11615 11615 NT_STATUS_OK
Flush 12157 NT_STATUS_OK
Close 12157 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12155 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12159 NT_STATUS_OK
Close 12159 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12161 NT_STATUS_OK
ReadX 12161 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12163 NT_STATUS_OK
Close 12163 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12166 NT_STATUS_OK
WriteX 12166 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12166 258 NT_STATUS_OK
WriteX 12166 0 65536 65536 NT_STATUS_OK
WriteX 12166 65536 16050 16050 NT_STATUS_OK
Close 12166 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12146 1939 64 64 NT_STATUS_OK
ReadX 12146 128 248 248 NT_STATUS_OK
ReadX 12146 128 568 568 NT_STATUS_OK
ReadX 12146 3872 1536 1536 NT_STATUS_OK
ReadX 12146 3456 2560 2560 NT_STATUS_OK
ReadX 12146 3136 512 512 NT_STATUS_OK
ReadX 12146 2880 4096 4096 NT_STATUS_OK
ReadX 12146 3264 3072 3072 NT_STATUS_OK
ReadX 12146 320 4096 4096 NT_STATUS_OK
ReadX 12146 1024 4096 4096 NT_STATUS_OK
ReadX 12146 3616 4096 4096 NT_STATUS_OK
ReadX 12146 1939 64 64 NT_STATUS_OK
ReadX 12146 128 248 248 NT_STATUS_OK
ReadX 12146 128 608 608 NT_STATUS_OK
ReadX 12146 2858 1024 1024 NT_STATUS_OK
ReadX 12146 2810 4096 4096 NT_STATUS_OK
ReadX 12146 2826 4096 4096 NT_STATUS_OK
ReadX 12146 2580 2048 2048 NT_STATUS_OK
ReadX 12146 2800 2560 2560 NT_STATUS_OK
ReadX 12146 2100 4096 4096 NT_STATUS_OK
ReadX 12146 2084 4096 4096 NT_STATUS_OK
ReadX 12146 868 4096 4096 NT_STATUS_OK
ReadX 12146 2324 4096 4096 NT_STATUS_OK
ReadX 12146 884 4096 4096 NT_STATUS_OK
ReadX 12146 2604 1024 1024 NT_STATUS_OK
ReadX 12146 580 4096 4096 NT_STATUS_OK
ReadX 12146 596 4096 4096 NT_STATUS_OK
ReadX 12146 2752 4096 4096 NT_STATUS_OK
ReadX 12146 2842 1024 1024 NT_STATUS_OK
ReadX 12146 660 4096 4096 NT_STATUS_OK
ReadX 12146 2720 4096 4096 NT_STATUS_OK
ReadX 12146 2736 4096 4096 NT_STATUS_OK
ReadX 12146 628 4096 4096 NT_STATUS_OK
ReadX 12146 2704 4096 4096 NT_STATUS_OK
ReadX 12146 1556 4096 4096 NT_STATUS_OK
ReadX 12146 576 4096 4096 NT_STATUS_OK
ReadX 12146 3168 1536 1536 NT_STATUS_OK
ReadX 12146 832 4096 4096 NT_STATUS_OK
ReadX 12146 1088 4096 4096 NT_STATUS_OK
ReadX 12146 1344 4096 4096 NT_STATUS_OK
ReadX 12146 1600 4096 4096 NT_STATUS_OK
ReadX 12146 1856 4096 4096 NT_STATUS_OK
ReadX 12146 2112 4096 4096 NT_STATUS_OK
ReadX 12146 1892 4096 4096 NT_STATUS_OK
ReadX 12146 820 4096 4096 NT_STATUS_OK
ReadX 12146 788 4096 4096 NT_STATUS_OK
ReadX 12146 1604 4096 4096 NT_STATUS_OK
ReadX 12146 3648 4096 4096 NT_STATUS_OK
ReadX 12146 2608 4096 4096 NT_STATUS_OK
ReadX 12146 548 4096 4096 NT_STATUS_OK
ReadX 12146 740 4096 4096 NT_STATUS_OK
ReadX 12146 1344 4096 4096 NT_STATUS_OK
ReadX 12146 3392 4096 4096 NT_STATUS_OK
ReadX 12146 3904 4096 4096 NT_STATUS_OK
ReadX 12146 644 4096 4096 NT_STATUS_OK
ReadX 12146 676 4096 4096 NT_STATUS_OK
ReadX 12146 2688 4096 4096 NT_STATUS_OK
ReadX 12146 320 4096 4096 NT_STATUS_OK
ReadX 12146 900 4096 4096 NT_STATUS_OK
ReadX 12146 1908 4096 4096 NT_STATUS_OK
ReadX 12146 852 4096 4096 NT_STATUS_OK
ReadX 12146 724 4096 4096 NT_STATUS_OK
ReadX 12146 2292 4096 4096 NT_STATUS_OK
ReadX 12146 612 4096 4096 NT_STATUS_OK
ReadX 12146 388 4096 4096 NT_STATUS_OK
ReadX 12146 2368 4096 4096 NT_STATUS_OK
ReadX 12146 2624 4096 4096 NT_STATUS_OK
ReadX 12146 500 4096 4096 NT_STATUS_OK
ReadX 12146 356 4096 4096 NT_STATUS_OK
ReadX 12146 1024 4096 4096 NT_STATUS_OK
ReadX 12146 576 4096 4096 NT_STATUS_OK
ReadX 12146 340 4096 4096 NT_STATUS_OK
ReadX 12146 420 4096 4096 NT_STATUS_OK
ReadX 12146 1600 4096 4096 NT_STATUS_OK
ReadX 12146 404 4096 4096 NT_STATUS_OK
ReadX 12146 1428 4096 4096 NT_STATUS_OK
ReadX 12146 2656 4096 4096 NT_STATUS_OK
ReadX 12146 2624 4096 4096 NT_STATUS_OK
ReadX 12146 452 4096 4096 NT_STATUS_OK
ReadX 12146 692 4096 4096 NT_STATUS_OK
ReadX 12146 564 4096 4096 NT_STATUS_OK
ReadX 12146 372 4096 4096 NT_STATUS_OK
ReadX 12146 468 4096 4096 NT_STATUS_OK
ReadX 12146 484 4096 4096 NT_STATUS_OK
ReadX 12146 1088 4096 4096 NT_STATUS_OK
ReadX 12146 1924 4096 4096 NT_STATUS_OK
ReadX 12146 2768 4096 4096 NT_STATUS_OK
ReadX 12146 832 4096 4096 NT_STATUS_OK
ReadX 12146 836 4096 4096 NT_STATUS_OK
ReadX 12146 1856 4096 4096 NT_STATUS_OK
ReadX 12146 2640 4096 4096 NT_STATUS_OK
ReadX 12146 436 4096 4096 NT_STATUS_OK
ReadX 12146 1828 4096 4096 NT_STATUS_OK
ReadX 12146 804 4096 4096 NT_STATUS_OK
ReadX 12146 1860 4096 4096 NT_STATUS_OK
ReadX 12146 1812 4096 4096 NT_STATUS_OK
ReadX 12146 756 4096 4096 NT_STATUS_OK
ReadX 12146 1636 4096 4096 NT_STATUS_OK
ReadX 12146 772 4096 4096 NT_STATUS_OK
ReadX 12146 2036 4096 4096 NT_STATUS_OK
ReadX 12146 1220 4096 4096 NT_STATUS_OK
ReadX 12146 1652 4096 4096 NT_STATUS_OK
ReadX 12146 2588 4096 4096 NT_STATUS_OK
ReadX 12146 916 4096 4096 NT_STATUS_OK
ReadX 12146 260 4096 4096 NT_STATUS_OK
ReadX 12146 932 4096 4096 NT_STATUS_OK
ReadX 12146 2624 4096 4096 NT_STATUS_OK
ReadX 12146 308 4096 4096 NT_STATUS_OK
ReadX 12146 292 4096 4096 NT_STATUS_OK
ReadX 12146 1140 4096 4096 NT_STATUS_OK
ReadX 12146 276 4096 4096 NT_STATUS_OK
ReadX 12146 2020 4096 4096 NT_STATUS_OK
ReadX 12146 2880 4096 4096 NT_STATUS_OK
ReadX 12146 516 4096 4096 NT_STATUS_OK
ReadX 12146 1844 4096 4096 NT_STATUS_OK
ReadX 12146 1124 4096 4096 NT_STATUS_OK
ReadX 12146 3136 4096 4096 NT_STATUS_OK
ReadX 12146 324 4096 4096 NT_STATUS_OK
ReadX 12146 1156 4096 4096 NT_STATUS_OK
ReadX 12146 1172 4096 4096 NT_STATUS_OK
ReadX 12146 2112 4096 4096 NT_STATUS_OK
ReadX 12146 2368 4096 4096 NT_STATUS_OK
ReadX 12146 964 4096 4096 NT_STATUS_OK
ReadX 12146 980 4096 4096 NT_STATUS_OK
ReadX 12146 1012 4096 4096 NT_STATUS_OK
ReadX 12146 532 4096 4096 NT_STATUS_OK
ReadX 12146 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12146 1620 4096 4096 NT_STATUS_OK
ReadX 12146 1604 4096 4096 NT_STATUS_OK
ReadX 12146 2116 4096 4096 NT_STATUS_OK
ReadX 12146 2132 4096 4096 NT_STATUS_OK
ReadX 12146 2148 4096 4096 NT_STATUS_OK
ReadX 12146 2276 4096 4096 NT_STATUS_OK
ReadX 12146 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12168 NT_STATUS_OK
Close 12168 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12171 NT_STATUS_OK
QUERY_FILE_INFORMATION 12126 1004 NT_STATUS_OK
Close 12126 NT_STATUS_OK
WriteX 12171 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12171 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12128 1004 NT_STATUS_OK
Close 12128 NT_STATUS_OK
WriteX 12171 0 65536 65536 NT_STATUS_OK
WriteX 12171 65536 64850 64850 NT_STATUS_OK
Close 12171 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12173 NT_STATUS_OK
WriteX 12173 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12173 258 NT_STATUS_OK
ReadX 12146 2068 4096 4096 NT_STATUS_OK
ReadX 12146 1588 4096 4096 NT_STATUS_OK
ReadX 12146 1572 4096 4096 NT_STATUS_OK
WriteX 12173 0 18630 18630 NT_STATUS_OK
Flush 12173 NT_STATUS_OK
Close 12173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12175 NT_STATUS_OK
Close 12175 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12177 NT_STATUS_OK
ReadX 12177 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12146 612 4096 4096 NT_STATUS_OK
ReadX 12146 564 4096 4096 NT_STATUS_OK
ReadX 12146 1876 4096 4096 NT_STATUS_OK
ReadX 12146 628 4096 4096 NT_STATUS_OK
ReadX 12146 740 4096 4096 NT_STATUS_OK
ReadX 12146 724 4096 4096 NT_STATUS_OK
ReadX 12146 644 4096 4096 NT_STATUS_OK
ReadX 12146 2324 4096 4096 NT_STATUS_OK
ReadX 12146 660 4096 4096 NT_STATUS_OK
ReadX 12146 852 4096 4096 NT_STATUS_OK
ReadX 12146 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12146 2368 4096 4096 NT_STATUS_OK
ReadX 12146 1024 4096 4096 NT_STATUS_OK
ReadX 12146 320 4096 4096 NT_STATUS_OK
ReadX 12146 580 4096 4096 NT_STATUS_OK
ReadX 12146 3136 512 512 NT_STATUS_OK
ReadX 12146 2880 4096 4096 NT_STATUS_OK
Close 12146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 61440 4096 4096 NT_STATUS_OK
ReadX 12178 126976 4096 4096 NT_STATUS_OK
WriteX 12178 0 65536 65536 NT_STATUS_OK
WriteX 12178 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 61440 4096 4096 NT_STATUS_OK
ReadX 12179 126976 4096 4096 NT_STATUS_OK
ReadX 12179 192512 4096 4096 NT_STATUS_OK
ReadX 12179 258048 4096 4096 NT_STATUS_OK
WriteX 12179 0 65536 65536 NT_STATUS_OK
WriteX 12179 65536 65536 65536 NT_STATUS_OK
WriteX 12179 131072 65536 65536 NT_STATUS_OK
WriteX 12179 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 61440 4096 4096 NT_STATUS_OK
ReadX 12180 126976 4096 4096 NT_STATUS_OK
ReadX 12180 192512 4096 4096 NT_STATUS_OK
ReadX 12180 258048 4096 4096 NT_STATUS_OK
ReadX 12180 323584 4096 4096 NT_STATUS_OK
ReadX 12180 389120 4096 4096 NT_STATUS_OK
ReadX 12180 454656 4096 4096 NT_STATUS_OK
ReadX 12180 520192 4096 4096 NT_STATUS_OK
WriteX 12180 0 65536 65536 NT_STATUS_OK
WriteX 12180 65536 65536 65536 NT_STATUS_OK
WriteX 12180 131072 65536 65536 NT_STATUS_OK
WriteX 12180 196608 65536 65536 NT_STATUS_OK
WriteX 12180 262144 65536 65536 NT_STATUS_OK
WriteX 12180 327680 65536 65536 NT_STATUS_OK
WriteX 12180 393216 65536 65536 NT_STATUS_OK
WriteX 12180 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12181 NT_STATUS_OK
ReadX 12181 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12182 NT_STATUS_OK
Close 12182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12183 NT_STATUS_OK
WriteX 12183 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12183 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12181 0 8192 8192 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12181 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12181 0 8192 8192 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12181 0 8192 8192 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12181 0 8192 8192 NT_STATUS_OK
Flush 12181 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12177 NT_STATUS_OK
Close 12145 NT_STATUS_OK
Close 12178 NT_STATUS_OK
Close 12179 NT_STATUS_OK
Close 12180 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12188 NT_STATUS_OK
WriteX 12188 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12188 258 NT_STATUS_OK
WriteX 12188 0 62591 62591 NT_STATUS_OK
Close 12188 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12190 NT_STATUS_OK
Close 12190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12193 NT_STATUS_OK
WriteX 12193 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12193 258 NT_STATUS_OK
WriteX 12193 0 10845 10845 NT_STATUS_OK
Close 12193 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12198 NT_STATUS_OK
WriteX 12198 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12198 258 NT_STATUS_OK
WriteX 12198 0 30118 30118 NT_STATUS_OK
Close 12198 NT_STATUS_OK
WriteX 12181 0 4096 4096 NT_STATUS_OK
WriteX 12183 0 64 64 NT_STATUS_OK
Close 12183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12181 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12200 NT_STATUS_OK
ReadX 12200 0 61440 61440 NT_STATUS_OK
ReadX 12200 61440 4096 4096 NT_STATUS_OK
ReadX 12200 65536 61440 61440 NT_STATUS_OK
ReadX 12200 126976 4096 4096 NT_STATUS_OK
ReadX 12200 131072 61440 61440 NT_STATUS_OK
ReadX 12200 192512 4096 4096 NT_STATUS_OK
ReadX 12200 196608 61440 61440 NT_STATUS_OK
ReadX 12200 258048 4096 4096 NT_STATUS_OK
ReadX 12200 262144 61440 61440 NT_STATUS_OK
ReadX 12200 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12201 NT_STATUS_OK
ReadX 12201 0 61440 61440 NT_STATUS_OK
ReadX 12201 61440 4096 4096 NT_STATUS_OK
ReadX 12201 65536 61440 61440 NT_STATUS_OK
ReadX 12201 126976 4096 4096 NT_STATUS_OK
ReadX 12201 131072 61440 61440 NT_STATUS_OK
ReadX 12201 192512 4096 4096 NT_STATUS_OK
ReadX 12201 196608 61440 61440 NT_STATUS_OK
ReadX 12201 258048 4096 4096 NT_STATUS_OK
ReadX 12201 262144 61440 61440 NT_STATUS_OK
ReadX 12201 323584 4096 4096 NT_STATUS_OK
ReadX 12201 327680 61440 61440 NT_STATUS_OK
ReadX 12201 389120 4096 4096 NT_STATUS_OK
ReadX 12201 393216 61440 61440 NT_STATUS_OK
ReadX 12201 454656 4096 4096 NT_STATUS_OK
ReadX 12201 458752 61440 61440 NT_STATUS_OK
ReadX 12201 520192 4096 4096 NT_STATUS_OK
ReadX 12201 524288 61440 61440 NT_STATUS_OK
ReadX 12201 585728 4096 4096 NT_STATUS_OK
ReadX 12201 589824 61440 61440 NT_STATUS_OK
ReadX 12201 651264 4096 4096 NT_STATUS_OK
ReadX 12201 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12202 NT_STATUS_OK
ReadX 12202 0 61440 61440 NT_STATUS_OK
ReadX 12202 61440 4096 4096 NT_STATUS_OK
ReadX 12202 65536 61440 61440 NT_STATUS_OK
ReadX 12202 126976 4096 4096 NT_STATUS_OK
ReadX 12202 131072 61440 61440 NT_STATUS_OK
ReadX 12202 192512 4096 4096 NT_STATUS_OK
ReadX 12202 196608 61440 61440 NT_STATUS_OK
ReadX 12202 258048 4096 4096 NT_STATUS_OK
ReadX 12202 262144 61440 61440 NT_STATUS_OK
ReadX 12202 323584 4096 4096 NT_STATUS_OK
ReadX 12202 327680 61440 61440 NT_STATUS_OK
ReadX 12202 389120 4096 4096 NT_STATUS_OK
ReadX 12202 393216 61440 61440 NT_STATUS_OK
ReadX 12202 454656 4096 4096 NT_STATUS_OK
ReadX 12202 458752 61440 61440 NT_STATUS_OK
ReadX 12202 520192 4096 4096 NT_STATUS_OK
ReadX 12202 524288 61440 61440 NT_STATUS_OK
ReadX 12202 585728 4096 4096 NT_STATUS_OK
ReadX 12202 589824 61440 61440 NT_STATUS_OK
ReadX 12202 651264 4096 4096 NT_STATUS_OK
ReadX 12202 655360 61440 61440 NT_STATUS_OK
ReadX 12202 716800 4096 4096 NT_STATUS_OK
ReadX 12202 720896 61440 61440 NT_STATUS_OK
ReadX 12202 782336 4096 4096 NT_STATUS_OK
ReadX 12202 786432 61440 61440 NT_STATUS_OK
ReadX 12202 847872 4096 4096 NT_STATUS_OK
ReadX 12202 851968 61440 61440 NT_STATUS_OK
ReadX 12202 913408 4096 4096 NT_STATUS_OK
ReadX 12202 917504 61440 61440 NT_STATUS_OK
ReadX 12202 978944 4096 4096 NT_STATUS_OK
ReadX 12202 983040 61440 61440 NT_STATUS_OK
ReadX 12202 1044480 4096 4096 NT_STATUS_OK
ReadX 12202 1048576 61440 61440 NT_STATUS_OK
ReadX 12202 1110016 4096 4096 NT_STATUS_OK
ReadX 12202 1114112 61440 61440 NT_STATUS_OK
ReadX 12202 1175552 4096 4096 NT_STATUS_OK
ReadX 12202 1179648 61440 61440 NT_STATUS_OK
ReadX 12202 1241088 4096 4096 NT_STATUS_OK
ReadX 12202 1245184 61440 61440 NT_STATUS_OK
ReadX 12202 1306624 4096 4096 NT_STATUS_OK
ReadX 12202 1310720 61440 61440 NT_STATUS_OK
ReadX 12202 1372160 4096 4096 NT_STATUS_OK
ReadX 12202 1376256 61440 61440 NT_STATUS_OK
ReadX 12202 1437696 4096 4096 NT_STATUS_OK
ReadX 12202 1441792 61440 61440 NT_STATUS_OK
ReadX 12202 1503232 4096 4096 NT_STATUS_OK
ReadX 12202 1507328 61440 61440 NT_STATUS_OK
ReadX 12202 1568768 4096 4096 NT_STATUS_OK
ReadX 12202 1572864 61440 61440 NT_STATUS_OK
ReadX 12202 1634304 4096 4096 NT_STATUS_OK
ReadX 12202 1638400 61440 61440 NT_STATUS_OK
ReadX 12202 1699840 4096 4096 NT_STATUS_OK
ReadX 12202 1703936 61440 61440 NT_STATUS_OK
ReadX 12202 1765376 4096 4096 NT_STATUS_OK
ReadX 12202 1769472 61440 61440 NT_STATUS_OK
ReadX 12202 1830912 4096 4096 NT_STATUS_OK
ReadX 12202 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12203 NT_STATUS_OK
Close 12203 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12200 NT_STATUS_OK
Close 12201 NT_STATUS_OK
Close 12202 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12205 NT_STATUS_OK
ReadX 12205 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12206 NT_STATUS_OK
ReadX 12206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12207 NT_STATUS_OK
ReadX 12207 0 4096 4096 NT_STATUS_OK
ReadX 12207 4096 4096 4096 NT_STATUS_OK
ReadX 12207 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12208 NT_STATUS_OK
Close 12208 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12205 NT_STATUS_OK
Close 12206 NT_STATUS_OK
Close 12207 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12210 NT_STATUS_OK
ReadX 12210 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12211 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12211 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12212 NT_STATUS_OK
Close 12212 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12210 NT_STATUS_OK
Close 12211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12214 NT_STATUS_OK
ReadX 12214 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12215 NT_STATUS_OK
ReadX 12215 0 8192 8192 NT_STATUS_OK
ReadX 12215 8192 8192 8192 NT_STATUS_OK
ReadX 12215 16384 8192 8192 NT_STATUS_OK
ReadX 12215 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12217 NT_STATUS_OK
Close 12217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12215 NT_STATUS_OK
Close 12214 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12220 NT_STATUS_OK
WriteX 12220 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12220 258 NT_STATUS_OK
WriteX 12220 0 10438 10438 NT_STATUS_OK
Close 12220 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12221 NT_STATUS_OK
Close 12221 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12222 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12223 NT_STATUS_OK
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12224 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12225 NT_STATUS_OK
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12226 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12228 NT_STATUS_OK
Close 12228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12229 NT_STATUS_OK
ReadX 12229 0 4096 4096 NT_STATUS_OK
ReadX 12229 4096 4096 4096 NT_STATUS_OK
ReadX 12229 8192 4096 4096 NT_STATUS_OK
ReadX 12229 12288 8192 8192 NT_STATUS_OK
ReadX 12229 20480 8192 8192 NT_STATUS_OK
ReadX 12229 28672 8192 8192 NT_STATUS_OK
ReadX 12229 36864 8192 8192 NT_STATUS_OK
ReadX 12229 45056 8192 8192 NT_STATUS_OK
ReadX 12229 53248 8192 8192 NT_STATUS_OK
ReadX 12229 61440 8192 8192 NT_STATUS_OK
ReadX 12229 69632 8192 8192 NT_STATUS_OK
ReadX 12229 77824 8192 8192 NT_STATUS_OK
ReadX 12229 86016 8192 8192 NT_STATUS_OK
ReadX 12229 94208 8192 8192 NT_STATUS_OK
ReadX 12229 102400 8192 8192 NT_STATUS_OK
ReadX 12229 110592 8192 8192 NT_STATUS_OK
ReadX 12229 118784 8192 8192 NT_STATUS_OK
ReadX 12229 126976 8192 8192 NT_STATUS_OK
ReadX 12229 135168 8192 8192 NT_STATUS_OK
ReadX 12229 143360 8192 8192 NT_STATUS_OK
ReadX 12229 151552 8192 8192 NT_STATUS_OK
ReadX 12229 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12230 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12229 NT_STATUS_OK
Close 12222 NT_STATUS_OK
Close 12224 NT_STATUS_OK
Close 12226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12231 NT_STATUS_OK
Close 12231 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12234 NT_STATUS_OK
WriteX 12234 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12234 258 NT_STATUS_OK
WriteX 12234 0 28489 28489 NT_STATUS_OK
Close 12234 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12235 NT_STATUS_OK
Close 12235 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12237 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12237 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12238 NT_STATUS_OK
Close 12238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12240 NT_STATUS_OK
ReadX 12240 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12241 NT_STATUS_OK
ReadX 12241 0 8192 8192 NT_STATUS_OK
ReadX 12241 8192 8192 8192 NT_STATUS_OK
ReadX 12241 16384 8192 8192 NT_STATUS_OK
ReadX 12241 24576 8192 8192 NT_STATUS_OK
ReadX 12241 32768 16384 16384 NT_STATUS_OK
ReadX 12241 49152 8192 8192 NT_STATUS_OK
ReadX 12241 57344 8192 8192 NT_STATUS_OK
ReadX 12241 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12243 NT_STATUS_OK
Close 12243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12241 NT_STATUS_OK
Close 12240 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12246 NT_STATUS_OK
WriteX 12246 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12246 258 NT_STATUS_OK
WriteX 12246 0 29253 29253 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12250 NT_STATUS_OK
Close 12250 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12253 NT_STATUS_OK
WriteX 12253 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12253 258 NT_STATUS_OK
WriteX 12253 0 30183 30183 NT_STATUS_OK
Close 12253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12254 NT_STATUS_OK
Close 12254 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12256 NT_STATUS_OK
WriteX 12256 0 510 510 NT_STATUS_OK
WriteX 12256 510 512 512 NT_STATUS_OK
WriteX 12256 1022 510 510 NT_STATUS_OK
WriteX 12256 1532 510 510 NT_STATUS_OK
WriteX 12256 2042 168 168 NT_STATUS_OK
Close 12256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12257 NT_STATUS_OK
Close 12257 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12259 NT_STATUS_OK
ReadX 12259 0 4096 4096 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12260 NT_STATUS_OK
ReadX 12260 61440 4096 4096 NT_STATUS_OK
ReadX 12260 126976 4096 4096 NT_STATUS_OK
WriteX 12260 0 65536 65536 NT_STATUS_OK
WriteX 12260 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 61440 4096 4096 NT_STATUS_OK
ReadX 12261 126976 4096 4096 NT_STATUS_OK
ReadX 12261 192512 4096 4096 NT_STATUS_OK
ReadX 12261 258048 4096 4096 NT_STATUS_OK
WriteX 12261 0 65536 65536 NT_STATUS_OK
WriteX 12261 65536 65536 65536 NT_STATUS_OK
WriteX 12261 131072 65536 65536 NT_STATUS_OK
WriteX 12261 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12262 NT_STATUS_OK
ReadX 12262 61440 4096 4096 NT_STATUS_OK
ReadX 12262 126976 4096 4096 NT_STATUS_OK
ReadX 12262 192512 4096 4096 NT_STATUS_OK
ReadX 12262 258048 4096 4096 NT_STATUS_OK
ReadX 12262 323584 4096 4096 NT_STATUS_OK
ReadX 12262 389120 4096 4096 NT_STATUS_OK
ReadX 12262 454656 4096 4096 NT_STATUS_OK
ReadX 12262 520192 4096 4096 NT_STATUS_OK
WriteX 12262 0 65536 65536 NT_STATUS_OK
WriteX 12262 65536 65536 65536 NT_STATUS_OK
WriteX 12262 131072 65536 65536 NT_STATUS_OK
WriteX 12262 196608 65536 65536 NT_STATUS_OK
WriteX 12262 262144 65536 65536 NT_STATUS_OK
WriteX 12262 327680 65536 65536 NT_STATUS_OK
WriteX 12262 393216 65536 65536 NT_STATUS_OK
WriteX 12262 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12263 NT_STATUS_OK
Close 12263 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12259 NT_STATUS_OK
Close 12260 NT_STATUS_OK
Close 12261 NT_STATUS_OK
Close 12262 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12269 NT_STATUS_OK
Close 12269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12272 NT_STATUS_OK
Close 12272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12274 NT_STATUS_OK
Close 12274 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12278 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12281 NT_STATUS_OK
Close 12281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12283 NT_STATUS_OK
Close 12283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12287 NT_STATUS_OK
Close 12287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12292 NT_STATUS_OK
Close 12292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12302 NT_STATUS_OK
Close 12302 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12307 NT_STATUS_OK
Close 12307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12312 NT_STATUS_OK
Close 12312 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12317 NT_STATUS_OK
Close 12317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12322 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12325 NT_STATUS_OK
Close 12325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12328 NT_STATUS_OK
Close 12328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12331 NT_STATUS_OK
WriteX 12331 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12331 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12331 0 65536 65536 NT_STATUS_OK
WriteX 12331 65536 65536 65536 NT_STATUS_OK
WriteX 12331 131072 65536 65536 NT_STATUS_OK
WriteX 12331 196608 65536 65536 NT_STATUS_OK
WriteX 12331 262144 26634 26634 NT_STATUS_OK
Close 12331 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12336 NT_STATUS_OK
Close 12336 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12337 NT_STATUS_OK
Close 12337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12338 NT_STATUS_OK
ReadX 12338 0 4096 4096 NT_STATUS_OK
Close 12338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12339 NT_STATUS_OK
ReadX 12339 0 4096 4096 NT_STATUS_OK
ReadX 12339 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12339 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12344 NT_STATUS_OK
Close 12344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12347 NT_STATUS_OK
Close 12347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12349 NT_STATUS_OK
Close 12349 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12356 NT_STATUS_OK
Close 12356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12358 NT_STATUS_OK
Close 12358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12362 NT_STATUS_OK
Close 12362 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12372 NT_STATUS_OK
Close 12372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12377 NT_STATUS_OK
Close 12377 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12382 NT_STATUS_OK
Close 12382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12387 NT_STATUS_OK
Close 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12391 NT_STATUS_OK
Close 12391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12396 NT_STATUS_OK
Close 12396 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12401 NT_STATUS_OK
Close 12401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12404 NT_STATUS_OK
Close 12404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12406 NT_STATUS_OK
Close 12406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12416 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12417 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
Close 12418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
Close 12419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12420 NT_STATUS_OK
ReadX 12420 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12431 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 4096 4096 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12433 NT_STATUS_OK
ReadX 12433 0 4096 4096 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12420 NT_STATUS_OK
Close 12434 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12463 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12463 0 4096 4096 NT_STATUS_OK
Close 12463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
ReadX 12465 4096 4096 4096 NT_STATUS_OK
ReadX 12465 8192 4096 4096 NT_STATUS_OK
ReadX 12465 12288 4096 4096 NT_STATUS_OK
ReadX 12465 16384 4096 4096 NT_STATUS_OK
ReadX 12465 20480 4096 4096 NT_STATUS_OK
ReadX 12465 24576 4096 4096 NT_STATUS_OK
ReadX 12465 28672 4096 4096 NT_STATUS_OK
ReadX 12465 32768 4096 4096 NT_STATUS_OK
ReadX 12465 36864 4096 4096 NT_STATUS_OK
ReadX 12465 40960 4096 4096 NT_STATUS_OK
ReadX 12465 45056 4096 4096 NT_STATUS_OK
ReadX 12465 49152 4096 4096 NT_STATUS_OK
ReadX 12465 53248 4096 4096 NT_STATUS_OK
ReadX 12465 57344 4096 4096 NT_STATUS_OK
ReadX 12465 61440 4096 4096 NT_STATUS_OK
ReadX 12465 65536 4096 4096 NT_STATUS_OK
ReadX 12465 69632 4096 4096 NT_STATUS_OK
ReadX 12465 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12465 1004 NT_STATUS_OK
WriteX 12465 0 4096 4096 NT_STATUS_OK
Close 12465 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12466 NT_STATUS_OK
SET_FILE_INFORMATION 12466 1004 NT_STATUS_OK
Close 12466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12468 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12471 NT_STATUS_OK
WriteX 12471 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12471 258 NT_STATUS_OK
WriteX 12471 0 65536 65536 NT_STATUS_OK
WriteX 12471 65536 19979 19979 NT_STATUS_OK
Close 12471 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
QUERY_FILE_INFORMATION 12472 1004 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
SET_FILE_INFORMATION 12472 1004 NT_STATUS_OK
WriteX 12472 0 4096 4096 NT_STATUS_OK
Flush 12472 NT_STATUS_OK
Close 12472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12473 NT_STATUS_OK
ReadX 12473 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 4096 4096 NT_STATUS_OK
Close 12473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
Close 12475 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
Close 12476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12477 1004 NT_STATUS_OK
WriteX 12477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12478 NT_STATUS_OK
Close 12478 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12480 NT_STATUS_OK
Close 12480 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12483 NT_STATUS_OK
WriteX 12483 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12483 258 NT_STATUS_OK
WriteX 12483 0 65536 65536 NT_STATUS_OK
WriteX 12483 65536 17654 17654 NT_STATUS_OK
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12484 NT_STATUS_OK
ReadX 12484 0 4096 4096 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
QUERY_FILE_INFORMATION 12484 1004 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
SET_FILE_INFORMATION 12484 1004 NT_STATUS_OK
WriteX 12484 0 4096 4096 NT_STATUS_OK
Flush 12484 NT_STATUS_OK
Close 12484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12485 NT_STATUS_OK
SET_FILE_INFORMATION 12485 1004 NT_STATUS_OK
Close 12485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12487 NT_STATUS_OK
Close 12487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 4096 4096 NT_STATUS_OK
ReadX 12489 4096 4096 4096 NT_STATUS_OK
ReadX 12489 8192 4096 4096 NT_STATUS_OK
ReadX 12489 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12489 16384 4096 4096 NT_STATUS_OK
ReadX 12489 20480 4096 4096 NT_STATUS_OK
ReadX 12489 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 4096 4096 NT_STATUS_OK
Close 12490 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 4096 4096 NT_STATUS_OK
Close 12491 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12492 NT_STATUS_OK
ReadX 12492 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12492 1004 NT_STATUS_OK
WriteX 12492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12493 NT_STATUS_OK
Close 12493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12492 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12495 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12498 NT_STATUS_OK
WriteX 12498 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12498 258 NT_STATUS_OK
WriteX 12498 0 65536 65536 NT_STATUS_OK
WriteX 12498 65536 19490 19490 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12499 NT_STATUS_OK
ReadX 12499 0 4096 4096 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
QUERY_FILE_INFORMATION 12499 1004 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
SET_FILE_INFORMATION 12499 1004 NT_STATUS_OK
WriteX 12499 0 4096 4096 NT_STATUS_OK
Flush 12499 NT_STATUS_OK
Close 12499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12500 NT_STATUS_OK
SET_FILE_INFORMATION 12500 1004 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12501 NT_STATUS_OK
ReadX 12501 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12502 NT_STATUS_OK
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12504 0 4096 4096 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 4096 4096 NT_STATUS_OK
ReadX 12506 4096 4096 4096 NT_STATUS_OK
ReadX 12506 8192 4096 4096 NT_STATUS_OK
ReadX 12506 12288 4096 4096 NT_STATUS_OK
ReadX 12506 16384 4096 4096 NT_STATUS_OK
ReadX 12506 20480 4096 4096 NT_STATUS_OK
ReadX 12506 24576 4096 4096 NT_STATUS_OK
ReadX 12506 28672 4096 4096 NT_STATUS_OK
ReadX 12506 32768 4096 4096 NT_STATUS_OK
ReadX 12506 36864 4096 4096 NT_STATUS_OK
ReadX 12506 40960 4096 4096 NT_STATUS_OK
ReadX 12506 45056 4096 4096 NT_STATUS_OK
ReadX 12506 49152 4096 4096 NT_STATUS_OK
ReadX 12506 53248 4096 4096 NT_STATUS_OK
ReadX 12506 57344 4096 4096 NT_STATUS_OK
ReadX 12506 61440 4096 4096 NT_STATUS_OK
ReadX 12506 65536 4096 4096 NT_STATUS_OK
ReadX 12506 69632 4096 4096 NT_STATUS_OK
ReadX 12506 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12506 1004 NT_STATUS_OK
WriteX 12506 0 4096 4096 NT_STATUS_OK
Close 12506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12507 NT_STATUS_OK
SET_FILE_INFORMATION 12507 1004 NT_STATUS_OK
Close 12507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12508 NT_STATUS_OK
ReadX 12508 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12509 NT_STATUS_OK
Close 12509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12501 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12512 NT_STATUS_OK
WriteX 12512 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12512 258 NT_STATUS_OK
WriteX 12512 0 65536 65536 NT_STATUS_OK
WriteX 12512 65536 8866 8866 NT_STATUS_OK
Close 12512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
SET_FILE_INFORMATION 12513 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
Flush 12513 NT_STATUS_OK
Close 12513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
Close 12515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
Close 12516 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12517 1004 NT_STATUS_OK
WriteX 12517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12518 NT_STATUS_OK
Close 12518 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12508 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12520 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12523 NT_STATUS_OK
WriteX 12523 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12523 258 NT_STATUS_OK
WriteX 12523 0 65536 65536 NT_STATUS_OK
WriteX 12523 65536 9298 9298 NT_STATUS_OK
Close 12523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
WriteX 12524 0 4096 4096 NT_STATUS_OK
Flush 12524 NT_STATUS_OK
SET_FILE_INFORMATION 12524 1004 NT_STATUS_OK
WriteX 12524 0 4096 4096 NT_STATUS_OK
Flush 12524 NT_STATUS_OK
Close 12524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12525 NT_STATUS_OK
SET_FILE_INFORMATION 12525 1004 NT_STATUS_OK
Close 12525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12527 NT_STATUS_OK
Close 12527 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12530 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12530 0 4096 4096 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12531 4096 4096 4096 NT_STATUS_OK
ReadX 12531 8192 4096 4096 NT_STATUS_OK
ReadX 12531 12288 4096 4096 NT_STATUS_OK
ReadX 12531 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12526 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 4096 4096 NT_STATUS_OK
Close 12532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12533 NT_STATUS_OK
ReadX 12533 0 4096 4096 NT_STATUS_OK
Close 12533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12534 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12534 1004 NT_STATUS_OK
WriteX 12534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12535 NT_STATUS_OK
Close 12535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12537 NT_STATUS_OK
Close 12537 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12540 NT_STATUS_OK
WriteX 12540 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12540 258 NT_STATUS_OK
WriteX 12540 0 65536 65536 NT_STATUS_OK
WriteX 12540 65536 11540 11540 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
SET_FILE_INFORMATION 12541 1004 NT_STATUS_OK
WriteX 12541 0 4096 4096 NT_STATUS_OK
Flush 12541 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12542 NT_STATUS_OK
SET_FILE_INFORMATION 12542 1004 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12544 NT_STATUS_OK
Close 12544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 61440 4096 4096 NT_STATUS_OK
ReadX 12546 126976 4096 4096 NT_STATUS_OK
WriteX 12546 0 65536 65536 NT_STATUS_OK
WriteX 12546 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 61440 4096 4096 NT_STATUS_OK
ReadX 12547 126976 4096 4096 NT_STATUS_OK
ReadX 12547 192512 4096 4096 NT_STATUS_OK
ReadX 12547 258048 4096 4096 NT_STATUS_OK
WriteX 12547 0 65536 65536 NT_STATUS_OK
WriteX 12547 65536 65536 65536 NT_STATUS_OK
WriteX 12547 131072 65536 65536 NT_STATUS_OK
WriteX 12547 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 61440 4096 4096 NT_STATUS_OK
ReadX 12548 126976 4096 4096 NT_STATUS_OK
ReadX 12548 192512 4096 4096 NT_STATUS_OK
ReadX 12548 258048 4096 4096 NT_STATUS_OK
ReadX 12548 323584 4096 4096 NT_STATUS_OK
ReadX 12548 389120 4096 4096 NT_STATUS_OK
ReadX 12548 454656 4096 4096 NT_STATUS_OK
ReadX 12548 520192 4096 4096 NT_STATUS_OK
WriteX 12548 0 65536 65536 NT_STATUS_OK
WriteX 12548 65536 65536 65536 NT_STATUS_OK
WriteX 12548 131072 65536 65536 NT_STATUS_OK
WriteX 12548 196608 65536 65536 NT_STATUS_OK
WriteX 12548 262144 65536 65536 NT_STATUS_OK
WriteX 12548 327680 65536 65536 NT_STATUS_OK
WriteX 12548 393216 65536 65536 NT_STATUS_OK
WriteX 12548 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
ReadX 12549 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12550 NT_STATUS_OK
WriteX 12550 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12550 258 NT_STATUS_OK
WriteX 12550 0 53 53 NT_STATUS_OK
Close 12550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12551 NT_STATUS_OK
Close 12551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12547 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12549 8192 4096 4096 NT_STATUS_OK
ReadX 12549 12288 4096 4096 NT_STATUS_OK
WriteX 12553 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12553 258 NT_STATUS_OK
ReadX 12549 16384 4096 4096 NT_STATUS_OK
ReadX 12549 20480 4096 4096 NT_STATUS_OK
WriteX 12553 0 15360 15360 NT_STATUS_OK
Close 12553 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12554 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12554 1004 NT_STATUS_OK
WriteX 12554 0 4096 4096 NT_STATUS_OK
Close 12554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12555 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12558 NT_STATUS_OK
Close 12558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12557 4096 4096 4096 NT_STATUS_OK
ReadX 12557 8192 4096 4096 NT_STATUS_OK
ReadX 12557 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
ReadX 12560 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12561 NT_STATUS_OK
ReadX 12561 0 4096 4096 NT_STATUS_OK
ReadX 12561 4096 4096 4096 NT_STATUS_OK
ReadX 12561 8192 4096 4096 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12561 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12562 NT_STATUS_OK
WriteX 12562 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12562 258 NT_STATUS_OK
WriteX 12562 0 15360 15360 NT_STATUS_OK
Close 12562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12563 NT_STATUS_OK
ReadX 12563 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12563 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12563 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12564 NT_STATUS_OK
Close 12564 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12566 NT_STATUS_OK
ReadX 12566 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12567 NT_STATUS_OK
SET_FILE_INFORMATION 12567 1004 NT_STATUS_OK
Close 12567 NT_STATUS_OK
WriteX 12563 0 4096 4096 NT_STATUS_OK
Close 12563 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12568 NT_STATUS_OK
Close 12568 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12570 NT_STATUS_OK
ReadX 12570 0 4096 4096 NT_STATUS_OK
ReadX 12570 4096 4096 4096 NT_STATUS_OK
ReadX 12570 8192 4096 4096 NT_STATUS_OK
ReadX 12570 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12570 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12570 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12572 NT_STATUS_OK
WriteX 12572 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12572 258 NT_STATUS_OK
WriteX 12572 0 53 53 NT_STATUS_OK
Close 12572 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12570 0 19054 19054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12573 NT_STATUS_OK
Close 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12571 4096 4096 4096 NT_STATUS_OK
ReadX 12571 8192 4096 4096 NT_STATUS_OK
ReadX 12571 12288 4096 4096 NT_STATUS_OK
WriteX 12575 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12575 258 NT_STATUS_OK
WriteX 12575 0 12006 12006 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12576 NT_STATUS_OK
ReadX 12576 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12576 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12576 1004 NT_STATUS_OK
WriteX 12576 0 4096 4096 NT_STATUS_OK
Close 12576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12580 NT_STATUS_OK
Close 12580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12579 4096 4096 4096 NT_STATUS_OK
ReadX 12579 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12582 NT_STATUS_OK
WriteX 12582 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12582 258 NT_STATUS_OK
WriteX 12582 0 11991 11991 NT_STATUS_OK
Close 12582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12583 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12583 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12584 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12587 NT_STATUS_OK
SET_FILE_INFORMATION 12587 1004 NT_STATUS_OK
Close 12587 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
Close 12583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12588 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12591 NT_STATUS_OK
Close 12591 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12590 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
ReadX 12590 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
WriteX 12590 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12590 1004 NT_STATUS_OK
Close 12566 NT_STATUS_OK
WriteX 12590 0 12288 12288 NT_STATUS_OK
Close 12586 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12593 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12570 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12595 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12597 NT_STATUS_OK
ReadX 12597 0 61440 61440 NT_STATUS_OK
ReadX 12597 61440 4096 4096 NT_STATUS_OK
ReadX 12597 65536 61440 61440 NT_STATUS_OK
ReadX 12597 126976 4096 4096 NT_STATUS_OK
ReadX 12597 131072 61440 61440 NT_STATUS_OK
ReadX 12597 192512 4096 4096 NT_STATUS_OK
ReadX 12597 196608 61440 61440 NT_STATUS_OK
ReadX 12597 258048 4096 4096 NT_STATUS_OK
ReadX 12597 262144 61440 61440 NT_STATUS_OK
ReadX 12597 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 61440 61440 NT_STATUS_OK
ReadX 12598 61440 4096 4096 NT_STATUS_OK
ReadX 12598 65536 61440 61440 NT_STATUS_OK
ReadX 12598 126976 4096 4096 NT_STATUS_OK
ReadX 12598 131072 61440 61440 NT_STATUS_OK
ReadX 12598 192512 4096 4096 NT_STATUS_OK
ReadX 12598 196608 61440 61440 NT_STATUS_OK
ReadX 12598 258048 4096 4096 NT_STATUS_OK
ReadX 12598 262144 61440 61440 NT_STATUS_OK
ReadX 12598 323584 4096 4096 NT_STATUS_OK
ReadX 12598 327680 61440 61440 NT_STATUS_OK
ReadX 12598 389120 4096 4096 NT_STATUS_OK
ReadX 12598 393216 61440 61440 NT_STATUS_OK
ReadX 12598 454656 4096 4096 NT_STATUS_OK
ReadX 12598 458752 61440 61440 NT_STATUS_OK
ReadX 12598 520192 4096 4096 NT_STATUS_OK
ReadX 12598 524288 61440 61440 NT_STATUS_OK
ReadX 12598 585728 4096 4096 NT_STATUS_OK
ReadX 12598 589824 61440 61440 NT_STATUS_OK
ReadX 12598 651264 4096 4096 NT_STATUS_OK
ReadX 12598 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 61440 61440 NT_STATUS_OK
ReadX 12599 61440 4096 4096 NT_STATUS_OK
ReadX 12599 65536 61440 61440 NT_STATUS_OK
ReadX 12599 126976 4096 4096 NT_STATUS_OK
ReadX 12599 131072 61440 61440 NT_STATUS_OK
ReadX 12599 192512 4096 4096 NT_STATUS_OK
ReadX 12599 196608 61440 61440 NT_STATUS_OK
ReadX 12599 258048 4096 4096 NT_STATUS_OK
ReadX 12599 262144 61440 61440 NT_STATUS_OK
ReadX 12599 323584 4096 4096 NT_STATUS_OK
ReadX 12599 327680 61440 61440 NT_STATUS_OK
ReadX 12599 389120 4096 4096 NT_STATUS_OK
ReadX 12599 393216 61440 61440 NT_STATUS_OK
ReadX 12599 454656 4096 4096 NT_STATUS_OK
ReadX 12599 458752 61440 61440 NT_STATUS_OK
ReadX 12599 520192 4096 4096 NT_STATUS_OK
ReadX 12599 524288 61440 61440 NT_STATUS_OK
ReadX 12599 585728 4096 4096 NT_STATUS_OK
ReadX 12599 589824 61440 61440 NT_STATUS_OK
ReadX 12599 651264 4096 4096 NT_STATUS_OK
ReadX 12599 655360 61440 61440 NT_STATUS_OK
ReadX 12599 716800 4096 4096 NT_STATUS_OK
ReadX 12599 720896 61440 61440 NT_STATUS_OK
ReadX 12599 782336 4096 4096 NT_STATUS_OK
ReadX 12599 786432 61440 61440 NT_STATUS_OK
ReadX 12599 847872 4096 4096 NT_STATUS_OK
ReadX 12599 851968 61440 61440 NT_STATUS_OK
ReadX 12599 913408 4096 4096 NT_STATUS_OK
ReadX 12599 917504 61440 61440 NT_STATUS_OK
ReadX 12599 978944 4096 4096 NT_STATUS_OK
ReadX 12599 983040 61440 61440 NT_STATUS_OK
ReadX 12599 1044480 4096 4096 NT_STATUS_OK
ReadX 12599 1048576 61440 61440 NT_STATUS_OK
ReadX 12599 1110016 4096 4096 NT_STATUS_OK
ReadX 12599 1114112 61440 61440 NT_STATUS_OK
ReadX 12599 1175552 4096 4096 NT_STATUS_OK
ReadX 12599 1179648 61440 61440 NT_STATUS_OK
ReadX 12599 1241088 4096 4096 NT_STATUS_OK
ReadX 12599 1245184 61440 61440 NT_STATUS_OK
ReadX 12599 1306624 4096 4096 NT_STATUS_OK
ReadX 12599 1310720 61440 61440 NT_STATUS_OK
ReadX 12599 1372160 4096 4096 NT_STATUS_OK
ReadX 12599 1376256 61440 61440 NT_STATUS_OK
ReadX 12599 1437696 4096 4096 NT_STATUS_OK
ReadX 12599 1441792 61440 61440 NT_STATUS_OK
ReadX 12599 1503232 4096 4096 NT_STATUS_OK
ReadX 12599 1507328 61440 61440 NT_STATUS_OK
ReadX 12599 1568768 4096 4096 NT_STATUS_OK
ReadX 12599 1572864 61440 61440 NT_STATUS_OK
ReadX 12599 1634304 4096 4096 NT_STATUS_OK
ReadX 12599 1638400 61440 61440 NT_STATUS_OK
ReadX 12599 1699840 4096 4096 NT_STATUS_OK
ReadX 12599 1703936 61440 61440 NT_STATUS_OK
ReadX 12599 1765376 4096 4096 NT_STATUS_OK
ReadX 12599 1769472 61440 61440 NT_STATUS_OK
ReadX 12599 1830912 4096 4096 NT_STATUS_OK
ReadX 12599 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12600 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12601 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12603 NT_STATUS_OK
ReadX 12603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12604 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12605 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12606 NT_STATUS_OK
QUERY_FILE_INFORMATION 12606 1004 NT_STATUS_OK
WriteX 12606 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12606 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12607 NT_STATUS_OK
Close 12607 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12608 NT_STATUS_OK
WriteX 12608 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12608 258 NT_STATUS_OK
WriteX 12608 0 491 491 NT_STATUS_OK
Close 12608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12609 NT_STATUS_OK
ReadX 12609 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12606 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12611 NT_STATUS_OK
Close 12611 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12612 NT_STATUS_OK
WriteX 12612 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12612 258 NT_STATUS_OK
WriteX 12612 0 543 543 NT_STATUS_OK
Close 12612 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12613 NT_STATUS_OK
ReadX 12613 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12597 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12613 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Close 12603 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12616 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12625 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12625 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12626 NT_STATUS_OK
QUERY_FILE_INFORMATION 12626 1004 NT_STATUS_OK
WriteX 12626 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12626 258 NT_STATUS_OK
WriteX 12626 0 2048 2048 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12627 NT_STATUS_OK
ReadX 12627 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12627 0 4096 4096 NT_STATUS_OK
Flush 12627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12627 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12631 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12631 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12632 NT_STATUS_OK
WriteX 12632 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12632 258 NT_STATUS_OK
WriteX 12632 0 2048 2048 NT_STATUS_OK
Close 12632 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12633 NT_STATUS_OK
ReadX 12633 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12637 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12638 NT_STATUS_OK
WriteX 12638 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12638 258 NT_STATUS_OK
WriteX 12638 0 2048 2048 NT_STATUS_OK
Close 12638 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12639 NT_STATUS_OK
ReadX 12639 0 2048 2048 NT_STATUS_OK
ReadX 12617 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12633 0 4096 4096 NT_STATUS_OK
WriteX 12617 0 8192 8192 NT_STATUS_OK
WriteX 12618 0 4096 4096 NT_STATUS_OK
WriteX 12619 0 4096 4096 NT_STATUS_OK
ReadX 12633 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12642 NT_STATUS_OK
ReadX 12642 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12642 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12633 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12646 NT_STATUS_OK
ReadX 12646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12651 NT_STATUS_OK
ReadX 12651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12652 NT_STATUS_OK
ReadX 12652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12654 NT_STATUS_OK
ReadX 12654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12655 NT_STATUS_OK
ReadX 12655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12658 NT_STATUS_OK
ReadX 12658 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12663 NT_STATUS_OK
QUERY_FILE_INFORMATION 12663 1004 NT_STATUS_OK
WriteX 12663 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12663 258 NT_STATUS_OK
WriteX 12663 0 2048 2048 NT_STATUS_OK
Close 12663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12666 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12671 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 1004 NT_STATUS_OK
WriteX 12671 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12671 258 NT_STATUS_OK
WriteX 12671 0 2048 2048 NT_STATUS_OK
Close 12671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12672 NT_STATUS_OK
ReadX 12672 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12664 0 4096 4096 NT_STATUS_OK
Flush 12664 NT_STATUS_OK
WriteX 12672 0 4096 4096 NT_STATUS_OK
Flush 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12664 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12672 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12666 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12673 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12674 NT_STATUS_OK
WriteX 12674 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12674 258 NT_STATUS_OK
WriteX 12674 0 4096 4096 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12676 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12677 NT_STATUS_OK
WriteX 12677 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12677 258 NT_STATUS_OK
WriteX 12677 0 4096 4096 NT_STATUS_OK
Close 12677 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12678 0 4096 4096 NT_STATUS_OK
Close 12675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12652 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12657 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Close 12646 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12650 NT_STATUS_OK
Close 12651 NT_STATUS_OK
Close 12648 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12681 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12683 NT_STATUS_OK
ReadX 12683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12684 NT_STATUS_OK
Close 12684 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12685 NT_STATUS_OK
WriteX 12685 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12685 258 NT_STATUS_OK
WriteX 12685 0 2048 2048 NT_STATUS_OK
Close 12685 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12687 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12691 NT_STATUS_OK
ReadX 12691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12694 NT_STATUS_OK
ReadX 12694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12695 NT_STATUS_OK
ReadX 12695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12696 NT_STATUS_OK
ReadX 12696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12697 NT_STATUS_OK
ReadX 12697 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12698 NT_STATUS_OK
ReadX 12698 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12699 NT_STATUS_OK
ReadX 12699 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12700 NT_STATUS_OK
QUERY_FILE_INFORMATION 12700 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12683 NT_STATUS_OK
Close 12686 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Close 12694 NT_STATUS_OK
Close 12695 NT_STATUS_OK
Close 12696 NT_STATUS_OK
Close 12697 NT_STATUS_OK
Close 12699 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Close 12688 NT_STATUS_OK
Close 12691 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12702 NT_STATUS_OK
QUERY_FILE_INFORMATION 12702 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12706 NT_STATUS_OK
ReadX 12706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12707 NT_STATUS_OK
ReadX 12707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12708 NT_STATUS_OK
ReadX 12708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12709 NT_STATUS_OK
ReadX 12709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12711 NT_STATUS_OK
ReadX 12711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12713 NT_STATUS_OK
ReadX 12713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12714 NT_STATUS_OK
ReadX 12714 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12715 NT_STATUS_OK
ReadX 12715 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12716 NT_STATUS_OK
ReadX 12716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12717 NT_STATUS_OK
ReadX 12717 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12721 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12722 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 1004 NT_STATUS_OK
WriteX 12722 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12722 258 NT_STATUS_OK
WriteX 12722 0 2048 2048 NT_STATUS_OK
Close 12722 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12724 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12725 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12726 NT_STATUS_OK
ReadX 12726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12727 NT_STATUS_OK
ReadX 12727 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12734 NT_STATUS_OK
QUERY_FILE_INFORMATION 12734 1004 NT_STATUS_OK
WriteX 12734 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12734 258 NT_STATUS_OK
WriteX 12734 0 2048 2048 NT_STATUS_OK
Close 12734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12735 NT_STATUS_OK
ReadX 12735 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12736 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12736 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12737 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12737 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12742 NT_STATUS_OK
QUERY_FILE_INFORMATION 12742 1004 NT_STATUS_OK
WriteX 12742 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12742 258 NT_STATUS_OK
WriteX 12742 0 2048 2048 NT_STATUS_OK
Close 12742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12743 NT_STATUS_OK
ReadX 12743 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
Flush 12723 NT_STATUS_OK
WriteX 12735 0 4096 4096 NT_STATUS_OK
Flush 12735 NT_STATUS_OK
WriteX 12743 0 4096 4096 NT_STATUS_OK
Flush 12743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12723 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12735 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12743 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12725 4096 16384 16384 NT_STATUS_OK
ReadX 12705 4096 16384 16384 NT_STATUS_OK
ReadX 12737 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12744 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12745 NT_STATUS_OK
ReadX 12745 0 2048 2048 NT_STATUS_OK
WriteX 12745 0 19584 19584 NT_STATUS_OK
WriteX 12745 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12723 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12746 NT_STATUS_OK
QUERY_FILE_INFORMATION 12746 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12746 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12717 NT_STATUS_OK
Close 12709 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Close 12726 NT_STATUS_OK
Close 12727 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12716 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Close 12711 NT_STATUS_OK
Close 12714 NT_STATUS_OK
Close 12715 NT_STATUS_OK
Close 12712 NT_STATUS_OK
Close 12713 NT_STATUS_OK
Close 12705 NT_STATUS_OK
Close 12706 NT_STATUS_OK
Close 12707 NT_STATUS_OK
Close 12708 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12748 NT_STATUS_OK
QUERY_FILE_INFORMATION 12748 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12748 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12743 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12750 NT_STATUS_OK
QUERY_FILE_INFORMATION 12750 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12750 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12752 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12753 NT_STATUS_OK
ReadX 12753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12754 NT_STATUS_OK
ReadX 12754 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12755 NT_STATUS_OK
ReadX 12755 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12756 NT_STATUS_OK
ReadX 12756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12757 NT_STATUS_OK
ReadX 12757 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12753 4096 16384 16384 NT_STATUS_OK
WriteX 12753 0 4096 4096 NT_STATUS_OK
WriteX 12754 0 4096 4096 NT_STATUS_OK
WriteX 12755 0 4096 4096 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12758 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12759 NT_STATUS_OK
ReadX 12759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12760 NT_STATUS_OK
ReadX 12760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12761 NT_STATUS_OK
ReadX 12761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12762 NT_STATUS_OK
ReadX 12762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12765 NT_STATUS_OK
ReadX 12765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12766 NT_STATUS_OK
ReadX 12766 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12767 NT_STATUS_OK
ReadX 12767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12768 NT_STATUS_OK
ReadX 12768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12772 NT_STATUS_OK
ReadX 12772 0 8192 8192 NT_STATUS_OK
ReadX 12759 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12773 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12773 0 4096 4096 NT_STATUS_OK
ReadX 12773 4096 4096 4096 NT_STATUS_OK
ReadX 12773 8192 4096 4096 NT_STATUS_OK
WriteX 12759 0 4096 4096 NT_STATUS_OK
WriteX 12760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12774 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12774 0 4096 4096 NT_STATUS_OK
ReadX 12774 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12753 0 4096 4096 NT_STATUS_OK
WriteX 12754 0 4096 4096 NT_STATUS_OK
WriteX 12755 0 4096 4096 NT_STATUS_OK
WriteX 12756 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12779 NT_STATUS_OK
QUERY_FILE_INFORMATION 12779 1004 NT_STATUS_OK
WriteX 12779 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12779 258 NT_STATUS_OK
WriteX 12779 0 2048 2048 NT_STATUS_OK
Close 12779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12780 NT_STATUS_OK
ReadX 12780 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12781 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12781 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 4096 4096 NT_STATUS_OK
ReadX 12782 4096 4096 4096 NT_STATUS_OK
WriteX 12782 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12780 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12783 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12784 NT_STATUS_OK
ReadX 12784 0 4096 4096 NT_STATUS_OK
ReadX 12784 4096 4096 4096 NT_STATUS_OK
WriteX 12784 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12780 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12785 NT_STATUS_OK
QUERY_FILE_INFORMATION 12785 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12772 NT_STATUS_OK
Close 12757 NT_STATUS_OK
Close 12753 NT_STATUS_OK
Close 12754 NT_STATUS_OK
Close 12755 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Close 12765 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12766 NT_STATUS_OK
Close 12767 NT_STATUS_OK
Close 12768 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Close 12762 NT_STATUS_OK
Close 12784 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Close 12774 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12787 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12787 0 4096 4096 NT_STATUS_OK
ReadX 12787 4096 4096 4096 NT_STATUS_OK
ReadX 12787 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12788 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12788 0 4096 4096 NT_STATUS_OK
Close 12787 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12789 NT_STATUS_OK
ReadX 12789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12790 NT_STATUS_OK
ReadX 12790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12791 NT_STATUS_OK
ReadX 12791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12792 NT_STATUS_OK
ReadX 12792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12793 NT_STATUS_OK
ReadX 12793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12794 NT_STATUS_OK
ReadX 12794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12795 NT_STATUS_OK
ReadX 12795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12796 NT_STATUS_OK
ReadX 12796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12797 NT_STATUS_OK
ReadX 12797 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12798 NT_STATUS_OK
ReadX 12798 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12799 NT_STATUS_OK
ReadX 12799 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12800 NT_STATUS_OK
ReadX 12800 0 4096 4096 NT_STATUS_OK
ReadX 12788 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12804 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12805 NT_STATUS_OK
QUERY_FILE_INFORMATION 12805 1004 NT_STATUS_OK
WriteX 12805 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12805 258 NT_STATUS_OK
WriteX 12805 0 2048 2048 NT_STATUS_OK
Close 12805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12806 NT_STATUS_OK
ReadX 12806 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12806 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12810 NT_STATUS_OK
Close 12810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12811 NT_STATUS_OK
QUERY_FILE_INFORMATION 12811 1004 NT_STATUS_OK
WriteX 12811 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12811 258 NT_STATUS_OK
WriteX 12811 0 2048 2048 NT_STATUS_OK
Close 12811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12812 NT_STATUS_OK
ReadX 12812 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12812 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12795 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12813 NT_STATUS_OK
QUERY_FILE_INFORMATION 12813 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Close 12794 NT_STATUS_OK
Close 12800 NT_STATUS_OK
Close 12788 NT_STATUS_OK
Close 12789 NT_STATUS_OK
Close 12792 NT_STATUS_OK
Close 12793 NT_STATUS_OK
Close 12790 NT_STATUS_OK
Close 12791 NT_STATUS_OK
Close 12795 NT_STATUS_OK
Close 12796 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12798 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12815 NT_STATUS_OK
QUERY_FILE_INFORMATION 12815 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 61440 4096 4096 NT_STATUS_OK
ReadX 12817 126976 4096 4096 NT_STATUS_OK
WriteX 12817 0 65536 65536 NT_STATUS_OK
WriteX 12817 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12818 NT_STATUS_OK
ReadX 12818 61440 4096 4096 NT_STATUS_OK
ReadX 12818 126976 4096 4096 NT_STATUS_OK
ReadX 12818 192512 4096 4096 NT_STATUS_OK
ReadX 12818 258048 4096 4096 NT_STATUS_OK
WriteX 12818 0 65536 65536 NT_STATUS_OK
WriteX 12818 65536 65536 65536 NT_STATUS_OK
WriteX 12818 131072 65536 65536 NT_STATUS_OK
WriteX 12818 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12819 NT_STATUS_OK
ReadX 12819 61440 4096 4096 NT_STATUS_OK
ReadX 12819 126976 4096 4096 NT_STATUS_OK
ReadX 12819 192512 4096 4096 NT_STATUS_OK
ReadX 12819 258048 4096 4096 NT_STATUS_OK
ReadX 12819 323584 4096 4096 NT_STATUS_OK
ReadX 12819 389120 4096 4096 NT_STATUS_OK
ReadX 12819 454656 4096 4096 NT_STATUS_OK
ReadX 12819 520192 4096 4096 NT_STATUS_OK
WriteX 12819 0 65536 65536 NT_STATUS_OK
WriteX 12819 65536 65536 65536 NT_STATUS_OK
WriteX 12819 131072 65536 65536 NT_STATUS_OK
WriteX 12819 196608 65536 65536 NT_STATUS_OK
WriteX 12819 262144 65536 65536 NT_STATUS_OK
WriteX 12819 327680 65536 65536 NT_STATUS_OK
WriteX 12819 393216 65536 65536 NT_STATUS_OK
WriteX 12819 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12820 NT_STATUS_OK
ReadX 12820 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12820 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12820 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12820 8192 4096 4096 NT_STATUS_OK
ReadX 12820 12288 4096 4096 NT_STATUS_OK
ReadX 12820 16384 4096 4096 NT_STATUS_OK
ReadX 12820 20480 4096 4096 NT_STATUS_OK
ReadX 12820 24576 4096 4096 NT_STATUS_OK
ReadX 12820 28672 4096 4096 NT_STATUS_OK
ReadX 12820 32768 4096 4096 NT_STATUS_OK
ReadX 12820 36864 4096 4096 NT_STATUS_OK
ReadX 12820 40960 4096 4096 NT_STATUS_OK
ReadX 12820 45056 4096 4096 NT_STATUS_OK
ReadX 12820 49152 4096 4096 NT_STATUS_OK
ReadX 12820 53248 4096 4096 NT_STATUS_OK
ReadX 12820 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12820 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12821 NT_STATUS_OK
Close 12821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12817 NT_STATUS_OK
Close 12818 NT_STATUS_OK
Close 12819 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12823 NT_STATUS_OK
WriteX 12823 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12823 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12823 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12823 1004 NT_STATUS_OK
WriteX 12823 0 57088 57088 NT_STATUS_OK
WriteX 12823 0 4096 4096 NT_STATUS_OK
Flush 12823 NT_STATUS_OK
Close 12820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12824 NT_STATUS_OK
SET_FILE_INFORMATION 12824 1004 NT_STATUS_OK
Close 12824 NT_STATUS_OK
SET_FILE_INFORMATION 12823 1004 NT_STATUS_OK
WriteX 12823 0 4096 4096 NT_STATUS_OK
Close 12823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12825 NT_STATUS_OK
Close 12825 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12827 NT_STATUS_OK
ReadX 12827 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12827 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12828 NT_STATUS_OK
WriteX 12828 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12828 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12828 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12828 1004 NT_STATUS_OK
WriteX 12828 0 51456 51456 NT_STATUS_OK
WriteX 12828 0 4096 4096 NT_STATUS_OK
Flush 12828 NT_STATUS_OK
SET_FILE_INFORMATION 12828 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12828 1004 NT_STATUS_OK
WriteX 12828 0 4096 4096 NT_STATUS_OK
Close 12828 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12830 NT_STATUS_OK
Close 12830 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12832 NT_STATUS_OK
ReadX 12832 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12832 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12834 NT_STATUS_OK
Close 12834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12837 NT_STATUS_OK
WriteX 12837 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12837 258 NT_STATUS_OK
WriteX 12837 0 53077 53077 NT_STATUS_OK
Close 12837 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12838 NT_STATUS_OK
WriteX 12838 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12838 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12838 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12838 1004 NT_STATUS_OK
WriteX 12838 0 65536 65536 NT_STATUS_OK
WriteX 12838 65536 1856 1856 NT_STATUS_OK
WriteX 12838 0 4096 4096 NT_STATUS_OK
Flush 12838 NT_STATUS_OK
SET_FILE_INFORMATION 12838 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12838 1004 NT_STATUS_OK
WriteX 12838 0 4096 4096 NT_STATUS_OK
Close 12838 NT_STATUS_OK
Close 12832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12842 NT_STATUS_OK
ReadX 12842 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12844 NT_STATUS_OK
Close 12844 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12847 NT_STATUS_OK
WriteX 12847 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12847 258 NT_STATUS_OK
WriteX 12847 0 7983 7983 NT_STATUS_OK
Close 12847 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12849 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12852 NT_STATUS_OK
WriteX 12852 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12852 258 NT_STATUS_OK
WriteX 12852 0 65536 65536 NT_STATUS_OK
WriteX 12852 65536 65536 65536 NT_STATUS_OK
WriteX 12852 131072 65536 65536 NT_STATUS_OK
WriteX 12852 196608 65536 65536 NT_STATUS_OK
WriteX 12852 262144 65536 65536 NT_STATUS_OK
WriteX 12852 327680 65536 65536 NT_STATUS_OK
WriteX 12852 393216 65536 65536 NT_STATUS_OK
WriteX 12852 458752 46731 46731 NT_STATUS_OK
Close 12852 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12853 NT_STATUS_OK
WriteX 12853 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12842 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 65536 65536 NT_STATUS_OK
WriteX 12853 65536 22848 22848 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Flush 12853 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12853 1004 NT_STATUS_OK
WriteX 12853 0 4096 4096 NT_STATUS_OK
Close 12853 NT_STATUS_OK
Close 12842 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12855 NT_STATUS_OK
Close 12855 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12857 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12858 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12858 1004 NT_STATUS_OK
ReadX 12858 8192 4096 4096 NT_STATUS_OK
ReadX 12858 12288 4096 4096 NT_STATUS_OK
ReadX 12858 16384 4096 4096 NT_STATUS_OK
ReadX 12858 20480 4096 4096 NT_STATUS_OK
ReadX 12858 24576 4096 4096 NT_STATUS_OK
ReadX 12858 28672 4096 4096 NT_STATUS_OK
ReadX 12858 32768 4096 4096 NT_STATUS_OK
ReadX 12858 36864 4096 4096 NT_STATUS_OK
ReadX 12858 40960 4096 4096 NT_STATUS_OK
ReadX 12858 45056 4096 4096 NT_STATUS_OK
ReadX 12858 49152 4096 4096 NT_STATUS_OK
ReadX 12858 53248 4096 4096 NT_STATUS_OK
ReadX 12858 57344 4096 4096 NT_STATUS_OK
ReadX 12858 61440 4096 4096 NT_STATUS_OK
ReadX 12858 65536 4096 4096 NT_STATUS_OK
ReadX 12858 69632 4096 4096 NT_STATUS_OK
ReadX 12858 73728 4096 4096 NT_STATUS_OK
ReadX 12858 77824 4096 4096 NT_STATUS_OK
ReadX 12858 81920 4096 4096 NT_STATUS_OK
ReadX 12858 86016 4096 4096 NT_STATUS_OK
ReadX 12858 90112 4096 4096 NT_STATUS_OK
ReadX 12858 94208 4096 4096 NT_STATUS_OK
ReadX 12858 98304 4096 4096 NT_STATUS_OK
ReadX 12858 102400 4096 4096 NT_STATUS_OK
ReadX 12858 106496 4096 4096 NT_STATUS_OK
ReadX 12858 110592 4096 4096 NT_STATUS_OK
ReadX 12858 114688 4096 4096 NT_STATUS_OK
ReadX 12858 118784 4096 4096 NT_STATUS_OK
ReadX 12858 122880 4096 4096 NT_STATUS_OK
ReadX 12858 126976 4096 4096 NT_STATUS_OK
ReadX 12858 131072 4096 4096 NT_STATUS_OK
ReadX 12858 135168 4096 4096 NT_STATUS_OK
ReadX 12858 139264 4096 4096 NT_STATUS_OK
ReadX 12858 143360 4096 4096 NT_STATUS_OK
ReadX 12858 147456 4096 4096 NT_STATUS_OK
ReadX 12858 151552 4096 4096 NT_STATUS_OK
ReadX 12858 155648 4096 4096 NT_STATUS_OK
ReadX 12858 159744 4096 4096 NT_STATUS_OK
ReadX 12858 163840 4096 4096 NT_STATUS_OK
ReadX 12858 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12858 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12861 NT_STATUS_OK
WriteX 12861 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12861 258 NT_STATUS_OK
Close 12858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12862 NT_STATUS_OK
SET_FILE_INFORMATION 12862 1004 NT_STATUS_OK
Close 12862 NT_STATUS_OK
WriteX 12861 0 42388 42388 NT_STATUS_OK
Close 12861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12863 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12865 NT_STATUS_OK
ReadX 12865 0 4096 4096 NT_STATUS_OK
ReadX 12865 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12866 NT_STATUS_OK
WriteX 12866 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12866 258 NT_STATUS_OK
SET_FILE_INFORMATION 12866 1004 NT_STATUS_OK
WriteX 12866 0 42652 42652 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Close 12865 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 4096 4096 NT_STATUS_OK
ReadX 12870 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12872 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12875 NT_STATUS_OK
WriteX 12875 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12875 258 NT_STATUS_OK
WriteX 12875 0 65536 65536 NT_STATUS_OK
WriteX 12875 65536 49 49 NT_STATUS_OK
Close 12875 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12876 NT_STATUS_OK
ReadX 12876 0 61440 61440 NT_STATUS_OK
ReadX 12876 61440 4096 4096 NT_STATUS_OK
ReadX 12876 65536 61440 61440 NT_STATUS_OK
ReadX 12876 126976 4096 4096 NT_STATUS_OK
ReadX 12876 131072 61440 61440 NT_STATUS_OK
ReadX 12876 192512 4096 4096 NT_STATUS_OK
ReadX 12876 196608 61440 61440 NT_STATUS_OK
ReadX 12876 258048 4096 4096 NT_STATUS_OK
ReadX 12876 262144 61440 61440 NT_STATUS_OK
ReadX 12876 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12877 NT_STATUS_OK
ReadX 12877 0 61440 61440 NT_STATUS_OK
ReadX 12877 61440 4096 4096 NT_STATUS_OK
ReadX 12877 65536 61440 61440 NT_STATUS_OK
ReadX 12877 126976 4096 4096 NT_STATUS_OK
ReadX 12877 131072 61440 61440 NT_STATUS_OK
ReadX 12877 192512 4096 4096 NT_STATUS_OK
ReadX 12877 196608 61440 61440 NT_STATUS_OK
ReadX 12877 258048 4096 4096 NT_STATUS_OK
ReadX 12877 262144 61440 61440 NT_STATUS_OK
ReadX 12877 323584 4096 4096 NT_STATUS_OK
ReadX 12877 327680 61440 61440 NT_STATUS_OK
ReadX 12877 389120 4096 4096 NT_STATUS_OK
ReadX 12877 393216 61440 61440 NT_STATUS_OK
ReadX 12877 454656 4096 4096 NT_STATUS_OK
ReadX 12877 458752 61440 61440 NT_STATUS_OK
ReadX 12877 520192 4096 4096 NT_STATUS_OK
ReadX 12877 524288 61440 61440 NT_STATUS_OK
ReadX 12877 585728 4096 4096 NT_STATUS_OK
ReadX 12877 589824 61440 61440 NT_STATUS_OK
ReadX 12877 651264 4096 4096 NT_STATUS_OK
ReadX 12877 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12878 NT_STATUS_OK
ReadX 12878 0 61440 61440 NT_STATUS_OK
ReadX 12878 61440 4096 4096 NT_STATUS_OK
ReadX 12878 65536 61440 61440 NT_STATUS_OK
ReadX 12878 126976 4096 4096 NT_STATUS_OK
ReadX 12878 131072 61440 61440 NT_STATUS_OK
ReadX 12878 192512 4096 4096 NT_STATUS_OK
ReadX 12878 196608 61440 61440 NT_STATUS_OK
ReadX 12878 258048 4096 4096 NT_STATUS_OK
ReadX 12878 262144 61440 61440 NT_STATUS_OK
ReadX 12878 323584 4096 4096 NT_STATUS_OK
ReadX 12878 327680 61440 61440 NT_STATUS_OK
ReadX 12878 389120 4096 4096 NT_STATUS_OK
ReadX 12878 393216 61440 61440 NT_STATUS_OK
ReadX 12878 454656 4096 4096 NT_STATUS_OK
ReadX 12878 458752 61440 61440 NT_STATUS_OK
ReadX 12878 520192 4096 4096 NT_STATUS_OK
ReadX 12878 524288 61440 61440 NT_STATUS_OK
ReadX 12878 585728 4096 4096 NT_STATUS_OK
ReadX 12878 589824 61440 61440 NT_STATUS_OK
ReadX 12878 651264 4096 4096 NT_STATUS_OK
ReadX 12878 655360 61440 61440 NT_STATUS_OK
ReadX 12878 716800 4096 4096 NT_STATUS_OK
ReadX 12878 720896 61440 61440 NT_STATUS_OK
ReadX 12878 782336 4096 4096 NT_STATUS_OK
ReadX 12878 786432 61440 61440 NT_STATUS_OK
ReadX 12878 847872 4096 4096 NT_STATUS_OK
ReadX 12878 851968 61440 61440 NT_STATUS_OK
ReadX 12878 913408 4096 4096 NT_STATUS_OK
ReadX 12878 917504 61440 61440 NT_STATUS_OK
ReadX 12878 978944 4096 4096 NT_STATUS_OK
ReadX 12878 983040 61440 61440 NT_STATUS_OK
ReadX 12878 1044480 4096 4096 NT_STATUS_OK
ReadX 12878 1048576 61440 61440 NT_STATUS_OK
ReadX 12878 1110016 4096 4096 NT_STATUS_OK
ReadX 12878 1114112 61440 61440 NT_STATUS_OK
ReadX 12878 1175552 4096 4096 NT_STATUS_OK
ReadX 12878 1179648 61440 61440 NT_STATUS_OK
ReadX 12878 1241088 4096 4096 NT_STATUS_OK
ReadX 12878 1245184 61440 61440 NT_STATUS_OK
ReadX 12878 1306624 4096 4096 NT_STATUS_OK
ReadX 12878 1310720 61440 61440 NT_STATUS_OK
ReadX 12878 1372160 4096 4096 NT_STATUS_OK
ReadX 12878 1376256 61440 61440 NT_STATUS_OK
ReadX 12878 1437696 4096 4096 NT_STATUS_OK
ReadX 12878 1441792 61440 61440 NT_STATUS_OK
ReadX 12878 1503232 4096 4096 NT_STATUS_OK
ReadX 12878 1507328 61440 61440 NT_STATUS_OK
ReadX 12878 1568768 4096 4096 NT_STATUS_OK
ReadX 12878 1572864 61440 61440 NT_STATUS_OK
ReadX 12878 1634304 4096 4096 NT_STATUS_OK
ReadX 12878 1638400 61440 61440 NT_STATUS_OK
ReadX 12878 1699840 4096 4096 NT_STATUS_OK
ReadX 12878 1703936 61440 61440 NT_STATUS_OK
ReadX 12878 1765376 4096 4096 NT_STATUS_OK
ReadX 12878 1769472 61440 61440 NT_STATUS_OK
ReadX 12878 1830912 4096 4096 NT_STATUS_OK
ReadX 12878 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12880 NT_STATUS_OK
QUERY_FILE_INFORMATION 12880 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12880 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12880 1005 NT_STATUS_OK
ReadX 12880 2156 24 24 NT_STATUS_OK
ReadX 12880 2139 276 276 NT_STATUS_OK
ReadX 12880 2136 14 14 NT_STATUS_OK
ReadX 12880 2136 7 7 NT_STATUS_OK
ReadX 12880 2138 12 12 NT_STATUS_OK
ReadX 12880 2137 8 8 NT_STATUS_OK
ReadX 12880 2135 15 15 NT_STATUS_OK
ReadX 12880 0 16 16 NT_STATUS_OK
ReadX 12880 16 2048 2048 NT_STATUS_OK
ReadX 12880 2064 2048 2048 NT_STATUS_OK
ReadX 12880 257 2048 2048 NT_STATUS_OK
ReadX 12880 385 2048 2048 NT_STATUS_OK
ReadX 12880 513 2048 2048 NT_STATUS_OK
ReadX 12880 641 2048 2048 NT_STATUS_OK
ReadX 12880 769 2048 2048 NT_STATUS_OK
ReadX 12880 897 2048 2048 NT_STATUS_OK
ReadX 12880 1025 2048 2048 NT_STATUS_OK
ReadX 12880 1153 2048 2048 NT_STATUS_OK
ReadX 12880 1281 2048 2048 NT_STATUS_OK
ReadX 12880 1409 2048 2048 NT_STATUS_OK
ReadX 12880 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12882 NT_STATUS_OK
Close 12882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12876 NT_STATUS_OK
Close 12877 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12885 NT_STATUS_OK
WriteX 12885 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12885 258 NT_STATUS_OK
WriteX 12885 0 10575 10575 NT_STATUS_OK
Flush 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12886 NT_STATUS_OK
Close 12886 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12888 NT_STATUS_OK
ReadX 12888 0 4096 4096 NT_STATUS_OK
Close 12880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12889 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12890 NT_STATUS_OK
LockX 12890 2147483538 1 NT_STATUS_OK
UnlockX 12890 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12890 1005 NT_STATUS_OK
ReadX 12890 0 512 512 NT_STATUS_OK
ReadX 12890 512 512 512 NT_STATUS_OK
ReadX 12890 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12890 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12890 1004 NT_STATUS_OK
Close 12890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12891 NT_STATUS_OK
QUERY_FILE_INFORMATION 12891 1005 NT_STATUS_OK
ReadX 12891 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12892 NT_STATUS_OK
LockX 12892 2147483538 1 NT_STATUS_OK
UnlockX 12892 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12892 1005 NT_STATUS_OK
ReadX 12892 0 512 512 NT_STATUS_OK
ReadX 12892 512 512 512 NT_STATUS_OK
ReadX 12892 1024 512 512 NT_STATUS_OK
ReadX 12892 288 20 20 NT_STATUS_OK
ReadX 12892 308 2084 2084 NT_STATUS_OK
ReadX 12892 388 2084 2084 NT_STATUS_OK
ReadX 12892 388 2084 2084 NT_STATUS_OK
ReadX 12879 2157 1386 1386 NT_STATUS_OK
ReadX 12892 2472 399 399 NT_STATUS_OK
ReadX 12892 3072 1536 1536 NT_STATUS_OK
ReadX 12892 544 149 149 NT_STATUS_OK
ReadX 12892 693 485 485 NT_STATUS_OK
Close 12892 NT_STATUS_OK
ReadX 12879 2157 4096 4096 NT_STATUS_OK
ReadX 12879 6253 4096 4096 NT_STATUS_OK
ReadX 12879 10349 4096 4096 NT_STATUS_OK
ReadX 12879 14445 4096 4096 NT_STATUS_OK
ReadX 12879 18541 4096 4096 NT_STATUS_OK
ReadX 12879 22637 256 256 NT_STATUS_OK
ReadX 12879 22893 4096 4096 NT_STATUS_OK
ReadX 12879 26989 4096 4096 NT_STATUS_OK
ReadX 12879 31085 4096 4096 NT_STATUS_OK
ReadX 12879 35181 4096 4096 NT_STATUS_OK
ReadX 12879 39277 4096 4096 NT_STATUS_OK
ReadX 12879 43373 4096 4096 NT_STATUS_OK
ReadX 12879 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12879 2157 1024 1024 NT_STATUS_OK
ReadX 12879 1667 4688 4688 NT_STATUS_OK
ReadX 12879 6355 3516 3516 NT_STATUS_OK
ReadX 12879 9871 16384 16384 NT_STATUS_OK
ReadX 12879 26255 3771 3771 NT_STATUS_OK
ReadX 12879 30026 2048 2048 NT_STATUS_OK
ReadX 12879 32074 1024 1024 NT_STATUS_OK
ReadX 12879 33098 6652 6652 NT_STATUS_OK
ReadX 12879 39750 16384 16384 NT_STATUS_OK
ReadX 12879 56134 10496 10496 NT_STATUS_OK
ReadX 12879 66630 1784 1784 NT_STATUS_OK
ReadX 12879 68414 90 90 NT_STATUS_OK
ReadX 12879 68504 273 273 NT_STATUS_OK
ReadX 12879 68777 1600 1600 NT_STATUS_OK
ReadX 12879 70377 640 640 NT_STATUS_OK
ReadX 12879 71017 1280 1280 NT_STATUS_OK
ReadX 12879 72297 8464 8464 NT_STATUS_OK
ReadX 12879 80761 158 158 NT_STATUS_OK
ReadX 12879 80919 912 912 NT_STATUS_OK
ReadX 12879 81831 1980 1980 NT_STATUS_OK
ReadX 12879 83811 2256 2256 NT_STATUS_OK
ReadX 12879 86067 400 400 NT_STATUS_OK
ReadX 12879 86467 252 252 NT_STATUS_OK
ReadX 12879 86719 42 42 NT_STATUS_OK
ReadX 12879 86761 725 725 NT_STATUS_OK
ReadX 12879 2009 512 512 NT_STATUS_OK
ReadX 12879 3895 9 9 NT_STATUS_OK
ReadX 12879 3781 46 46 NT_STATUS_OK
ReadX 12879 4059 92 92 NT_STATUS_OK
ReadX 12879 3781 92 92 NT_STATUS_OK
ReadX 12879 3986 184 184 NT_STATUS_OK
ReadX 12879 3987 16384 16384 NT_STATUS_OK
ReadX 12879 3902 16384 16384 NT_STATUS_OK
ReadX 12879 3781 10240 10240 NT_STATUS_OK
ReadX 12879 3821 16384 16384 NT_STATUS_OK
ReadX 12879 3891 935 935 NT_STATUS_OK
ReadX 12879 4060 10240 10240 NT_STATUS_OK
ReadX 12879 4059 184 184 NT_STATUS_OK
ReadX 12879 256 184 184 NT_STATUS_OK
ReadX 12879 256 1026 1026 NT_STATUS_OK
ReadX 12879 3901 326 326 NT_STATUS_OK
ReadX 12879 3899 652 652 NT_STATUS_OK
ReadX 12879 256 2 2 NT_STATUS_OK
ReadX 12879 258 4948 4948 NT_STATUS_OK
Close 12879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12894 NT_STATUS_OK
Close 12894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12897 NT_STATUS_OK
WriteX 12897 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12897 258 NT_STATUS_OK
WriteX 12897 0 65536 65536 NT_STATUS_OK
WriteX 12897 65536 65536 65536 NT_STATUS_OK
WriteX 12897 131072 65536 65536 NT_STATUS_OK
WriteX 12897 196608 65536 65536 NT_STATUS_OK
WriteX 12897 262144 65536 65536 NT_STATUS_OK
WriteX 12897 327680 65536 65536 NT_STATUS_OK
WriteX 12897 393216 65536 65536 NT_STATUS_OK
WriteX 12897 458752 65536 65536 NT_STATUS_OK
WriteX 12897 524288 65536 65536 NT_STATUS_OK
WriteX 12897 589824 35257 35257 NT_STATUS_OK
Close 12897 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12899 NT_STATUS_OK
Close 12899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12902 NT_STATUS_OK
WriteX 12902 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12902 258 NT_STATUS_OK
WriteX 12902 0 65536 65536 NT_STATUS_OK
WriteX 12902 65536 65536 65536 NT_STATUS_OK
WriteX 12902 131072 65536 65536 NT_STATUS_OK
WriteX 12902 196608 65536 65536 NT_STATUS_OK
WriteX 12902 262144 65536 65536 NT_STATUS_OK
WriteX 12902 327680 65536 65536 NT_STATUS_OK
WriteX 12902 393216 65536 65536 NT_STATUS_OK
WriteX 12902 458752 65536 65536 NT_STATUS_OK
WriteX 12902 524288 65536 65536 NT_STATUS_OK
WriteX 12902 589824 57598 57598 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12904 NT_STATUS_OK
WriteX 12904 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12904 258 NT_STATUS_OK
WriteX 12904 0 12543 12543 NT_STATUS_OK
Flush 12904 NT_STATUS_OK
Close 12904 NT_STATUS_OK
Close 12888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12908 NT_STATUS_OK
ReadX 12908 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12909 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12910 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12910 1005 NT_STATUS_OK
ReadX 12910 1938 24 24 NT_STATUS_OK
ReadX 12910 1920 276 276 NT_STATUS_OK
ReadX 12910 1918 14 14 NT_STATUS_OK
ReadX 12910 1918 7 7 NT_STATUS_OK
ReadX 12910 1919 12 12 NT_STATUS_OK
ReadX 12910 1919 8 8 NT_STATUS_OK
ReadX 12910 1917 15 15 NT_STATUS_OK
ReadX 12910 0 16 16 NT_STATUS_OK
ReadX 12910 16 2048 2048 NT_STATUS_OK
ReadX 12910 2064 2048 2048 NT_STATUS_OK
ReadX 12910 257 2048 2048 NT_STATUS_OK
ReadX 12910 385 2048 2048 NT_STATUS_OK
ReadX 12910 513 2048 2048 NT_STATUS_OK
ReadX 12910 641 2048 2048 NT_STATUS_OK
ReadX 12910 769 2048 2048 NT_STATUS_OK
ReadX 12910 897 2048 2048 NT_STATUS_OK
ReadX 12910 1025 2048 2048 NT_STATUS_OK
ReadX 12910 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12912 NT_STATUS_OK
Close 12912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12915 NT_STATUS_OK
WriteX 12915 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12915 258 NT_STATUS_OK
WriteX 12915 0 11588 11588 NT_STATUS_OK
Flush 12915 NT_STATUS_OK
Close 12915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12916 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 0 4096 4096 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12920 NT_STATUS_OK
WriteX 12920 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12920 258 NT_STATUS_OK
WriteX 12920 0 11615 11615 NT_STATUS_OK
Flush 12920 NT_STATUS_OK
Close 12920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12922 NT_STATUS_OK
Close 12922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12924 NT_STATUS_OK
ReadX 12924 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12926 NT_STATUS_OK
Close 12926 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12929 NT_STATUS_OK
WriteX 12929 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12929 258 NT_STATUS_OK
WriteX 12929 0 65536 65536 NT_STATUS_OK
WriteX 12929 65536 16050 16050 NT_STATUS_OK
Close 12929 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12909 1939 64 64 NT_STATUS_OK
ReadX 12909 128 248 248 NT_STATUS_OK
ReadX 12909 128 568 568 NT_STATUS_OK
ReadX 12909 3872 1536 1536 NT_STATUS_OK
ReadX 12909 3456 2560 2560 NT_STATUS_OK
ReadX 12909 3136 512 512 NT_STATUS_OK
ReadX 12909 2880 4096 4096 NT_STATUS_OK
ReadX 12909 3264 3072 3072 NT_STATUS_OK
ReadX 12909 320 4096 4096 NT_STATUS_OK
ReadX 12909 1024 4096 4096 NT_STATUS_OK
ReadX 12909 3616 4096 4096 NT_STATUS_OK
ReadX 12909 1939 64 64 NT_STATUS_OK
ReadX 12909 128 248 248 NT_STATUS_OK
ReadX 12909 128 608 608 NT_STATUS_OK
ReadX 12909 2858 1024 1024 NT_STATUS_OK
ReadX 12909 2810 4096 4096 NT_STATUS_OK
ReadX 12909 2826 4096 4096 NT_STATUS_OK
ReadX 12909 2580 2048 2048 NT_STATUS_OK
ReadX 12909 2800 2560 2560 NT_STATUS_OK
ReadX 12909 2100 4096 4096 NT_STATUS_OK
ReadX 12909 2084 4096 4096 NT_STATUS_OK
ReadX 12909 868 4096 4096 NT_STATUS_OK
ReadX 12909 2324 4096 4096 NT_STATUS_OK
ReadX 12909 884 4096 4096 NT_STATUS_OK
ReadX 12909 2604 1024 1024 NT_STATUS_OK
ReadX 12909 580 4096 4096 NT_STATUS_OK
ReadX 12909 596 4096 4096 NT_STATUS_OK
ReadX 12909 2752 4096 4096 NT_STATUS_OK
ReadX 12909 2842 1024 1024 NT_STATUS_OK
ReadX 12909 660 4096 4096 NT_STATUS_OK
ReadX 12909 2720 4096 4096 NT_STATUS_OK
ReadX 12909 2736 4096 4096 NT_STATUS_OK
ReadX 12909 628 4096 4096 NT_STATUS_OK
ReadX 12909 2704 4096 4096 NT_STATUS_OK
ReadX 12909 1556 4096 4096 NT_STATUS_OK
ReadX 12909 576 4096 4096 NT_STATUS_OK
ReadX 12909 3168 1536 1536 NT_STATUS_OK
ReadX 12909 832 4096 4096 NT_STATUS_OK
ReadX 12909 1088 4096 4096 NT_STATUS_OK
ReadX 12909 1344 4096 4096 NT_STATUS_OK
ReadX 12909 1600 4096 4096 NT_STATUS_OK
ReadX 12909 1856 4096 4096 NT_STATUS_OK
ReadX 12909 2112 4096 4096 NT_STATUS_OK
ReadX 12909 1892 4096 4096 NT_STATUS_OK
ReadX 12909 820 4096 4096 NT_STATUS_OK
ReadX 12909 788 4096 4096 NT_STATUS_OK
ReadX 12909 1604 4096 4096 NT_STATUS_OK
ReadX 12909 3648 4096 4096 NT_STATUS_OK
ReadX 12909 2608 4096 4096 NT_STATUS_OK
ReadX 12909 548 4096 4096 NT_STATUS_OK
ReadX 12909 740 4096 4096 NT_STATUS_OK
ReadX 12909 1344 4096 4096 NT_STATUS_OK
ReadX 12909 3392 4096 4096 NT_STATUS_OK
ReadX 12909 3904 4096 4096 NT_STATUS_OK
ReadX 12909 644 4096 4096 NT_STATUS_OK
ReadX 12909 676 4096 4096 NT_STATUS_OK
ReadX 12909 2688 4096 4096 NT_STATUS_OK
ReadX 12909 320 4096 4096 NT_STATUS_OK
ReadX 12909 900 4096 4096 NT_STATUS_OK
ReadX 12909 1908 4096 4096 NT_STATUS_OK
ReadX 12909 852 4096 4096 NT_STATUS_OK
ReadX 12909 724 4096 4096 NT_STATUS_OK
ReadX 12909 2292 4096 4096 NT_STATUS_OK
ReadX 12909 612 4096 4096 NT_STATUS_OK
ReadX 12909 388 4096 4096 NT_STATUS_OK
ReadX 12909 2368 4096 4096 NT_STATUS_OK
ReadX 12909 2624 4096 4096 NT_STATUS_OK
ReadX 12909 500 4096 4096 NT_STATUS_OK
ReadX 12909 356 4096 4096 NT_STATUS_OK
ReadX 12909 1024 4096 4096 NT_STATUS_OK
ReadX 12909 576 4096 4096 NT_STATUS_OK
ReadX 12909 340 4096 4096 NT_STATUS_OK
ReadX 12909 420 4096 4096 NT_STATUS_OK
ReadX 12909 1600 4096 4096 NT_STATUS_OK
ReadX 12909 404 4096 4096 NT_STATUS_OK
ReadX 12909 1428 4096 4096 NT_STATUS_OK
ReadX 12909 2656 4096 4096 NT_STATUS_OK
ReadX 12909 2624 4096 4096 NT_STATUS_OK
ReadX 12909 452 4096 4096 NT_STATUS_OK
ReadX 12909 692 4096 4096 NT_STATUS_OK
ReadX 12909 564 4096 4096 NT_STATUS_OK
ReadX 12909 372 4096 4096 NT_STATUS_OK
ReadX 12909 468 4096 4096 NT_STATUS_OK
ReadX 12909 484 4096 4096 NT_STATUS_OK
ReadX 12909 1088 4096 4096 NT_STATUS_OK
ReadX 12909 1924 4096 4096 NT_STATUS_OK
ReadX 12909 2768 4096 4096 NT_STATUS_OK
ReadX 12909 832 4096 4096 NT_STATUS_OK
ReadX 12909 836 4096 4096 NT_STATUS_OK
ReadX 12909 1856 4096 4096 NT_STATUS_OK
ReadX 12909 2640 4096 4096 NT_STATUS_OK
ReadX 12909 436 4096 4096 NT_STATUS_OK
ReadX 12909 1828 4096 4096 NT_STATUS_OK
ReadX 12909 804 4096 4096 NT_STATUS_OK
ReadX 12909 1860 4096 4096 NT_STATUS_OK
ReadX 12909 1812 4096 4096 NT_STATUS_OK
ReadX 12909 756 4096 4096 NT_STATUS_OK
ReadX 12909 1636 4096 4096 NT_STATUS_OK
ReadX 12909 772 4096 4096 NT_STATUS_OK
ReadX 12909 2036 4096 4096 NT_STATUS_OK
ReadX 12909 1220 4096 4096 NT_STATUS_OK
ReadX 12909 1652 4096 4096 NT_STATUS_OK
ReadX 12909 2588 4096 4096 NT_STATUS_OK
ReadX 12909 916 4096 4096 NT_STATUS_OK
ReadX 12909 260 4096 4096 NT_STATUS_OK
ReadX 12909 932 4096 4096 NT_STATUS_OK
ReadX 12909 2624 4096 4096 NT_STATUS_OK
ReadX 12909 308 4096 4096 NT_STATUS_OK
ReadX 12909 292 4096 4096 NT_STATUS_OK
ReadX 12909 1140 4096 4096 NT_STATUS_OK
ReadX 12909 276 4096 4096 NT_STATUS_OK
ReadX 12909 2020 4096 4096 NT_STATUS_OK
ReadX 12909 2880 4096 4096 NT_STATUS_OK
ReadX 12909 516 4096 4096 NT_STATUS_OK
ReadX 12909 1844 4096 4096 NT_STATUS_OK
ReadX 12909 1124 4096 4096 NT_STATUS_OK
ReadX 12909 3136 4096 4096 NT_STATUS_OK
ReadX 12909 324 4096 4096 NT_STATUS_OK
ReadX 12909 1156 4096 4096 NT_STATUS_OK
ReadX 12909 1172 4096 4096 NT_STATUS_OK
ReadX 12909 2112 4096 4096 NT_STATUS_OK
ReadX 12909 2368 4096 4096 NT_STATUS_OK
ReadX 12909 964 4096 4096 NT_STATUS_OK
ReadX 12909 980 4096 4096 NT_STATUS_OK
ReadX 12909 1012 4096 4096 NT_STATUS_OK
ReadX 12909 532 4096 4096 NT_STATUS_OK
ReadX 12909 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12909 1620 4096 4096 NT_STATUS_OK
ReadX 12909 1604 4096 4096 NT_STATUS_OK
ReadX 12909 2116 4096 4096 NT_STATUS_OK
ReadX 12909 2132 4096 4096 NT_STATUS_OK
ReadX 12909 2148 4096 4096 NT_STATUS_OK
ReadX 12909 2276 4096 4096 NT_STATUS_OK
ReadX 12909 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12931 NT_STATUS_OK
Close 12931 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12934 NT_STATUS_OK
QUERY_FILE_INFORMATION 12889 1004 NT_STATUS_OK
Close 12889 NT_STATUS_OK
WriteX 12934 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12934 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12891 1004 NT_STATUS_OK
Close 12891 NT_STATUS_OK
WriteX 12934 0 65536 65536 NT_STATUS_OK
WriteX 12934 65536 64850 64850 NT_STATUS_OK
Close 12934 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12936 NT_STATUS_OK
WriteX 12936 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12936 258 NT_STATUS_OK
ReadX 12909 2068 4096 4096 NT_STATUS_OK
ReadX 12909 1588 4096 4096 NT_STATUS_OK
ReadX 12909 1572 4096 4096 NT_STATUS_OK
WriteX 12936 0 18630 18630 NT_STATUS_OK
Flush 12936 NT_STATUS_OK
Close 12936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12938 NT_STATUS_OK
Close 12938 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12940 NT_STATUS_OK
ReadX 12940 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12909 612 4096 4096 NT_STATUS_OK
ReadX 12909 564 4096 4096 NT_STATUS_OK
ReadX 12909 1876 4096 4096 NT_STATUS_OK
ReadX 12909 628 4096 4096 NT_STATUS_OK
ReadX 12909 740 4096 4096 NT_STATUS_OK
ReadX 12909 724 4096 4096 NT_STATUS_OK
ReadX 12909 644 4096 4096 NT_STATUS_OK
ReadX 12909 2324 4096 4096 NT_STATUS_OK
ReadX 12909 660 4096 4096 NT_STATUS_OK
ReadX 12909 852 4096 4096 NT_STATUS_OK
ReadX 12909 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12909 2368 4096 4096 NT_STATUS_OK
ReadX 12909 1024 4096 4096 NT_STATUS_OK
ReadX 12909 320 4096 4096 NT_STATUS_OK
ReadX 12909 580 4096 4096 NT_STATUS_OK
ReadX 12909 3136 512 512 NT_STATUS_OK
ReadX 12909 2880 4096 4096 NT_STATUS_OK
Close 12909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 61440 4096 4096 NT_STATUS_OK
ReadX 12941 126976 4096 4096 NT_STATUS_OK
WriteX 12941 0 65536 65536 NT_STATUS_OK
WriteX 12941 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 61440 4096 4096 NT_STATUS_OK
ReadX 12942 126976 4096 4096 NT_STATUS_OK
ReadX 12942 192512 4096 4096 NT_STATUS_OK
ReadX 12942 258048 4096 4096 NT_STATUS_OK
WriteX 12942 0 65536 65536 NT_STATUS_OK
WriteX 12942 65536 65536 65536 NT_STATUS_OK
WriteX 12942 131072 65536 65536 NT_STATUS_OK
WriteX 12942 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 61440 4096 4096 NT_STATUS_OK
ReadX 12943 126976 4096 4096 NT_STATUS_OK
ReadX 12943 192512 4096 4096 NT_STATUS_OK
ReadX 12943 258048 4096 4096 NT_STATUS_OK
ReadX 12943 323584 4096 4096 NT_STATUS_OK
ReadX 12943 389120 4096 4096 NT_STATUS_OK
ReadX 12943 454656 4096 4096 NT_STATUS_OK
ReadX 12943 520192 4096 4096 NT_STATUS_OK
WriteX 12943 0 65536 65536 NT_STATUS_OK
WriteX 12943 65536 65536 65536 NT_STATUS_OK
WriteX 12943 131072 65536 65536 NT_STATUS_OK
WriteX 12943 196608 65536 65536 NT_STATUS_OK
WriteX 12943 262144 65536 65536 NT_STATUS_OK
WriteX 12943 327680 65536 65536 NT_STATUS_OK
WriteX 12943 393216 65536 65536 NT_STATUS_OK
WriteX 12943 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12944 NT_STATUS_OK
ReadX 12944 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12945 NT_STATUS_OK
Close 12945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12946 NT_STATUS_OK
WriteX 12946 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12946 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12944 0 8192 8192 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12944 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12944 0 8192 8192 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12944 0 8192 8192 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12944 0 8192 8192 NT_STATUS_OK
Flush 12944 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12948 NT_STATUS_OK
Close 12948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12940 NT_STATUS_OK
Close 12908 NT_STATUS_OK
Close 12941 NT_STATUS_OK
Close 12942 NT_STATUS_OK
Close 12943 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12951 NT_STATUS_OK
WriteX 12951 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12951 258 NT_STATUS_OK
WriteX 12951 0 62591 62591 NT_STATUS_OK
Close 12951 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12953 NT_STATUS_OK
Close 12953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12956 NT_STATUS_OK
WriteX 12956 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12956 258 NT_STATUS_OK
WriteX 12956 0 10845 10845 NT_STATUS_OK
Close 12956 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12961 NT_STATUS_OK
WriteX 12961 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12961 258 NT_STATUS_OK
WriteX 12961 0 30118 30118 NT_STATUS_OK
Close 12961 NT_STATUS_OK
WriteX 12944 0 4096 4096 NT_STATUS_OK
WriteX 12946 0 64 64 NT_STATUS_OK
Close 12946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12944 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12963 NT_STATUS_OK
ReadX 12963 0 61440 61440 NT_STATUS_OK
ReadX 12963 61440 4096 4096 NT_STATUS_OK
ReadX 12963 65536 61440 61440 NT_STATUS_OK
ReadX 12963 126976 4096 4096 NT_STATUS_OK
ReadX 12963 131072 61440 61440 NT_STATUS_OK
ReadX 12963 192512 4096 4096 NT_STATUS_OK
ReadX 12963 196608 61440 61440 NT_STATUS_OK
ReadX 12963 258048 4096 4096 NT_STATUS_OK
ReadX 12963 262144 61440 61440 NT_STATUS_OK
ReadX 12963 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12964 NT_STATUS_OK
ReadX 12964 0 61440 61440 NT_STATUS_OK
ReadX 12964 61440 4096 4096 NT_STATUS_OK
ReadX 12964 65536 61440 61440 NT_STATUS_OK
ReadX 12964 126976 4096 4096 NT_STATUS_OK
ReadX 12964 131072 61440 61440 NT_STATUS_OK
ReadX 12964 192512 4096 4096 NT_STATUS_OK
ReadX 12964 196608 61440 61440 NT_STATUS_OK
ReadX 12964 258048 4096 4096 NT_STATUS_OK
ReadX 12964 262144 61440 61440 NT_STATUS_OK
ReadX 12964 323584 4096 4096 NT_STATUS_OK
ReadX 12964 327680 61440 61440 NT_STATUS_OK
ReadX 12964 389120 4096 4096 NT_STATUS_OK
ReadX 12964 393216 61440 61440 NT_STATUS_OK
ReadX 12964 454656 4096 4096 NT_STATUS_OK
ReadX 12964 458752 61440 61440 NT_STATUS_OK
ReadX 12964 520192 4096 4096 NT_STATUS_OK
ReadX 12964 524288 61440 61440 NT_STATUS_OK
ReadX 12964 585728 4096 4096 NT_STATUS_OK
ReadX 12964 589824 61440 61440 NT_STATUS_OK
ReadX 12964 651264 4096 4096 NT_STATUS_OK
ReadX 12964 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12965 NT_STATUS_OK
ReadX 12965 0 61440 61440 NT_STATUS_OK
ReadX 12965 61440 4096 4096 NT_STATUS_OK
ReadX 12965 65536 61440 61440 NT_STATUS_OK
ReadX 12965 126976 4096 4096 NT_STATUS_OK
ReadX 12965 131072 61440 61440 NT_STATUS_OK
ReadX 12965 192512 4096 4096 NT_STATUS_OK
ReadX 12965 196608 61440 61440 NT_STATUS_OK
ReadX 12965 258048 4096 4096 NT_STATUS_OK
ReadX 12965 262144 61440 61440 NT_STATUS_OK
ReadX 12965 323584 4096 4096 NT_STATUS_OK
ReadX 12965 327680 61440 61440 NT_STATUS_OK
ReadX 12965 389120 4096 4096 NT_STATUS_OK
ReadX 12965 393216 61440 61440 NT_STATUS_OK
ReadX 12965 454656 4096 4096 NT_STATUS_OK
ReadX 12965 458752 61440 61440 NT_STATUS_OK
ReadX 12965 520192 4096 4096 NT_STATUS_OK
ReadX 12965 524288 61440 61440 NT_STATUS_OK
ReadX 12965 585728 4096 4096 NT_STATUS_OK
ReadX 12965 589824 61440 61440 NT_STATUS_OK
ReadX 12965 651264 4096 4096 NT_STATUS_OK
ReadX 12965 655360 61440 61440 NT_STATUS_OK
ReadX 12965 716800 4096 4096 NT_STATUS_OK
ReadX 12965 720896 61440 61440 NT_STATUS_OK
ReadX 12965 782336 4096 4096 NT_STATUS_OK
ReadX 12965 786432 61440 61440 NT_STATUS_OK
ReadX 12965 847872 4096 4096 NT_STATUS_OK
ReadX 12965 851968 61440 61440 NT_STATUS_OK
ReadX 12965 913408 4096 4096 NT_STATUS_OK
ReadX 12965 917504 61440 61440 NT_STATUS_OK
ReadX 12965 978944 4096 4096 NT_STATUS_OK
ReadX 12965 983040 61440 61440 NT_STATUS_OK
ReadX 12965 1044480 4096 4096 NT_STATUS_OK
ReadX 12965 1048576 61440 61440 NT_STATUS_OK
ReadX 12965 1110016 4096 4096 NT_STATUS_OK
ReadX 12965 1114112 61440 61440 NT_STATUS_OK
ReadX 12965 1175552 4096 4096 NT_STATUS_OK
ReadX 12965 1179648 61440 61440 NT_STATUS_OK
ReadX 12965 1241088 4096 4096 NT_STATUS_OK
ReadX 12965 1245184 61440 61440 NT_STATUS_OK
ReadX 12965 1306624 4096 4096 NT_STATUS_OK
ReadX 12965 1310720 61440 61440 NT_STATUS_OK
ReadX 12965 1372160 4096 4096 NT_STATUS_OK
ReadX 12965 1376256 61440 61440 NT_STATUS_OK
ReadX 12965 1437696 4096 4096 NT_STATUS_OK
ReadX 12965 1441792 61440 61440 NT_STATUS_OK
ReadX 12965 1503232 4096 4096 NT_STATUS_OK
ReadX 12965 1507328 61440 61440 NT_STATUS_OK
ReadX 12965 1568768 4096 4096 NT_STATUS_OK
ReadX 12965 1572864 61440 61440 NT_STATUS_OK
ReadX 12965 1634304 4096 4096 NT_STATUS_OK
ReadX 12965 1638400 61440 61440 NT_STATUS_OK
ReadX 12965 1699840 4096 4096 NT_STATUS_OK
ReadX 12965 1703936 61440 61440 NT_STATUS_OK
ReadX 12965 1765376 4096 4096 NT_STATUS_OK
ReadX 12965 1769472 61440 61440 NT_STATUS_OK
ReadX 12965 1830912 4096 4096 NT_STATUS_OK
ReadX 12965 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12966 NT_STATUS_OK
Close 12966 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12963 NT_STATUS_OK
Close 12964 NT_STATUS_OK
Close 12965 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12968 NT_STATUS_OK
ReadX 12968 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12969 NT_STATUS_OK
ReadX 12969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12970 NT_STATUS_OK
ReadX 12970 0 4096 4096 NT_STATUS_OK
ReadX 12970 4096 4096 4096 NT_STATUS_OK
ReadX 12970 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12971 NT_STATUS_OK
Close 12971 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12968 NT_STATUS_OK
Close 12969 NT_STATUS_OK
Close 12970 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12973 NT_STATUS_OK
ReadX 12973 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12974 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12974 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12975 NT_STATUS_OK
Close 12975 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12973 NT_STATUS_OK
Close 12974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12977 NT_STATUS_OK
ReadX 12977 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12978 NT_STATUS_OK
ReadX 12978 0 8192 8192 NT_STATUS_OK
ReadX 12978 8192 8192 8192 NT_STATUS_OK
ReadX 12978 16384 8192 8192 NT_STATUS_OK
ReadX 12978 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12980 NT_STATUS_OK
Close 12980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12978 NT_STATUS_OK
Close 12977 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12983 NT_STATUS_OK
WriteX 12983 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12983 258 NT_STATUS_OK
WriteX 12983 0 10438 10438 NT_STATUS_OK
Close 12983 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12984 NT_STATUS_OK
Close 12984 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12985 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12986 NT_STATUS_OK
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12987 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12988 NT_STATUS_OK
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12989 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12990 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12992 NT_STATUS_OK
ReadX 12992 0 4096 4096 NT_STATUS_OK
ReadX 12992 4096 4096 4096 NT_STATUS_OK
ReadX 12992 8192 4096 4096 NT_STATUS_OK
ReadX 12992 12288 8192 8192 NT_STATUS_OK
ReadX 12992 20480 8192 8192 NT_STATUS_OK
ReadX 12992 28672 8192 8192 NT_STATUS_OK
ReadX 12992 36864 8192 8192 NT_STATUS_OK
ReadX 12992 45056 8192 8192 NT_STATUS_OK
ReadX 12992 53248 8192 8192 NT_STATUS_OK
ReadX 12992 61440 8192 8192 NT_STATUS_OK
ReadX 12992 69632 8192 8192 NT_STATUS_OK
ReadX 12992 77824 8192 8192 NT_STATUS_OK
ReadX 12992 86016 8192 8192 NT_STATUS_OK
ReadX 12992 94208 8192 8192 NT_STATUS_OK
ReadX 12992 102400 8192 8192 NT_STATUS_OK
ReadX 12992 110592 8192 8192 NT_STATUS_OK
ReadX 12992 118784 8192 8192 NT_STATUS_OK
ReadX 12992 126976 8192 8192 NT_STATUS_OK
ReadX 12992 135168 8192 8192 NT_STATUS_OK
ReadX 12992 143360 8192 8192 NT_STATUS_OK
ReadX 12992 151552 8192 8192 NT_STATUS_OK
ReadX 12992 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12993 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12992 NT_STATUS_OK
Close 12985 NT_STATUS_OK
Close 12987 NT_STATUS_OK
Close 12989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12994 NT_STATUS_OK
Close 12994 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12997 NT_STATUS_OK
WriteX 12997 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12997 258 NT_STATUS_OK
WriteX 12997 0 28489 28489 NT_STATUS_OK
Close 12997 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12998 NT_STATUS_OK
Close 12998 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13000 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13000 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13001 NT_STATUS_OK
Close 13001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13000 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13003 NT_STATUS_OK
ReadX 13003 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13004 NT_STATUS_OK
ReadX 13004 0 8192 8192 NT_STATUS_OK
ReadX 13004 8192 8192 8192 NT_STATUS_OK
ReadX 13004 16384 8192 8192 NT_STATUS_OK
ReadX 13004 24576 8192 8192 NT_STATUS_OK
ReadX 13004 32768 16384 16384 NT_STATUS_OK
ReadX 13004 49152 8192 8192 NT_STATUS_OK
ReadX 13004 57344 8192 8192 NT_STATUS_OK
ReadX 13004 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13006 NT_STATUS_OK
Close 13006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13004 NT_STATUS_OK
Close 13003 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13009 NT_STATUS_OK
WriteX 13009 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13009 258 NT_STATUS_OK
WriteX 13009 0 29253 29253 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13011 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13013 NT_STATUS_OK
Close 13013 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13016 NT_STATUS_OK
WriteX 13016 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13016 258 NT_STATUS_OK
WriteX 13016 0 30183 30183 NT_STATUS_OK
Close 13016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13017 NT_STATUS_OK
Close 13017 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13019 NT_STATUS_OK
WriteX 13019 0 510 510 NT_STATUS_OK
WriteX 13019 510 512 512 NT_STATUS_OK
WriteX 13019 1022 510 510 NT_STATUS_OK
WriteX 13019 1532 510 510 NT_STATUS_OK
WriteX 13019 2042 168 168 NT_STATUS_OK
Close 13019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13020 NT_STATUS_OK
Close 13020 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13022 NT_STATUS_OK
ReadX 13022 0 4096 4096 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13023 NT_STATUS_OK
ReadX 13023 61440 4096 4096 NT_STATUS_OK
ReadX 13023 126976 4096 4096 NT_STATUS_OK
WriteX 13023 0 65536 65536 NT_STATUS_OK
WriteX 13023 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13024 NT_STATUS_OK
ReadX 13024 61440 4096 4096 NT_STATUS_OK
ReadX 13024 126976 4096 4096 NT_STATUS_OK
ReadX 13024 192512 4096 4096 NT_STATUS_OK
ReadX 13024 258048 4096 4096 NT_STATUS_OK
WriteX 13024 0 65536 65536 NT_STATUS_OK
WriteX 13024 65536 65536 65536 NT_STATUS_OK
WriteX 13024 131072 65536 65536 NT_STATUS_OK
WriteX 13024 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13025 NT_STATUS_OK
ReadX 13025 61440 4096 4096 NT_STATUS_OK
ReadX 13025 126976 4096 4096 NT_STATUS_OK
ReadX 13025 192512 4096 4096 NT_STATUS_OK
ReadX 13025 258048 4096 4096 NT_STATUS_OK
ReadX 13025 323584 4096 4096 NT_STATUS_OK
ReadX 13025 389120 4096 4096 NT_STATUS_OK
ReadX 13025 454656 4096 4096 NT_STATUS_OK
ReadX 13025 520192 4096 4096 NT_STATUS_OK
WriteX 13025 0 65536 65536 NT_STATUS_OK
WriteX 13025 65536 65536 65536 NT_STATUS_OK
WriteX 13025 131072 65536 65536 NT_STATUS_OK
WriteX 13025 196608 65536 65536 NT_STATUS_OK
WriteX 13025 262144 65536 65536 NT_STATUS_OK
WriteX 13025 327680 65536 65536 NT_STATUS_OK
WriteX 13025 393216 65536 65536 NT_STATUS_OK
WriteX 13025 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13026 NT_STATUS_OK
Close 13026 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13022 NT_STATUS_OK
Close 13023 NT_STATUS_OK
Close 13024 NT_STATUS_OK
Close 13025 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13032 NT_STATUS_OK
Close 13032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13035 NT_STATUS_OK
Close 13035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13037 NT_STATUS_OK
Close 13037 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13041 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13044 NT_STATUS_OK
Close 13044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13046 NT_STATUS_OK
Close 13046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13050 NT_STATUS_OK
Close 13050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13055 NT_STATUS_OK
Close 13055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13065 NT_STATUS_OK
Close 13065 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13070 NT_STATUS_OK
Close 13070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13075 NT_STATUS_OK
Close 13075 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13080 NT_STATUS_OK
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13085 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13088 NT_STATUS_OK
Close 13088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13091 NT_STATUS_OK
Close 13091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13094 NT_STATUS_OK
WriteX 13094 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13094 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13094 0 65536 65536 NT_STATUS_OK
WriteX 13094 65536 65536 65536 NT_STATUS_OK
WriteX 13094 131072 65536 65536 NT_STATUS_OK
WriteX 13094 196608 65536 65536 NT_STATUS_OK
WriteX 13094 262144 26634 26634 NT_STATUS_OK
Close 13094 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13099 NT_STATUS_OK
Close 13099 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13100 NT_STATUS_OK
Close 13100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13101 NT_STATUS_OK
ReadX 13101 0 4096 4096 NT_STATUS_OK
Close 13101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 0 4096 4096 NT_STATUS_OK
ReadX 13102 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13102 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13107 NT_STATUS_OK
Close 13107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13110 NT_STATUS_OK
Close 13110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13112 NT_STATUS_OK
Close 13112 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13119 NT_STATUS_OK
Close 13119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13121 NT_STATUS_OK
Close 13121 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13125 NT_STATUS_OK
Close 13125 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13135 NT_STATUS_OK
Close 13135 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13140 NT_STATUS_OK
Close 13140 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13145 NT_STATUS_OK
Close 13145 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13150 NT_STATUS_OK
Close 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13154 NT_STATUS_OK
Close 13154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13159 NT_STATUS_OK
Close 13159 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13164 NT_STATUS_OK
Close 13164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13167 NT_STATUS_OK
Close 13167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13169 NT_STATUS_OK
Close 13169 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13179 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13180 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
Close 13181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
Close 13182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13183 NT_STATUS_OK
ReadX 13183 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13194 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13195 NT_STATUS_OK
ReadX 13195 0 4096 4096 NT_STATUS_OK
Close 13195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13196 NT_STATUS_OK
ReadX 13196 0 4096 4096 NT_STATUS_OK
Close 13196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13183 NT_STATUS_OK
Close 13197 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13226 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13226 0 4096 4096 NT_STATUS_OK
Close 13226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
ReadX 13228 4096 4096 4096 NT_STATUS_OK
ReadX 13228 8192 4096 4096 NT_STATUS_OK
ReadX 13228 12288 4096 4096 NT_STATUS_OK
ReadX 13228 16384 4096 4096 NT_STATUS_OK
ReadX 13228 20480 4096 4096 NT_STATUS_OK
ReadX 13228 24576 4096 4096 NT_STATUS_OK
ReadX 13228 28672 4096 4096 NT_STATUS_OK
ReadX 13228 32768 4096 4096 NT_STATUS_OK
ReadX 13228 36864 4096 4096 NT_STATUS_OK
ReadX 13228 40960 4096 4096 NT_STATUS_OK
ReadX 13228 45056 4096 4096 NT_STATUS_OK
ReadX 13228 49152 4096 4096 NT_STATUS_OK
ReadX 13228 53248 4096 4096 NT_STATUS_OK
ReadX 13228 57344 4096 4096 NT_STATUS_OK
ReadX 13228 61440 4096 4096 NT_STATUS_OK
ReadX 13228 65536 4096 4096 NT_STATUS_OK
ReadX 13228 69632 4096 4096 NT_STATUS_OK
ReadX 13228 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13228 1004 NT_STATUS_OK
WriteX 13228 0 4096 4096 NT_STATUS_OK
Close 13228 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13229 NT_STATUS_OK
SET_FILE_INFORMATION 13229 1004 NT_STATUS_OK
Close 13229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13231 NT_STATUS_OK
Close 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13234 NT_STATUS_OK
WriteX 13234 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13234 258 NT_STATUS_OK
WriteX 13234 0 65536 65536 NT_STATUS_OK
WriteX 13234 65536 19979 19979 NT_STATUS_OK
Close 13234 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
QUERY_FILE_INFORMATION 13235 1004 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
SET_FILE_INFORMATION 13235 1004 NT_STATUS_OK
WriteX 13235 0 4096 4096 NT_STATUS_OK
Flush 13235 NT_STATUS_OK
Close 13235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13236 NT_STATUS_OK
ReadX 13236 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 4096 4096 NT_STATUS_OK
Close 13236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 4096 4096 NT_STATUS_OK
Close 13238 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
Close 13239 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13240 1004 NT_STATUS_OK
WriteX 13240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13241 NT_STATUS_OK
Close 13241 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13243 NT_STATUS_OK
Close 13243 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13246 NT_STATUS_OK
WriteX 13246 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13246 258 NT_STATUS_OK
WriteX 13246 0 65536 65536 NT_STATUS_OK
WriteX 13246 65536 17654 17654 NT_STATUS_OK
Close 13246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13247 NT_STATUS_OK
ReadX 13247 0 4096 4096 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
QUERY_FILE_INFORMATION 13247 1004 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
SET_FILE_INFORMATION 13247 1004 NT_STATUS_OK
WriteX 13247 0 4096 4096 NT_STATUS_OK
Flush 13247 NT_STATUS_OK
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13248 NT_STATUS_OK
SET_FILE_INFORMATION 13248 1004 NT_STATUS_OK
Close 13248 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13250 NT_STATUS_OK
Close 13250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 4096 4096 NT_STATUS_OK
ReadX 13252 4096 4096 4096 NT_STATUS_OK
ReadX 13252 8192 4096 4096 NT_STATUS_OK
ReadX 13252 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13252 16384 4096 4096 NT_STATUS_OK
ReadX 13252 20480 4096 4096 NT_STATUS_OK
ReadX 13252 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 4096 4096 NT_STATUS_OK
Close 13253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13254 NT_STATUS_OK
ReadX 13254 0 4096 4096 NT_STATUS_OK
Close 13254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13255 NT_STATUS_OK
ReadX 13255 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13255 1004 NT_STATUS_OK
WriteX 13255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13256 NT_STATUS_OK
Close 13256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13258 NT_STATUS_OK
Close 13258 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13261 NT_STATUS_OK
WriteX 13261 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13261 258 NT_STATUS_OK
WriteX 13261 0 65536 65536 NT_STATUS_OK
WriteX 13261 65536 19490 19490 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13262 NT_STATUS_OK
ReadX 13262 0 4096 4096 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
QUERY_FILE_INFORMATION 13262 1004 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
SET_FILE_INFORMATION 13262 1004 NT_STATUS_OK
WriteX 13262 0 4096 4096 NT_STATUS_OK
Flush 13262 NT_STATUS_OK
Close 13262 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13263 NT_STATUS_OK
SET_FILE_INFORMATION 13263 1004 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13264 NT_STATUS_OK
ReadX 13264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13265 NT_STATUS_OK
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13267 0 4096 4096 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 4096 4096 NT_STATUS_OK
ReadX 13269 4096 4096 4096 NT_STATUS_OK
ReadX 13269 8192 4096 4096 NT_STATUS_OK
ReadX 13269 12288 4096 4096 NT_STATUS_OK
ReadX 13269 16384 4096 4096 NT_STATUS_OK
ReadX 13269 20480 4096 4096 NT_STATUS_OK
ReadX 13269 24576 4096 4096 NT_STATUS_OK
ReadX 13269 28672 4096 4096 NT_STATUS_OK
ReadX 13269 32768 4096 4096 NT_STATUS_OK
ReadX 13269 36864 4096 4096 NT_STATUS_OK
ReadX 13269 40960 4096 4096 NT_STATUS_OK
ReadX 13269 45056 4096 4096 NT_STATUS_OK
ReadX 13269 49152 4096 4096 NT_STATUS_OK
ReadX 13269 53248 4096 4096 NT_STATUS_OK
ReadX 13269 57344 4096 4096 NT_STATUS_OK
ReadX 13269 61440 4096 4096 NT_STATUS_OK
ReadX 13269 65536 4096 4096 NT_STATUS_OK
ReadX 13269 69632 4096 4096 NT_STATUS_OK
ReadX 13269 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13269 1004 NT_STATUS_OK
WriteX 13269 0 4096 4096 NT_STATUS_OK
Close 13269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13270 NT_STATUS_OK
SET_FILE_INFORMATION 13270 1004 NT_STATUS_OK
Close 13270 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13271 NT_STATUS_OK
ReadX 13271 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13272 NT_STATUS_OK
Close 13272 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13264 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13275 NT_STATUS_OK
WriteX 13275 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13275 258 NT_STATUS_OK
WriteX 13275 0 65536 65536 NT_STATUS_OK
WriteX 13275 65536 8866 8866 NT_STATUS_OK
Close 13275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
WriteX 13276 0 4096 4096 NT_STATUS_OK
Flush 13276 NT_STATUS_OK
SET_FILE_INFORMATION 13276 1004 NT_STATUS_OK
WriteX 13276 0 4096 4096 NT_STATUS_OK
Flush 13276 NT_STATUS_OK
Close 13276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
Close 13278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
Close 13279 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13280 1004 NT_STATUS_OK
WriteX 13280 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13281 NT_STATUS_OK
Close 13281 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13271 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13283 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13286 NT_STATUS_OK
WriteX 13286 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13286 258 NT_STATUS_OK
WriteX 13286 0 65536 65536 NT_STATUS_OK
WriteX 13286 65536 9298 9298 NT_STATUS_OK
Close 13286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
SET_FILE_INFORMATION 13287 1004 NT_STATUS_OK
WriteX 13287 0 4096 4096 NT_STATUS_OK
Flush 13287 NT_STATUS_OK
Close 13287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13288 NT_STATUS_OK
SET_FILE_INFORMATION 13288 1004 NT_STATUS_OK
Close 13288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13290 NT_STATUS_OK
Close 13290 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13293 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13293 0 4096 4096 NT_STATUS_OK
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13294 4096 4096 4096 NT_STATUS_OK
ReadX 13294 8192 4096 4096 NT_STATUS_OK
ReadX 13294 12288 4096 4096 NT_STATUS_OK
ReadX 13294 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 4096 4096 NT_STATUS_OK
Close 13295 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13296 NT_STATUS_OK
ReadX 13296 0 4096 4096 NT_STATUS_OK
Close 13296 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13297 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13297 1004 NT_STATUS_OK
WriteX 13297 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13298 NT_STATUS_OK
Close 13298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13300 NT_STATUS_OK
Close 13300 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13303 NT_STATUS_OK
WriteX 13303 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13303 258 NT_STATUS_OK
WriteX 13303 0 65536 65536 NT_STATUS_OK
WriteX 13303 65536 11540 11540 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
SET_FILE_INFORMATION 13304 1004 NT_STATUS_OK
WriteX 13304 0 4096 4096 NT_STATUS_OK
Flush 13304 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13305 NT_STATUS_OK
SET_FILE_INFORMATION 13305 1004 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13307 NT_STATUS_OK
Close 13307 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 61440 4096 4096 NT_STATUS_OK
ReadX 13309 126976 4096 4096 NT_STATUS_OK
WriteX 13309 0 65536 65536 NT_STATUS_OK
WriteX 13309 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 61440 4096 4096 NT_STATUS_OK
ReadX 13310 126976 4096 4096 NT_STATUS_OK
ReadX 13310 192512 4096 4096 NT_STATUS_OK
ReadX 13310 258048 4096 4096 NT_STATUS_OK
WriteX 13310 0 65536 65536 NT_STATUS_OK
WriteX 13310 65536 65536 65536 NT_STATUS_OK
WriteX 13310 131072 65536 65536 NT_STATUS_OK
WriteX 13310 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13311 NT_STATUS_OK
ReadX 13311 61440 4096 4096 NT_STATUS_OK
ReadX 13311 126976 4096 4096 NT_STATUS_OK
ReadX 13311 192512 4096 4096 NT_STATUS_OK
ReadX 13311 258048 4096 4096 NT_STATUS_OK
ReadX 13311 323584 4096 4096 NT_STATUS_OK
ReadX 13311 389120 4096 4096 NT_STATUS_OK
ReadX 13311 454656 4096 4096 NT_STATUS_OK
ReadX 13311 520192 4096 4096 NT_STATUS_OK
WriteX 13311 0 65536 65536 NT_STATUS_OK
WriteX 13311 65536 65536 65536 NT_STATUS_OK
WriteX 13311 131072 65536 65536 NT_STATUS_OK
WriteX 13311 196608 65536 65536 NT_STATUS_OK
WriteX 13311 262144 65536 65536 NT_STATUS_OK
WriteX 13311 327680 65536 65536 NT_STATUS_OK
WriteX 13311 393216 65536 65536 NT_STATUS_OK
WriteX 13311 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
ReadX 13312 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13313 NT_STATUS_OK
WriteX 13313 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13313 258 NT_STATUS_OK
WriteX 13313 0 53 53 NT_STATUS_OK
Close 13313 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13314 NT_STATUS_OK
Close 13314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13312 8192 4096 4096 NT_STATUS_OK
ReadX 13312 12288 4096 4096 NT_STATUS_OK
WriteX 13316 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13316 258 NT_STATUS_OK
ReadX 13312 16384 4096 4096 NT_STATUS_OK
ReadX 13312 20480 4096 4096 NT_STATUS_OK
WriteX 13316 0 15360 15360 NT_STATUS_OK
Close 13316 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13317 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13317 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13317 1004 NT_STATUS_OK
WriteX 13317 0 4096 4096 NT_STATUS_OK
Close 13317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13318 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13321 NT_STATUS_OK
Close 13321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13320 4096 4096 4096 NT_STATUS_OK
ReadX 13320 8192 4096 4096 NT_STATUS_OK
ReadX 13320 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
ReadX 13323 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13324 NT_STATUS_OK
ReadX 13324 0 4096 4096 NT_STATUS_OK
ReadX 13324 4096 4096 4096 NT_STATUS_OK
ReadX 13324 8192 4096 4096 NT_STATUS_OK
Close 13323 NT_STATUS_OK
Close 13324 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13325 NT_STATUS_OK
WriteX 13325 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13325 258 NT_STATUS_OK
WriteX 13325 0 15360 15360 NT_STATUS_OK
Close 13325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13326 NT_STATUS_OK
ReadX 13326 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13326 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13326 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13327 NT_STATUS_OK
Close 13327 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13330 NT_STATUS_OK
SET_FILE_INFORMATION 13330 1004 NT_STATUS_OK
Close 13330 NT_STATUS_OK
WriteX 13326 0 4096 4096 NT_STATUS_OK
Close 13326 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13331 NT_STATUS_OK
Close 13331 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13333 NT_STATUS_OK
ReadX 13333 0 4096 4096 NT_STATUS_OK
ReadX 13333 4096 4096 4096 NT_STATUS_OK
ReadX 13333 8192 4096 4096 NT_STATUS_OK
ReadX 13333 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13333 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13333 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13335 NT_STATUS_OK
WriteX 13335 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13335 258 NT_STATUS_OK
WriteX 13335 0 53 53 NT_STATUS_OK
Close 13335 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13336 NT_STATUS_OK
Close 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13334 4096 4096 4096 NT_STATUS_OK
ReadX 13334 8192 4096 4096 NT_STATUS_OK
ReadX 13334 12288 4096 4096 NT_STATUS_OK
WriteX 13338 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 258 NT_STATUS_OK
WriteX 13338 0 12006 12006 NT_STATUS_OK
Close 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13339 NT_STATUS_OK
ReadX 13339 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13339 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13339 1004 NT_STATUS_OK
WriteX 13339 0 4096 4096 NT_STATUS_OK
Close 13339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13343 NT_STATUS_OK
Close 13343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13342 4096 4096 4096 NT_STATUS_OK
ReadX 13342 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13345 NT_STATUS_OK
WriteX 13345 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13345 258 NT_STATUS_OK
WriteX 13345 0 11991 11991 NT_STATUS_OK
Close 13345 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13346 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13346 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13347 NT_STATUS_OK
Close 13347 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13350 NT_STATUS_OK
SET_FILE_INFORMATION 13350 1004 NT_STATUS_OK
Close 13350 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13351 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13354 NT_STATUS_OK
Close 13354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13353 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
ReadX 13353 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
WriteX 13353 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13353 1004 NT_STATUS_OK
Close 13329 NT_STATUS_OK
WriteX 13333 0 19054 19054 NT_STATUS_OK
WriteX 13353 0 12288 12288 NT_STATUS_OK
Close 13349 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13356 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13333 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13358 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13360 NT_STATUS_OK
ReadX 13360 0 61440 61440 NT_STATUS_OK
ReadX 13360 61440 4096 4096 NT_STATUS_OK
ReadX 13360 65536 61440 61440 NT_STATUS_OK
ReadX 13360 126976 4096 4096 NT_STATUS_OK
ReadX 13360 131072 61440 61440 NT_STATUS_OK
ReadX 13360 192512 4096 4096 NT_STATUS_OK
ReadX 13360 196608 61440 61440 NT_STATUS_OK
ReadX 13360 258048 4096 4096 NT_STATUS_OK
ReadX 13360 262144 61440 61440 NT_STATUS_OK
ReadX 13360 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 61440 61440 NT_STATUS_OK
ReadX 13361 61440 4096 4096 NT_STATUS_OK
ReadX 13361 65536 61440 61440 NT_STATUS_OK
ReadX 13361 126976 4096 4096 NT_STATUS_OK
ReadX 13361 131072 61440 61440 NT_STATUS_OK
ReadX 13361 192512 4096 4096 NT_STATUS_OK
ReadX 13361 196608 61440 61440 NT_STATUS_OK
ReadX 13361 258048 4096 4096 NT_STATUS_OK
ReadX 13361 262144 61440 61440 NT_STATUS_OK
ReadX 13361 323584 4096 4096 NT_STATUS_OK
ReadX 13361 327680 61440 61440 NT_STATUS_OK
ReadX 13361 389120 4096 4096 NT_STATUS_OK
ReadX 13361 393216 61440 61440 NT_STATUS_OK
ReadX 13361 454656 4096 4096 NT_STATUS_OK
ReadX 13361 458752 61440 61440 NT_STATUS_OK
ReadX 13361 520192 4096 4096 NT_STATUS_OK
ReadX 13361 524288 61440 61440 NT_STATUS_OK
ReadX 13361 585728 4096 4096 NT_STATUS_OK
ReadX 13361 589824 61440 61440 NT_STATUS_OK
ReadX 13361 651264 4096 4096 NT_STATUS_OK
ReadX 13361 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 61440 61440 NT_STATUS_OK
ReadX 13362 61440 4096 4096 NT_STATUS_OK
ReadX 13362 65536 61440 61440 NT_STATUS_OK
ReadX 13362 126976 4096 4096 NT_STATUS_OK
ReadX 13362 131072 61440 61440 NT_STATUS_OK
ReadX 13362 192512 4096 4096 NT_STATUS_OK
ReadX 13362 196608 61440 61440 NT_STATUS_OK
ReadX 13362 258048 4096 4096 NT_STATUS_OK
ReadX 13362 262144 61440 61440 NT_STATUS_OK
ReadX 13362 323584 4096 4096 NT_STATUS_OK
ReadX 13362 327680 61440 61440 NT_STATUS_OK
ReadX 13362 389120 4096 4096 NT_STATUS_OK
ReadX 13362 393216 61440 61440 NT_STATUS_OK
ReadX 13362 454656 4096 4096 NT_STATUS_OK
ReadX 13362 458752 61440 61440 NT_STATUS_OK
ReadX 13362 520192 4096 4096 NT_STATUS_OK
ReadX 13362 524288 61440 61440 NT_STATUS_OK
ReadX 13362 585728 4096 4096 NT_STATUS_OK
ReadX 13362 589824 61440 61440 NT_STATUS_OK
ReadX 13362 651264 4096 4096 NT_STATUS_OK
ReadX 13362 655360 61440 61440 NT_STATUS_OK
ReadX 13362 716800 4096 4096 NT_STATUS_OK
ReadX 13362 720896 61440 61440 NT_STATUS_OK
ReadX 13362 782336 4096 4096 NT_STATUS_OK
ReadX 13362 786432 61440 61440 NT_STATUS_OK
ReadX 13362 847872 4096 4096 NT_STATUS_OK
ReadX 13362 851968 61440 61440 NT_STATUS_OK
ReadX 13362 913408 4096 4096 NT_STATUS_OK
ReadX 13362 917504 61440 61440 NT_STATUS_OK
ReadX 13362 978944 4096 4096 NT_STATUS_OK
ReadX 13362 983040 61440 61440 NT_STATUS_OK
ReadX 13362 1044480 4096 4096 NT_STATUS_OK
ReadX 13362 1048576 61440 61440 NT_STATUS_OK
ReadX 13362 1110016 4096 4096 NT_STATUS_OK
ReadX 13362 1114112 61440 61440 NT_STATUS_OK
ReadX 13362 1175552 4096 4096 NT_STATUS_OK
ReadX 13362 1179648 61440 61440 NT_STATUS_OK
ReadX 13362 1241088 4096 4096 NT_STATUS_OK
ReadX 13362 1245184 61440 61440 NT_STATUS_OK
ReadX 13362 1306624 4096 4096 NT_STATUS_OK
ReadX 13362 1310720 61440 61440 NT_STATUS_OK
ReadX 13362 1372160 4096 4096 NT_STATUS_OK
ReadX 13362 1376256 61440 61440 NT_STATUS_OK
ReadX 13362 1437696 4096 4096 NT_STATUS_OK
ReadX 13362 1441792 61440 61440 NT_STATUS_OK
ReadX 13362 1503232 4096 4096 NT_STATUS_OK
ReadX 13362 1507328 61440 61440 NT_STATUS_OK
ReadX 13362 1568768 4096 4096 NT_STATUS_OK
ReadX 13362 1572864 61440 61440 NT_STATUS_OK
ReadX 13362 1634304 4096 4096 NT_STATUS_OK
ReadX 13362 1638400 61440 61440 NT_STATUS_OK
ReadX 13362 1699840 4096 4096 NT_STATUS_OK
ReadX 13362 1703936 61440 61440 NT_STATUS_OK
ReadX 13362 1765376 4096 4096 NT_STATUS_OK
ReadX 13362 1769472 61440 61440 NT_STATUS_OK
ReadX 13362 1830912 4096 4096 NT_STATUS_OK
ReadX 13362 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13363 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13363 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13364 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13366 NT_STATUS_OK
ReadX 13366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13367 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13368 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13369 NT_STATUS_OK
QUERY_FILE_INFORMATION 13369 1004 NT_STATUS_OK
WriteX 13369 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13369 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13370 NT_STATUS_OK
Close 13370 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13371 NT_STATUS_OK
WriteX 13371 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13371 258 NT_STATUS_OK
WriteX 13371 0 491 491 NT_STATUS_OK
Close 13371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13372 NT_STATUS_OK
ReadX 13372 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13369 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13374 NT_STATUS_OK
Close 13374 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13375 NT_STATUS_OK
WriteX 13375 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13375 258 NT_STATUS_OK
WriteX 13375 0 543 543 NT_STATUS_OK
Close 13375 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13376 NT_STATUS_OK
ReadX 13376 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13360 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13376 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Close 13366 NT_STATUS_OK
Close 13367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13379 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13388 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13388 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13389 NT_STATUS_OK
QUERY_FILE_INFORMATION 13389 1004 NT_STATUS_OK
WriteX 13389 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13389 258 NT_STATUS_OK
WriteX 13389 0 2048 2048 NT_STATUS_OK
Close 13389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13390 NT_STATUS_OK
ReadX 13390 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13390 0 4096 4096 NT_STATUS_OK
Flush 13390 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13390 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13394 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13394 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13395 NT_STATUS_OK
WriteX 13395 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13395 258 NT_STATUS_OK
WriteX 13395 0 2048 2048 NT_STATUS_OK
Close 13395 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13396 NT_STATUS_OK
ReadX 13396 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13400 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13401 NT_STATUS_OK
WriteX 13401 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13401 258 NT_STATUS_OK
WriteX 13401 0 2048 2048 NT_STATUS_OK
Close 13401 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13402 NT_STATUS_OK
ReadX 13402 0 2048 2048 NT_STATUS_OK
ReadX 13380 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13396 0 4096 4096 NT_STATUS_OK
WriteX 13380 0 8192 8192 NT_STATUS_OK
WriteX 13381 0 4096 4096 NT_STATUS_OK
WriteX 13382 0 4096 4096 NT_STATUS_OK
ReadX 13396 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13405 NT_STATUS_OK
ReadX 13405 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13405 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13396 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13414 NT_STATUS_OK
ReadX 13414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13417 NT_STATUS_OK
ReadX 13417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13418 NT_STATUS_OK
ReadX 13418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13426 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 1004 NT_STATUS_OK
WriteX 13426 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13426 258 NT_STATUS_OK
WriteX 13426 0 2048 2048 NT_STATUS_OK
Close 13426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13428 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13429 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13434 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 1004 NT_STATUS_OK
WriteX 13434 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13434 258 NT_STATUS_OK
WriteX 13434 0 2048 2048 NT_STATUS_OK
Close 13434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13435 NT_STATUS_OK
ReadX 13435 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13427 0 4096 4096 NT_STATUS_OK
Flush 13427 NT_STATUS_OK
WriteX 13435 0 4096 4096 NT_STATUS_OK
Flush 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13427 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13435 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13429 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13436 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13437 NT_STATUS_OK
WriteX 13437 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13437 258 NT_STATUS_OK
WriteX 13437 0 4096 4096 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13439 NT_STATUS_OK
Close 13439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13440 NT_STATUS_OK
WriteX 13440 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13440 258 NT_STATUS_OK
WriteX 13440 0 4096 4096 NT_STATUS_OK
Close 13440 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13441 0 4096 4096 NT_STATUS_OK
Close 13438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13415 NT_STATUS_OK
Close 13429 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13420 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Close 13413 NT_STATUS_OK
Close 13414 NT_STATUS_OK
Close 13411 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13444 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13447 NT_STATUS_OK
Close 13447 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13448 NT_STATUS_OK
WriteX 13448 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13448 258 NT_STATUS_OK
WriteX 13448 0 2048 2048 NT_STATUS_OK
Close 13448 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13449 NT_STATUS_OK
ReadX 13449 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13450 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13454 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13457 NT_STATUS_OK
ReadX 13457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13458 NT_STATUS_OK
ReadX 13458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13459 NT_STATUS_OK
ReadX 13459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13460 NT_STATUS_OK
ReadX 13460 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13461 NT_STATUS_OK
ReadX 13461 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13462 NT_STATUS_OK
ReadX 13462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13463 NT_STATUS_OK
QUERY_FILE_INFORMATION 13463 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13449 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Close 13457 NT_STATUS_OK
Close 13458 NT_STATUS_OK
Close 13459 NT_STATUS_OK
Close 13460 NT_STATUS_OK
Close 13462 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Close 13451 NT_STATUS_OK
Close 13454 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13465 NT_STATUS_OK
QUERY_FILE_INFORMATION 13465 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13469 NT_STATUS_OK
ReadX 13469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13470 NT_STATUS_OK
ReadX 13470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13471 NT_STATUS_OK
ReadX 13471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13472 NT_STATUS_OK
ReadX 13472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13473 NT_STATUS_OK
ReadX 13473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13474 NT_STATUS_OK
ReadX 13474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13475 NT_STATUS_OK
ReadX 13475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13476 NT_STATUS_OK
ReadX 13476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13477 NT_STATUS_OK
ReadX 13477 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13478 NT_STATUS_OK
ReadX 13478 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13479 NT_STATUS_OK
ReadX 13479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13480 NT_STATUS_OK
ReadX 13480 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13485 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 1004 NT_STATUS_OK
WriteX 13485 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13485 258 NT_STATUS_OK
WriteX 13485 0 2048 2048 NT_STATUS_OK
Close 13485 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13487 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13488 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13489 NT_STATUS_OK
ReadX 13489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13490 NT_STATUS_OK
ReadX 13490 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13491 NT_STATUS_OK
ReadX 13491 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13497 NT_STATUS_OK
QUERY_FILE_INFORMATION 13497 1004 NT_STATUS_OK
WriteX 13497 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13497 258 NT_STATUS_OK
WriteX 13497 0 2048 2048 NT_STATUS_OK
Close 13497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13499 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13499 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13500 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13500 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13505 NT_STATUS_OK
QUERY_FILE_INFORMATION 13505 1004 NT_STATUS_OK
WriteX 13505 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13505 258 NT_STATUS_OK
WriteX 13505 0 2048 2048 NT_STATUS_OK
Close 13505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13506 NT_STATUS_OK
ReadX 13506 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
Flush 13486 NT_STATUS_OK
WriteX 13498 0 4096 4096 NT_STATUS_OK
Flush 13498 NT_STATUS_OK
WriteX 13506 0 4096 4096 NT_STATUS_OK
Flush 13506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13486 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13498 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13506 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13488 4096 16384 16384 NT_STATUS_OK
ReadX 13468 4096 16384 16384 NT_STATUS_OK
ReadX 13500 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13507 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13508 NT_STATUS_OK
ReadX 13508 0 2048 2048 NT_STATUS_OK
WriteX 13508 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13486 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13509 NT_STATUS_OK
QUERY_FILE_INFORMATION 13509 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13509 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Close 13480 NT_STATUS_OK
Close 13472 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Close 13489 NT_STATUS_OK
Close 13490 NT_STATUS_OK
Close 13491 NT_STATUS_OK
Close 13479 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Close 13474 NT_STATUS_OK
Close 13477 NT_STATUS_OK
Close 13478 NT_STATUS_OK
Close 13475 NT_STATUS_OK
Close 13476 NT_STATUS_OK
Close 13468 NT_STATUS_OK
Close 13469 NT_STATUS_OK
Close 13470 NT_STATUS_OK
Close 13471 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13511 NT_STATUS_OK
QUERY_FILE_INFORMATION 13511 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13511 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13513 NT_STATUS_OK
QUERY_FILE_INFORMATION 13513 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13513 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13515 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13515 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13516 NT_STATUS_OK
ReadX 13516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13517 NT_STATUS_OK
ReadX 13517 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13518 NT_STATUS_OK
ReadX 13518 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13519 NT_STATUS_OK
ReadX 13519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13520 NT_STATUS_OK
ReadX 13520 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13516 4096 16384 16384 NT_STATUS_OK
WriteX 13516 0 4096 4096 NT_STATUS_OK
WriteX 13517 0 4096 4096 NT_STATUS_OK
WriteX 13518 0 4096 4096 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13521 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13522 NT_STATUS_OK
ReadX 13522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13523 NT_STATUS_OK
ReadX 13523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13524 NT_STATUS_OK
ReadX 13524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13525 NT_STATUS_OK
ReadX 13525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13528 NT_STATUS_OK
ReadX 13528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13529 NT_STATUS_OK
ReadX 13529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13530 NT_STATUS_OK
ReadX 13530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13531 NT_STATUS_OK
ReadX 13531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13532 NT_STATUS_OK
ReadX 13532 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13535 NT_STATUS_OK
ReadX 13535 0 8192 8192 NT_STATUS_OK
ReadX 13522 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13536 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13536 0 4096 4096 NT_STATUS_OK
ReadX 13536 4096 4096 4096 NT_STATUS_OK
ReadX 13536 8192 4096 4096 NT_STATUS_OK
WriteX 13522 0 4096 4096 NT_STATUS_OK
WriteX 13523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13537 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13537 0 4096 4096 NT_STATUS_OK
ReadX 13537 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13516 0 4096 4096 NT_STATUS_OK
WriteX 13517 0 4096 4096 NT_STATUS_OK
WriteX 13518 0 4096 4096 NT_STATUS_OK
WriteX 13519 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13541 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13542 NT_STATUS_OK
QUERY_FILE_INFORMATION 13542 1004 NT_STATUS_OK
WriteX 13542 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13542 258 NT_STATUS_OK
WriteX 13542 0 2048 2048 NT_STATUS_OK
Close 13542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13543 NT_STATUS_OK
ReadX 13543 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13544 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13544 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 4096 4096 NT_STATUS_OK
ReadX 13545 4096 4096 4096 NT_STATUS_OK
WriteX 13545 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13543 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13546 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13547 NT_STATUS_OK
ReadX 13547 0 4096 4096 NT_STATUS_OK
ReadX 13547 4096 4096 4096 NT_STATUS_OK
WriteX 13547 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13548 NT_STATUS_OK
QUERY_FILE_INFORMATION 13548 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13535 NT_STATUS_OK
Close 13520 NT_STATUS_OK
Close 13516 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Close 13518 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Close 13528 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13529 NT_STATUS_OK
Close 13530 NT_STATUS_OK
Close 13531 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Close 13525 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Close 13537 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13550 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13550 0 4096 4096 NT_STATUS_OK
ReadX 13550 4096 4096 4096 NT_STATUS_OK
ReadX 13550 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13551 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13552 NT_STATUS_OK
ReadX 13552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13553 NT_STATUS_OK
ReadX 13553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13554 NT_STATUS_OK
ReadX 13554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13555 NT_STATUS_OK
ReadX 13555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13556 NT_STATUS_OK
ReadX 13556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13557 NT_STATUS_OK
ReadX 13557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13558 NT_STATUS_OK
ReadX 13558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13559 NT_STATUS_OK
ReadX 13559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13560 NT_STATUS_OK
ReadX 13560 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13561 NT_STATUS_OK
ReadX 13561 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13562 NT_STATUS_OK
ReadX 13562 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13563 NT_STATUS_OK
ReadX 13563 0 4096 4096 NT_STATUS_OK
ReadX 13551 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13567 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13568 NT_STATUS_OK
QUERY_FILE_INFORMATION 13568 1004 NT_STATUS_OK
WriteX 13568 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13568 258 NT_STATUS_OK
WriteX 13568 0 2048 2048 NT_STATUS_OK
Close 13568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13569 NT_STATUS_OK
ReadX 13569 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13569 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13573 NT_STATUS_OK
Close 13573 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13574 NT_STATUS_OK
QUERY_FILE_INFORMATION 13574 1004 NT_STATUS_OK
WriteX 13574 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13574 258 NT_STATUS_OK
WriteX 13574 0 2048 2048 NT_STATUS_OK
Close 13574 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13575 NT_STATUS_OK
ReadX 13575 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13575 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13558 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13576 NT_STATUS_OK
QUERY_FILE_INFORMATION 13576 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Close 13557 NT_STATUS_OK
Close 13563 NT_STATUS_OK
Close 13551 NT_STATUS_OK
Close 13552 NT_STATUS_OK
Close 13555 NT_STATUS_OK
Close 13556 NT_STATUS_OK
Close 13553 NT_STATUS_OK
Close 13554 NT_STATUS_OK
Close 13558 NT_STATUS_OK
Close 13559 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13561 NT_STATUS_OK
Close 13550 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13575 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13578 NT_STATUS_OK
QUERY_FILE_INFORMATION 13578 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 61440 4096 4096 NT_STATUS_OK
ReadX 13580 126976 4096 4096 NT_STATUS_OK
WriteX 13580 0 65536 65536 NT_STATUS_OK
WriteX 13580 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13581 NT_STATUS_OK
ReadX 13581 61440 4096 4096 NT_STATUS_OK
ReadX 13581 126976 4096 4096 NT_STATUS_OK
ReadX 13581 192512 4096 4096 NT_STATUS_OK
ReadX 13581 258048 4096 4096 NT_STATUS_OK
WriteX 13581 0 65536 65536 NT_STATUS_OK
WriteX 13581 65536 65536 65536 NT_STATUS_OK
WriteX 13581 131072 65536 65536 NT_STATUS_OK
WriteX 13581 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13582 NT_STATUS_OK
ReadX 13582 61440 4096 4096 NT_STATUS_OK
ReadX 13582 126976 4096 4096 NT_STATUS_OK
ReadX 13582 192512 4096 4096 NT_STATUS_OK
ReadX 13582 258048 4096 4096 NT_STATUS_OK
ReadX 13582 323584 4096 4096 NT_STATUS_OK
ReadX 13582 389120 4096 4096 NT_STATUS_OK
ReadX 13582 454656 4096 4096 NT_STATUS_OK
ReadX 13582 520192 4096 4096 NT_STATUS_OK
WriteX 13582 0 65536 65536 NT_STATUS_OK
WriteX 13582 65536 65536 65536 NT_STATUS_OK
WriteX 13582 131072 65536 65536 NT_STATUS_OK
WriteX 13582 196608 65536 65536 NT_STATUS_OK
WriteX 13582 262144 65536 65536 NT_STATUS_OK
WriteX 13582 327680 65536 65536 NT_STATUS_OK
WriteX 13582 393216 65536 65536 NT_STATUS_OK
WriteX 13582 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13583 NT_STATUS_OK
ReadX 13583 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13583 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13583 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13583 8192 4096 4096 NT_STATUS_OK
ReadX 13583 12288 4096 4096 NT_STATUS_OK
ReadX 13583 16384 4096 4096 NT_STATUS_OK
ReadX 13583 20480 4096 4096 NT_STATUS_OK
ReadX 13583 24576 4096 4096 NT_STATUS_OK
ReadX 13583 28672 4096 4096 NT_STATUS_OK
ReadX 13583 32768 4096 4096 NT_STATUS_OK
ReadX 13583 36864 4096 4096 NT_STATUS_OK
ReadX 13583 40960 4096 4096 NT_STATUS_OK
ReadX 13583 45056 4096 4096 NT_STATUS_OK
ReadX 13583 49152 4096 4096 NT_STATUS_OK
ReadX 13583 53248 4096 4096 NT_STATUS_OK
ReadX 13583 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13583 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13584 NT_STATUS_OK
Close 13584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13580 NT_STATUS_OK
Close 13581 NT_STATUS_OK
Close 13582 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13586 NT_STATUS_OK
WriteX 13586 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13586 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13586 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13586 1004 NT_STATUS_OK
WriteX 13586 0 57088 57088 NT_STATUS_OK
WriteX 13586 0 4096 4096 NT_STATUS_OK
Flush 13586 NT_STATUS_OK
Close 13583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13587 NT_STATUS_OK
SET_FILE_INFORMATION 13587 1004 NT_STATUS_OK
Close 13587 NT_STATUS_OK
SET_FILE_INFORMATION 13586 1004 NT_STATUS_OK
WriteX 13586 0 4096 4096 NT_STATUS_OK
Close 13586 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13588 NT_STATUS_OK
Close 13588 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13590 NT_STATUS_OK
ReadX 13590 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13590 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13591 NT_STATUS_OK
WriteX 13591 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13591 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13591 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13591 1004 NT_STATUS_OK
WriteX 13591 0 51456 51456 NT_STATUS_OK
WriteX 13591 0 4096 4096 NT_STATUS_OK
Flush 13591 NT_STATUS_OK
SET_FILE_INFORMATION 13591 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13591 1004 NT_STATUS_OK
WriteX 13591 0 4096 4096 NT_STATUS_OK
Close 13591 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13593 NT_STATUS_OK
Close 13593 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13595 NT_STATUS_OK
ReadX 13595 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13595 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13597 NT_STATUS_OK
Close 13597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13600 NT_STATUS_OK
WriteX 13600 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13600 258 NT_STATUS_OK
WriteX 13600 0 53077 53077 NT_STATUS_OK
Close 13600 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13601 NT_STATUS_OK
WriteX 13601 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13601 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13601 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13601 1004 NT_STATUS_OK
WriteX 13601 0 65536 65536 NT_STATUS_OK
WriteX 13601 65536 1856 1856 NT_STATUS_OK
WriteX 13601 0 4096 4096 NT_STATUS_OK
Flush 13601 NT_STATUS_OK
SET_FILE_INFORMATION 13601 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13601 1004 NT_STATUS_OK
WriteX 13601 0 4096 4096 NT_STATUS_OK
Close 13601 NT_STATUS_OK
Close 13595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13605 NT_STATUS_OK
ReadX 13605 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13607 NT_STATUS_OK
Close 13607 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13610 NT_STATUS_OK
WriteX 13610 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13610 258 NT_STATUS_OK
WriteX 13610 0 7983 7983 NT_STATUS_OK
Close 13610 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13612 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13615 NT_STATUS_OK
WriteX 13615 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13615 258 NT_STATUS_OK
WriteX 13615 0 65536 65536 NT_STATUS_OK
WriteX 13615 65536 65536 65536 NT_STATUS_OK
WriteX 13615 131072 65536 65536 NT_STATUS_OK
WriteX 13615 196608 65536 65536 NT_STATUS_OK
WriteX 13615 262144 65536 65536 NT_STATUS_OK
WriteX 13615 327680 65536 65536 NT_STATUS_OK
WriteX 13615 393216 65536 65536 NT_STATUS_OK
WriteX 13615 458752 46731 46731 NT_STATUS_OK
Close 13615 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13616 NT_STATUS_OK
WriteX 13616 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13605 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 65536 65536 NT_STATUS_OK
WriteX 13616 65536 22848 22848 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Flush 13616 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13616 1004 NT_STATUS_OK
WriteX 13616 0 4096 4096 NT_STATUS_OK
Close 13616 NT_STATUS_OK
Close 13605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13618 NT_STATUS_OK
Close 13618 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13620 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13621 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13621 1004 NT_STATUS_OK
ReadX 13621 8192 4096 4096 NT_STATUS_OK
ReadX 13621 12288 4096 4096 NT_STATUS_OK
ReadX 13621 16384 4096 4096 NT_STATUS_OK
ReadX 13621 20480 4096 4096 NT_STATUS_OK
ReadX 13621 24576 4096 4096 NT_STATUS_OK
ReadX 13621 28672 4096 4096 NT_STATUS_OK
ReadX 13621 32768 4096 4096 NT_STATUS_OK
ReadX 13621 36864 4096 4096 NT_STATUS_OK
ReadX 13621 40960 4096 4096 NT_STATUS_OK
ReadX 13621 45056 4096 4096 NT_STATUS_OK
ReadX 13621 49152 4096 4096 NT_STATUS_OK
ReadX 13621 53248 4096 4096 NT_STATUS_OK
ReadX 13621 57344 4096 4096 NT_STATUS_OK
ReadX 13621 61440 4096 4096 NT_STATUS_OK
ReadX 13621 65536 4096 4096 NT_STATUS_OK
ReadX 13621 69632 4096 4096 NT_STATUS_OK
ReadX 13621 73728 4096 4096 NT_STATUS_OK
ReadX 13621 77824 4096 4096 NT_STATUS_OK
ReadX 13621 81920 4096 4096 NT_STATUS_OK
ReadX 13621 86016 4096 4096 NT_STATUS_OK
ReadX 13621 90112 4096 4096 NT_STATUS_OK
ReadX 13621 94208 4096 4096 NT_STATUS_OK
ReadX 13621 98304 4096 4096 NT_STATUS_OK
ReadX 13621 102400 4096 4096 NT_STATUS_OK
ReadX 13621 106496 4096 4096 NT_STATUS_OK
ReadX 13621 110592 4096 4096 NT_STATUS_OK
ReadX 13621 114688 4096 4096 NT_STATUS_OK
ReadX 13621 118784 4096 4096 NT_STATUS_OK
ReadX 13621 122880 4096 4096 NT_STATUS_OK
ReadX 13621 126976 4096 4096 NT_STATUS_OK
ReadX 13621 131072 4096 4096 NT_STATUS_OK
ReadX 13621 135168 4096 4096 NT_STATUS_OK
ReadX 13621 139264 4096 4096 NT_STATUS_OK
ReadX 13621 143360 4096 4096 NT_STATUS_OK
ReadX 13621 147456 4096 4096 NT_STATUS_OK
ReadX 13621 151552 4096 4096 NT_STATUS_OK
ReadX 13621 155648 4096 4096 NT_STATUS_OK
ReadX 13621 159744 4096 4096 NT_STATUS_OK
ReadX 13621 163840 4096 4096 NT_STATUS_OK
ReadX 13621 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13621 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13624 NT_STATUS_OK
WriteX 13624 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13624 258 NT_STATUS_OK
Close 13621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13625 NT_STATUS_OK
SET_FILE_INFORMATION 13625 1004 NT_STATUS_OK
Close 13625 NT_STATUS_OK
WriteX 13624 0 42388 42388 NT_STATUS_OK
Close 13624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13626 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13628 NT_STATUS_OK
ReadX 13628 0 4096 4096 NT_STATUS_OK
ReadX 13628 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13629 NT_STATUS_OK
WriteX 13629 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13629 258 NT_STATUS_OK
SET_FILE_INFORMATION 13629 1004 NT_STATUS_OK
WriteX 13629 0 42652 42652 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Close 13628 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 4096 4096 NT_STATUS_OK
ReadX 13633 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13635 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13638 NT_STATUS_OK
WriteX 13638 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13638 258 NT_STATUS_OK
WriteX 13638 0 65536 65536 NT_STATUS_OK
WriteX 13638 65536 49 49 NT_STATUS_OK
Close 13638 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13639 NT_STATUS_OK
ReadX 13639 0 61440 61440 NT_STATUS_OK
ReadX 13639 61440 4096 4096 NT_STATUS_OK
ReadX 13639 65536 61440 61440 NT_STATUS_OK
ReadX 13639 126976 4096 4096 NT_STATUS_OK
ReadX 13639 131072 61440 61440 NT_STATUS_OK
ReadX 13639 192512 4096 4096 NT_STATUS_OK
ReadX 13639 196608 61440 61440 NT_STATUS_OK
ReadX 13639 258048 4096 4096 NT_STATUS_OK
ReadX 13639 262144 61440 61440 NT_STATUS_OK
ReadX 13639 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13640 NT_STATUS_OK
ReadX 13640 0 61440 61440 NT_STATUS_OK
ReadX 13640 61440 4096 4096 NT_STATUS_OK
ReadX 13640 65536 61440 61440 NT_STATUS_OK
ReadX 13640 126976 4096 4096 NT_STATUS_OK
ReadX 13640 131072 61440 61440 NT_STATUS_OK
ReadX 13640 192512 4096 4096 NT_STATUS_OK
ReadX 13640 196608 61440 61440 NT_STATUS_OK
ReadX 13640 258048 4096 4096 NT_STATUS_OK
ReadX 13640 262144 61440 61440 NT_STATUS_OK
ReadX 13640 323584 4096 4096 NT_STATUS_OK
ReadX 13640 327680 61440 61440 NT_STATUS_OK
ReadX 13640 389120 4096 4096 NT_STATUS_OK
ReadX 13640 393216 61440 61440 NT_STATUS_OK
ReadX 13640 454656 4096 4096 NT_STATUS_OK
ReadX 13640 458752 61440 61440 NT_STATUS_OK
ReadX 13640 520192 4096 4096 NT_STATUS_OK
ReadX 13640 524288 61440 61440 NT_STATUS_OK
ReadX 13640 585728 4096 4096 NT_STATUS_OK
ReadX 13640 589824 61440 61440 NT_STATUS_OK
ReadX 13640 651264 4096 4096 NT_STATUS_OK
ReadX 13640 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13641 NT_STATUS_OK
ReadX 13641 0 61440 61440 NT_STATUS_OK
ReadX 13641 61440 4096 4096 NT_STATUS_OK
ReadX 13641 65536 61440 61440 NT_STATUS_OK
ReadX 13641 126976 4096 4096 NT_STATUS_OK
ReadX 13641 131072 61440 61440 NT_STATUS_OK
ReadX 13641 192512 4096 4096 NT_STATUS_OK
ReadX 13641 196608 61440 61440 NT_STATUS_OK
ReadX 13641 258048 4096 4096 NT_STATUS_OK
ReadX 13641 262144 61440 61440 NT_STATUS_OK
ReadX 13641 323584 4096 4096 NT_STATUS_OK
ReadX 13641 327680 61440 61440 NT_STATUS_OK
ReadX 13641 389120 4096 4096 NT_STATUS_OK
ReadX 13641 393216 61440 61440 NT_STATUS_OK
ReadX 13641 454656 4096 4096 NT_STATUS_OK
ReadX 13641 458752 61440 61440 NT_STATUS_OK
ReadX 13641 520192 4096 4096 NT_STATUS_OK
ReadX 13641 524288 61440 61440 NT_STATUS_OK
ReadX 13641 585728 4096 4096 NT_STATUS_OK
ReadX 13641 589824 61440 61440 NT_STATUS_OK
ReadX 13641 651264 4096 4096 NT_STATUS_OK
ReadX 13641 655360 61440 61440 NT_STATUS_OK
ReadX 13641 716800 4096 4096 NT_STATUS_OK
ReadX 13641 720896 61440 61440 NT_STATUS_OK
ReadX 13641 782336 4096 4096 NT_STATUS_OK
ReadX 13641 786432 61440 61440 NT_STATUS_OK
ReadX 13641 847872 4096 4096 NT_STATUS_OK
ReadX 13641 851968 61440 61440 NT_STATUS_OK
ReadX 13641 913408 4096 4096 NT_STATUS_OK
ReadX 13641 917504 61440 61440 NT_STATUS_OK
ReadX 13641 978944 4096 4096 NT_STATUS_OK
ReadX 13641 983040 61440 61440 NT_STATUS_OK
ReadX 13641 1044480 4096 4096 NT_STATUS_OK
ReadX 13641 1048576 61440 61440 NT_STATUS_OK
ReadX 13641 1110016 4096 4096 NT_STATUS_OK
ReadX 13641 1114112 61440 61440 NT_STATUS_OK
ReadX 13641 1175552 4096 4096 NT_STATUS_OK
ReadX 13641 1179648 61440 61440 NT_STATUS_OK
ReadX 13641 1241088 4096 4096 NT_STATUS_OK
ReadX 13641 1245184 61440 61440 NT_STATUS_OK
ReadX 13641 1306624 4096 4096 NT_STATUS_OK
ReadX 13641 1310720 61440 61440 NT_STATUS_OK
ReadX 13641 1372160 4096 4096 NT_STATUS_OK
ReadX 13641 1376256 61440 61440 NT_STATUS_OK
ReadX 13641 1437696 4096 4096 NT_STATUS_OK
ReadX 13641 1441792 61440 61440 NT_STATUS_OK
ReadX 13641 1503232 4096 4096 NT_STATUS_OK
ReadX 13641 1507328 61440 61440 NT_STATUS_OK
ReadX 13641 1568768 4096 4096 NT_STATUS_OK
ReadX 13641 1572864 61440 61440 NT_STATUS_OK
ReadX 13641 1634304 4096 4096 NT_STATUS_OK
ReadX 13641 1638400 61440 61440 NT_STATUS_OK
ReadX 13641 1699840 4096 4096 NT_STATUS_OK
ReadX 13641 1703936 61440 61440 NT_STATUS_OK
ReadX 13641 1765376 4096 4096 NT_STATUS_OK
ReadX 13641 1769472 61440 61440 NT_STATUS_OK
ReadX 13641 1830912 4096 4096 NT_STATUS_OK
ReadX 13641 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13643 NT_STATUS_OK
QUERY_FILE_INFORMATION 13643 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13643 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13643 1005 NT_STATUS_OK
ReadX 13643 2156 24 24 NT_STATUS_OK
ReadX 13643 2139 276 276 NT_STATUS_OK
ReadX 13643 2136 14 14 NT_STATUS_OK
ReadX 13643 2136 7 7 NT_STATUS_OK
ReadX 13643 2138 12 12 NT_STATUS_OK
ReadX 13643 2137 8 8 NT_STATUS_OK
ReadX 13643 2135 15 15 NT_STATUS_OK
ReadX 13643 0 16 16 NT_STATUS_OK
ReadX 13643 16 2048 2048 NT_STATUS_OK
ReadX 13643 2064 2048 2048 NT_STATUS_OK
ReadX 13643 257 2048 2048 NT_STATUS_OK
ReadX 13643 385 2048 2048 NT_STATUS_OK
ReadX 13643 513 2048 2048 NT_STATUS_OK
ReadX 13643 641 2048 2048 NT_STATUS_OK
ReadX 13643 769 2048 2048 NT_STATUS_OK
ReadX 13643 897 2048 2048 NT_STATUS_OK
ReadX 13643 1025 2048 2048 NT_STATUS_OK
ReadX 13643 1153 2048 2048 NT_STATUS_OK
ReadX 13643 1281 2048 2048 NT_STATUS_OK
ReadX 13643 1409 2048 2048 NT_STATUS_OK
ReadX 13643 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13645 NT_STATUS_OK
Close 13645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13639 NT_STATUS_OK
Close 13640 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13648 NT_STATUS_OK
WriteX 13648 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13648 258 NT_STATUS_OK
WriteX 13648 0 10575 10575 NT_STATUS_OK
Flush 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13649 NT_STATUS_OK
Close 13649 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13651 NT_STATUS_OK
ReadX 13651 0 4096 4096 NT_STATUS_OK
Close 13643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13653 NT_STATUS_OK
LockX 13653 2147483538 1 NT_STATUS_OK
UnlockX 13653 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13653 1005 NT_STATUS_OK
ReadX 13653 0 512 512 NT_STATUS_OK
ReadX 13653 512 512 512 NT_STATUS_OK
ReadX 13653 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13653 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13653 1004 NT_STATUS_OK
Close 13653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13654 NT_STATUS_OK
QUERY_FILE_INFORMATION 13654 1005 NT_STATUS_OK
ReadX 13654 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13655 NT_STATUS_OK
LockX 13655 2147483538 1 NT_STATUS_OK
UnlockX 13655 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13655 1005 NT_STATUS_OK
ReadX 13655 0 512 512 NT_STATUS_OK
ReadX 13655 512 512 512 NT_STATUS_OK
ReadX 13655 1024 512 512 NT_STATUS_OK
ReadX 13655 288 20 20 NT_STATUS_OK
ReadX 13655 308 2084 2084 NT_STATUS_OK
ReadX 13655 388 2084 2084 NT_STATUS_OK
ReadX 13655 388 2084 2084 NT_STATUS_OK
ReadX 13642 2157 1386 1386 NT_STATUS_OK
ReadX 13655 2472 399 399 NT_STATUS_OK
ReadX 13655 3072 1536 1536 NT_STATUS_OK
ReadX 13655 544 149 149 NT_STATUS_OK
ReadX 13655 693 485 485 NT_STATUS_OK
Close 13655 NT_STATUS_OK
ReadX 13642 2157 4096 4096 NT_STATUS_OK
ReadX 13642 6253 4096 4096 NT_STATUS_OK
ReadX 13642 10349 4096 4096 NT_STATUS_OK
ReadX 13642 14445 4096 4096 NT_STATUS_OK
ReadX 13642 18541 4096 4096 NT_STATUS_OK
ReadX 13642 22637 256 256 NT_STATUS_OK
ReadX 13642 22893 4096 4096 NT_STATUS_OK
ReadX 13642 26989 4096 4096 NT_STATUS_OK
ReadX 13642 31085 4096 4096 NT_STATUS_OK
ReadX 13642 35181 4096 4096 NT_STATUS_OK
ReadX 13642 39277 4096 4096 NT_STATUS_OK
ReadX 13642 43373 4096 4096 NT_STATUS_OK
ReadX 13642 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13642 2157 1024 1024 NT_STATUS_OK
ReadX 13642 1667 4688 4688 NT_STATUS_OK
ReadX 13642 6355 3516 3516 NT_STATUS_OK
ReadX 13642 9871 16384 16384 NT_STATUS_OK
ReadX 13642 26255 3771 3771 NT_STATUS_OK
ReadX 13642 30026 2048 2048 NT_STATUS_OK
ReadX 13642 32074 1024 1024 NT_STATUS_OK
ReadX 13642 33098 6652 6652 NT_STATUS_OK
ReadX 13642 39750 16384 16384 NT_STATUS_OK
ReadX 13642 56134 10496 10496 NT_STATUS_OK
ReadX 13642 66630 1784 1784 NT_STATUS_OK
ReadX 13642 68414 90 90 NT_STATUS_OK
ReadX 13642 68504 273 273 NT_STATUS_OK
ReadX 13642 68777 1600 1600 NT_STATUS_OK
ReadX 13642 70377 640 640 NT_STATUS_OK
ReadX 13642 71017 1280 1280 NT_STATUS_OK
ReadX 13642 72297 8464 8464 NT_STATUS_OK
ReadX 13642 80761 158 158 NT_STATUS_OK
ReadX 13642 80919 912 912 NT_STATUS_OK
ReadX 13642 81831 1980 1980 NT_STATUS_OK
ReadX 13642 83811 2256 2256 NT_STATUS_OK
ReadX 13642 86067 400 400 NT_STATUS_OK
ReadX 13642 86467 252 252 NT_STATUS_OK
ReadX 13642 86719 42 42 NT_STATUS_OK
ReadX 13642 86761 725 725 NT_STATUS_OK
ReadX 13642 2009 512 512 NT_STATUS_OK
ReadX 13642 3895 9 9 NT_STATUS_OK
ReadX 13642 3781 46 46 NT_STATUS_OK
ReadX 13642 4059 92 92 NT_STATUS_OK
ReadX 13642 3781 92 92 NT_STATUS_OK
ReadX 13642 3986 184 184 NT_STATUS_OK
ReadX 13642 3987 16384 16384 NT_STATUS_OK
ReadX 13642 3902 16384 16384 NT_STATUS_OK
ReadX 13642 3781 10240 10240 NT_STATUS_OK
ReadX 13642 3821 16384 16384 NT_STATUS_OK
ReadX 13642 3891 935 935 NT_STATUS_OK
ReadX 13642 4060 10240 10240 NT_STATUS_OK
ReadX 13642 4059 184 184 NT_STATUS_OK
ReadX 13642 256 184 184 NT_STATUS_OK
ReadX 13642 256 1026 1026 NT_STATUS_OK
ReadX 13642 3901 326 326 NT_STATUS_OK
ReadX 13642 3899 652 652 NT_STATUS_OK
ReadX 13642 256 2 2 NT_STATUS_OK
ReadX 13642 258 4948 4948 NT_STATUS_OK
Close 13642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13657 NT_STATUS_OK
Close 13657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13660 NT_STATUS_OK
WriteX 13660 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13660 258 NT_STATUS_OK
WriteX 13660 0 65536 65536 NT_STATUS_OK
WriteX 13660 65536 65536 65536 NT_STATUS_OK
WriteX 13660 131072 65536 65536 NT_STATUS_OK
WriteX 13660 196608 65536 65536 NT_STATUS_OK
WriteX 13660 262144 65536 65536 NT_STATUS_OK
WriteX 13660 327680 65536 65536 NT_STATUS_OK
WriteX 13660 393216 65536 65536 NT_STATUS_OK
WriteX 13660 458752 65536 65536 NT_STATUS_OK
WriteX 13660 524288 65536 65536 NT_STATUS_OK
WriteX 13660 589824 35257 35257 NT_STATUS_OK
Close 13660 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13662 NT_STATUS_OK
Close 13662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13665 NT_STATUS_OK
WriteX 13665 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13665 258 NT_STATUS_OK
WriteX 13665 0 65536 65536 NT_STATUS_OK
WriteX 13665 65536 65536 65536 NT_STATUS_OK
WriteX 13665 131072 65536 65536 NT_STATUS_OK
WriteX 13665 196608 65536 65536 NT_STATUS_OK
WriteX 13665 262144 65536 65536 NT_STATUS_OK
WriteX 13665 327680 65536 65536 NT_STATUS_OK
WriteX 13665 393216 65536 65536 NT_STATUS_OK
WriteX 13665 458752 65536 65536 NT_STATUS_OK
WriteX 13665 524288 65536 65536 NT_STATUS_OK
WriteX 13665 589824 57598 57598 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13667 NT_STATUS_OK
WriteX 13667 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13667 258 NT_STATUS_OK
WriteX 13667 0 12543 12543 NT_STATUS_OK
Flush 13667 NT_STATUS_OK
Close 13667 NT_STATUS_OK
Close 13651 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13671 NT_STATUS_OK
ReadX 13671 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13672 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13673 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13673 1005 NT_STATUS_OK
ReadX 13673 1938 24 24 NT_STATUS_OK
ReadX 13673 1920 276 276 NT_STATUS_OK
ReadX 13673 1918 14 14 NT_STATUS_OK
ReadX 13673 1918 7 7 NT_STATUS_OK
ReadX 13673 1919 12 12 NT_STATUS_OK
ReadX 13673 1919 8 8 NT_STATUS_OK
ReadX 13673 1917 15 15 NT_STATUS_OK
ReadX 13673 0 16 16 NT_STATUS_OK
ReadX 13673 16 2048 2048 NT_STATUS_OK
ReadX 13673 2064 2048 2048 NT_STATUS_OK
ReadX 13673 257 2048 2048 NT_STATUS_OK
ReadX 13673 385 2048 2048 NT_STATUS_OK
ReadX 13673 513 2048 2048 NT_STATUS_OK
ReadX 13673 641 2048 2048 NT_STATUS_OK
ReadX 13673 769 2048 2048 NT_STATUS_OK
ReadX 13673 897 2048 2048 NT_STATUS_OK
ReadX 13673 1025 2048 2048 NT_STATUS_OK
ReadX 13673 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13675 NT_STATUS_OK
Close 13675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13678 NT_STATUS_OK
WriteX 13678 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13678 258 NT_STATUS_OK
WriteX 13678 0 11588 11588 NT_STATUS_OK
Flush 13678 NT_STATUS_OK
Close 13678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13679 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 0 4096 4096 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13683 NT_STATUS_OK
WriteX 13683 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13683 258 NT_STATUS_OK
WriteX 13683 0 11615 11615 NT_STATUS_OK
Flush 13683 NT_STATUS_OK
Close 13683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13685 NT_STATUS_OK
Close 13685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13687 NT_STATUS_OK
ReadX 13687 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13689 NT_STATUS_OK
Close 13689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13692 NT_STATUS_OK
WriteX 13692 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13692 258 NT_STATUS_OK
WriteX 13692 0 65536 65536 NT_STATUS_OK
WriteX 13692 65536 16050 16050 NT_STATUS_OK
Close 13692 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13672 1939 64 64 NT_STATUS_OK
ReadX 13672 128 248 248 NT_STATUS_OK
ReadX 13672 128 568 568 NT_STATUS_OK
ReadX 13672 3872 1536 1536 NT_STATUS_OK
ReadX 13672 3456 2560 2560 NT_STATUS_OK
ReadX 13672 3136 512 512 NT_STATUS_OK
ReadX 13672 2880 4096 4096 NT_STATUS_OK
ReadX 13672 3264 3072 3072 NT_STATUS_OK
ReadX 13672 320 4096 4096 NT_STATUS_OK
ReadX 13672 1024 4096 4096 NT_STATUS_OK
ReadX 13672 3616 4096 4096 NT_STATUS_OK
ReadX 13672 1939 64 64 NT_STATUS_OK
ReadX 13672 128 248 248 NT_STATUS_OK
ReadX 13672 128 608 608 NT_STATUS_OK
ReadX 13672 2858 1024 1024 NT_STATUS_OK
ReadX 13672 2810 4096 4096 NT_STATUS_OK
ReadX 13672 2826 4096 4096 NT_STATUS_OK
ReadX 13672 2580 2048 2048 NT_STATUS_OK
ReadX 13672 2800 2560 2560 NT_STATUS_OK
ReadX 13672 2100 4096 4096 NT_STATUS_OK
ReadX 13672 2084 4096 4096 NT_STATUS_OK
ReadX 13672 868 4096 4096 NT_STATUS_OK
ReadX 13672 2324 4096 4096 NT_STATUS_OK
ReadX 13672 884 4096 4096 NT_STATUS_OK
ReadX 13672 2604 1024 1024 NT_STATUS_OK
ReadX 13672 580 4096 4096 NT_STATUS_OK
ReadX 13672 596 4096 4096 NT_STATUS_OK
ReadX 13672 2752 4096 4096 NT_STATUS_OK
ReadX 13672 2842 1024 1024 NT_STATUS_OK
ReadX 13672 660 4096 4096 NT_STATUS_OK
ReadX 13672 2720 4096 4096 NT_STATUS_OK
ReadX 13672 2736 4096 4096 NT_STATUS_OK
ReadX 13672 628 4096 4096 NT_STATUS_OK
ReadX 13672 2704 4096 4096 NT_STATUS_OK
ReadX 13672 1556 4096 4096 NT_STATUS_OK
ReadX 13672 576 4096 4096 NT_STATUS_OK
ReadX 13672 3168 1536 1536 NT_STATUS_OK
ReadX 13672 832 4096 4096 NT_STATUS_OK
ReadX 13672 1088 4096 4096 NT_STATUS_OK
ReadX 13672 1344 4096 4096 NT_STATUS_OK
ReadX 13672 1600 4096 4096 NT_STATUS_OK
ReadX 13672 1856 4096 4096 NT_STATUS_OK
ReadX 13672 2112 4096 4096 NT_STATUS_OK
ReadX 13672 1892 4096 4096 NT_STATUS_OK
ReadX 13672 820 4096 4096 NT_STATUS_OK
ReadX 13672 788 4096 4096 NT_STATUS_OK
ReadX 13672 1604 4096 4096 NT_STATUS_OK
ReadX 13672 3648 4096 4096 NT_STATUS_OK
ReadX 13672 2608 4096 4096 NT_STATUS_OK
ReadX 13672 548 4096 4096 NT_STATUS_OK
ReadX 13672 740 4096 4096 NT_STATUS_OK
ReadX 13672 1344 4096 4096 NT_STATUS_OK
ReadX 13672 3392 4096 4096 NT_STATUS_OK
ReadX 13672 3904 4096 4096 NT_STATUS_OK
ReadX 13672 644 4096 4096 NT_STATUS_OK
ReadX 13672 676 4096 4096 NT_STATUS_OK
ReadX 13672 2688 4096 4096 NT_STATUS_OK
ReadX 13672 320 4096 4096 NT_STATUS_OK
ReadX 13672 900 4096 4096 NT_STATUS_OK
ReadX 13672 1908 4096 4096 NT_STATUS_OK
ReadX 13672 852 4096 4096 NT_STATUS_OK
ReadX 13672 724 4096 4096 NT_STATUS_OK
ReadX 13672 2292 4096 4096 NT_STATUS_OK
ReadX 13672 612 4096 4096 NT_STATUS_OK
ReadX 13672 388 4096 4096 NT_STATUS_OK
ReadX 13672 2368 4096 4096 NT_STATUS_OK
ReadX 13672 2624 4096 4096 NT_STATUS_OK
ReadX 13672 500 4096 4096 NT_STATUS_OK
ReadX 13672 356 4096 4096 NT_STATUS_OK
ReadX 13672 1024 4096 4096 NT_STATUS_OK
ReadX 13672 576 4096 4096 NT_STATUS_OK
ReadX 13672 340 4096 4096 NT_STATUS_OK
ReadX 13672 420 4096 4096 NT_STATUS_OK
ReadX 13672 1600 4096 4096 NT_STATUS_OK
ReadX 13672 404 4096 4096 NT_STATUS_OK
ReadX 13672 1428 4096 4096 NT_STATUS_OK
ReadX 13672 2656 4096 4096 NT_STATUS_OK
ReadX 13672 2624 4096 4096 NT_STATUS_OK
ReadX 13672 452 4096 4096 NT_STATUS_OK
ReadX 13672 692 4096 4096 NT_STATUS_OK
ReadX 13672 564 4096 4096 NT_STATUS_OK
ReadX 13672 372 4096 4096 NT_STATUS_OK
ReadX 13672 468 4096 4096 NT_STATUS_OK
ReadX 13672 484 4096 4096 NT_STATUS_OK
ReadX 13672 1088 4096 4096 NT_STATUS_OK
ReadX 13672 1924 4096 4096 NT_STATUS_OK
ReadX 13672 2768 4096 4096 NT_STATUS_OK
ReadX 13672 832 4096 4096 NT_STATUS_OK
ReadX 13672 836 4096 4096 NT_STATUS_OK
ReadX 13672 1856 4096 4096 NT_STATUS_OK
ReadX 13672 2640 4096 4096 NT_STATUS_OK
ReadX 13672 436 4096 4096 NT_STATUS_OK
ReadX 13672 1828 4096 4096 NT_STATUS_OK
ReadX 13672 804 4096 4096 NT_STATUS_OK
ReadX 13672 1860 4096 4096 NT_STATUS_OK
ReadX 13672 1812 4096 4096 NT_STATUS_OK
ReadX 13672 756 4096 4096 NT_STATUS_OK
ReadX 13672 1636 4096 4096 NT_STATUS_OK
ReadX 13672 772 4096 4096 NT_STATUS_OK
ReadX 13672 2036 4096 4096 NT_STATUS_OK
ReadX 13672 1220 4096 4096 NT_STATUS_OK
ReadX 13672 1652 4096 4096 NT_STATUS_OK
ReadX 13672 2588 4096 4096 NT_STATUS_OK
ReadX 13672 916 4096 4096 NT_STATUS_OK
ReadX 13672 260 4096 4096 NT_STATUS_OK
ReadX 13672 932 4096 4096 NT_STATUS_OK
ReadX 13672 2624 4096 4096 NT_STATUS_OK
ReadX 13672 308 4096 4096 NT_STATUS_OK
ReadX 13672 292 4096 4096 NT_STATUS_OK
ReadX 13672 1140 4096 4096 NT_STATUS_OK
ReadX 13672 276 4096 4096 NT_STATUS_OK
ReadX 13672 2020 4096 4096 NT_STATUS_OK
ReadX 13672 2880 4096 4096 NT_STATUS_OK
ReadX 13672 516 4096 4096 NT_STATUS_OK
ReadX 13672 1844 4096 4096 NT_STATUS_OK
ReadX 13672 1124 4096 4096 NT_STATUS_OK
ReadX 13672 3136 4096 4096 NT_STATUS_OK
ReadX 13672 324 4096 4096 NT_STATUS_OK
ReadX 13672 1156 4096 4096 NT_STATUS_OK
ReadX 13672 1172 4096 4096 NT_STATUS_OK
ReadX 13672 2112 4096 4096 NT_STATUS_OK
ReadX 13672 2368 4096 4096 NT_STATUS_OK
ReadX 13672 964 4096 4096 NT_STATUS_OK
ReadX 13672 980 4096 4096 NT_STATUS_OK
ReadX 13672 1012 4096 4096 NT_STATUS_OK
ReadX 13672 532 4096 4096 NT_STATUS_OK
ReadX 13672 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13672 1620 4096 4096 NT_STATUS_OK
ReadX 13672 1604 4096 4096 NT_STATUS_OK
ReadX 13672 2116 4096 4096 NT_STATUS_OK
ReadX 13672 2132 4096 4096 NT_STATUS_OK
ReadX 13672 2148 4096 4096 NT_STATUS_OK
ReadX 13672 2276 4096 4096 NT_STATUS_OK
ReadX 13672 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13694 NT_STATUS_OK
Close 13694 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13697 NT_STATUS_OK
QUERY_FILE_INFORMATION 13652 1004 NT_STATUS_OK
Close 13652 NT_STATUS_OK
WriteX 13697 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13697 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13654 1004 NT_STATUS_OK
Close 13654 NT_STATUS_OK
WriteX 13697 0 65536 65536 NT_STATUS_OK
WriteX 13697 65536 64850 64850 NT_STATUS_OK
Close 13697 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13699 NT_STATUS_OK
WriteX 13699 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13699 258 NT_STATUS_OK
ReadX 13672 2068 4096 4096 NT_STATUS_OK
ReadX 13672 1588 4096 4096 NT_STATUS_OK
ReadX 13672 1572 4096 4096 NT_STATUS_OK
WriteX 13699 0 18630 18630 NT_STATUS_OK
Flush 13699 NT_STATUS_OK
Close 13699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13701 NT_STATUS_OK
Close 13701 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13703 NT_STATUS_OK
ReadX 13703 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13672 612 4096 4096 NT_STATUS_OK
ReadX 13672 564 4096 4096 NT_STATUS_OK
ReadX 13672 1876 4096 4096 NT_STATUS_OK
ReadX 13672 628 4096 4096 NT_STATUS_OK
ReadX 13672 740 4096 4096 NT_STATUS_OK
ReadX 13672 724 4096 4096 NT_STATUS_OK
ReadX 13672 644 4096 4096 NT_STATUS_OK
ReadX 13672 2324 4096 4096 NT_STATUS_OK
ReadX 13672 660 4096 4096 NT_STATUS_OK
ReadX 13672 852 4096 4096 NT_STATUS_OK
ReadX 13672 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13672 2368 4096 4096 NT_STATUS_OK
ReadX 13672 1024 4096 4096 NT_STATUS_OK
ReadX 13672 320 4096 4096 NT_STATUS_OK
ReadX 13672 580 4096 4096 NT_STATUS_OK
ReadX 13672 3136 512 512 NT_STATUS_OK
ReadX 13672 2880 4096 4096 NT_STATUS_OK
Close 13672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 61440 4096 4096 NT_STATUS_OK
ReadX 13704 126976 4096 4096 NT_STATUS_OK
WriteX 13704 0 65536 65536 NT_STATUS_OK
WriteX 13704 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 61440 4096 4096 NT_STATUS_OK
ReadX 13705 126976 4096 4096 NT_STATUS_OK
ReadX 13705 192512 4096 4096 NT_STATUS_OK
ReadX 13705 258048 4096 4096 NT_STATUS_OK
WriteX 13705 0 65536 65536 NT_STATUS_OK
WriteX 13705 65536 65536 65536 NT_STATUS_OK
WriteX 13705 131072 65536 65536 NT_STATUS_OK
WriteX 13705 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 61440 4096 4096 NT_STATUS_OK
ReadX 13706 126976 4096 4096 NT_STATUS_OK
ReadX 13706 192512 4096 4096 NT_STATUS_OK
ReadX 13706 258048 4096 4096 NT_STATUS_OK
ReadX 13706 323584 4096 4096 NT_STATUS_OK
ReadX 13706 389120 4096 4096 NT_STATUS_OK
ReadX 13706 454656 4096 4096 NT_STATUS_OK
ReadX 13706 520192 4096 4096 NT_STATUS_OK
WriteX 13706 0 65536 65536 NT_STATUS_OK
WriteX 13706 65536 65536 65536 NT_STATUS_OK
WriteX 13706 131072 65536 65536 NT_STATUS_OK
WriteX 13706 196608 65536 65536 NT_STATUS_OK
WriteX 13706 262144 65536 65536 NT_STATUS_OK
WriteX 13706 327680 65536 65536 NT_STATUS_OK
WriteX 13706 393216 65536 65536 NT_STATUS_OK
WriteX 13706 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13707 NT_STATUS_OK
ReadX 13707 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13708 NT_STATUS_OK
Close 13708 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13709 NT_STATUS_OK
WriteX 13709 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13709 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13707 0 8192 8192 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13707 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13707 0 8192 8192 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13707 0 8192 8192 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13707 0 8192 8192 NT_STATUS_OK
Flush 13707 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13711 NT_STATUS_OK
Close 13711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13703 NT_STATUS_OK
Close 13671 NT_STATUS_OK
Close 13704 NT_STATUS_OK
Close 13705 NT_STATUS_OK
Close 13706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13714 NT_STATUS_OK
WriteX 13714 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13714 258 NT_STATUS_OK
WriteX 13714 0 62591 62591 NT_STATUS_OK
Close 13714 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13716 NT_STATUS_OK
Close 13716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13719 NT_STATUS_OK
WriteX 13719 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13719 258 NT_STATUS_OK
WriteX 13719 0 10845 10845 NT_STATUS_OK
Close 13719 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13724 NT_STATUS_OK
WriteX 13724 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13724 258 NT_STATUS_OK
WriteX 13724 0 30118 30118 NT_STATUS_OK
Close 13724 NT_STATUS_OK
WriteX 13707 0 4096 4096 NT_STATUS_OK
WriteX 13709 0 64 64 NT_STATUS_OK
Close 13709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13707 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13726 NT_STATUS_OK
ReadX 13726 0 61440 61440 NT_STATUS_OK
ReadX 13726 61440 4096 4096 NT_STATUS_OK
ReadX 13726 65536 61440 61440 NT_STATUS_OK
ReadX 13726 126976 4096 4096 NT_STATUS_OK
ReadX 13726 131072 61440 61440 NT_STATUS_OK
ReadX 13726 192512 4096 4096 NT_STATUS_OK
ReadX 13726 196608 61440 61440 NT_STATUS_OK
ReadX 13726 258048 4096 4096 NT_STATUS_OK
ReadX 13726 262144 61440 61440 NT_STATUS_OK
ReadX 13726 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13727 NT_STATUS_OK
ReadX 13727 0 61440 61440 NT_STATUS_OK
ReadX 13727 61440 4096 4096 NT_STATUS_OK
ReadX 13727 65536 61440 61440 NT_STATUS_OK
ReadX 13727 126976 4096 4096 NT_STATUS_OK
ReadX 13727 131072 61440 61440 NT_STATUS_OK
ReadX 13727 192512 4096 4096 NT_STATUS_OK
ReadX 13727 196608 61440 61440 NT_STATUS_OK
ReadX 13727 258048 4096 4096 NT_STATUS_OK
ReadX 13727 262144 61440 61440 NT_STATUS_OK
ReadX 13727 323584 4096 4096 NT_STATUS_OK
ReadX 13727 327680 61440 61440 NT_STATUS_OK
ReadX 13727 389120 4096 4096 NT_STATUS_OK
ReadX 13727 393216 61440 61440 NT_STATUS_OK
ReadX 13727 454656 4096 4096 NT_STATUS_OK
ReadX 13727 458752 61440 61440 NT_STATUS_OK
ReadX 13727 520192 4096 4096 NT_STATUS_OK
ReadX 13727 524288 61440 61440 NT_STATUS_OK
ReadX 13727 585728 4096 4096 NT_STATUS_OK
ReadX 13727 589824 61440 61440 NT_STATUS_OK
ReadX 13727 651264 4096 4096 NT_STATUS_OK
ReadX 13727 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13728 NT_STATUS_OK
ReadX 13728 0 61440 61440 NT_STATUS_OK
ReadX 13728 61440 4096 4096 NT_STATUS_OK
ReadX 13728 65536 61440 61440 NT_STATUS_OK
ReadX 13728 126976 4096 4096 NT_STATUS_OK
ReadX 13728 131072 61440 61440 NT_STATUS_OK
ReadX 13728 192512 4096 4096 NT_STATUS_OK
ReadX 13728 196608 61440 61440 NT_STATUS_OK
ReadX 13728 258048 4096 4096 NT_STATUS_OK
ReadX 13728 262144 61440 61440 NT_STATUS_OK
ReadX 13728 323584 4096 4096 NT_STATUS_OK
ReadX 13728 327680 61440 61440 NT_STATUS_OK
ReadX 13728 389120 4096 4096 NT_STATUS_OK
ReadX 13728 393216 61440 61440 NT_STATUS_OK
ReadX 13728 454656 4096 4096 NT_STATUS_OK
ReadX 13728 458752 61440 61440 NT_STATUS_OK
ReadX 13728 520192 4096 4096 NT_STATUS_OK
ReadX 13728 524288 61440 61440 NT_STATUS_OK
ReadX 13728 585728 4096 4096 NT_STATUS_OK
ReadX 13728 589824 61440 61440 NT_STATUS_OK
ReadX 13728 651264 4096 4096 NT_STATUS_OK
ReadX 13728 655360 61440 61440 NT_STATUS_OK
ReadX 13728 716800 4096 4096 NT_STATUS_OK
ReadX 13728 720896 61440 61440 NT_STATUS_OK
ReadX 13728 782336 4096 4096 NT_STATUS_OK
ReadX 13728 786432 61440 61440 NT_STATUS_OK
ReadX 13728 847872 4096 4096 NT_STATUS_OK
ReadX 13728 851968 61440 61440 NT_STATUS_OK
ReadX 13728 913408 4096 4096 NT_STATUS_OK
ReadX 13728 917504 61440 61440 NT_STATUS_OK
ReadX 13728 978944 4096 4096 NT_STATUS_OK
ReadX 13728 983040 61440 61440 NT_STATUS_OK
ReadX 13728 1044480 4096 4096 NT_STATUS_OK
ReadX 13728 1048576 61440 61440 NT_STATUS_OK
ReadX 13728 1110016 4096 4096 NT_STATUS_OK
ReadX 13728 1114112 61440 61440 NT_STATUS_OK
ReadX 13728 1175552 4096 4096 NT_STATUS_OK
ReadX 13728 1179648 61440 61440 NT_STATUS_OK
ReadX 13728 1241088 4096 4096 NT_STATUS_OK
ReadX 13728 1245184 61440 61440 NT_STATUS_OK
ReadX 13728 1306624 4096 4096 NT_STATUS_OK
ReadX 13728 1310720 61440 61440 NT_STATUS_OK
ReadX 13728 1372160 4096 4096 NT_STATUS_OK
ReadX 13728 1376256 61440 61440 NT_STATUS_OK
ReadX 13728 1437696 4096 4096 NT_STATUS_OK
ReadX 13728 1441792 61440 61440 NT_STATUS_OK
ReadX 13728 1503232 4096 4096 NT_STATUS_OK
ReadX 13728 1507328 61440 61440 NT_STATUS_OK
ReadX 13728 1568768 4096 4096 NT_STATUS_OK
ReadX 13728 1572864 61440 61440 NT_STATUS_OK
ReadX 13728 1634304 4096 4096 NT_STATUS_OK
ReadX 13728 1638400 61440 61440 NT_STATUS_OK
ReadX 13728 1699840 4096 4096 NT_STATUS_OK
ReadX 13728 1703936 61440 61440 NT_STATUS_OK
ReadX 13728 1765376 4096 4096 NT_STATUS_OK
ReadX 13728 1769472 61440 61440 NT_STATUS_OK
ReadX 13728 1830912 4096 4096 NT_STATUS_OK
ReadX 13728 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13729 NT_STATUS_OK
Close 13729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13726 NT_STATUS_OK
Close 13727 NT_STATUS_OK
Close 13728 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13731 NT_STATUS_OK
ReadX 13731 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13732 NT_STATUS_OK
ReadX 13732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13733 NT_STATUS_OK
ReadX 13733 0 4096 4096 NT_STATUS_OK
ReadX 13733 4096 4096 4096 NT_STATUS_OK
ReadX 13733 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13734 NT_STATUS_OK
Close 13734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13731 NT_STATUS_OK
Close 13732 NT_STATUS_OK
Close 13733 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13736 NT_STATUS_OK
ReadX 13736 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13737 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13737 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13738 NT_STATUS_OK
Close 13738 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13736 NT_STATUS_OK
Close 13737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13740 NT_STATUS_OK
ReadX 13740 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13741 NT_STATUS_OK
ReadX 13741 0 8192 8192 NT_STATUS_OK
ReadX 13741 8192 8192 8192 NT_STATUS_OK
ReadX 13741 16384 8192 8192 NT_STATUS_OK
ReadX 13741 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13743 NT_STATUS_OK
Close 13743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13741 NT_STATUS_OK
Close 13740 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13746 NT_STATUS_OK
WriteX 13746 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13746 258 NT_STATUS_OK
WriteX 13746 0 10438 10438 NT_STATUS_OK
Close 13746 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13747 NT_STATUS_OK
Close 13747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13748 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13749 NT_STATUS_OK
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13750 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13751 NT_STATUS_OK
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13752 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13753 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13753 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13755 NT_STATUS_OK
ReadX 13755 0 4096 4096 NT_STATUS_OK
ReadX 13755 4096 4096 4096 NT_STATUS_OK
ReadX 13755 8192 4096 4096 NT_STATUS_OK
ReadX 13755 12288 8192 8192 NT_STATUS_OK
ReadX 13755 20480 8192 8192 NT_STATUS_OK
ReadX 13755 28672 8192 8192 NT_STATUS_OK
ReadX 13755 36864 8192 8192 NT_STATUS_OK
ReadX 13755 45056 8192 8192 NT_STATUS_OK
ReadX 13755 53248 8192 8192 NT_STATUS_OK
ReadX 13755 61440 8192 8192 NT_STATUS_OK
ReadX 13755 69632 8192 8192 NT_STATUS_OK
ReadX 13755 77824 8192 8192 NT_STATUS_OK
ReadX 13755 86016 8192 8192 NT_STATUS_OK
ReadX 13755 94208 8192 8192 NT_STATUS_OK
ReadX 13755 102400 8192 8192 NT_STATUS_OK
ReadX 13755 110592 8192 8192 NT_STATUS_OK
ReadX 13755 118784 8192 8192 NT_STATUS_OK
ReadX 13755 126976 8192 8192 NT_STATUS_OK
ReadX 13755 135168 8192 8192 NT_STATUS_OK
ReadX 13755 143360 8192 8192 NT_STATUS_OK
ReadX 13755 151552 8192 8192 NT_STATUS_OK
ReadX 13755 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13756 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13755 NT_STATUS_OK
Close 13748 NT_STATUS_OK
Close 13750 NT_STATUS_OK
Close 13752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13757 NT_STATUS_OK
Close 13757 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13760 NT_STATUS_OK
WriteX 13760 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13760 258 NT_STATUS_OK
WriteX 13760 0 28489 28489 NT_STATUS_OK
Close 13760 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13761 NT_STATUS_OK
Close 13761 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13763 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13763 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13764 NT_STATUS_OK
Close 13764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13766 NT_STATUS_OK
ReadX 13766 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13767 NT_STATUS_OK
ReadX 13767 0 8192 8192 NT_STATUS_OK
ReadX 13767 8192 8192 8192 NT_STATUS_OK
ReadX 13767 16384 8192 8192 NT_STATUS_OK
ReadX 13767 24576 8192 8192 NT_STATUS_OK
ReadX 13767 32768 16384 16384 NT_STATUS_OK
ReadX 13767 49152 8192 8192 NT_STATUS_OK
ReadX 13767 57344 8192 8192 NT_STATUS_OK
ReadX 13767 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13769 NT_STATUS_OK
Close 13769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13767 NT_STATUS_OK
Close 13766 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13772 NT_STATUS_OK
WriteX 13772 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13772 258 NT_STATUS_OK
WriteX 13772 0 29253 29253 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13774 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13776 NT_STATUS_OK
Close 13776 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13779 NT_STATUS_OK
WriteX 13779 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13779 258 NT_STATUS_OK
WriteX 13779 0 30183 30183 NT_STATUS_OK
Close 13779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13780 NT_STATUS_OK
Close 13780 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13782 NT_STATUS_OK
WriteX 13782 0 510 510 NT_STATUS_OK
WriteX 13782 510 512 512 NT_STATUS_OK
WriteX 13782 1022 510 510 NT_STATUS_OK
WriteX 13782 1532 510 510 NT_STATUS_OK
WriteX 13782 2042 168 168 NT_STATUS_OK
Close 13782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13783 NT_STATUS_OK
Close 13783 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13785 NT_STATUS_OK
ReadX 13785 0 4096 4096 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13786 NT_STATUS_OK
ReadX 13786 61440 4096 4096 NT_STATUS_OK
ReadX 13786 126976 4096 4096 NT_STATUS_OK
WriteX 13786 0 65536 65536 NT_STATUS_OK
WriteX 13786 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13787 NT_STATUS_OK
ReadX 13787 61440 4096 4096 NT_STATUS_OK
ReadX 13787 126976 4096 4096 NT_STATUS_OK
ReadX 13787 192512 4096 4096 NT_STATUS_OK
ReadX 13787 258048 4096 4096 NT_STATUS_OK
WriteX 13787 0 65536 65536 NT_STATUS_OK
WriteX 13787 65536 65536 65536 NT_STATUS_OK
WriteX 13787 131072 65536 65536 NT_STATUS_OK
WriteX 13787 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13788 NT_STATUS_OK
ReadX 13788 61440 4096 4096 NT_STATUS_OK
ReadX 13788 126976 4096 4096 NT_STATUS_OK
ReadX 13788 192512 4096 4096 NT_STATUS_OK
ReadX 13788 258048 4096 4096 NT_STATUS_OK
ReadX 13788 323584 4096 4096 NT_STATUS_OK
ReadX 13788 389120 4096 4096 NT_STATUS_OK
ReadX 13788 454656 4096 4096 NT_STATUS_OK
ReadX 13788 520192 4096 4096 NT_STATUS_OK
WriteX 13788 0 65536 65536 NT_STATUS_OK
WriteX 13788 65536 65536 65536 NT_STATUS_OK
WriteX 13788 131072 65536 65536 NT_STATUS_OK
WriteX 13788 196608 65536 65536 NT_STATUS_OK
WriteX 13788 262144 65536 65536 NT_STATUS_OK
WriteX 13788 327680 65536 65536 NT_STATUS_OK
WriteX 13788 393216 65536 65536 NT_STATUS_OK
WriteX 13788 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13789 NT_STATUS_OK
Close 13789 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13785 NT_STATUS_OK
Close 13786 NT_STATUS_OK
Close 13787 NT_STATUS_OK
Close 13788 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13795 NT_STATUS_OK
Close 13795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13798 NT_STATUS_OK
Close 13798 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13800 NT_STATUS_OK
Close 13800 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13804 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13807 NT_STATUS_OK
Close 13807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13809 NT_STATUS_OK
Close 13809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13813 NT_STATUS_OK
Close 13813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13818 NT_STATUS_OK
Close 13818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13828 NT_STATUS_OK
Close 13828 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13833 NT_STATUS_OK
Close 13833 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13838 NT_STATUS_OK
Close 13838 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13843 NT_STATUS_OK
Close 13843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13848 NT_STATUS_OK
Close 13848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13851 NT_STATUS_OK
Close 13851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13854 NT_STATUS_OK
Close 13854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13857 NT_STATUS_OK
WriteX 13857 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13857 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13857 0 65536 65536 NT_STATUS_OK
WriteX 13857 65536 65536 65536 NT_STATUS_OK
WriteX 13857 131072 65536 65536 NT_STATUS_OK
WriteX 13857 196608 65536 65536 NT_STATUS_OK
WriteX 13857 262144 26634 26634 NT_STATUS_OK
Close 13857 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13862 NT_STATUS_OK
Close 13862 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13863 NT_STATUS_OK
Close 13863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13864 NT_STATUS_OK
ReadX 13864 0 4096 4096 NT_STATUS_OK
Close 13864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13865 NT_STATUS_OK
ReadX 13865 0 4096 4096 NT_STATUS_OK
ReadX 13865 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13866 NT_STATUS_OK
Close 13866 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13865 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13870 NT_STATUS_OK
Close 13870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13873 NT_STATUS_OK
Close 13873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13875 NT_STATUS_OK
Close 13875 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13879 NT_STATUS_OK
Close 13879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13882 NT_STATUS_OK
Close 13882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13884 NT_STATUS_OK
Close 13884 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13888 NT_STATUS_OK
Close 13888 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13893 NT_STATUS_OK
Close 13893 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13898 NT_STATUS_OK
Close 13898 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13903 NT_STATUS_OK
Close 13903 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13908 NT_STATUS_OK
Close 13908 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13913 NT_STATUS_OK
Close 13913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13917 NT_STATUS_OK
Close 13917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13922 NT_STATUS_OK
Close 13922 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13927 NT_STATUS_OK
Close 13927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13930 NT_STATUS_OK
Close 13930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13932 NT_STATUS_OK
Close 13932 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13942 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13943 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13944 NT_STATUS_OK
ReadX 13944 0 4096 4096 NT_STATUS_OK
Close 13944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
Close 13945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13946 NT_STATUS_OK
ReadX 13946 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13957 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13958 NT_STATUS_OK
ReadX 13958 0 4096 4096 NT_STATUS_OK
Close 13958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13959 NT_STATUS_OK
ReadX 13959 0 4096 4096 NT_STATUS_OK
Close 13959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13946 NT_STATUS_OK
Close 13960 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13989 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13989 0 4096 4096 NT_STATUS_OK
Close 13989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13991 NT_STATUS_OK
ReadX 13991 0 4096 4096 NT_STATUS_OK
ReadX 13991 4096 4096 4096 NT_STATUS_OK
ReadX 13991 8192 4096 4096 NT_STATUS_OK
ReadX 13991 12288 4096 4096 NT_STATUS_OK
ReadX 13991 16384 4096 4096 NT_STATUS_OK
ReadX 13991 20480 4096 4096 NT_STATUS_OK
ReadX 13991 24576 4096 4096 NT_STATUS_OK
ReadX 13991 28672 4096 4096 NT_STATUS_OK
ReadX 13991 32768 4096 4096 NT_STATUS_OK
ReadX 13991 36864 4096 4096 NT_STATUS_OK
ReadX 13991 40960 4096 4096 NT_STATUS_OK
ReadX 13991 45056 4096 4096 NT_STATUS_OK
ReadX 13991 49152 4096 4096 NT_STATUS_OK
ReadX 13991 53248 4096 4096 NT_STATUS_OK
ReadX 13991 57344 4096 4096 NT_STATUS_OK
ReadX 13991 61440 4096 4096 NT_STATUS_OK
ReadX 13991 65536 4096 4096 NT_STATUS_OK
ReadX 13991 69632 4096 4096 NT_STATUS_OK
ReadX 13991 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13991 1004 NT_STATUS_OK
WriteX 13991 0 4096 4096 NT_STATUS_OK
Close 13991 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13992 NT_STATUS_OK
SET_FILE_INFORMATION 13992 1004 NT_STATUS_OK
Close 13992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13993 NT_STATUS_OK
ReadX 13993 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13994 NT_STATUS_OK
Close 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13997 NT_STATUS_OK
WriteX 13997 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13997 258 NT_STATUS_OK
WriteX 13997 0 65536 65536 NT_STATUS_OK
WriteX 13997 65536 19979 19979 NT_STATUS_OK
Close 13997 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 4096 4096 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
QUERY_FILE_INFORMATION 13998 1004 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
SET_FILE_INFORMATION 13998 1004 NT_STATUS_OK
WriteX 13998 0 4096 4096 NT_STATUS_OK
Flush 13998 NT_STATUS_OK
Close 13998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13999 NT_STATUS_OK
ReadX 13999 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 14000 NT_STATUS_OK
ReadX 14000 0 4096 4096 NT_STATUS_OK
Close 13999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14001 NT_STATUS_OK
ReadX 14001 0 4096 4096 NT_STATUS_OK
Close 14001 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
Close 14002 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14003 NT_STATUS_OK
ReadX 14003 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14003 1004 NT_STATUS_OK
WriteX 14003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 14004 NT_STATUS_OK
Close 14004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 14000 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Close 13993 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14006 NT_STATUS_OK
Close 14006 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14009 NT_STATUS_OK
WriteX 14009 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14009 258 NT_STATUS_OK
WriteX 14009 0 65536 65536 NT_STATUS_OK
WriteX 14009 65536 17654 17654 NT_STATUS_OK
Close 14009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14010 NT_STATUS_OK
ReadX 14010 0 4096 4096 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
QUERY_FILE_INFORMATION 14010 1004 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
SET_FILE_INFORMATION 14010 1004 NT_STATUS_OK
WriteX 14010 0 4096 4096 NT_STATUS_OK
Flush 14010 NT_STATUS_OK
Close 14010 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14011 NT_STATUS_OK
SET_FILE_INFORMATION 14011 1004 NT_STATUS_OK
Close 14011 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14012 NT_STATUS_OK
ReadX 14012 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 14013 NT_STATUS_OK
Close 14013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 14015 NT_STATUS_OK
ReadX 14015 0 4096 4096 NT_STATUS_OK
ReadX 14015 4096 4096 4096 NT_STATUS_OK
ReadX 14015 8192 4096 4096 NT_STATUS_OK
ReadX 14015 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 14015 16384 4096 4096 NT_STATUS_OK
ReadX 14015 20480 4096 4096 NT_STATUS_OK
ReadX 14015 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 4096 4096 NT_STATUS_OK
Close 14016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14017 NT_STATUS_OK
ReadX 14017 0 4096 4096 NT_STATUS_OK
Close 14017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14018 NT_STATUS_OK
ReadX 14018 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14018 1004 NT_STATUS_OK
WriteX 14018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 14019 NT_STATUS_OK
Close 14019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 14021 NT_STATUS_OK
Close 14021 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 14024 NT_STATUS_OK
WriteX 14024 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14024 258 NT_STATUS_OK
WriteX 14024 0 65536 65536 NT_STATUS_OK
WriteX 14024 65536 19490 19490 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14025 NT_STATUS_OK
ReadX 14025 0 4096 4096 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
QUERY_FILE_INFORMATION 14025 1004 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
SET_FILE_INFORMATION 14025 1004 NT_STATUS_OK
WriteX 14025 0 4096 4096 NT_STATUS_OK
Flush 14025 NT_STATUS_OK
Close 14025 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14026 NT_STATUS_OK
SET_FILE_INFORMATION 14026 1004 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 14027 NT_STATUS_OK
ReadX 14027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 14028 NT_STATUS_OK
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14030 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14030 0 4096 4096 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14031 NT_STATUS_OK
ReadX 14031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 4096 4096 NT_STATUS_OK
ReadX 14032 4096 4096 4096 NT_STATUS_OK
ReadX 14032 8192 4096 4096 NT_STATUS_OK
ReadX 14032 12288 4096 4096 NT_STATUS_OK
ReadX 14032 16384 4096 4096 NT_STATUS_OK
ReadX 14032 20480 4096 4096 NT_STATUS_OK
ReadX 14032 24576 4096 4096 NT_STATUS_OK
ReadX 14032 28672 4096 4096 NT_STATUS_OK
ReadX 14032 32768 4096 4096 NT_STATUS_OK
ReadX 14032 36864 4096 4096 NT_STATUS_OK
ReadX 14032 40960 4096 4096 NT_STATUS_OK
ReadX 14032 45056 4096 4096 NT_STATUS_OK
ReadX 14032 49152 4096 4096 NT_STATUS_OK
ReadX 14032 53248 4096 4096 NT_STATUS_OK
ReadX 14032 57344 4096 4096 NT_STATUS_OK
ReadX 14032 61440 4096 4096 NT_STATUS_OK
ReadX 14032 65536 4096 4096 NT_STATUS_OK
ReadX 14032 69632 4096 4096 NT_STATUS_OK
ReadX 14032 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14032 1004 NT_STATUS_OK
WriteX 14032 0 4096 4096 NT_STATUS_OK
Close 14032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14033 NT_STATUS_OK
SET_FILE_INFORMATION 14033 1004 NT_STATUS_OK
Close 14033 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 14034 NT_STATUS_OK
ReadX 14034 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14035 NT_STATUS_OK
Close 14035 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 14027 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14038 NT_STATUS_OK
WriteX 14038 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14038 258 NT_STATUS_OK
WriteX 14038 0 65536 65536 NT_STATUS_OK
WriteX 14038 65536 8866 8866 NT_STATUS_OK
Close 14038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
WriteX 14039 0 4096 4096 NT_STATUS_OK
Flush 14039 NT_STATUS_OK
SET_FILE_INFORMATION 14039 1004 NT_STATUS_OK
WriteX 14039 0 4096 4096 NT_STATUS_OK
Flush 14039 NT_STATUS_OK
Close 14039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 14040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14041 NT_STATUS_OK
ReadX 14041 0 4096 4096 NT_STATUS_OK
Close 14041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14042 NT_STATUS_OK
ReadX 14042 0 4096 4096 NT_STATUS_OK
Close 14042 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14043 NT_STATUS_OK
ReadX 14043 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14043 1004 NT_STATUS_OK
WriteX 14043 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 14044 NT_STATUS_OK
Close 14044 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 14043 NT_STATUS_OK
Close 14034 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14046 NT_STATUS_OK
Close 14046 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14049 NT_STATUS_OK
WriteX 14049 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14049 258 NT_STATUS_OK
WriteX 14049 0 65536 65536 NT_STATUS_OK
WriteX 14049 65536 9298 9298 NT_STATUS_OK
Close 14049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14050 NT_STATUS_OK
ReadX 14050 0 4096 4096 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
SET_FILE_INFORMATION 14050 1004 NT_STATUS_OK
WriteX 14050 0 4096 4096 NT_STATUS_OK
Flush 14050 NT_STATUS_OK
Close 14050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14051 NT_STATUS_OK
SET_FILE_INFORMATION 14051 1004 NT_STATUS_OK
Close 14051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 14053 NT_STATUS_OK
Close 14053 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14056 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14056 0 4096 4096 NT_STATUS_OK
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 14057 NT_STATUS_OK
ReadX 14057 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 14057 4096 4096 4096 NT_STATUS_OK
ReadX 14057 8192 4096 4096 NT_STATUS_OK
ReadX 14057 12288 4096 4096 NT_STATUS_OK
ReadX 14057 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 14052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 4096 4096 NT_STATUS_OK
Close 14058 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14059 NT_STATUS_OK
ReadX 14059 0 4096 4096 NT_STATUS_OK
Close 14059 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14060 NT_STATUS_OK
ReadX 14060 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14060 1004 NT_STATUS_OK
WriteX 14060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 14061 NT_STATUS_OK
Close 14061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 14057 NT_STATUS_OK
Close 14060 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 14063 NT_STATUS_OK
Close 14063 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 14066 NT_STATUS_OK
WriteX 14066 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14066 258 NT_STATUS_OK
WriteX 14066 0 65536 65536 NT_STATUS_OK
WriteX 14066 65536 11540 11540 NT_STATUS_OK
Close 14066 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
SET_FILE_INFORMATION 14067 1004 NT_STATUS_OK
WriteX 14067 0 4096 4096 NT_STATUS_OK
Flush 14067 NT_STATUS_OK
Close 14067 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14068 NT_STATUS_OK
SET_FILE_INFORMATION 14068 1004 NT_STATUS_OK
Close 14068 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 14070 NT_STATUS_OK
Close 14070 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 61440 4096 4096 NT_STATUS_OK
ReadX 14072 126976 4096 4096 NT_STATUS_OK
WriteX 14072 0 65536 65536 NT_STATUS_OK
WriteX 14072 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 61440 4096 4096 NT_STATUS_OK
ReadX 14073 126976 4096 4096 NT_STATUS_OK
ReadX 14073 192512 4096 4096 NT_STATUS_OK
ReadX 14073 258048 4096 4096 NT_STATUS_OK
WriteX 14073 0 65536 65536 NT_STATUS_OK
WriteX 14073 65536 65536 65536 NT_STATUS_OK
WriteX 14073 131072 65536 65536 NT_STATUS_OK
WriteX 14073 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14074 NT_STATUS_OK
ReadX 14074 61440 4096 4096 NT_STATUS_OK
ReadX 14074 126976 4096 4096 NT_STATUS_OK
ReadX 14074 192512 4096 4096 NT_STATUS_OK
ReadX 14074 258048 4096 4096 NT_STATUS_OK
ReadX 14074 323584 4096 4096 NT_STATUS_OK
ReadX 14074 389120 4096 4096 NT_STATUS_OK
ReadX 14074 454656 4096 4096 NT_STATUS_OK
ReadX 14074 520192 4096 4096 NT_STATUS_OK
WriteX 14074 0 65536 65536 NT_STATUS_OK
WriteX 14074 65536 65536 65536 NT_STATUS_OK
WriteX 14074 131072 65536 65536 NT_STATUS_OK
WriteX 14074 196608 65536 65536 NT_STATUS_OK
WriteX 14074 262144 65536 65536 NT_STATUS_OK
WriteX 14074 327680 65536 65536 NT_STATUS_OK
WriteX 14074 393216 65536 65536 NT_STATUS_OK
WriteX 14074 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
ReadX 14075 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 14076 NT_STATUS_OK
WriteX 14076 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14076 258 NT_STATUS_OK
WriteX 14076 0 53 53 NT_STATUS_OK
Close 14076 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 14077 NT_STATUS_OK
Close 14077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14015 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14073 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 14079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 14075 8192 4096 4096 NT_STATUS_OK
ReadX 14075 12288 4096 4096 NT_STATUS_OK
WriteX 14079 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14079 258 NT_STATUS_OK
ReadX 14075 16384 4096 4096 NT_STATUS_OK
ReadX 14075 20480 4096 4096 NT_STATUS_OK
WriteX 14079 0 15360 15360 NT_STATUS_OK
Close 14079 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 14080 NT_STATUS_OK
ReadX 14080 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14080 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14080 1004 NT_STATUS_OK
WriteX 14080 0 4096 4096 NT_STATUS_OK
Close 14080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 14081 NT_STATUS_OK
Close 14081 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 14084 NT_STATUS_OK
Close 14084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 14083 4096 4096 4096 NT_STATUS_OK
ReadX 14083 8192 4096 4096 NT_STATUS_OK
ReadX 14083 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 14086 NT_STATUS_OK
ReadX 14086 0 4096 4096 NT_STATUS_OK
ReadX 14086 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 14087 NT_STATUS_OK
ReadX 14087 0 4096 4096 NT_STATUS_OK
ReadX 14087 4096 4096 4096 NT_STATUS_OK
ReadX 14087 8192 4096 4096 NT_STATUS_OK
Close 14086 NT_STATUS_OK
Close 14087 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 14088 NT_STATUS_OK
WriteX 14088 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14088 258 NT_STATUS_OK
WriteX 14088 0 15360 15360 NT_STATUS_OK
Close 14088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 14089 NT_STATUS_OK
ReadX 14089 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14089 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14089 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 14075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 14090 NT_STATUS_OK
Close 14090 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 14092 NT_STATUS_OK
ReadX 14092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 14093 NT_STATUS_OK
SET_FILE_INFORMATION 14093 1004 NT_STATUS_OK
Close 14093 NT_STATUS_OK
WriteX 14089 0 4096 4096 NT_STATUS_OK
Close 14089 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 14094 NT_STATUS_OK
Close 14094 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10174 NT_STATUS_OK
ReadX 10174 0 4096 4096 NT_STATUS_OK
ReadX 10174 4096 4096 4096 NT_STATUS_OK
ReadX 10174 8192 4096 4096 NT_STATUS_OK
ReadX 10174 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10174 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10174 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10175 NT_STATUS_OK
ReadX 10175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10176 NT_STATUS_OK
WriteX 10176 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10176 258 NT_STATUS_OK
WriteX 10176 0 53 53 NT_STATUS_OK
Close 10176 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10177 NT_STATUS_OK
Close 10177 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10175 4096 4096 4096 NT_STATUS_OK
ReadX 10175 8192 4096 4096 NT_STATUS_OK
ReadX 10175 12288 4096 4096 NT_STATUS_OK
WriteX 10179 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10179 258 NT_STATUS_OK
WriteX 10179 0 12006 12006 NT_STATUS_OK
Close 10179 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10180 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10180 1004 NT_STATUS_OK
WriteX 10180 0 4096 4096 NT_STATUS_OK
Close 10180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10181 NT_STATUS_OK
Close 10181 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10184 NT_STATUS_OK
Close 10184 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10183 4096 4096 4096 NT_STATUS_OK
ReadX 10183 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10186 NT_STATUS_OK
WriteX 10186 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10186 258 NT_STATUS_OK
WriteX 10186 0 11991 11991 NT_STATUS_OK
Close 10186 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10187 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10187 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10188 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10190 NT_STATUS_OK
ReadX 10190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10191 NT_STATUS_OK
SET_FILE_INFORMATION 10191 1004 NT_STATUS_OK
Close 10191 NT_STATUS_OK
WriteX 10187 0 4096 4096 NT_STATUS_OK
Close 10187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10192 NT_STATUS_OK
Close 10192 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10195 NT_STATUS_OK
Close 10195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10194 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
ReadX 10194 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
WriteX 10194 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10194 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10194 1004 NT_STATUS_OK
Close 14092 NT_STATUS_OK
WriteX 10174 0 19054 19054 NT_STATUS_OK
WriteX 10194 0 12288 12288 NT_STATUS_OK
Close 10190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10197 NT_STATUS_OK
Close 10197 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10174 NT_STATUS_OK
Close 10194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10199 NT_STATUS_OK
Close 10199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10201 NT_STATUS_OK
ReadX 10201 0 61440 61440 NT_STATUS_OK
ReadX 10201 61440 4096 4096 NT_STATUS_OK
ReadX 10201 65536 61440 61440 NT_STATUS_OK
ReadX 10201 126976 4096 4096 NT_STATUS_OK
ReadX 10201 131072 61440 61440 NT_STATUS_OK
ReadX 10201 192512 4096 4096 NT_STATUS_OK
ReadX 10201 196608 61440 61440 NT_STATUS_OK
ReadX 10201 258048 4096 4096 NT_STATUS_OK
ReadX 10201 262144 61440 61440 NT_STATUS_OK
ReadX 10201 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10202 NT_STATUS_OK
ReadX 10202 0 61440 61440 NT_STATUS_OK
ReadX 10202 61440 4096 4096 NT_STATUS_OK
ReadX 10202 65536 61440 61440 NT_STATUS_OK
ReadX 10202 126976 4096 4096 NT_STATUS_OK
ReadX 10202 131072 61440 61440 NT_STATUS_OK
ReadX 10202 192512 4096 4096 NT_STATUS_OK
ReadX 10202 196608 61440 61440 NT_STATUS_OK
ReadX 10202 258048 4096 4096 NT_STATUS_OK
ReadX 10202 262144 61440 61440 NT_STATUS_OK
ReadX 10202 323584 4096 4096 NT_STATUS_OK
ReadX 10202 327680 61440 61440 NT_STATUS_OK
ReadX 10202 389120 4096 4096 NT_STATUS_OK
ReadX 10202 393216 61440 61440 NT_STATUS_OK
ReadX 10202 454656 4096 4096 NT_STATUS_OK
ReadX 10202 458752 61440 61440 NT_STATUS_OK
ReadX 10202 520192 4096 4096 NT_STATUS_OK
ReadX 10202 524288 61440 61440 NT_STATUS_OK
ReadX 10202 585728 4096 4096 NT_STATUS_OK
ReadX 10202 589824 61440 61440 NT_STATUS_OK
ReadX 10202 651264 4096 4096 NT_STATUS_OK
ReadX 10202 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10203 NT_STATUS_OK
ReadX 10203 0 61440 61440 NT_STATUS_OK
ReadX 10203 61440 4096 4096 NT_STATUS_OK
ReadX 10203 65536 61440 61440 NT_STATUS_OK
ReadX 10203 126976 4096 4096 NT_STATUS_OK
ReadX 10203 131072 61440 61440 NT_STATUS_OK
ReadX 10203 192512 4096 4096 NT_STATUS_OK
ReadX 10203 196608 61440 61440 NT_STATUS_OK
ReadX 10203 258048 4096 4096 NT_STATUS_OK
ReadX 10203 262144 61440 61440 NT_STATUS_OK
ReadX 10203 323584 4096 4096 NT_STATUS_OK
ReadX 10203 327680 61440 61440 NT_STATUS_OK
ReadX 10203 389120 4096 4096 NT_STATUS_OK
ReadX 10203 393216 61440 61440 NT_STATUS_OK
ReadX 10203 454656 4096 4096 NT_STATUS_OK
ReadX 10203 458752 61440 61440 NT_STATUS_OK
ReadX 10203 520192 4096 4096 NT_STATUS_OK
ReadX 10203 524288 61440 61440 NT_STATUS_OK
ReadX 10203 585728 4096 4096 NT_STATUS_OK
ReadX 10203 589824 61440 61440 NT_STATUS_OK
ReadX 10203 651264 4096 4096 NT_STATUS_OK
ReadX 10203 655360 61440 61440 NT_STATUS_OK
ReadX 10203 716800 4096 4096 NT_STATUS_OK
ReadX 10203 720896 61440 61440 NT_STATUS_OK
ReadX 10203 782336 4096 4096 NT_STATUS_OK
ReadX 10203 786432 61440 61440 NT_STATUS_OK
ReadX 10203 847872 4096 4096 NT_STATUS_OK
ReadX 10203 851968 61440 61440 NT_STATUS_OK
ReadX 10203 913408 4096 4096 NT_STATUS_OK
ReadX 10203 917504 61440 61440 NT_STATUS_OK
ReadX 10203 978944 4096 4096 NT_STATUS_OK
ReadX 10203 983040 61440 61440 NT_STATUS_OK
ReadX 10203 1044480 4096 4096 NT_STATUS_OK
ReadX 10203 1048576 61440 61440 NT_STATUS_OK
ReadX 10203 1110016 4096 4096 NT_STATUS_OK
ReadX 10203 1114112 61440 61440 NT_STATUS_OK
ReadX 10203 1175552 4096 4096 NT_STATUS_OK
ReadX 10203 1179648 61440 61440 NT_STATUS_OK
ReadX 10203 1241088 4096 4096 NT_STATUS_OK
ReadX 10203 1245184 61440 61440 NT_STATUS_OK
ReadX 10203 1306624 4096 4096 NT_STATUS_OK
ReadX 10203 1310720 61440 61440 NT_STATUS_OK
ReadX 10203 1372160 4096 4096 NT_STATUS_OK
ReadX 10203 1376256 61440 61440 NT_STATUS_OK
ReadX 10203 1437696 4096 4096 NT_STATUS_OK
ReadX 10203 1441792 61440 61440 NT_STATUS_OK
ReadX 10203 1503232 4096 4096 NT_STATUS_OK
ReadX 10203 1507328 61440 61440 NT_STATUS_OK
ReadX 10203 1568768 4096 4096 NT_STATUS_OK
ReadX 10203 1572864 61440 61440 NT_STATUS_OK
ReadX 10203 1634304 4096 4096 NT_STATUS_OK
ReadX 10203 1638400 61440 61440 NT_STATUS_OK
ReadX 10203 1699840 4096 4096 NT_STATUS_OK
ReadX 10203 1703936 61440 61440 NT_STATUS_OK
ReadX 10203 1765376 4096 4096 NT_STATUS_OK
ReadX 10203 1769472 61440 61440 NT_STATUS_OK
ReadX 10203 1830912 4096 4096 NT_STATUS_OK
ReadX 10203 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10204 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10205 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10205 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10207 NT_STATUS_OK
ReadX 10207 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10208 NT_STATUS_OK
ReadX 10208 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10209 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10209 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10210 NT_STATUS_OK
QUERY_FILE_INFORMATION 10210 1004 NT_STATUS_OK
WriteX 10210 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10210 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10211 NT_STATUS_OK
Close 10211 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10212 NT_STATUS_OK
WriteX 10212 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10212 258 NT_STATUS_OK
WriteX 10212 0 491 491 NT_STATUS_OK
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10213 NT_STATUS_OK
ReadX 10213 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10210 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10215 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10216 NT_STATUS_OK
WriteX 10216 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10216 258 NT_STATUS_OK
WriteX 10216 0 543 543 NT_STATUS_OK
Close 10216 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10217 NT_STATUS_OK
ReadX 10217 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10201 NT_STATUS_OK
Close 10202 NT_STATUS_OK
Close 10203 NT_STATUS_OK
Close 10217 NT_STATUS_OK
Close 10205 NT_STATUS_OK
Close 10206 NT_STATUS_OK
Close 10207 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10220 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10221 NT_STATUS_OK
ReadX 10221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10222 NT_STATUS_OK
ReadX 10222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10223 NT_STATUS_OK
ReadX 10223 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10230 NT_STATUS_OK
QUERY_FILE_INFORMATION 10230 1004 NT_STATUS_OK
WriteX 10230 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10230 258 NT_STATUS_OK
WriteX 10230 0 2048 2048 NT_STATUS_OK
Close 10230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
Flush 10231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10235 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10236 NT_STATUS_OK
WriteX 10236 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10236 258 NT_STATUS_OK
WriteX 10236 0 2048 2048 NT_STATUS_OK
Close 10236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10241 NT_STATUS_OK
Close 10241 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10242 NT_STATUS_OK
WriteX 10242 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10242 258 NT_STATUS_OK
WriteX 10242 0 2048 2048 NT_STATUS_OK
Close 10242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 2048 2048 NT_STATUS_OK
ReadX 10221 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10243 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10237 0 4096 4096 NT_STATUS_OK
WriteX 10221 0 8192 8192 NT_STATUS_OK
WriteX 10222 0 4096 4096 NT_STATUS_OK
WriteX 10223 0 4096 4096 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10246 NT_STATUS_OK
ReadX 10246 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10247 NT_STATUS_OK
QUERY_FILE_INFORMATION 10247 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10246 NT_STATUS_OK
Close 10222 NT_STATUS_OK
Close 10223 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10221 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10250 NT_STATUS_OK
ReadX 10250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10252 NT_STATUS_OK
ReadX 10252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10254 NT_STATUS_OK
ReadX 10254 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10256 NT_STATUS_OK
ReadX 10256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10257 NT_STATUS_OK
ReadX 10257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10258 NT_STATUS_OK
ReadX 10258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10259 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10260 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10266 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10267 NT_STATUS_OK
QUERY_FILE_INFORMATION 10267 1004 NT_STATUS_OK
WriteX 10267 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10267 258 NT_STATUS_OK
WriteX 10267 0 2048 2048 NT_STATUS_OK
Close 10267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10269 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10270 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10274 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10275 NT_STATUS_OK
QUERY_FILE_INFORMATION 10275 1004 NT_STATUS_OK
WriteX 10275 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10275 258 NT_STATUS_OK
WriteX 10275 0 2048 2048 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10276 NT_STATUS_OK
ReadX 10276 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10268 0 4096 4096 NT_STATUS_OK
Flush 10268 NT_STATUS_OK
WriteX 10276 0 4096 4096 NT_STATUS_OK
Flush 10276 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10268 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10276 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10270 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10277 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10278 NT_STATUS_OK
WriteX 10278 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10278 258 NT_STATUS_OK
WriteX 10278 0 4096 4096 NT_STATUS_OK
Close 10278 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10279 NT_STATUS_OK
ReadX 10279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10280 NT_STATUS_OK
Close 10280 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10281 NT_STATUS_OK
WriteX 10281 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10281 258 NT_STATUS_OK
WriteX 10281 0 4096 4096 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10282 NT_STATUS_OK
ReadX 10282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10282 0 4096 4096 NT_STATUS_OK
Close 10279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10256 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10257 NT_STATUS_OK
Close 10250 NT_STATUS_OK
Close 10251 NT_STATUS_OK
Close 10254 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10252 NT_STATUS_OK
Close 10253 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10285 NT_STATUS_OK
Close 10285 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10287 NT_STATUS_OK
ReadX 10287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10288 NT_STATUS_OK
Close 10288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10289 NT_STATUS_OK
WriteX 10289 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10289 258 NT_STATUS_OK
WriteX 10289 0 2048 2048 NT_STATUS_OK
Close 10289 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10291 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10292 NT_STATUS_OK
ReadX 10292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10293 NT_STATUS_OK
ReadX 10293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10294 NT_STATUS_OK
ReadX 10294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10295 NT_STATUS_OK
ReadX 10295 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10296 NT_STATUS_OK
ReadX 10296 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10297 NT_STATUS_OK
ReadX 10297 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10298 NT_STATUS_OK
ReadX 10298 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10299 NT_STATUS_OK
ReadX 10299 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10300 NT_STATUS_OK
ReadX 10300 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10301 NT_STATUS_OK
ReadX 10301 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10302 NT_STATUS_OK
ReadX 10302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10304 NT_STATUS_OK
QUERY_FILE_INFORMATION 10304 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10287 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Close 10302 NT_STATUS_OK
Close 10297 NT_STATUS_OK
Close 10298 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10300 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Close 10303 NT_STATUS_OK
Close 10291 NT_STATUS_OK
Close 10292 NT_STATUS_OK
Close 10295 NT_STATUS_OK
Close 10296 NT_STATUS_OK
Close 10293 NT_STATUS_OK
Close 10294 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10306 NT_STATUS_OK
QUERY_FILE_INFORMATION 10306 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10306 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10308 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10308 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10309 NT_STATUS_OK
ReadX 10309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10310 NT_STATUS_OK
ReadX 10310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10311 NT_STATUS_OK
ReadX 10311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10312 NT_STATUS_OK
ReadX 10312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10313 NT_STATUS_OK
ReadX 10313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10314 NT_STATUS_OK
ReadX 10314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10315 NT_STATUS_OK
ReadX 10315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10316 NT_STATUS_OK
ReadX 10316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10317 NT_STATUS_OK
ReadX 10317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10318 NT_STATUS_OK
ReadX 10318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10319 NT_STATUS_OK
ReadX 10319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10320 NT_STATUS_OK
ReadX 10320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10321 NT_STATUS_OK
ReadX 10321 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10325 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10326 NT_STATUS_OK
QUERY_FILE_INFORMATION 10326 1004 NT_STATUS_OK
WriteX 10326 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10326 258 NT_STATUS_OK
WriteX 10326 0 2048 2048 NT_STATUS_OK
Close 10326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10327 NT_STATUS_OK
ReadX 10327 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10328 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10330 NT_STATUS_OK
ReadX 10330 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10331 NT_STATUS_OK
ReadX 10331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10332 NT_STATUS_OK
ReadX 10332 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10333 NT_STATUS_OK
ReadX 10333 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10337 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10337 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10338 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 1004 NT_STATUS_OK
WriteX 10338 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10338 258 NT_STATUS_OK
WriteX 10338 0 2048 2048 NT_STATUS_OK
Close 10338 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10339 NT_STATUS_OK
ReadX 10339 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10314 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10340 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10341 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10345 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10345 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10346 NT_STATUS_OK
QUERY_FILE_INFORMATION 10346 1004 NT_STATUS_OK
WriteX 10346 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10346 258 NT_STATUS_OK
WriteX 10346 0 2048 2048 NT_STATUS_OK
Close 10346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10327 0 4096 4096 NT_STATUS_OK
Flush 10327 NT_STATUS_OK
WriteX 10339 0 4096 4096 NT_STATUS_OK
Flush 10339 NT_STATUS_OK
WriteX 10347 0 4096 4096 NT_STATUS_OK
Flush 10347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10327 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10339 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10347 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10329 4096 16384 16384 NT_STATUS_OK
ReadX 10309 4096 16384 16384 NT_STATUS_OK
ReadX 10341 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10348 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10348 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 2048 2048 NT_STATUS_OK
WriteX 10349 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10350 NT_STATUS_OK
QUERY_FILE_INFORMATION 10350 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10333 NT_STATUS_OK
Close 10321 NT_STATUS_OK
Close 10313 NT_STATUS_OK
Close 10329 NT_STATUS_OK
Close 10330 NT_STATUS_OK
Close 10331 NT_STATUS_OK
Close 10332 NT_STATUS_OK
Close 10320 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Close 10315 NT_STATUS_OK
Close 10318 NT_STATUS_OK
Close 10319 NT_STATUS_OK
Close 10316 NT_STATUS_OK
Close 10317 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10310 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Close 10312 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10339 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10352 NT_STATUS_OK
QUERY_FILE_INFORMATION 10352 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10352 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10347 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10354 NT_STATUS_OK
QUERY_FILE_INFORMATION 10354 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10354 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10357 NT_STATUS_OK
ReadX 10357 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10358 NT_STATUS_OK
ReadX 10358 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10360 NT_STATUS_OK
ReadX 10360 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10361 NT_STATUS_OK
ReadX 10361 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10357 4096 16384 16384 NT_STATUS_OK
WriteX 10357 0 4096 4096 NT_STATUS_OK
WriteX 10358 0 4096 4096 NT_STATUS_OK
WriteX 10359 0 4096 4096 NT_STATUS_OK
WriteX 10360 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10362 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10362 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10363 NT_STATUS_OK
ReadX 10363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10364 NT_STATUS_OK
ReadX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10365 NT_STATUS_OK
ReadX 10365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10366 NT_STATUS_OK
ReadX 10366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10367 NT_STATUS_OK
ReadX 10367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10368 NT_STATUS_OK
ReadX 10368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10369 NT_STATUS_OK
ReadX 10369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10370 NT_STATUS_OK
ReadX 10370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10371 NT_STATUS_OK
ReadX 10371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10372 NT_STATUS_OK
ReadX 10372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10373 NT_STATUS_OK
ReadX 10373 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10374 NT_STATUS_OK
ReadX 10374 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10375 NT_STATUS_OK
ReadX 10375 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10376 NT_STATUS_OK
ReadX 10376 0 8192 8192 NT_STATUS_OK
ReadX 10363 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10377 0 4096 4096 NT_STATUS_OK
ReadX 10377 4096 4096 4096 NT_STATUS_OK
ReadX 10377 8192 4096 4096 NT_STATUS_OK
WriteX 10363 0 4096 4096 NT_STATUS_OK
WriteX 10364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10378 0 4096 4096 NT_STATUS_OK
ReadX 10378 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10357 0 4096 4096 NT_STATUS_OK
WriteX 10358 0 4096 4096 NT_STATUS_OK
WriteX 10359 0 4096 4096 NT_STATUS_OK
WriteX 10360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10382 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10382 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10383 NT_STATUS_OK
QUERY_FILE_INFORMATION 10383 1004 NT_STATUS_OK
WriteX 10383 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10383 258 NT_STATUS_OK
WriteX 10383 0 2048 2048 NT_STATUS_OK
Close 10383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10384 NT_STATUS_OK
ReadX 10384 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10384 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10384 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10386 NT_STATUS_OK
ReadX 10386 0 4096 4096 NT_STATUS_OK
ReadX 10386 4096 4096 4096 NT_STATUS_OK
WriteX 10386 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10384 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10387 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10388 NT_STATUS_OK
ReadX 10388 0 4096 4096 NT_STATUS_OK
ReadX 10388 4096 4096 4096 NT_STATUS_OK
WriteX 10388 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10389 NT_STATUS_OK
QUERY_FILE_INFORMATION 10389 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10376 NT_STATUS_OK
Close 10361 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Close 10358 NT_STATUS_OK
Close 10359 NT_STATUS_OK
Close 10360 NT_STATUS_OK
Close 10369 NT_STATUS_OK
Close 10374 NT_STATUS_OK
Close 10370 NT_STATUS_OK
Close 10371 NT_STATUS_OK
Close 10372 NT_STATUS_OK
Close 10373 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Close 10363 NT_STATUS_OK
Close 10364 NT_STATUS_OK
Close 10367 NT_STATUS_OK
Close 10368 NT_STATUS_OK
Close 10365 NT_STATUS_OK
Close 10366 NT_STATUS_OK
Close 10388 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Close 10378 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10391 0 4096 4096 NT_STATUS_OK
ReadX 10391 4096 4096 4096 NT_STATUS_OK
ReadX 10391 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10392 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10392 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10393 NT_STATUS_OK
ReadX 10393 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10394 NT_STATUS_OK
ReadX 10394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10395 NT_STATUS_OK
ReadX 10395 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10396 NT_STATUS_OK
ReadX 10396 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10397 NT_STATUS_OK
ReadX 10397 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10398 NT_STATUS_OK
ReadX 10398 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10399 NT_STATUS_OK
ReadX 10399 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10400 NT_STATUS_OK
ReadX 10400 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10401 NT_STATUS_OK
ReadX 10401 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10402 NT_STATUS_OK
ReadX 10402 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10403 NT_STATUS_OK
ReadX 10403 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10404 NT_STATUS_OK
ReadX 10404 0 4096 4096 NT_STATUS_OK
ReadX 10392 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10409 NT_STATUS_OK
QUERY_FILE_INFORMATION 10409 1004 NT_STATUS_OK
WriteX 10409 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10409 258 NT_STATUS_OK
WriteX 10409 0 2048 2048 NT_STATUS_OK
Close 10409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10410 NT_STATUS_OK
ReadX 10410 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10410 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10414 NT_STATUS_OK
Close 10414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10415 NT_STATUS_OK
QUERY_FILE_INFORMATION 10415 1004 NT_STATUS_OK
WriteX 10415 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10415 258 NT_STATUS_OK
WriteX 10415 0 2048 2048 NT_STATUS_OK
Close 10415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10416 NT_STATUS_OK
ReadX 10416 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10416 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10399 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10410 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10417 NT_STATUS_OK
QUERY_FILE_INFORMATION 10417 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10403 NT_STATUS_OK
Close 10398 NT_STATUS_OK
Close 10404 NT_STATUS_OK
Close 10392 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Close 10396 NT_STATUS_OK
Close 10397 NT_STATUS_OK
Close 10394 NT_STATUS_OK
Close 10395 NT_STATUS_OK
Close 10399 NT_STATUS_OK
Close 10400 NT_STATUS_OK
Close 10401 NT_STATUS_OK
Close 10402 NT_STATUS_OK
Close 10391 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10419 NT_STATUS_OK
QUERY_FILE_INFORMATION 10419 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10421 NT_STATUS_OK
ReadX 10421 61440 4096 4096 NT_STATUS_OK
ReadX 10421 126976 4096 4096 NT_STATUS_OK
WriteX 10421 0 65536 65536 NT_STATUS_OK
WriteX 10421 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10422 NT_STATUS_OK
ReadX 10422 61440 4096 4096 NT_STATUS_OK
ReadX 10422 126976 4096 4096 NT_STATUS_OK
ReadX 10422 192512 4096 4096 NT_STATUS_OK
ReadX 10422 258048 4096 4096 NT_STATUS_OK
WriteX 10422 0 65536 65536 NT_STATUS_OK
WriteX 10422 65536 65536 65536 NT_STATUS_OK
WriteX 10422 131072 65536 65536 NT_STATUS_OK
WriteX 10422 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10423 NT_STATUS_OK
ReadX 10423 61440 4096 4096 NT_STATUS_OK
ReadX 10423 126976 4096 4096 NT_STATUS_OK
ReadX 10423 192512 4096 4096 NT_STATUS_OK
ReadX 10423 258048 4096 4096 NT_STATUS_OK
ReadX 10423 323584 4096 4096 NT_STATUS_OK
ReadX 10423 389120 4096 4096 NT_STATUS_OK
ReadX 10423 454656 4096 4096 NT_STATUS_OK
ReadX 10423 520192 4096 4096 NT_STATUS_OK
WriteX 10423 0 65536 65536 NT_STATUS_OK
WriteX 10423 65536 65536 65536 NT_STATUS_OK
WriteX 10423 131072 65536 65536 NT_STATUS_OK
WriteX 10423 196608 65536 65536 NT_STATUS_OK
WriteX 10423 262144 65536 65536 NT_STATUS_OK
WriteX 10423 327680 65536 65536 NT_STATUS_OK
WriteX 10423 393216 65536 65536 NT_STATUS_OK
WriteX 10423 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10424 NT_STATUS_OK
ReadX 10424 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10424 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10424 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10424 8192 4096 4096 NT_STATUS_OK
ReadX 10424 12288 4096 4096 NT_STATUS_OK
ReadX 10424 16384 4096 4096 NT_STATUS_OK
ReadX 10424 20480 4096 4096 NT_STATUS_OK
ReadX 10424 24576 4096 4096 NT_STATUS_OK
ReadX 10424 28672 4096 4096 NT_STATUS_OK
ReadX 10424 32768 4096 4096 NT_STATUS_OK
ReadX 10424 36864 4096 4096 NT_STATUS_OK
ReadX 10424 40960 4096 4096 NT_STATUS_OK
ReadX 10424 45056 4096 4096 NT_STATUS_OK
ReadX 10424 49152 4096 4096 NT_STATUS_OK
ReadX 10424 53248 4096 4096 NT_STATUS_OK
ReadX 10424 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10424 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10425 NT_STATUS_OK
Close 10425 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10421 NT_STATUS_OK
Close 10422 NT_STATUS_OK
Close 10423 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10427 NT_STATUS_OK
WriteX 10427 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10427 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10427 1004 NT_STATUS_OK
WriteX 10427 0 57088 57088 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
Flush 10427 NT_STATUS_OK
Close 10424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10428 NT_STATUS_OK
SET_FILE_INFORMATION 10428 1004 NT_STATUS_OK
Close 10428 NT_STATUS_OK
SET_FILE_INFORMATION 10427 1004 NT_STATUS_OK
WriteX 10427 0 4096 4096 NT_STATUS_OK
Close 10427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10431 NT_STATUS_OK
ReadX 10431 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10431 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10432 NT_STATUS_OK
WriteX 10432 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10432 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10432 1004 NT_STATUS_OK
WriteX 10432 0 51456 51456 NT_STATUS_OK
WriteX 10432 0 4096 4096 NT_STATUS_OK
Flush 10432 NT_STATUS_OK
SET_FILE_INFORMATION 10432 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10432 1004 NT_STATUS_OK
WriteX 10432 0 4096 4096 NT_STATUS_OK
Close 10432 NT_STATUS_OK
Close 10431 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10434 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10436 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10438 NT_STATUS_OK
Close 10438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10441 NT_STATUS_OK
WriteX 10441 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10441 258 NT_STATUS_OK
WriteX 10441 0 53077 53077 NT_STATUS_OK
Close 10441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10442 NT_STATUS_OK
WriteX 10442 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10442 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10442 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
WriteX 10442 0 65536 65536 NT_STATUS_OK
WriteX 10442 65536 1856 1856 NT_STATUS_OK
WriteX 10442 0 4096 4096 NT_STATUS_OK
Flush 10442 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10442 1004 NT_STATUS_OK
WriteX 10442 0 4096 4096 NT_STATUS_OK
Close 10442 NT_STATUS_OK
Close 10436 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10444 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10446 NT_STATUS_OK
ReadX 10446 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10448 NT_STATUS_OK
Close 10448 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10451 NT_STATUS_OK
WriteX 10451 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10451 258 NT_STATUS_OK
WriteX 10451 0 7983 7983 NT_STATUS_OK
Close 10451 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10453 NT_STATUS_OK
Close 10453 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10456 NT_STATUS_OK
WriteX 10456 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10456 258 NT_STATUS_OK
WriteX 10456 0 65536 65536 NT_STATUS_OK
WriteX 10456 65536 65536 65536 NT_STATUS_OK
WriteX 10456 131072 65536 65536 NT_STATUS_OK
WriteX 10456 196608 65536 65536 NT_STATUS_OK
WriteX 10456 262144 65536 65536 NT_STATUS_OK
WriteX 10456 327680 65536 65536 NT_STATUS_OK
WriteX 10456 393216 65536 65536 NT_STATUS_OK
WriteX 10456 458752 46731 46731 NT_STATUS_OK
Close 10456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10457 NT_STATUS_OK
WriteX 10457 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10457 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10446 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10457 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10457 1004 NT_STATUS_OK
WriteX 10457 0 65536 65536 NT_STATUS_OK
WriteX 10457 65536 22848 22848 NT_STATUS_OK
WriteX 10457 0 4096 4096 NT_STATUS_OK
Flush 10457 NT_STATUS_OK
SET_FILE_INFORMATION 10457 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10457 1004 NT_STATUS_OK
WriteX 10457 0 4096 4096 NT_STATUS_OK
Close 10457 NT_STATUS_OK
Close 10446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10461 NT_STATUS_OK
ReadX 10461 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10461 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10462 NT_STATUS_OK
ReadX 10462 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10462 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10462 1004 NT_STATUS_OK
ReadX 10462 8192 4096 4096 NT_STATUS_OK
ReadX 10462 12288 4096 4096 NT_STATUS_OK
ReadX 10462 16384 4096 4096 NT_STATUS_OK
ReadX 10462 20480 4096 4096 NT_STATUS_OK
ReadX 10462 24576 4096 4096 NT_STATUS_OK
ReadX 10462 28672 4096 4096 NT_STATUS_OK
ReadX 10462 32768 4096 4096 NT_STATUS_OK
ReadX 10462 36864 4096 4096 NT_STATUS_OK
ReadX 10462 40960 4096 4096 NT_STATUS_OK
ReadX 10462 45056 4096 4096 NT_STATUS_OK
ReadX 10462 49152 4096 4096 NT_STATUS_OK
ReadX 10462 53248 4096 4096 NT_STATUS_OK
ReadX 10462 57344 4096 4096 NT_STATUS_OK
ReadX 10462 61440 4096 4096 NT_STATUS_OK
ReadX 10462 65536 4096 4096 NT_STATUS_OK
ReadX 10462 69632 4096 4096 NT_STATUS_OK
ReadX 10462 73728 4096 4096 NT_STATUS_OK
ReadX 10462 77824 4096 4096 NT_STATUS_OK
ReadX 10462 81920 4096 4096 NT_STATUS_OK
ReadX 10462 86016 4096 4096 NT_STATUS_OK
ReadX 10462 90112 4096 4096 NT_STATUS_OK
ReadX 10462 94208 4096 4096 NT_STATUS_OK
ReadX 10462 98304 4096 4096 NT_STATUS_OK
ReadX 10462 102400 4096 4096 NT_STATUS_OK
ReadX 10462 106496 4096 4096 NT_STATUS_OK
ReadX 10462 110592 4096 4096 NT_STATUS_OK
ReadX 10462 114688 4096 4096 NT_STATUS_OK
ReadX 10462 118784 4096 4096 NT_STATUS_OK
ReadX 10462 122880 4096 4096 NT_STATUS_OK
ReadX 10462 126976 4096 4096 NT_STATUS_OK
ReadX 10462 131072 4096 4096 NT_STATUS_OK
ReadX 10462 135168 4096 4096 NT_STATUS_OK
ReadX 10462 139264 4096 4096 NT_STATUS_OK
ReadX 10462 143360 4096 4096 NT_STATUS_OK
ReadX 10462 147456 4096 4096 NT_STATUS_OK
ReadX 10462 151552 4096 4096 NT_STATUS_OK
ReadX 10462 155648 4096 4096 NT_STATUS_OK
ReadX 10462 159744 4096 4096 NT_STATUS_OK
ReadX 10462 163840 4096 4096 NT_STATUS_OK
ReadX 10462 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10462 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10463 NT_STATUS_OK
Close 10463 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10461 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10465 NT_STATUS_OK
WriteX 10465 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10465 258 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10466 NT_STATUS_OK
SET_FILE_INFORMATION 10466 1004 NT_STATUS_OK
Close 10466 NT_STATUS_OK
WriteX 10465 0 42388 42388 NT_STATUS_OK
Close 10465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10467 NT_STATUS_OK
Close 10467 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10469 NT_STATUS_OK
ReadX 10469 0 4096 4096 NT_STATUS_OK
ReadX 10469 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10470 NT_STATUS_OK
WriteX 10470 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10470 258 NT_STATUS_OK
SET_FILE_INFORMATION 10470 1004 NT_STATUS_OK
WriteX 10470 0 42652 42652 NT_STATUS_OK
Close 10470 NT_STATUS_OK
Close 10469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10472 NT_STATUS_OK
Close 10472 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 4096 4096 NT_STATUS_OK
ReadX 10474 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10476 NT_STATUS_OK
Close 10476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10479 NT_STATUS_OK
WriteX 10479 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10479 258 NT_STATUS_OK
WriteX 10479 0 65536 65536 NT_STATUS_OK
WriteX 10479 65536 49 49 NT_STATUS_OK
Close 10479 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10480 NT_STATUS_OK
ReadX 10480 0 61440 61440 NT_STATUS_OK
ReadX 10480 61440 4096 4096 NT_STATUS_OK
ReadX 10480 65536 61440 61440 NT_STATUS_OK
ReadX 10480 126976 4096 4096 NT_STATUS_OK
ReadX 10480 131072 61440 61440 NT_STATUS_OK
ReadX 10480 192512 4096 4096 NT_STATUS_OK
ReadX 10480 196608 61440 61440 NT_STATUS_OK
ReadX 10480 258048 4096 4096 NT_STATUS_OK
ReadX 10480 262144 61440 61440 NT_STATUS_OK
ReadX 10480 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10481 NT_STATUS_OK
ReadX 10481 0 61440 61440 NT_STATUS_OK
ReadX 10481 61440 4096 4096 NT_STATUS_OK
ReadX 10481 65536 61440 61440 NT_STATUS_OK
ReadX 10481 126976 4096 4096 NT_STATUS_OK
ReadX 10481 131072 61440 61440 NT_STATUS_OK
ReadX 10481 192512 4096 4096 NT_STATUS_OK
ReadX 10481 196608 61440 61440 NT_STATUS_OK
ReadX 10481 258048 4096 4096 NT_STATUS_OK
ReadX 10481 262144 61440 61440 NT_STATUS_OK
ReadX 10481 323584 4096 4096 NT_STATUS_OK
ReadX 10481 327680 61440 61440 NT_STATUS_OK
ReadX 10481 389120 4096 4096 NT_STATUS_OK
ReadX 10481 393216 61440 61440 NT_STATUS_OK
ReadX 10481 454656 4096 4096 NT_STATUS_OK
ReadX 10481 458752 61440 61440 NT_STATUS_OK
ReadX 10481 520192 4096 4096 NT_STATUS_OK
ReadX 10481 524288 61440 61440 NT_STATUS_OK
ReadX 10481 585728 4096 4096 NT_STATUS_OK
ReadX 10481 589824 61440 61440 NT_STATUS_OK
ReadX 10481 651264 4096 4096 NT_STATUS_OK
ReadX 10481 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10482 NT_STATUS_OK
ReadX 10482 0 61440 61440 NT_STATUS_OK
ReadX 10482 61440 4096 4096 NT_STATUS_OK
ReadX 10482 65536 61440 61440 NT_STATUS_OK
ReadX 10482 126976 4096 4096 NT_STATUS_OK
ReadX 10482 131072 61440 61440 NT_STATUS_OK
ReadX 10482 192512 4096 4096 NT_STATUS_OK
ReadX 10482 196608 61440 61440 NT_STATUS_OK
ReadX 10482 258048 4096 4096 NT_STATUS_OK
ReadX 10482 262144 61440 61440 NT_STATUS_OK
ReadX 10482 323584 4096 4096 NT_STATUS_OK
ReadX 10482 327680 61440 61440 NT_STATUS_OK
ReadX 10482 389120 4096 4096 NT_STATUS_OK
ReadX 10482 393216 61440 61440 NT_STATUS_OK
ReadX 10482 454656 4096 4096 NT_STATUS_OK
ReadX 10482 458752 61440 61440 NT_STATUS_OK
ReadX 10482 520192 4096 4096 NT_STATUS_OK
ReadX 10482 524288 61440 61440 NT_STATUS_OK
ReadX 10482 585728 4096 4096 NT_STATUS_OK
ReadX 10482 589824 61440 61440 NT_STATUS_OK
ReadX 10482 651264 4096 4096 NT_STATUS_OK
ReadX 10482 655360 61440 61440 NT_STATUS_OK
ReadX 10482 716800 4096 4096 NT_STATUS_OK
ReadX 10482 720896 61440 61440 NT_STATUS_OK
ReadX 10482 782336 4096 4096 NT_STATUS_OK
ReadX 10482 786432 61440 61440 NT_STATUS_OK
ReadX 10482 847872 4096 4096 NT_STATUS_OK
ReadX 10482 851968 61440 61440 NT_STATUS_OK
ReadX 10482 913408 4096 4096 NT_STATUS_OK
ReadX 10482 917504 61440 61440 NT_STATUS_OK
ReadX 10482 978944 4096 4096 NT_STATUS_OK
ReadX 10482 983040 61440 61440 NT_STATUS_OK
ReadX 10482 1044480 4096 4096 NT_STATUS_OK
ReadX 10482 1048576 61440 61440 NT_STATUS_OK
ReadX 10482 1110016 4096 4096 NT_STATUS_OK
ReadX 10482 1114112 61440 61440 NT_STATUS_OK
ReadX 10482 1175552 4096 4096 NT_STATUS_OK
ReadX 10482 1179648 61440 61440 NT_STATUS_OK
ReadX 10482 1241088 4096 4096 NT_STATUS_OK
ReadX 10482 1245184 61440 61440 NT_STATUS_OK
ReadX 10482 1306624 4096 4096 NT_STATUS_OK
ReadX 10482 1310720 61440 61440 NT_STATUS_OK
ReadX 10482 1372160 4096 4096 NT_STATUS_OK
ReadX 10482 1376256 61440 61440 NT_STATUS_OK
ReadX 10482 1437696 4096 4096 NT_STATUS_OK
ReadX 10482 1441792 61440 61440 NT_STATUS_OK
ReadX 10482 1503232 4096 4096 NT_STATUS_OK
ReadX 10482 1507328 61440 61440 NT_STATUS_OK
ReadX 10482 1568768 4096 4096 NT_STATUS_OK
ReadX 10482 1572864 61440 61440 NT_STATUS_OK
ReadX 10482 1634304 4096 4096 NT_STATUS_OK
ReadX 10482 1638400 61440 61440 NT_STATUS_OK
ReadX 10482 1699840 4096 4096 NT_STATUS_OK
ReadX 10482 1703936 61440 61440 NT_STATUS_OK
ReadX 10482 1765376 4096 4096 NT_STATUS_OK
ReadX 10482 1769472 61440 61440 NT_STATUS_OK
ReadX 10482 1830912 4096 4096 NT_STATUS_OK
ReadX 10482 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10484 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10484 1005 NT_STATUS_OK
ReadX 10484 2156 24 24 NT_STATUS_OK
ReadX 10484 2139 276 276 NT_STATUS_OK
ReadX 10484 2136 14 14 NT_STATUS_OK
ReadX 10484 2136 7 7 NT_STATUS_OK
ReadX 10484 2138 12 12 NT_STATUS_OK
ReadX 10484 2137 8 8 NT_STATUS_OK
ReadX 10484 2135 15 15 NT_STATUS_OK
ReadX 10484 0 16 16 NT_STATUS_OK
ReadX 10484 16 2048 2048 NT_STATUS_OK
ReadX 10484 2064 2048 2048 NT_STATUS_OK
ReadX 10484 257 2048 2048 NT_STATUS_OK
ReadX 10484 385 2048 2048 NT_STATUS_OK
ReadX 10484 513 2048 2048 NT_STATUS_OK
ReadX 10484 641 2048 2048 NT_STATUS_OK
ReadX 10484 769 2048 2048 NT_STATUS_OK
ReadX 10484 897 2048 2048 NT_STATUS_OK
ReadX 10484 1025 2048 2048 NT_STATUS_OK
ReadX 10484 1153 2048 2048 NT_STATUS_OK
ReadX 10484 1281 2048 2048 NT_STATUS_OK
ReadX 10484 1409 2048 2048 NT_STATUS_OK
ReadX 10484 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10486 NT_STATUS_OK
Close 10486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10480 NT_STATUS_OK
Close 10481 NT_STATUS_OK
Close 10482 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10489 NT_STATUS_OK
WriteX 10489 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10489 258 NT_STATUS_OK
WriteX 10489 0 10575 10575 NT_STATUS_OK
Flush 10489 NT_STATUS_OK
Close 10489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10490 NT_STATUS_OK
Close 10490 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10492 NT_STATUS_OK
ReadX 10492 0 4096 4096 NT_STATUS_OK
Close 10484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10494 NT_STATUS_OK
LockX 10494 2147483538 1 NT_STATUS_OK
UnlockX 10494 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10494 1005 NT_STATUS_OK
ReadX 10494 0 512 512 NT_STATUS_OK
ReadX 10494 512 512 512 NT_STATUS_OK
ReadX 10494 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10494 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10494 1004 NT_STATUS_OK
Close 10494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10495 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 1005 NT_STATUS_OK
ReadX 10495 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10496 NT_STATUS_OK
LockX 10496 2147483538 1 NT_STATUS_OK
UnlockX 10496 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10496 1005 NT_STATUS_OK
ReadX 10496 0 512 512 NT_STATUS_OK
ReadX 10496 512 512 512 NT_STATUS_OK
ReadX 10496 1024 512 512 NT_STATUS_OK
ReadX 10496 288 20 20 NT_STATUS_OK
ReadX 10496 308 2084 2084 NT_STATUS_OK
ReadX 10496 388 2084 2084 NT_STATUS_OK
ReadX 10496 388 2084 2084 NT_STATUS_OK
ReadX 10483 2157 1386 1386 NT_STATUS_OK
ReadX 10496 2472 399 399 NT_STATUS_OK
ReadX 10496 3072 1536 1536 NT_STATUS_OK
ReadX 10496 544 149 149 NT_STATUS_OK
ReadX 10496 693 485 485 NT_STATUS_OK
Close 10496 NT_STATUS_OK
ReadX 10483 2157 4096 4096 NT_STATUS_OK
ReadX 10483 6253 4096 4096 NT_STATUS_OK
ReadX 10483 10349 4096 4096 NT_STATUS_OK
ReadX 10483 14445 4096 4096 NT_STATUS_OK
ReadX 10483 18541 4096 4096 NT_STATUS_OK
ReadX 10483 22637 256 256 NT_STATUS_OK
ReadX 10483 22893 4096 4096 NT_STATUS_OK
ReadX 10483 26989 4096 4096 NT_STATUS_OK
ReadX 10483 31085 4096 4096 NT_STATUS_OK
ReadX 10483 35181 4096 4096 NT_STATUS_OK
ReadX 10483 39277 4096 4096 NT_STATUS_OK
ReadX 10483 43373 4096 4096 NT_STATUS_OK
ReadX 10483 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10483 2157 1024 1024 NT_STATUS_OK
ReadX 10483 1667 4688 4688 NT_STATUS_OK
ReadX 10483 6355 3516 3516 NT_STATUS_OK
ReadX 10483 9871 16384 16384 NT_STATUS_OK
ReadX 10483 26255 3771 3771 NT_STATUS_OK
ReadX 10483 30026 2048 2048 NT_STATUS_OK
ReadX 10483 32074 1024 1024 NT_STATUS_OK
ReadX 10483 33098 6652 6652 NT_STATUS_OK
ReadX 10483 39750 16384 16384 NT_STATUS_OK
ReadX 10483 56134 10496 10496 NT_STATUS_OK
ReadX 10483 66630 1784 1784 NT_STATUS_OK
ReadX 10483 68414 90 90 NT_STATUS_OK
ReadX 10483 68504 273 273 NT_STATUS_OK
ReadX 10483 68777 1600 1600 NT_STATUS_OK
ReadX 10483 70377 640 640 NT_STATUS_OK
ReadX 10483 71017 1280 1280 NT_STATUS_OK
ReadX 10483 72297 8464 8464 NT_STATUS_OK
ReadX 10483 80761 158 158 NT_STATUS_OK
ReadX 10483 80919 912 912 NT_STATUS_OK
ReadX 10483 81831 1980 1980 NT_STATUS_OK
ReadX 10483 83811 2256 2256 NT_STATUS_OK
ReadX 10483 86067 400 400 NT_STATUS_OK
ReadX 10483 86467 252 252 NT_STATUS_OK
ReadX 10483 86719 42 42 NT_STATUS_OK
ReadX 10483 86761 725 725 NT_STATUS_OK
ReadX 10483 2009 512 512 NT_STATUS_OK
ReadX 10483 3895 9 9 NT_STATUS_OK
ReadX 10483 3781 46 46 NT_STATUS_OK
ReadX 10483 4059 92 92 NT_STATUS_OK
ReadX 10483 3781 92 92 NT_STATUS_OK
ReadX 10483 3986 184 184 NT_STATUS_OK
ReadX 10483 3987 16384 16384 NT_STATUS_OK
ReadX 10483 3902 16384 16384 NT_STATUS_OK
ReadX 10483 3781 10240 10240 NT_STATUS_OK
ReadX 10483 3821 16384 16384 NT_STATUS_OK
ReadX 10483 3891 935 935 NT_STATUS_OK
ReadX 10483 4060 10240 10240 NT_STATUS_OK
ReadX 10483 4059 184 184 NT_STATUS_OK
ReadX 10483 256 184 184 NT_STATUS_OK
ReadX 10483 256 1026 1026 NT_STATUS_OK
ReadX 10483 3901 326 326 NT_STATUS_OK
ReadX 10483 3899 652 652 NT_STATUS_OK
ReadX 10483 256 2 2 NT_STATUS_OK
ReadX 10483 258 4948 4948 NT_STATUS_OK
Close 10483 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10498 NT_STATUS_OK
Close 10498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10501 NT_STATUS_OK
WriteX 10501 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10501 258 NT_STATUS_OK
WriteX 10501 0 65536 65536 NT_STATUS_OK
WriteX 10501 65536 65536 65536 NT_STATUS_OK
WriteX 10501 131072 65536 65536 NT_STATUS_OK
WriteX 10501 196608 65536 65536 NT_STATUS_OK
WriteX 10501 262144 65536 65536 NT_STATUS_OK
WriteX 10501 327680 65536 65536 NT_STATUS_OK
WriteX 10501 393216 65536 65536 NT_STATUS_OK
WriteX 10501 458752 65536 65536 NT_STATUS_OK
WriteX 10501 524288 65536 65536 NT_STATUS_OK
WriteX 10501 589824 35257 35257 NT_STATUS_OK
Close 10501 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10503 NT_STATUS_OK
Close 10503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10506 NT_STATUS_OK
WriteX 10506 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10506 258 NT_STATUS_OK
WriteX 10506 0 65536 65536 NT_STATUS_OK
WriteX 10506 65536 65536 65536 NT_STATUS_OK
WriteX 10506 131072 65536 65536 NT_STATUS_OK
WriteX 10506 196608 65536 65536 NT_STATUS_OK
WriteX 10506 262144 65536 65536 NT_STATUS_OK
WriteX 10506 327680 65536 65536 NT_STATUS_OK
WriteX 10506 393216 65536 65536 NT_STATUS_OK
WriteX 10506 458752 65536 65536 NT_STATUS_OK
WriteX 10506 524288 65536 65536 NT_STATUS_OK
WriteX 10506 589824 57598 57598 NT_STATUS_OK
Close 10506 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10508 NT_STATUS_OK
WriteX 10508 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10508 258 NT_STATUS_OK
WriteX 10508 0 12543 12543 NT_STATUS_OK
Flush 10508 NT_STATUS_OK
Close 10508 NT_STATUS_OK
Close 10492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10510 NT_STATUS_OK
Close 10510 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10512 NT_STATUS_OK
ReadX 10512 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10514 NT_STATUS_OK
QUERY_FILE_INFORMATION 10514 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10514 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10514 1005 NT_STATUS_OK
ReadX 10514 1938 24 24 NT_STATUS_OK
ReadX 10514 1920 276 276 NT_STATUS_OK
ReadX 10514 1918 14 14 NT_STATUS_OK
ReadX 10514 1918 7 7 NT_STATUS_OK
ReadX 10514 1919 12 12 NT_STATUS_OK
ReadX 10514 1919 8 8 NT_STATUS_OK
ReadX 10514 1917 15 15 NT_STATUS_OK
ReadX 10514 0 16 16 NT_STATUS_OK
ReadX 10514 16 2048 2048 NT_STATUS_OK
ReadX 10514 2064 2048 2048 NT_STATUS_OK
ReadX 10514 257 2048 2048 NT_STATUS_OK
ReadX 10514 385 2048 2048 NT_STATUS_OK
ReadX 10514 513 2048 2048 NT_STATUS_OK
ReadX 10514 641 2048 2048 NT_STATUS_OK
ReadX 10514 769 2048 2048 NT_STATUS_OK
ReadX 10514 897 2048 2048 NT_STATUS_OK
ReadX 10514 1025 2048 2048 NT_STATUS_OK
ReadX 10514 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10516 NT_STATUS_OK
Close 10516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10519 NT_STATUS_OK
WriteX 10519 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10519 258 NT_STATUS_OK
WriteX 10519 0 11588 11588 NT_STATUS_OK
Flush 10519 NT_STATUS_OK
Close 10519 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10520 NT_STATUS_OK
Close 10520 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10522 NT_STATUS_OK
ReadX 10522 0 4096 4096 NT_STATUS_OK
Close 10514 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10524 NT_STATUS_OK
WriteX 10524 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10524 258 NT_STATUS_OK
WriteX 10524 0 11615 11615 NT_STATUS_OK
Flush 10524 NT_STATUS_OK
Close 10524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10522 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10526 NT_STATUS_OK
Close 10526 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10528 NT_STATUS_OK
ReadX 10528 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10530 NT_STATUS_OK
Close 10530 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10533 NT_STATUS_OK
WriteX 10533 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10533 258 NT_STATUS_OK
WriteX 10533 0 65536 65536 NT_STATUS_OK
WriteX 10533 65536 16050 16050 NT_STATUS_OK
Close 10533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10513 1939 64 64 NT_STATUS_OK
ReadX 10513 128 248 248 NT_STATUS_OK
ReadX 10513 128 568 568 NT_STATUS_OK
ReadX 10513 3872 1536 1536 NT_STATUS_OK
ReadX 10513 3456 2560 2560 NT_STATUS_OK
ReadX 10513 3136 512 512 NT_STATUS_OK
ReadX 10513 2880 4096 4096 NT_STATUS_OK
ReadX 10513 3264 3072 3072 NT_STATUS_OK
ReadX 10513 320 4096 4096 NT_STATUS_OK
ReadX 10513 1024 4096 4096 NT_STATUS_OK
ReadX 10513 3616 4096 4096 NT_STATUS_OK
ReadX 10513 1939 64 64 NT_STATUS_OK
ReadX 10513 128 248 248 NT_STATUS_OK
ReadX 10513 128 608 608 NT_STATUS_OK
ReadX 10513 2858 1024 1024 NT_STATUS_OK
ReadX 10513 2810 4096 4096 NT_STATUS_OK
ReadX 10513 2826 4096 4096 NT_STATUS_OK
ReadX 10513 2580 2048 2048 NT_STATUS_OK
ReadX 10513 2800 2560 2560 NT_STATUS_OK
ReadX 10513 2100 4096 4096 NT_STATUS_OK
ReadX 10513 2084 4096 4096 NT_STATUS_OK
ReadX 10513 868 4096 4096 NT_STATUS_OK
ReadX 10513 2324 4096 4096 NT_STATUS_OK
ReadX 10513 884 4096 4096 NT_STATUS_OK
ReadX 10513 2604 1024 1024 NT_STATUS_OK
ReadX 10513 580 4096 4096 NT_STATUS_OK
ReadX 10513 596 4096 4096 NT_STATUS_OK
ReadX 10513 2752 4096 4096 NT_STATUS_OK
ReadX 10513 2842 1024 1024 NT_STATUS_OK
ReadX 10513 660 4096 4096 NT_STATUS_OK
ReadX 10513 2720 4096 4096 NT_STATUS_OK
ReadX 10513 2736 4096 4096 NT_STATUS_OK
ReadX 10513 628 4096 4096 NT_STATUS_OK
ReadX 10513 2704 4096 4096 NT_STATUS_OK
ReadX 10513 1556 4096 4096 NT_STATUS_OK
ReadX 10513 576 4096 4096 NT_STATUS_OK
ReadX 10513 3168 1536 1536 NT_STATUS_OK
ReadX 10513 832 4096 4096 NT_STATUS_OK
ReadX 10513 1088 4096 4096 NT_STATUS_OK
ReadX 10513 1344 4096 4096 NT_STATUS_OK
ReadX 10513 1600 4096 4096 NT_STATUS_OK
ReadX 10513 1856 4096 4096 NT_STATUS_OK
ReadX 10513 2112 4096 4096 NT_STATUS_OK
ReadX 10513 1892 4096 4096 NT_STATUS_OK
ReadX 10513 820 4096 4096 NT_STATUS_OK
ReadX 10513 788 4096 4096 NT_STATUS_OK
ReadX 10513 1604 4096 4096 NT_STATUS_OK
ReadX 10513 3648 4096 4096 NT_STATUS_OK
ReadX 10513 2608 4096 4096 NT_STATUS_OK
ReadX 10513 548 4096 4096 NT_STATUS_OK
ReadX 10513 740 4096 4096 NT_STATUS_OK
ReadX 10513 1344 4096 4096 NT_STATUS_OK
ReadX 10513 3392 4096 4096 NT_STATUS_OK
ReadX 10513 3904 4096 4096 NT_STATUS_OK
ReadX 10513 644 4096 4096 NT_STATUS_OK
ReadX 10513 676 4096 4096 NT_STATUS_OK
ReadX 10513 2688 4096 4096 NT_STATUS_OK
ReadX 10513 320 4096 4096 NT_STATUS_OK
ReadX 10513 900 4096 4096 NT_STATUS_OK
ReadX 10513 1908 4096 4096 NT_STATUS_OK
ReadX 10513 852 4096 4096 NT_STATUS_OK
ReadX 10513 724 4096 4096 NT_STATUS_OK
ReadX 10513 2292 4096 4096 NT_STATUS_OK
ReadX 10513 612 4096 4096 NT_STATUS_OK
ReadX 10513 388 4096 4096 NT_STATUS_OK
ReadX 10513 2368 4096 4096 NT_STATUS_OK
ReadX 10513 2624 4096 4096 NT_STATUS_OK
ReadX 10513 500 4096 4096 NT_STATUS_OK
ReadX 10513 356 4096 4096 NT_STATUS_OK
ReadX 10513 1024 4096 4096 NT_STATUS_OK
ReadX 10513 576 4096 4096 NT_STATUS_OK
ReadX 10513 340 4096 4096 NT_STATUS_OK
ReadX 10513 420 4096 4096 NT_STATUS_OK
ReadX 10513 1600 4096 4096 NT_STATUS_OK
ReadX 10513 404 4096 4096 NT_STATUS_OK
ReadX 10513 1428 4096 4096 NT_STATUS_OK
ReadX 10513 2656 4096 4096 NT_STATUS_OK
ReadX 10513 2624 4096 4096 NT_STATUS_OK
ReadX 10513 452 4096 4096 NT_STATUS_OK
ReadX 10513 692 4096 4096 NT_STATUS_OK
ReadX 10513 564 4096 4096 NT_STATUS_OK
ReadX 10513 372 4096 4096 NT_STATUS_OK
ReadX 10513 468 4096 4096 NT_STATUS_OK
ReadX 10513 484 4096 4096 NT_STATUS_OK
ReadX 10513 1088 4096 4096 NT_STATUS_OK
ReadX 10513 1924 4096 4096 NT_STATUS_OK
ReadX 10513 2768 4096 4096 NT_STATUS_OK
ReadX 10513 832 4096 4096 NT_STATUS_OK
ReadX 10513 836 4096 4096 NT_STATUS_OK
ReadX 10513 1856 4096 4096 NT_STATUS_OK
ReadX 10513 2640 4096 4096 NT_STATUS_OK
ReadX 10513 436 4096 4096 NT_STATUS_OK
ReadX 10513 1828 4096 4096 NT_STATUS_OK
ReadX 10513 804 4096 4096 NT_STATUS_OK
ReadX 10513 1860 4096 4096 NT_STATUS_OK
ReadX 10513 1812 4096 4096 NT_STATUS_OK
ReadX 10513 756 4096 4096 NT_STATUS_OK
ReadX 10513 1636 4096 4096 NT_STATUS_OK
ReadX 10513 772 4096 4096 NT_STATUS_OK
ReadX 10513 2036 4096 4096 NT_STATUS_OK
ReadX 10513 1220 4096 4096 NT_STATUS_OK
ReadX 10513 1652 4096 4096 NT_STATUS_OK
ReadX 10513 2588 4096 4096 NT_STATUS_OK
ReadX 10513 916 4096 4096 NT_STATUS_OK
ReadX 10513 260 4096 4096 NT_STATUS_OK
ReadX 10513 932 4096 4096 NT_STATUS_OK
ReadX 10513 2624 4096 4096 NT_STATUS_OK
ReadX 10513 308 4096 4096 NT_STATUS_OK
ReadX 10513 292 4096 4096 NT_STATUS_OK
ReadX 10513 1140 4096 4096 NT_STATUS_OK
ReadX 10513 276 4096 4096 NT_STATUS_OK
ReadX 10513 2020 4096 4096 NT_STATUS_OK
ReadX 10513 2880 4096 4096 NT_STATUS_OK
ReadX 10513 516 4096 4096 NT_STATUS_OK
ReadX 10513 1844 4096 4096 NT_STATUS_OK
ReadX 10513 1124 4096 4096 NT_STATUS_OK
ReadX 10513 3136 4096 4096 NT_STATUS_OK
ReadX 10513 324 4096 4096 NT_STATUS_OK
ReadX 10513 1156 4096 4096 NT_STATUS_OK
ReadX 10513 1172 4096 4096 NT_STATUS_OK
ReadX 10513 2112 4096 4096 NT_STATUS_OK
ReadX 10513 2368 4096 4096 NT_STATUS_OK
ReadX 10513 964 4096 4096 NT_STATUS_OK
ReadX 10513 980 4096 4096 NT_STATUS_OK
ReadX 10513 1012 4096 4096 NT_STATUS_OK
ReadX 10513 532 4096 4096 NT_STATUS_OK
ReadX 10513 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10513 1620 4096 4096 NT_STATUS_OK
ReadX 10513 1604 4096 4096 NT_STATUS_OK
ReadX 10513 2116 4096 4096 NT_STATUS_OK
ReadX 10513 2132 4096 4096 NT_STATUS_OK
ReadX 10513 2148 4096 4096 NT_STATUS_OK
ReadX 10513 2276 4096 4096 NT_STATUS_OK
ReadX 10513 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10535 NT_STATUS_OK
Close 10535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10538 NT_STATUS_OK
QUERY_FILE_INFORMATION 10493 1004 NT_STATUS_OK
Close 10493 NT_STATUS_OK
WriteX 10538 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10538 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10495 1004 NT_STATUS_OK
Close 10495 NT_STATUS_OK
WriteX 10538 0 65536 65536 NT_STATUS_OK
WriteX 10538 65536 64850 64850 NT_STATUS_OK
Close 10538 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10540 NT_STATUS_OK
WriteX 10540 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10540 258 NT_STATUS_OK
ReadX 10513 2068 4096 4096 NT_STATUS_OK
ReadX 10513 1588 4096 4096 NT_STATUS_OK
ReadX 10513 1572 4096 4096 NT_STATUS_OK
WriteX 10540 0 18630 18630 NT_STATUS_OK
Flush 10540 NT_STATUS_OK
Close 10540 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10542 NT_STATUS_OK
Close 10542 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10544 NT_STATUS_OK
ReadX 10544 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10513 612 4096 4096 NT_STATUS_OK
ReadX 10513 564 4096 4096 NT_STATUS_OK
ReadX 10513 1876 4096 4096 NT_STATUS_OK
ReadX 10513 628 4096 4096 NT_STATUS_OK
ReadX 10513 740 4096 4096 NT_STATUS_OK
ReadX 10513 724 4096 4096 NT_STATUS_OK
ReadX 10513 644 4096 4096 NT_STATUS_OK
ReadX 10513 2324 4096 4096 NT_STATUS_OK
ReadX 10513 660 4096 4096 NT_STATUS_OK
ReadX 10513 852 4096 4096 NT_STATUS_OK
ReadX 10513 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10513 2368 4096 4096 NT_STATUS_OK
ReadX 10513 1024 4096 4096 NT_STATUS_OK
ReadX 10513 320 4096 4096 NT_STATUS_OK
ReadX 10513 580 4096 4096 NT_STATUS_OK
ReadX 10513 3136 512 512 NT_STATUS_OK
ReadX 10513 2880 4096 4096 NT_STATUS_OK
Close 10513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10545 NT_STATUS_OK
ReadX 10545 61440 4096 4096 NT_STATUS_OK
ReadX 10545 126976 4096 4096 NT_STATUS_OK
WriteX 10545 0 65536 65536 NT_STATUS_OK
WriteX 10545 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10546 NT_STATUS_OK
ReadX 10546 61440 4096 4096 NT_STATUS_OK
ReadX 10546 126976 4096 4096 NT_STATUS_OK
ReadX 10546 192512 4096 4096 NT_STATUS_OK
ReadX 10546 258048 4096 4096 NT_STATUS_OK
WriteX 10546 0 65536 65536 NT_STATUS_OK
WriteX 10546 65536 65536 65536 NT_STATUS_OK
WriteX 10546 131072 65536 65536 NT_STATUS_OK
WriteX 10546 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10547 NT_STATUS_OK
ReadX 10547 61440 4096 4096 NT_STATUS_OK
ReadX 10547 126976 4096 4096 NT_STATUS_OK
ReadX 10547 192512 4096 4096 NT_STATUS_OK
ReadX 10547 258048 4096 4096 NT_STATUS_OK
ReadX 10547 323584 4096 4096 NT_STATUS_OK
ReadX 10547 389120 4096 4096 NT_STATUS_OK
ReadX 10547 454656 4096 4096 NT_STATUS_OK
ReadX 10547 520192 4096 4096 NT_STATUS_OK
WriteX 10547 0 65536 65536 NT_STATUS_OK
WriteX 10547 65536 65536 65536 NT_STATUS_OK
WriteX 10547 131072 65536 65536 NT_STATUS_OK
WriteX 10547 196608 65536 65536 NT_STATUS_OK
WriteX 10547 262144 65536 65536 NT_STATUS_OK
WriteX 10547 327680 65536 65536 NT_STATUS_OK
WriteX 10547 393216 65536 65536 NT_STATUS_OK
WriteX 10547 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10548 NT_STATUS_OK
ReadX 10548 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10549 NT_STATUS_OK
Close 10549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10550 NT_STATUS_OK
WriteX 10550 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10550 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10548 0 8192 8192 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10548 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10548 0 8192 8192 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10548 0 8192 8192 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10548 0 8192 8192 NT_STATUS_OK
Flush 10548 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10552 NT_STATUS_OK
Close 10552 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10544 NT_STATUS_OK
Close 10512 NT_STATUS_OK
Close 10545 NT_STATUS_OK
Close 10546 NT_STATUS_OK
Close 10547 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10555 NT_STATUS_OK
WriteX 10555 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10555 258 NT_STATUS_OK
WriteX 10555 0 62591 62591 NT_STATUS_OK
Close 10555 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10557 NT_STATUS_OK
Close 10557 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10560 NT_STATUS_OK
WriteX 10560 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10560 258 NT_STATUS_OK
WriteX 10560 0 10845 10845 NT_STATUS_OK
Close 10560 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10562 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10565 NT_STATUS_OK
WriteX 10565 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10565 258 NT_STATUS_OK
WriteX 10565 0 30118 30118 NT_STATUS_OK
Close 10565 NT_STATUS_OK
WriteX 10548 0 4096 4096 NT_STATUS_OK
WriteX 10550 0 64 64 NT_STATUS_OK
Close 10550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10567 NT_STATUS_OK
ReadX 10567 0 61440 61440 NT_STATUS_OK
ReadX 10567 61440 4096 4096 NT_STATUS_OK
ReadX 10567 65536 61440 61440 NT_STATUS_OK
ReadX 10567 126976 4096 4096 NT_STATUS_OK
ReadX 10567 131072 61440 61440 NT_STATUS_OK
ReadX 10567 192512 4096 4096 NT_STATUS_OK
ReadX 10567 196608 61440 61440 NT_STATUS_OK
ReadX 10567 258048 4096 4096 NT_STATUS_OK
ReadX 10567 262144 61440 61440 NT_STATUS_OK
ReadX 10567 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10568 NT_STATUS_OK
ReadX 10568 0 61440 61440 NT_STATUS_OK
ReadX 10568 61440 4096 4096 NT_STATUS_OK
ReadX 10568 65536 61440 61440 NT_STATUS_OK
ReadX 10568 126976 4096 4096 NT_STATUS_OK
ReadX 10568 131072 61440 61440 NT_STATUS_OK
ReadX 10568 192512 4096 4096 NT_STATUS_OK
ReadX 10568 196608 61440 61440 NT_STATUS_OK
ReadX 10568 258048 4096 4096 NT_STATUS_OK
ReadX 10568 262144 61440 61440 NT_STATUS_OK
ReadX 10568 323584 4096 4096 NT_STATUS_OK
ReadX 10568 327680 61440 61440 NT_STATUS_OK
ReadX 10568 389120 4096 4096 NT_STATUS_OK
ReadX 10568 393216 61440 61440 NT_STATUS_OK
ReadX 10568 454656 4096 4096 NT_STATUS_OK
ReadX 10568 458752 61440 61440 NT_STATUS_OK
ReadX 10568 520192 4096 4096 NT_STATUS_OK
ReadX 10568 524288 61440 61440 NT_STATUS_OK
ReadX 10568 585728 4096 4096 NT_STATUS_OK
ReadX 10568 589824 61440 61440 NT_STATUS_OK
ReadX 10568 651264 4096 4096 NT_STATUS_OK
ReadX 10568 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10569 NT_STATUS_OK
ReadX 10569 0 61440 61440 NT_STATUS_OK
ReadX 10569 61440 4096 4096 NT_STATUS_OK
ReadX 10569 65536 61440 61440 NT_STATUS_OK
ReadX 10569 126976 4096 4096 NT_STATUS_OK
ReadX 10569 131072 61440 61440 NT_STATUS_OK
ReadX 10569 192512 4096 4096 NT_STATUS_OK
ReadX 10569 196608 61440 61440 NT_STATUS_OK
ReadX 10569 258048 4096 4096 NT_STATUS_OK
ReadX 10569 262144 61440 61440 NT_STATUS_OK
ReadX 10569 323584 4096 4096 NT_STATUS_OK
ReadX 10569 327680 61440 61440 NT_STATUS_OK
ReadX 10569 389120 4096 4096 NT_STATUS_OK
ReadX 10569 393216 61440 61440 NT_STATUS_OK
ReadX 10569 454656 4096 4096 NT_STATUS_OK
ReadX 10569 458752 61440 61440 NT_STATUS_OK
ReadX 10569 520192 4096 4096 NT_STATUS_OK
ReadX 10569 524288 61440 61440 NT_STATUS_OK
ReadX 10569 585728 4096 4096 NT_STATUS_OK
ReadX 10569 589824 61440 61440 NT_STATUS_OK
ReadX 10569 651264 4096 4096 NT_STATUS_OK
ReadX 10569 655360 61440 61440 NT_STATUS_OK
ReadX 10569 716800 4096 4096 NT_STATUS_OK
ReadX 10569 720896 61440 61440 NT_STATUS_OK
ReadX 10569 782336 4096 4096 NT_STATUS_OK
ReadX 10569 786432 61440 61440 NT_STATUS_OK
ReadX 10569 847872 4096 4096 NT_STATUS_OK
ReadX 10569 851968 61440 61440 NT_STATUS_OK
ReadX 10569 913408 4096 4096 NT_STATUS_OK
ReadX 10569 917504 61440 61440 NT_STATUS_OK
ReadX 10569 978944 4096 4096 NT_STATUS_OK
ReadX 10569 983040 61440 61440 NT_STATUS_OK
ReadX 10569 1044480 4096 4096 NT_STATUS_OK
ReadX 10569 1048576 61440 61440 NT_STATUS_OK
ReadX 10569 1110016 4096 4096 NT_STATUS_OK
ReadX 10569 1114112 61440 61440 NT_STATUS_OK
ReadX 10569 1175552 4096 4096 NT_STATUS_OK
ReadX 10569 1179648 61440 61440 NT_STATUS_OK
ReadX 10569 1241088 4096 4096 NT_STATUS_OK
ReadX 10569 1245184 61440 61440 NT_STATUS_OK
ReadX 10569 1306624 4096 4096 NT_STATUS_OK
ReadX 10569 1310720 61440 61440 NT_STATUS_OK
ReadX 10569 1372160 4096 4096 NT_STATUS_OK
ReadX 10569 1376256 61440 61440 NT_STATUS_OK
ReadX 10569 1437696 4096 4096 NT_STATUS_OK
ReadX 10569 1441792 61440 61440 NT_STATUS_OK
ReadX 10569 1503232 4096 4096 NT_STATUS_OK
ReadX 10569 1507328 61440 61440 NT_STATUS_OK
ReadX 10569 1568768 4096 4096 NT_STATUS_OK
ReadX 10569 1572864 61440 61440 NT_STATUS_OK
ReadX 10569 1634304 4096 4096 NT_STATUS_OK
ReadX 10569 1638400 61440 61440 NT_STATUS_OK
ReadX 10569 1699840 4096 4096 NT_STATUS_OK
ReadX 10569 1703936 61440 61440 NT_STATUS_OK
ReadX 10569 1765376 4096 4096 NT_STATUS_OK
ReadX 10569 1769472 61440 61440 NT_STATUS_OK
ReadX 10569 1830912 4096 4096 NT_STATUS_OK
ReadX 10569 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10570 NT_STATUS_OK
Close 10570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10567 NT_STATUS_OK
Close 10568 NT_STATUS_OK
Close 10569 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10572 NT_STATUS_OK
ReadX 10572 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10574 NT_STATUS_OK
ReadX 10574 0 4096 4096 NT_STATUS_OK
ReadX 10574 4096 4096 4096 NT_STATUS_OK
ReadX 10574 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10575 NT_STATUS_OK
Close 10575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10572 NT_STATUS_OK
Close 10573 NT_STATUS_OK
Close 10574 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10577 NT_STATUS_OK
ReadX 10577 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10578 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10578 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10579 NT_STATUS_OK
Close 10579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10577 NT_STATUS_OK
Close 10578 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10581 NT_STATUS_OK
ReadX 10581 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10582 NT_STATUS_OK
ReadX 10582 0 8192 8192 NT_STATUS_OK
ReadX 10582 8192 8192 8192 NT_STATUS_OK
ReadX 10582 16384 8192 8192 NT_STATUS_OK
ReadX 10582 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10584 NT_STATUS_OK
Close 10584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10582 NT_STATUS_OK
Close 10581 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10587 NT_STATUS_OK
WriteX 10587 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10587 258 NT_STATUS_OK
WriteX 10587 0 10438 10438 NT_STATUS_OK
Close 10587 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10588 NT_STATUS_OK
Close 10588 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10589 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10591 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10592 NT_STATUS_OK
Close 10592 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10593 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10594 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10595 NT_STATUS_OK
Close 10595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10596 NT_STATUS_OK
ReadX 10596 0 4096 4096 NT_STATUS_OK
ReadX 10596 4096 4096 4096 NT_STATUS_OK
ReadX 10596 8192 4096 4096 NT_STATUS_OK
ReadX 10596 12288 8192 8192 NT_STATUS_OK
ReadX 10596 20480 8192 8192 NT_STATUS_OK
ReadX 10596 28672 8192 8192 NT_STATUS_OK
ReadX 10596 36864 8192 8192 NT_STATUS_OK
ReadX 10596 45056 8192 8192 NT_STATUS_OK
ReadX 10596 53248 8192 8192 NT_STATUS_OK
ReadX 10596 61440 8192 8192 NT_STATUS_OK
ReadX 10596 69632 8192 8192 NT_STATUS_OK
ReadX 10596 77824 8192 8192 NT_STATUS_OK
ReadX 10596 86016 8192 8192 NT_STATUS_OK
ReadX 10596 94208 8192 8192 NT_STATUS_OK
ReadX 10596 102400 8192 8192 NT_STATUS_OK
ReadX 10596 110592 8192 8192 NT_STATUS_OK
ReadX 10596 118784 8192 8192 NT_STATUS_OK
ReadX 10596 126976 8192 8192 NT_STATUS_OK
ReadX 10596 135168 8192 8192 NT_STATUS_OK
ReadX 10596 143360 8192 8192 NT_STATUS_OK
ReadX 10596 151552 8192 8192 NT_STATUS_OK
ReadX 10596 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10596 NT_STATUS_OK
Close 10589 NT_STATUS_OK
Close 10591 NT_STATUS_OK
Close 10593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10598 NT_STATUS_OK
Close 10598 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10601 NT_STATUS_OK
WriteX 10601 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10601 258 NT_STATUS_OK
WriteX 10601 0 28489 28489 NT_STATUS_OK
Close 10601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10602 NT_STATUS_OK
Close 10602 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10604 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10604 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10605 NT_STATUS_OK
Close 10605 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10604 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10607 NT_STATUS_OK
ReadX 10607 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10608 NT_STATUS_OK
ReadX 10608 0 8192 8192 NT_STATUS_OK
ReadX 10608 8192 8192 8192 NT_STATUS_OK
ReadX 10608 16384 8192 8192 NT_STATUS_OK
ReadX 10608 24576 8192 8192 NT_STATUS_OK
ReadX 10608 32768 16384 16384 NT_STATUS_OK
ReadX 10608 49152 8192 8192 NT_STATUS_OK
ReadX 10608 57344 8192 8192 NT_STATUS_OK
ReadX 10608 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10610 NT_STATUS_OK
Close 10610 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10608 NT_STATUS_OK
Close 10607 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10613 NT_STATUS_OK
WriteX 10613 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10613 258 NT_STATUS_OK
WriteX 10613 0 29253 29253 NT_STATUS_OK
Close 10613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10614 NT_STATUS_OK
Close 10614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10615 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10617 NT_STATUS_OK
Close 10617 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10620 NT_STATUS_OK
WriteX 10620 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10620 258 NT_STATUS_OK
WriteX 10620 0 30183 30183 NT_STATUS_OK
Close 10620 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10621 NT_STATUS_OK
Close 10621 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10623 NT_STATUS_OK
WriteX 10623 0 510 510 NT_STATUS_OK
WriteX 10623 510 512 512 NT_STATUS_OK
WriteX 10623 1022 510 510 NT_STATUS_OK
WriteX 10623 1532 510 510 NT_STATUS_OK
WriteX 10623 2042 168 168 NT_STATUS_OK
Close 10623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10624 NT_STATUS_OK
Close 10624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10626 NT_STATUS_OK
ReadX 10626 0 4096 4096 NT_STATUS_OK
WriteX 10626 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10627 NT_STATUS_OK
ReadX 10627 61440 4096 4096 NT_STATUS_OK
ReadX 10627 126976 4096 4096 NT_STATUS_OK
WriteX 10627 0 65536 65536 NT_STATUS_OK
WriteX 10627 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10628 NT_STATUS_OK
ReadX 10628 61440 4096 4096 NT_STATUS_OK
ReadX 10628 126976 4096 4096 NT_STATUS_OK
ReadX 10628 192512 4096 4096 NT_STATUS_OK
ReadX 10628 258048 4096 4096 NT_STATUS_OK
WriteX 10628 0 65536 65536 NT_STATUS_OK
WriteX 10628 65536 65536 65536 NT_STATUS_OK
WriteX 10628 131072 65536 65536 NT_STATUS_OK
WriteX 10628 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10629 NT_STATUS_OK
ReadX 10629 61440 4096 4096 NT_STATUS_OK
ReadX 10629 126976 4096 4096 NT_STATUS_OK
ReadX 10629 192512 4096 4096 NT_STATUS_OK
ReadX 10629 258048 4096 4096 NT_STATUS_OK
ReadX 10629 323584 4096 4096 NT_STATUS_OK
ReadX 10629 389120 4096 4096 NT_STATUS_OK
ReadX 10629 454656 4096 4096 NT_STATUS_OK
ReadX 10629 520192 4096 4096 NT_STATUS_OK
WriteX 10629 0 65536 65536 NT_STATUS_OK
WriteX 10629 65536 65536 65536 NT_STATUS_OK
WriteX 10629 131072 65536 65536 NT_STATUS_OK
WriteX 10629 196608 65536 65536 NT_STATUS_OK
WriteX 10629 262144 65536 65536 NT_STATUS_OK
WriteX 10629 327680 65536 65536 NT_STATUS_OK
WriteX 10629 393216 65536 65536 NT_STATUS_OK
WriteX 10629 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10626 NT_STATUS_OK
Close 10627 NT_STATUS_OK
Close 10628 NT_STATUS_OK
Close 10629 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10632 NT_STATUS_OK
Close 10632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10636 NT_STATUS_OK
Close 10636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10639 NT_STATUS_OK
Close 10639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10641 NT_STATUS_OK
Close 10641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10645 NT_STATUS_OK
Close 10645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10648 NT_STATUS_OK
Close 10648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10650 NT_STATUS_OK
Close 10650 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10654 NT_STATUS_OK
Close 10654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10659 NT_STATUS_OK
Close 10659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10664 NT_STATUS_OK
Close 10664 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10669 NT_STATUS_OK
Close 10669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10674 NT_STATUS_OK
Close 10674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10679 NT_STATUS_OK
Close 10679 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10684 NT_STATUS_OK
Close 10684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10689 NT_STATUS_OK
Close 10689 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10692 NT_STATUS_OK
Close 10692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10695 NT_STATUS_OK
Close 10695 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10698 NT_STATUS_OK
WriteX 10698 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10698 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10698 0 65536 65536 NT_STATUS_OK
WriteX 10698 65536 65536 65536 NT_STATUS_OK
WriteX 10698 131072 65536 65536 NT_STATUS_OK
WriteX 10698 196608 65536 65536 NT_STATUS_OK
WriteX 10698 262144 26634 26634 NT_STATUS_OK
Close 10698 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10703 NT_STATUS_OK
Close 10703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10704 NT_STATUS_OK
Close 10704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10705 NT_STATUS_OK
ReadX 10705 0 4096 4096 NT_STATUS_OK
Close 10705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10706 NT_STATUS_OK
ReadX 10706 0 4096 4096 NT_STATUS_OK
ReadX 10706 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10707 NT_STATUS_OK
Close 10707 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10706 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10711 NT_STATUS_OK
Close 10711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10714 NT_STATUS_OK
Close 10714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10716 NT_STATUS_OK
Close 10716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10720 NT_STATUS_OK
Close 10720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10723 NT_STATUS_OK
Close 10723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10725 NT_STATUS_OK
Close 10725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10729 NT_STATUS_OK
Close 10729 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10734 NT_STATUS_OK
Close 10734 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10739 NT_STATUS_OK
Close 10739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10744 NT_STATUS_OK
Close 10744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10749 NT_STATUS_OK
Close 10749 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10758 NT_STATUS_OK
Close 10758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10763 NT_STATUS_OK
Close 10763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10768 NT_STATUS_OK
Close 10768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10773 NT_STATUS_OK
Close 10773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10783 NT_STATUS_OK
Close 10783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10785 NT_STATUS_OK
ReadX 10785 0 4096 4096 NT_STATUS_OK
Close 10785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10786 NT_STATUS_OK
ReadX 10786 0 4096 4096 NT_STATUS_OK
Close 10786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10787 NT_STATUS_OK
ReadX 10787 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10797 NT_STATUS_OK
Close 10797 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10798 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10799 NT_STATUS_OK
ReadX 10799 0 4096 4096 NT_STATUS_OK
Close 10799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10800 NT_STATUS_OK
ReadX 10800 0 4096 4096 NT_STATUS_OK
Close 10800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10801 NT_STATUS_OK
ReadX 10801 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10787 NT_STATUS_OK
Close 10801 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10830 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10830 0 4096 4096 NT_STATUS_OK
Close 10830 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10831 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 4096 4096 NT_STATUS_OK
ReadX 10832 4096 4096 4096 NT_STATUS_OK
ReadX 10832 8192 4096 4096 NT_STATUS_OK
ReadX 10832 12288 4096 4096 NT_STATUS_OK
ReadX 10832 16384 4096 4096 NT_STATUS_OK
ReadX 10832 20480 4096 4096 NT_STATUS_OK
ReadX 10832 24576 4096 4096 NT_STATUS_OK
ReadX 10832 28672 4096 4096 NT_STATUS_OK
ReadX 10832 32768 4096 4096 NT_STATUS_OK
ReadX 10832 36864 4096 4096 NT_STATUS_OK
ReadX 10832 40960 4096 4096 NT_STATUS_OK
ReadX 10832 45056 4096 4096 NT_STATUS_OK
ReadX 10832 49152 4096 4096 NT_STATUS_OK
ReadX 10832 53248 4096 4096 NT_STATUS_OK
ReadX 10832 57344 4096 4096 NT_STATUS_OK
ReadX 10832 61440 4096 4096 NT_STATUS_OK
ReadX 10832 65536 4096 4096 NT_STATUS_OK
ReadX 10832 69632 4096 4096 NT_STATUS_OK
ReadX 10832 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10832 1004 NT_STATUS_OK
WriteX 10832 0 4096 4096 NT_STATUS_OK
Close 10832 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10833 NT_STATUS_OK
SET_FILE_INFORMATION 10833 1004 NT_STATUS_OK
Close 10833 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10834 NT_STATUS_OK
ReadX 10834 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10835 NT_STATUS_OK
Close 10835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10838 NT_STATUS_OK
WriteX 10838 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10838 258 NT_STATUS_OK
WriteX 10838 0 65536 65536 NT_STATUS_OK
WriteX 10838 65536 19979 19979 NT_STATUS_OK
Close 10838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10839 NT_STATUS_OK
ReadX 10839 0 4096 4096 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
QUERY_FILE_INFORMATION 10839 1004 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
SET_FILE_INFORMATION 10839 1004 NT_STATUS_OK
WriteX 10839 0 4096 4096 NT_STATUS_OK
Flush 10839 NT_STATUS_OK
Close 10839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10840 NT_STATUS_OK
ReadX 10840 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10841 NT_STATUS_OK
ReadX 10841 0 4096 4096 NT_STATUS_OK
Close 10840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10842 NT_STATUS_OK
ReadX 10842 0 4096 4096 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 4096 4096 NT_STATUS_OK
Close 10843 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10844 NT_STATUS_OK
ReadX 10844 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10844 1004 NT_STATUS_OK
WriteX 10844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10845 NT_STATUS_OK
Close 10845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10841 NT_STATUS_OK
Close 10844 NT_STATUS_OK
Close 10834 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10847 NT_STATUS_OK
Close 10847 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10850 NT_STATUS_OK
WriteX 10850 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10850 258 NT_STATUS_OK
WriteX 10850 0 65536 65536 NT_STATUS_OK
WriteX 10850 65536 17654 17654 NT_STATUS_OK
Close 10850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 0 4096 4096 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
QUERY_FILE_INFORMATION 10851 1004 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
SET_FILE_INFORMATION 10851 1004 NT_STATUS_OK
WriteX 10851 0 4096 4096 NT_STATUS_OK
Flush 10851 NT_STATUS_OK
Close 10851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10852 NT_STATUS_OK
SET_FILE_INFORMATION 10852 1004 NT_STATUS_OK
Close 10852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10854 NT_STATUS_OK
Close 10854 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10856 NT_STATUS_OK
ReadX 10856 0 4096 4096 NT_STATUS_OK
ReadX 10856 4096 4096 4096 NT_STATUS_OK
ReadX 10856 8192 4096 4096 NT_STATUS_OK
ReadX 10856 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10856 16384 4096 4096 NT_STATUS_OK
ReadX 10856 20480 4096 4096 NT_STATUS_OK
ReadX 10856 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10857 NT_STATUS_OK
ReadX 10857 0 4096 4096 NT_STATUS_OK
Close 10857 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10858 NT_STATUS_OK
ReadX 10858 0 4096 4096 NT_STATUS_OK
Close 10858 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10859 NT_STATUS_OK
ReadX 10859 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10859 1004 NT_STATUS_OK
WriteX 10859 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10860 NT_STATUS_OK
Close 10860 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10859 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10862 NT_STATUS_OK
Close 10862 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10865 NT_STATUS_OK
WriteX 10865 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10865 258 NT_STATUS_OK
WriteX 10865 0 65536 65536 NT_STATUS_OK
WriteX 10865 65536 19490 19490 NT_STATUS_OK
Close 10865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10866 NT_STATUS_OK
ReadX 10866 0 4096 4096 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
QUERY_FILE_INFORMATION 10866 1004 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
SET_FILE_INFORMATION 10866 1004 NT_STATUS_OK
WriteX 10866 0 4096 4096 NT_STATUS_OK
Flush 10866 NT_STATUS_OK
Close 10866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10867 NT_STATUS_OK
SET_FILE_INFORMATION 10867 1004 NT_STATUS_OK
Close 10867 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10868 NT_STATUS_OK
ReadX 10868 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10869 NT_STATUS_OK
Close 10869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10871 0 4096 4096 NT_STATUS_OK
Close 10871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10872 NT_STATUS_OK
ReadX 10872 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 4096 4096 NT_STATUS_OK
ReadX 10873 4096 4096 4096 NT_STATUS_OK
ReadX 10873 8192 4096 4096 NT_STATUS_OK
ReadX 10873 12288 4096 4096 NT_STATUS_OK
ReadX 10873 16384 4096 4096 NT_STATUS_OK
ReadX 10873 20480 4096 4096 NT_STATUS_OK
ReadX 10873 24576 4096 4096 NT_STATUS_OK
ReadX 10873 28672 4096 4096 NT_STATUS_OK
ReadX 10873 32768 4096 4096 NT_STATUS_OK
ReadX 10873 36864 4096 4096 NT_STATUS_OK
ReadX 10873 40960 4096 4096 NT_STATUS_OK
ReadX 10873 45056 4096 4096 NT_STATUS_OK
ReadX 10873 49152 4096 4096 NT_STATUS_OK
ReadX 10873 53248 4096 4096 NT_STATUS_OK
ReadX 10873 57344 4096 4096 NT_STATUS_OK
ReadX 10873 61440 4096 4096 NT_STATUS_OK
ReadX 10873 65536 4096 4096 NT_STATUS_OK
ReadX 10873 69632 4096 4096 NT_STATUS_OK
ReadX 10873 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10873 1004 NT_STATUS_OK
WriteX 10873 0 4096 4096 NT_STATUS_OK
Close 10873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10874 NT_STATUS_OK
SET_FILE_INFORMATION 10874 1004 NT_STATUS_OK
Close 10874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10875 NT_STATUS_OK
ReadX 10875 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10876 NT_STATUS_OK
Close 10876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10868 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10879 NT_STATUS_OK
WriteX 10879 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10879 258 NT_STATUS_OK
WriteX 10879 0 65536 65536 NT_STATUS_OK
WriteX 10879 65536 8866 8866 NT_STATUS_OK
Close 10879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 4096 4096 NT_STATUS_OK
WriteX 10880 0 4096 4096 NT_STATUS_OK
Flush 10880 NT_STATUS_OK
SET_FILE_INFORMATION 10880 1004 NT_STATUS_OK
WriteX 10880 0 4096 4096 NT_STATUS_OK
Flush 10880 NT_STATUS_OK
Close 10880 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
Close 10882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
Close 10883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10884 1004 NT_STATUS_OK
WriteX 10884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10885 NT_STATUS_OK
Close 10885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10875 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10887 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10890 NT_STATUS_OK
WriteX 10890 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10890 258 NT_STATUS_OK
WriteX 10890 0 65536 65536 NT_STATUS_OK
WriteX 10890 65536 9298 9298 NT_STATUS_OK
Close 10890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
WriteX 10891 0 4096 4096 NT_STATUS_OK
Flush 10891 NT_STATUS_OK
SET_FILE_INFORMATION 10891 1004 NT_STATUS_OK
WriteX 10891 0 4096 4096 NT_STATUS_OK
Flush 10891 NT_STATUS_OK
Close 10891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10892 NT_STATUS_OK
SET_FILE_INFORMATION 10892 1004 NT_STATUS_OK
Close 10892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10893 NT_STATUS_OK
ReadX 10893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10894 NT_STATUS_OK
Close 10894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10897 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10897 0 4096 4096 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10898 4096 4096 4096 NT_STATUS_OK
ReadX 10898 8192 4096 4096 NT_STATUS_OK
ReadX 10898 12288 4096 4096 NT_STATUS_OK
ReadX 10898 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10893 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10899 NT_STATUS_OK
ReadX 10899 0 4096 4096 NT_STATUS_OK
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10900 NT_STATUS_OK
ReadX 10900 0 4096 4096 NT_STATUS_OK
Close 10900 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10901 NT_STATUS_OK
ReadX 10901 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10901 1004 NT_STATUS_OK
WriteX 10901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10902 NT_STATUS_OK
Close 10902 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10898 NT_STATUS_OK
Close 10901 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10904 NT_STATUS_OK
Close 10904 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10907 NT_STATUS_OK
WriteX 10907 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10907 258 NT_STATUS_OK
WriteX 10907 0 65536 65536 NT_STATUS_OK
WriteX 10907 65536 11540 11540 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10908 NT_STATUS_OK
ReadX 10908 0 4096 4096 NT_STATUS_OK
WriteX 10908 0 4096 4096 NT_STATUS_OK
Flush 10908 NT_STATUS_OK
SET_FILE_INFORMATION 10908 1004 NT_STATUS_OK
WriteX 10908 0 4096 4096 NT_STATUS_OK
Flush 10908 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10909 NT_STATUS_OK
SET_FILE_INFORMATION 10909 1004 NT_STATUS_OK
Close 10909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10910 NT_STATUS_OK
ReadX 10910 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10911 NT_STATUS_OK
Close 10911 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10913 NT_STATUS_OK
ReadX 10913 61440 4096 4096 NT_STATUS_OK
ReadX 10913 126976 4096 4096 NT_STATUS_OK
WriteX 10913 0 65536 65536 NT_STATUS_OK
WriteX 10913 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10914 NT_STATUS_OK
ReadX 10914 61440 4096 4096 NT_STATUS_OK
ReadX 10914 126976 4096 4096 NT_STATUS_OK
ReadX 10914 192512 4096 4096 NT_STATUS_OK
ReadX 10914 258048 4096 4096 NT_STATUS_OK
WriteX 10914 0 65536 65536 NT_STATUS_OK
WriteX 10914 65536 65536 65536 NT_STATUS_OK
WriteX 10914 131072 65536 65536 NT_STATUS_OK
WriteX 10914 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10915 NT_STATUS_OK
ReadX 10915 61440 4096 4096 NT_STATUS_OK
ReadX 10915 126976 4096 4096 NT_STATUS_OK
ReadX 10915 192512 4096 4096 NT_STATUS_OK
ReadX 10915 258048 4096 4096 NT_STATUS_OK
ReadX 10915 323584 4096 4096 NT_STATUS_OK
ReadX 10915 389120 4096 4096 NT_STATUS_OK
ReadX 10915 454656 4096 4096 NT_STATUS_OK
ReadX 10915 520192 4096 4096 NT_STATUS_OK
WriteX 10915 0 65536 65536 NT_STATUS_OK
WriteX 10915 65536 65536 65536 NT_STATUS_OK
WriteX 10915 131072 65536 65536 NT_STATUS_OK
WriteX 10915 196608 65536 65536 NT_STATUS_OK
WriteX 10915 262144 65536 65536 NT_STATUS_OK
WriteX 10915 327680 65536 65536 NT_STATUS_OK
WriteX 10915 393216 65536 65536 NT_STATUS_OK
WriteX 10915 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10916 NT_STATUS_OK
ReadX 10916 0 4096 4096 NT_STATUS_OK
ReadX 10916 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10917 NT_STATUS_OK
WriteX 10917 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10917 258 NT_STATUS_OK
WriteX 10917 0 53 53 NT_STATUS_OK
Close 10917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10910 NT_STATUS_OK
Close 10856 NT_STATUS_OK
Close 10913 NT_STATUS_OK
Close 10914 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10916 8192 4096 4096 NT_STATUS_OK
ReadX 10916 12288 4096 4096 NT_STATUS_OK
WriteX 10920 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10920 258 NT_STATUS_OK
ReadX 10916 16384 4096 4096 NT_STATUS_OK
ReadX 10916 20480 4096 4096 NT_STATUS_OK
WriteX 10920 0 15360 15360 NT_STATUS_OK
Close 10920 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10921 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10921 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10921 1004 NT_STATUS_OK
WriteX 10921 0 4096 4096 NT_STATUS_OK
Close 10921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10922 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10925 NT_STATUS_OK
Close 10925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10924 4096 4096 4096 NT_STATUS_OK
ReadX 10924 8192 4096 4096 NT_STATUS_OK
ReadX 10924 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
ReadX 10927 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 4096 4096 NT_STATUS_OK
ReadX 10928 4096 4096 4096 NT_STATUS_OK
ReadX 10928 8192 4096 4096 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Close 10928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10929 NT_STATUS_OK
WriteX 10929 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10929 258 NT_STATUS_OK
WriteX 10929 0 15360 15360 NT_STATUS_OK
Close 10929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10930 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10930 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10916 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10931 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10934 NT_STATUS_OK
SET_FILE_INFORMATION 10934 1004 NT_STATUS_OK
Close 10934 NT_STATUS_OK
WriteX 10930 0 4096 4096 NT_STATUS_OK
Close 10930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10935 NT_STATUS_OK
Close 10935 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10937 NT_STATUS_OK
ReadX 10937 0 4096 4096 NT_STATUS_OK
ReadX 10937 4096 4096 4096 NT_STATUS_OK
ReadX 10937 8192 4096 4096 NT_STATUS_OK
ReadX 10937 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10937 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10937 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10938 NT_STATUS_OK
ReadX 10938 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10939 NT_STATUS_OK
WriteX 10939 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10939 258 NT_STATUS_OK
WriteX 10939 0 53 53 NT_STATUS_OK
Close 10939 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10940 NT_STATUS_OK
Close 10940 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10938 4096 4096 4096 NT_STATUS_OK
ReadX 10938 8192 4096 4096 NT_STATUS_OK
ReadX 10938 12288 4096 4096 NT_STATUS_OK
WriteX 10942 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10942 258 NT_STATUS_OK
WriteX 10942 0 12006 12006 NT_STATUS_OK
Close 10942 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10943 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10943 1004 NT_STATUS_OK
WriteX 10943 0 4096 4096 NT_STATUS_OK
Close 10943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10944 NT_STATUS_OK
Close 10944 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10947 NT_STATUS_OK
Close 10947 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10946 4096 4096 4096 NT_STATUS_OK
ReadX 10946 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10949 NT_STATUS_OK
WriteX 10949 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10949 258 NT_STATUS_OK
WriteX 10949 0 11991 11991 NT_STATUS_OK
Close 10949 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10950 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10950 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10951 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10953 NT_STATUS_OK
ReadX 10953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10954 NT_STATUS_OK
SET_FILE_INFORMATION 10954 1004 NT_STATUS_OK
Close 10954 NT_STATUS_OK
WriteX 10950 0 4096 4096 NT_STATUS_OK
Close 10950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10955 NT_STATUS_OK
Close 10955 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10958 NT_STATUS_OK
Close 10958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10957 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
ReadX 10957 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
WriteX 10957 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10957 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10957 1004 NT_STATUS_OK
Close 10933 NT_STATUS_OK
WriteX 10937 0 19054 19054 NT_STATUS_OK
WriteX 10957 0 12288 12288 NT_STATUS_OK
Close 10953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10960 NT_STATUS_OK
Close 10960 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10937 NT_STATUS_OK
Close 10957 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10962 NT_STATUS_OK
Close 10962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10964 NT_STATUS_OK
ReadX 10964 0 61440 61440 NT_STATUS_OK
ReadX 10964 61440 4096 4096 NT_STATUS_OK
ReadX 10964 65536 61440 61440 NT_STATUS_OK
ReadX 10964 126976 4096 4096 NT_STATUS_OK
ReadX 10964 131072 61440 61440 NT_STATUS_OK
ReadX 10964 192512 4096 4096 NT_STATUS_OK
ReadX 10964 196608 61440 61440 NT_STATUS_OK
ReadX 10964 258048 4096 4096 NT_STATUS_OK
ReadX 10964 262144 61440 61440 NT_STATUS_OK
ReadX 10964 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10965 NT_STATUS_OK
ReadX 10965 0 61440 61440 NT_STATUS_OK
ReadX 10965 61440 4096 4096 NT_STATUS_OK
ReadX 10965 65536 61440 61440 NT_STATUS_OK
ReadX 10965 126976 4096 4096 NT_STATUS_OK
ReadX 10965 131072 61440 61440 NT_STATUS_OK
ReadX 10965 192512 4096 4096 NT_STATUS_OK
ReadX 10965 196608 61440 61440 NT_STATUS_OK
ReadX 10965 258048 4096 4096 NT_STATUS_OK
ReadX 10965 262144 61440 61440 NT_STATUS_OK
ReadX 10965 323584 4096 4096 NT_STATUS_OK
ReadX 10965 327680 61440 61440 NT_STATUS_OK
ReadX 10965 389120 4096 4096 NT_STATUS_OK
ReadX 10965 393216 61440 61440 NT_STATUS_OK
ReadX 10965 454656 4096 4096 NT_STATUS_OK
ReadX 10965 458752 61440 61440 NT_STATUS_OK
ReadX 10965 520192 4096 4096 NT_STATUS_OK
ReadX 10965 524288 61440 61440 NT_STATUS_OK
ReadX 10965 585728 4096 4096 NT_STATUS_OK
ReadX 10965 589824 61440 61440 NT_STATUS_OK
ReadX 10965 651264 4096 4096 NT_STATUS_OK
ReadX 10965 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10966 NT_STATUS_OK
ReadX 10966 0 61440 61440 NT_STATUS_OK
ReadX 10966 61440 4096 4096 NT_STATUS_OK
ReadX 10966 65536 61440 61440 NT_STATUS_OK
ReadX 10966 126976 4096 4096 NT_STATUS_OK
ReadX 10966 131072 61440 61440 NT_STATUS_OK
ReadX 10966 192512 4096 4096 NT_STATUS_OK
ReadX 10966 196608 61440 61440 NT_STATUS_OK
ReadX 10966 258048 4096 4096 NT_STATUS_OK
ReadX 10966 262144 61440 61440 NT_STATUS_OK
ReadX 10966 323584 4096 4096 NT_STATUS_OK
ReadX 10966 327680 61440 61440 NT_STATUS_OK
ReadX 10966 389120 4096 4096 NT_STATUS_OK
ReadX 10966 393216 61440 61440 NT_STATUS_OK
ReadX 10966 454656 4096 4096 NT_STATUS_OK
ReadX 10966 458752 61440 61440 NT_STATUS_OK
ReadX 10966 520192 4096 4096 NT_STATUS_OK
ReadX 10966 524288 61440 61440 NT_STATUS_OK
ReadX 10966 585728 4096 4096 NT_STATUS_OK
ReadX 10966 589824 61440 61440 NT_STATUS_OK
ReadX 10966 651264 4096 4096 NT_STATUS_OK
ReadX 10966 655360 61440 61440 NT_STATUS_OK
ReadX 10966 716800 4096 4096 NT_STATUS_OK
ReadX 10966 720896 61440 61440 NT_STATUS_OK
ReadX 10966 782336 4096 4096 NT_STATUS_OK
ReadX 10966 786432 61440 61440 NT_STATUS_OK
ReadX 10966 847872 4096 4096 NT_STATUS_OK
ReadX 10966 851968 61440 61440 NT_STATUS_OK
ReadX 10966 913408 4096 4096 NT_STATUS_OK
ReadX 10966 917504 61440 61440 NT_STATUS_OK
ReadX 10966 978944 4096 4096 NT_STATUS_OK
ReadX 10966 983040 61440 61440 NT_STATUS_OK
ReadX 10966 1044480 4096 4096 NT_STATUS_OK
ReadX 10966 1048576 61440 61440 NT_STATUS_OK
ReadX 10966 1110016 4096 4096 NT_STATUS_OK
ReadX 10966 1114112 61440 61440 NT_STATUS_OK
ReadX 10966 1175552 4096 4096 NT_STATUS_OK
ReadX 10966 1179648 61440 61440 NT_STATUS_OK
ReadX 10966 1241088 4096 4096 NT_STATUS_OK
ReadX 10966 1245184 61440 61440 NT_STATUS_OK
ReadX 10966 1306624 4096 4096 NT_STATUS_OK
ReadX 10966 1310720 61440 61440 NT_STATUS_OK
ReadX 10966 1372160 4096 4096 NT_STATUS_OK
ReadX 10966 1376256 61440 61440 NT_STATUS_OK
ReadX 10966 1437696 4096 4096 NT_STATUS_OK
ReadX 10966 1441792 61440 61440 NT_STATUS_OK
ReadX 10966 1503232 4096 4096 NT_STATUS_OK
ReadX 10966 1507328 61440 61440 NT_STATUS_OK
ReadX 10966 1568768 4096 4096 NT_STATUS_OK
ReadX 10966 1572864 61440 61440 NT_STATUS_OK
ReadX 10966 1634304 4096 4096 NT_STATUS_OK
ReadX 10966 1638400 61440 61440 NT_STATUS_OK
ReadX 10966 1699840 4096 4096 NT_STATUS_OK
ReadX 10966 1703936 61440 61440 NT_STATUS_OK
ReadX 10966 1765376 4096 4096 NT_STATUS_OK
ReadX 10966 1769472 61440 61440 NT_STATUS_OK
ReadX 10966 1830912 4096 4096 NT_STATUS_OK
ReadX 10966 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10968 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10968 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10970 NT_STATUS_OK
ReadX 10970 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10971 NT_STATUS_OK
ReadX 10971 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10972 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10972 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10973 NT_STATUS_OK
QUERY_FILE_INFORMATION 10973 1004 NT_STATUS_OK
WriteX 10973 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10973 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10974 NT_STATUS_OK
Close 10974 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10975 NT_STATUS_OK
WriteX 10975 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10975 258 NT_STATUS_OK
WriteX 10975 0 491 491 NT_STATUS_OK
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10976 NT_STATUS_OK
ReadX 10976 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10973 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10978 NT_STATUS_OK
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10979 NT_STATUS_OK
WriteX 10979 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10979 258 NT_STATUS_OK
WriteX 10979 0 543 543 NT_STATUS_OK
Close 10979 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10980 NT_STATUS_OK
ReadX 10980 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10964 NT_STATUS_OK
Close 10965 NT_STATUS_OK
Close 10966 NT_STATUS_OK
Close 10980 NT_STATUS_OK
Close 10968 NT_STATUS_OK
Close 10969 NT_STATUS_OK
Close 10970 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10983 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10984 NT_STATUS_OK
ReadX 10984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10985 NT_STATUS_OK
ReadX 10985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10986 NT_STATUS_OK
ReadX 10986 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10993 NT_STATUS_OK
QUERY_FILE_INFORMATION 10993 1004 NT_STATUS_OK
WriteX 10993 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10993 258 NT_STATUS_OK
WriteX 10993 0 2048 2048 NT_STATUS_OK
Close 10993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
Flush 10994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10998 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10999 NT_STATUS_OK
WriteX 10999 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10999 258 NT_STATUS_OK
WriteX 10999 0 2048 2048 NT_STATUS_OK
Close 10999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11004 NT_STATUS_OK
Close 11004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11005 NT_STATUS_OK
WriteX 11005 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11005 258 NT_STATUS_OK
WriteX 11005 0 2048 2048 NT_STATUS_OK
Close 11005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 2048 2048 NT_STATUS_OK
ReadX 10984 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11006 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11000 0 4096 4096 NT_STATUS_OK
WriteX 10984 0 8192 8192 NT_STATUS_OK
WriteX 10985 0 4096 4096 NT_STATUS_OK
WriteX 10986 0 4096 4096 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10984 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11009 NT_STATUS_OK
ReadX 11009 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11010 NT_STATUS_OK
QUERY_FILE_INFORMATION 11010 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11009 NT_STATUS_OK
Close 10985 NT_STATUS_OK
Close 10986 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 10984 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11013 NT_STATUS_OK
ReadX 11013 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11015 NT_STATUS_OK
ReadX 11015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11017 NT_STATUS_OK
ReadX 11017 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11019 NT_STATUS_OK
ReadX 11019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11020 NT_STATUS_OK
ReadX 11020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11021 NT_STATUS_OK
ReadX 11021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11022 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11023 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11029 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11030 NT_STATUS_OK
QUERY_FILE_INFORMATION 11030 1004 NT_STATUS_OK
WriteX 11030 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11030 258 NT_STATUS_OK
WriteX 11030 0 2048 2048 NT_STATUS_OK
Close 11030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11032 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11033 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11037 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11038 NT_STATUS_OK
QUERY_FILE_INFORMATION 11038 1004 NT_STATUS_OK
WriteX 11038 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11038 258 NT_STATUS_OK
WriteX 11038 0 2048 2048 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11039 NT_STATUS_OK
ReadX 11039 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11031 0 4096 4096 NT_STATUS_OK
Flush 11031 NT_STATUS_OK
WriteX 11039 0 4096 4096 NT_STATUS_OK
Flush 11039 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11031 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11039 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11033 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11040 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11041 NT_STATUS_OK
WriteX 11041 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11041 258 NT_STATUS_OK
WriteX 11041 0 4096 4096 NT_STATUS_OK
Close 11041 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11042 NT_STATUS_OK
ReadX 11042 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11043 NT_STATUS_OK
Close 11043 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11044 NT_STATUS_OK
WriteX 11044 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11044 258 NT_STATUS_OK
WriteX 11044 0 4096 4096 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11045 NT_STATUS_OK
ReadX 11045 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11045 0 4096 4096 NT_STATUS_OK
Close 11042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11019 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11020 NT_STATUS_OK
Close 11013 NT_STATUS_OK
Close 11014 NT_STATUS_OK
Close 11017 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11015 NT_STATUS_OK
Close 11016 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11048 NT_STATUS_OK
Close 11048 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11050 NT_STATUS_OK
ReadX 11050 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11051 NT_STATUS_OK
Close 11051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11052 NT_STATUS_OK
WriteX 11052 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11052 258 NT_STATUS_OK
WriteX 11052 0 2048 2048 NT_STATUS_OK
Close 11052 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11054 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11055 NT_STATUS_OK
ReadX 11055 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11056 NT_STATUS_OK
ReadX 11056 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11057 NT_STATUS_OK
ReadX 11057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11058 NT_STATUS_OK
ReadX 11058 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11059 NT_STATUS_OK
ReadX 11059 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11060 NT_STATUS_OK
ReadX 11060 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11061 NT_STATUS_OK
ReadX 11061 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11062 NT_STATUS_OK
ReadX 11062 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11063 NT_STATUS_OK
ReadX 11063 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11064 NT_STATUS_OK
ReadX 11064 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11065 NT_STATUS_OK
ReadX 11065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11067 NT_STATUS_OK
QUERY_FILE_INFORMATION 11067 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11050 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Close 11065 NT_STATUS_OK
Close 11060 NT_STATUS_OK
Close 11061 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11063 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Close 11066 NT_STATUS_OK
Close 11054 NT_STATUS_OK
Close 11055 NT_STATUS_OK
Close 11058 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Close 11056 NT_STATUS_OK
Close 11057 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11069 NT_STATUS_OK
QUERY_FILE_INFORMATION 11069 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11069 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11071 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11071 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11072 NT_STATUS_OK
ReadX 11072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11073 NT_STATUS_OK
ReadX 11073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11074 NT_STATUS_OK
ReadX 11074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11075 NT_STATUS_OK
ReadX 11075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11076 NT_STATUS_OK
ReadX 11076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11077 NT_STATUS_OK
ReadX 11077 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11078 NT_STATUS_OK
ReadX 11078 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11079 NT_STATUS_OK
ReadX 11079 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11080 NT_STATUS_OK
ReadX 11080 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11081 NT_STATUS_OK
ReadX 11081 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11082 NT_STATUS_OK
ReadX 11082 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11083 NT_STATUS_OK
ReadX 11083 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11084 NT_STATUS_OK
ReadX 11084 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11088 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11089 NT_STATUS_OK
QUERY_FILE_INFORMATION 11089 1004 NT_STATUS_OK
WriteX 11089 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11089 258 NT_STATUS_OK
WriteX 11089 0 2048 2048 NT_STATUS_OK
Close 11089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11090 NT_STATUS_OK
ReadX 11090 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11091 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11093 NT_STATUS_OK
ReadX 11093 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11094 NT_STATUS_OK
ReadX 11094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11095 NT_STATUS_OK
ReadX 11095 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11096 NT_STATUS_OK
ReadX 11096 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11100 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11100 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11101 NT_STATUS_OK
QUERY_FILE_INFORMATION 11101 1004 NT_STATUS_OK
WriteX 11101 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11101 258 NT_STATUS_OK
WriteX 11101 0 2048 2048 NT_STATUS_OK
Close 11101 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11102 NT_STATUS_OK
ReadX 11102 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11077 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11103 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11103 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11104 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11108 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11108 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11109 NT_STATUS_OK
QUERY_FILE_INFORMATION 11109 1004 NT_STATUS_OK
WriteX 11109 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11109 258 NT_STATUS_OK
WriteX 11109 0 2048 2048 NT_STATUS_OK
Close 11109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11090 0 4096 4096 NT_STATUS_OK
Flush 11090 NT_STATUS_OK
WriteX 11102 0 4096 4096 NT_STATUS_OK
Flush 11102 NT_STATUS_OK
WriteX 11110 0 4096 4096 NT_STATUS_OK
Flush 11110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11090 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11102 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11110 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11092 4096 16384 16384 NT_STATUS_OK
ReadX 11072 4096 16384 16384 NT_STATUS_OK
ReadX 11104 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11111 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11111 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 2048 2048 NT_STATUS_OK
WriteX 11112 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11113 NT_STATUS_OK
QUERY_FILE_INFORMATION 11113 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Close 11096 NT_STATUS_OK
Close 11084 NT_STATUS_OK
Close 11076 NT_STATUS_OK
Close 11092 NT_STATUS_OK
Close 11093 NT_STATUS_OK
Close 11094 NT_STATUS_OK
Close 11095 NT_STATUS_OK
Close 11083 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Close 11078 NT_STATUS_OK
Close 11081 NT_STATUS_OK
Close 11082 NT_STATUS_OK
Close 11079 NT_STATUS_OK
Close 11080 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11073 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Close 11075 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11102 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11115 NT_STATUS_OK
QUERY_FILE_INFORMATION 11115 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11115 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11110 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11117 NT_STATUS_OK
QUERY_FILE_INFORMATION 11117 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11117 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11120 NT_STATUS_OK
ReadX 11120 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11121 NT_STATUS_OK
ReadX 11121 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11123 NT_STATUS_OK
ReadX 11123 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11124 NT_STATUS_OK
ReadX 11124 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11120 4096 16384 16384 NT_STATUS_OK
WriteX 11120 0 4096 4096 NT_STATUS_OK
WriteX 11121 0 4096 4096 NT_STATUS_OK
WriteX 11122 0 4096 4096 NT_STATUS_OK
WriteX 11123 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11125 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11125 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11126 NT_STATUS_OK
ReadX 11126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11127 NT_STATUS_OK
ReadX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11128 NT_STATUS_OK
ReadX 11128 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11129 NT_STATUS_OK
ReadX 11129 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11130 NT_STATUS_OK
ReadX 11130 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11131 NT_STATUS_OK
ReadX 11131 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11132 NT_STATUS_OK
ReadX 11132 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11133 NT_STATUS_OK
ReadX 11133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11134 NT_STATUS_OK
ReadX 11134 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11135 NT_STATUS_OK
ReadX 11135 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11136 NT_STATUS_OK
ReadX 11136 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11137 NT_STATUS_OK
ReadX 11137 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11138 NT_STATUS_OK
ReadX 11138 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11139 NT_STATUS_OK
ReadX 11139 0 8192 8192 NT_STATUS_OK
ReadX 11126 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11140 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11140 0 4096 4096 NT_STATUS_OK
ReadX 11140 4096 4096 4096 NT_STATUS_OK
ReadX 11140 8192 4096 4096 NT_STATUS_OK
WriteX 11126 0 4096 4096 NT_STATUS_OK
WriteX 11127 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11141 0 4096 4096 NT_STATUS_OK
ReadX 11141 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11120 0 4096 4096 NT_STATUS_OK
WriteX 11121 0 4096 4096 NT_STATUS_OK
WriteX 11122 0 4096 4096 NT_STATUS_OK
WriteX 11123 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11145 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11145 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11146 NT_STATUS_OK
QUERY_FILE_INFORMATION 11146 1004 NT_STATUS_OK
WriteX 11146 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11146 258 NT_STATUS_OK
WriteX 11146 0 2048 2048 NT_STATUS_OK
Close 11146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11147 NT_STATUS_OK
ReadX 11147 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11147 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11147 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11149 NT_STATUS_OK
ReadX 11149 0 4096 4096 NT_STATUS_OK
ReadX 11149 4096 4096 4096 NT_STATUS_OK
WriteX 11149 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11147 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11150 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11151 NT_STATUS_OK
ReadX 11151 0 4096 4096 NT_STATUS_OK
ReadX 11151 4096 4096 4096 NT_STATUS_OK
WriteX 11151 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11152 NT_STATUS_OK
QUERY_FILE_INFORMATION 11152 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11139 NT_STATUS_OK
Close 11124 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Close 11121 NT_STATUS_OK
Close 11122 NT_STATUS_OK
Close 11123 NT_STATUS_OK
Close 11132 NT_STATUS_OK
Close 11137 NT_STATUS_OK
Close 11133 NT_STATUS_OK
Close 11134 NT_STATUS_OK
Close 11135 NT_STATUS_OK
Close 11136 NT_STATUS_OK
Close 11138 NT_STATUS_OK
Close 11126 NT_STATUS_OK
Close 11127 NT_STATUS_OK
Close 11130 NT_STATUS_OK
Close 11131 NT_STATUS_OK
Close 11128 NT_STATUS_OK
Close 11129 NT_STATUS_OK
Close 11151 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Close 11141 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11154 0 4096 4096 NT_STATUS_OK
ReadX 11154 4096 4096 4096 NT_STATUS_OK
ReadX 11154 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11155 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11155 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11156 NT_STATUS_OK
ReadX 11156 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11157 NT_STATUS_OK
ReadX 11157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11158 NT_STATUS_OK
ReadX 11158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11159 NT_STATUS_OK
ReadX 11159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11160 NT_STATUS_OK
ReadX 11160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11161 NT_STATUS_OK
ReadX 11161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11162 NT_STATUS_OK
ReadX 11162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11163 NT_STATUS_OK
ReadX 11163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11164 NT_STATUS_OK
ReadX 11164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11165 NT_STATUS_OK
ReadX 11165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11166 NT_STATUS_OK
ReadX 11166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11167 NT_STATUS_OK
ReadX 11167 0 4096 4096 NT_STATUS_OK
ReadX 11155 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11171 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11172 NT_STATUS_OK
QUERY_FILE_INFORMATION 11172 1004 NT_STATUS_OK
WriteX 11172 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11172 258 NT_STATUS_OK
WriteX 11172 0 2048 2048 NT_STATUS_OK
Close 11172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11173 NT_STATUS_OK
ReadX 11173 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11173 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11177 NT_STATUS_OK
Close 11177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11178 NT_STATUS_OK
QUERY_FILE_INFORMATION 11178 1004 NT_STATUS_OK
WriteX 11178 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11178 258 NT_STATUS_OK
WriteX 11178 0 2048 2048 NT_STATUS_OK
Close 11178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11179 NT_STATUS_OK
ReadX 11179 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11179 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11162 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11173 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11180 NT_STATUS_OK
QUERY_FILE_INFORMATION 11180 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11166 NT_STATUS_OK
Close 11161 NT_STATUS_OK
Close 11167 NT_STATUS_OK
Close 11155 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Close 11159 NT_STATUS_OK
Close 11160 NT_STATUS_OK
Close 11157 NT_STATUS_OK
Close 11158 NT_STATUS_OK
Close 11162 NT_STATUS_OK
Close 11163 NT_STATUS_OK
Close 11164 NT_STATUS_OK
Close 11165 NT_STATUS_OK
Close 11154 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11182 NT_STATUS_OK
QUERY_FILE_INFORMATION 11182 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11184 NT_STATUS_OK
ReadX 11184 61440 4096 4096 NT_STATUS_OK
ReadX 11184 126976 4096 4096 NT_STATUS_OK
WriteX 11184 0 65536 65536 NT_STATUS_OK
WriteX 11184 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11185 NT_STATUS_OK
ReadX 11185 61440 4096 4096 NT_STATUS_OK
ReadX 11185 126976 4096 4096 NT_STATUS_OK
ReadX 11185 192512 4096 4096 NT_STATUS_OK
ReadX 11185 258048 4096 4096 NT_STATUS_OK
WriteX 11185 0 65536 65536 NT_STATUS_OK
WriteX 11185 65536 65536 65536 NT_STATUS_OK
WriteX 11185 131072 65536 65536 NT_STATUS_OK
WriteX 11185 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11186 NT_STATUS_OK
ReadX 11186 61440 4096 4096 NT_STATUS_OK
ReadX 11186 126976 4096 4096 NT_STATUS_OK
ReadX 11186 192512 4096 4096 NT_STATUS_OK
ReadX 11186 258048 4096 4096 NT_STATUS_OK
ReadX 11186 323584 4096 4096 NT_STATUS_OK
ReadX 11186 389120 4096 4096 NT_STATUS_OK
ReadX 11186 454656 4096 4096 NT_STATUS_OK
ReadX 11186 520192 4096 4096 NT_STATUS_OK
WriteX 11186 0 65536 65536 NT_STATUS_OK
WriteX 11186 65536 65536 65536 NT_STATUS_OK
WriteX 11186 131072 65536 65536 NT_STATUS_OK
WriteX 11186 196608 65536 65536 NT_STATUS_OK
WriteX 11186 262144 65536 65536 NT_STATUS_OK
WriteX 11186 327680 65536 65536 NT_STATUS_OK
WriteX 11186 393216 65536 65536 NT_STATUS_OK
WriteX 11186 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11187 NT_STATUS_OK
ReadX 11187 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11187 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11187 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11187 8192 4096 4096 NT_STATUS_OK
ReadX 11187 12288 4096 4096 NT_STATUS_OK
ReadX 11187 16384 4096 4096 NT_STATUS_OK
ReadX 11187 20480 4096 4096 NT_STATUS_OK
ReadX 11187 24576 4096 4096 NT_STATUS_OK
ReadX 11187 28672 4096 4096 NT_STATUS_OK
ReadX 11187 32768 4096 4096 NT_STATUS_OK
ReadX 11187 36864 4096 4096 NT_STATUS_OK
ReadX 11187 40960 4096 4096 NT_STATUS_OK
ReadX 11187 45056 4096 4096 NT_STATUS_OK
ReadX 11187 49152 4096 4096 NT_STATUS_OK
ReadX 11187 53248 4096 4096 NT_STATUS_OK
ReadX 11187 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11187 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11188 NT_STATUS_OK
Close 11188 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11184 NT_STATUS_OK
Close 11185 NT_STATUS_OK
Close 11186 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11190 NT_STATUS_OK
WriteX 11190 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11190 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11190 1004 NT_STATUS_OK
WriteX 11190 0 57088 57088 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
Flush 11190 NT_STATUS_OK
Close 11187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11191 NT_STATUS_OK
SET_FILE_INFORMATION 11191 1004 NT_STATUS_OK
Close 11191 NT_STATUS_OK
SET_FILE_INFORMATION 11190 1004 NT_STATUS_OK
WriteX 11190 0 4096 4096 NT_STATUS_OK
Close 11190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11194 NT_STATUS_OK
ReadX 11194 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11194 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11195 NT_STATUS_OK
WriteX 11195 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11195 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11195 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11195 1004 NT_STATUS_OK
WriteX 11195 0 51456 51456 NT_STATUS_OK
WriteX 11195 0 4096 4096 NT_STATUS_OK
Flush 11195 NT_STATUS_OK
SET_FILE_INFORMATION 11195 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11195 1004 NT_STATUS_OK
WriteX 11195 0 4096 4096 NT_STATUS_OK
Close 11195 NT_STATUS_OK
Close 11194 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11197 NT_STATUS_OK
Close 11197 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11199 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11201 NT_STATUS_OK
Close 11201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11204 NT_STATUS_OK
WriteX 11204 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11204 258 NT_STATUS_OK
WriteX 11204 0 53077 53077 NT_STATUS_OK
Close 11204 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11205 NT_STATUS_OK
WriteX 11205 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11205 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11205 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
WriteX 11205 0 65536 65536 NT_STATUS_OK
WriteX 11205 65536 1856 1856 NT_STATUS_OK
WriteX 11205 0 4096 4096 NT_STATUS_OK
Flush 11205 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11205 1004 NT_STATUS_OK
WriteX 11205 0 4096 4096 NT_STATUS_OK
Close 11205 NT_STATUS_OK
Close 11199 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11207 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11209 NT_STATUS_OK
ReadX 11209 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11211 NT_STATUS_OK
Close 11211 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11214 NT_STATUS_OK
WriteX 11214 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11214 258 NT_STATUS_OK
WriteX 11214 0 7983 7983 NT_STATUS_OK
Close 11214 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11216 NT_STATUS_OK
Close 11216 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11219 NT_STATUS_OK
WriteX 11219 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11219 258 NT_STATUS_OK
WriteX 11219 0 65536 65536 NT_STATUS_OK
WriteX 11219 65536 65536 65536 NT_STATUS_OK
WriteX 11219 131072 65536 65536 NT_STATUS_OK
WriteX 11219 196608 65536 65536 NT_STATUS_OK
WriteX 11219 262144 65536 65536 NT_STATUS_OK
WriteX 11219 327680 65536 65536 NT_STATUS_OK
WriteX 11219 393216 65536 65536 NT_STATUS_OK
WriteX 11219 458752 46731 46731 NT_STATUS_OK
Close 11219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11220 NT_STATUS_OK
WriteX 11220 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11220 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11209 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11220 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11220 1004 NT_STATUS_OK
WriteX 11220 0 65536 65536 NT_STATUS_OK
WriteX 11220 65536 22848 22848 NT_STATUS_OK
WriteX 11220 0 4096 4096 NT_STATUS_OK
Flush 11220 NT_STATUS_OK
SET_FILE_INFORMATION 11220 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11220 1004 NT_STATUS_OK
WriteX 11220 0 4096 4096 NT_STATUS_OK
Close 11220 NT_STATUS_OK
Close 11209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11224 NT_STATUS_OK
ReadX 11224 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11224 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11225 NT_STATUS_OK
ReadX 11225 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11225 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11225 1004 NT_STATUS_OK
ReadX 11225 8192 4096 4096 NT_STATUS_OK
ReadX 11225 12288 4096 4096 NT_STATUS_OK
ReadX 11225 16384 4096 4096 NT_STATUS_OK
ReadX 11225 20480 4096 4096 NT_STATUS_OK
ReadX 11225 24576 4096 4096 NT_STATUS_OK
ReadX 11225 28672 4096 4096 NT_STATUS_OK
ReadX 11225 32768 4096 4096 NT_STATUS_OK
ReadX 11225 36864 4096 4096 NT_STATUS_OK
ReadX 11225 40960 4096 4096 NT_STATUS_OK
ReadX 11225 45056 4096 4096 NT_STATUS_OK
ReadX 11225 49152 4096 4096 NT_STATUS_OK
ReadX 11225 53248 4096 4096 NT_STATUS_OK
ReadX 11225 57344 4096 4096 NT_STATUS_OK
ReadX 11225 61440 4096 4096 NT_STATUS_OK
ReadX 11225 65536 4096 4096 NT_STATUS_OK
ReadX 11225 69632 4096 4096 NT_STATUS_OK
ReadX 11225 73728 4096 4096 NT_STATUS_OK
ReadX 11225 77824 4096 4096 NT_STATUS_OK
ReadX 11225 81920 4096 4096 NT_STATUS_OK
ReadX 11225 86016 4096 4096 NT_STATUS_OK
ReadX 11225 90112 4096 4096 NT_STATUS_OK
ReadX 11225 94208 4096 4096 NT_STATUS_OK
ReadX 11225 98304 4096 4096 NT_STATUS_OK
ReadX 11225 102400 4096 4096 NT_STATUS_OK
ReadX 11225 106496 4096 4096 NT_STATUS_OK
ReadX 11225 110592 4096 4096 NT_STATUS_OK
ReadX 11225 114688 4096 4096 NT_STATUS_OK
ReadX 11225 118784 4096 4096 NT_STATUS_OK
ReadX 11225 122880 4096 4096 NT_STATUS_OK
ReadX 11225 126976 4096 4096 NT_STATUS_OK
ReadX 11225 131072 4096 4096 NT_STATUS_OK
ReadX 11225 135168 4096 4096 NT_STATUS_OK
ReadX 11225 139264 4096 4096 NT_STATUS_OK
ReadX 11225 143360 4096 4096 NT_STATUS_OK
ReadX 11225 147456 4096 4096 NT_STATUS_OK
ReadX 11225 151552 4096 4096 NT_STATUS_OK
ReadX 11225 155648 4096 4096 NT_STATUS_OK
ReadX 11225 159744 4096 4096 NT_STATUS_OK
ReadX 11225 163840 4096 4096 NT_STATUS_OK
ReadX 11225 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11225 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11226 NT_STATUS_OK
Close 11226 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11224 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11228 NT_STATUS_OK
WriteX 11228 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11228 258 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11229 NT_STATUS_OK
SET_FILE_INFORMATION 11229 1004 NT_STATUS_OK
Close 11229 NT_STATUS_OK
WriteX 11228 0 42388 42388 NT_STATUS_OK
Close 11228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11230 NT_STATUS_OK
Close 11230 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11232 NT_STATUS_OK
ReadX 11232 0 4096 4096 NT_STATUS_OK
ReadX 11232 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11233 NT_STATUS_OK
WriteX 11233 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11233 258 NT_STATUS_OK
SET_FILE_INFORMATION 11233 1004 NT_STATUS_OK
WriteX 11233 0 42652 42652 NT_STATUS_OK
Close 11233 NT_STATUS_OK
Close 11232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11235 NT_STATUS_OK
Close 11235 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 4096 4096 NT_STATUS_OK
ReadX 11237 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11239 NT_STATUS_OK
Close 11239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11242 NT_STATUS_OK
WriteX 11242 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11242 258 NT_STATUS_OK
WriteX 11242 0 65536 65536 NT_STATUS_OK
WriteX 11242 65536 49 49 NT_STATUS_OK
Close 11242 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11243 NT_STATUS_OK
ReadX 11243 0 61440 61440 NT_STATUS_OK
ReadX 11243 61440 4096 4096 NT_STATUS_OK
ReadX 11243 65536 61440 61440 NT_STATUS_OK
ReadX 11243 126976 4096 4096 NT_STATUS_OK
ReadX 11243 131072 61440 61440 NT_STATUS_OK
ReadX 11243 192512 4096 4096 NT_STATUS_OK
ReadX 11243 196608 61440 61440 NT_STATUS_OK
ReadX 11243 258048 4096 4096 NT_STATUS_OK
ReadX 11243 262144 61440 61440 NT_STATUS_OK
ReadX 11243 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11244 NT_STATUS_OK
ReadX 11244 0 61440 61440 NT_STATUS_OK
ReadX 11244 61440 4096 4096 NT_STATUS_OK
ReadX 11244 65536 61440 61440 NT_STATUS_OK
ReadX 11244 126976 4096 4096 NT_STATUS_OK
ReadX 11244 131072 61440 61440 NT_STATUS_OK
ReadX 11244 192512 4096 4096 NT_STATUS_OK
ReadX 11244 196608 61440 61440 NT_STATUS_OK
ReadX 11244 258048 4096 4096 NT_STATUS_OK
ReadX 11244 262144 61440 61440 NT_STATUS_OK
ReadX 11244 323584 4096 4096 NT_STATUS_OK
ReadX 11244 327680 61440 61440 NT_STATUS_OK
ReadX 11244 389120 4096 4096 NT_STATUS_OK
ReadX 11244 393216 61440 61440 NT_STATUS_OK
ReadX 11244 454656 4096 4096 NT_STATUS_OK
ReadX 11244 458752 61440 61440 NT_STATUS_OK
ReadX 11244 520192 4096 4096 NT_STATUS_OK
ReadX 11244 524288 61440 61440 NT_STATUS_OK
ReadX 11244 585728 4096 4096 NT_STATUS_OK
ReadX 11244 589824 61440 61440 NT_STATUS_OK
ReadX 11244 651264 4096 4096 NT_STATUS_OK
ReadX 11244 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11245 NT_STATUS_OK
ReadX 11245 0 61440 61440 NT_STATUS_OK
ReadX 11245 61440 4096 4096 NT_STATUS_OK
ReadX 11245 65536 61440 61440 NT_STATUS_OK
ReadX 11245 126976 4096 4096 NT_STATUS_OK
ReadX 11245 131072 61440 61440 NT_STATUS_OK
ReadX 11245 192512 4096 4096 NT_STATUS_OK
ReadX 11245 196608 61440 61440 NT_STATUS_OK
ReadX 11245 258048 4096 4096 NT_STATUS_OK
ReadX 11245 262144 61440 61440 NT_STATUS_OK
ReadX 11245 323584 4096 4096 NT_STATUS_OK
ReadX 11245 327680 61440 61440 NT_STATUS_OK
ReadX 11245 389120 4096 4096 NT_STATUS_OK
ReadX 11245 393216 61440 61440 NT_STATUS_OK
ReadX 11245 454656 4096 4096 NT_STATUS_OK
ReadX 11245 458752 61440 61440 NT_STATUS_OK
ReadX 11245 520192 4096 4096 NT_STATUS_OK
ReadX 11245 524288 61440 61440 NT_STATUS_OK
ReadX 11245 585728 4096 4096 NT_STATUS_OK
ReadX 11245 589824 61440 61440 NT_STATUS_OK
ReadX 11245 651264 4096 4096 NT_STATUS_OK
ReadX 11245 655360 61440 61440 NT_STATUS_OK
ReadX 11245 716800 4096 4096 NT_STATUS_OK
ReadX 11245 720896 61440 61440 NT_STATUS_OK
ReadX 11245 782336 4096 4096 NT_STATUS_OK
ReadX 11245 786432 61440 61440 NT_STATUS_OK
ReadX 11245 847872 4096 4096 NT_STATUS_OK
ReadX 11245 851968 61440 61440 NT_STATUS_OK
ReadX 11245 913408 4096 4096 NT_STATUS_OK
ReadX 11245 917504 61440 61440 NT_STATUS_OK
ReadX 11245 978944 4096 4096 NT_STATUS_OK
ReadX 11245 983040 61440 61440 NT_STATUS_OK
ReadX 11245 1044480 4096 4096 NT_STATUS_OK
ReadX 11245 1048576 61440 61440 NT_STATUS_OK
ReadX 11245 1110016 4096 4096 NT_STATUS_OK
ReadX 11245 1114112 61440 61440 NT_STATUS_OK
ReadX 11245 1175552 4096 4096 NT_STATUS_OK
ReadX 11245 1179648 61440 61440 NT_STATUS_OK
ReadX 11245 1241088 4096 4096 NT_STATUS_OK
ReadX 11245 1245184 61440 61440 NT_STATUS_OK
ReadX 11245 1306624 4096 4096 NT_STATUS_OK
ReadX 11245 1310720 61440 61440 NT_STATUS_OK
ReadX 11245 1372160 4096 4096 NT_STATUS_OK
ReadX 11245 1376256 61440 61440 NT_STATUS_OK
ReadX 11245 1437696 4096 4096 NT_STATUS_OK
ReadX 11245 1441792 61440 61440 NT_STATUS_OK
ReadX 11245 1503232 4096 4096 NT_STATUS_OK
ReadX 11245 1507328 61440 61440 NT_STATUS_OK
ReadX 11245 1568768 4096 4096 NT_STATUS_OK
ReadX 11245 1572864 61440 61440 NT_STATUS_OK
ReadX 11245 1634304 4096 4096 NT_STATUS_OK
ReadX 11245 1638400 61440 61440 NT_STATUS_OK
ReadX 11245 1699840 4096 4096 NT_STATUS_OK
ReadX 11245 1703936 61440 61440 NT_STATUS_OK
ReadX 11245 1765376 4096 4096 NT_STATUS_OK
ReadX 11245 1769472 61440 61440 NT_STATUS_OK
ReadX 11245 1830912 4096 4096 NT_STATUS_OK
ReadX 11245 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11247 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11247 1005 NT_STATUS_OK
ReadX 11247 2156 24 24 NT_STATUS_OK
ReadX 11247 2139 276 276 NT_STATUS_OK
ReadX 11247 2136 14 14 NT_STATUS_OK
ReadX 11247 2136 7 7 NT_STATUS_OK
ReadX 11247 2138 12 12 NT_STATUS_OK
ReadX 11247 2137 8 8 NT_STATUS_OK
ReadX 11247 2135 15 15 NT_STATUS_OK
ReadX 11247 0 16 16 NT_STATUS_OK
ReadX 11247 16 2048 2048 NT_STATUS_OK
ReadX 11247 2064 2048 2048 NT_STATUS_OK
ReadX 11247 257 2048 2048 NT_STATUS_OK
ReadX 11247 385 2048 2048 NT_STATUS_OK
ReadX 11247 513 2048 2048 NT_STATUS_OK
ReadX 11247 641 2048 2048 NT_STATUS_OK
ReadX 11247 769 2048 2048 NT_STATUS_OK
ReadX 11247 897 2048 2048 NT_STATUS_OK
ReadX 11247 1025 2048 2048 NT_STATUS_OK
ReadX 11247 1153 2048 2048 NT_STATUS_OK
ReadX 11247 1281 2048 2048 NT_STATUS_OK
ReadX 11247 1409 2048 2048 NT_STATUS_OK
ReadX 11247 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11249 NT_STATUS_OK
Close 11249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11243 NT_STATUS_OK
Close 11244 NT_STATUS_OK
Close 11245 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11252 NT_STATUS_OK
WriteX 11252 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11252 258 NT_STATUS_OK
WriteX 11252 0 10575 10575 NT_STATUS_OK
Flush 11252 NT_STATUS_OK
Close 11252 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11253 NT_STATUS_OK
Close 11253 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11255 NT_STATUS_OK
ReadX 11255 0 4096 4096 NT_STATUS_OK
Close 11247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11257 NT_STATUS_OK
LockX 11257 2147483538 1 NT_STATUS_OK
UnlockX 11257 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11257 1005 NT_STATUS_OK
ReadX 11257 0 512 512 NT_STATUS_OK
ReadX 11257 512 512 512 NT_STATUS_OK
ReadX 11257 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11257 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11257 1004 NT_STATUS_OK
Close 11257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 1005 NT_STATUS_OK
ReadX 11258 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11259 NT_STATUS_OK
LockX 11259 2147483538 1 NT_STATUS_OK
UnlockX 11259 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11259 1005 NT_STATUS_OK
ReadX 11259 0 512 512 NT_STATUS_OK
ReadX 11259 512 512 512 NT_STATUS_OK
ReadX 11259 1024 512 512 NT_STATUS_OK
ReadX 11259 288 20 20 NT_STATUS_OK
ReadX 11259 308 2084 2084 NT_STATUS_OK
ReadX 11259 388 2084 2084 NT_STATUS_OK
ReadX 11259 388 2084 2084 NT_STATUS_OK
ReadX 11246 2157 1386 1386 NT_STATUS_OK
ReadX 11259 2472 399 399 NT_STATUS_OK
ReadX 11259 3072 1536 1536 NT_STATUS_OK
ReadX 11259 544 149 149 NT_STATUS_OK
ReadX 11259 693 485 485 NT_STATUS_OK
Close 11259 NT_STATUS_OK
ReadX 11246 2157 4096 4096 NT_STATUS_OK
ReadX 11246 6253 4096 4096 NT_STATUS_OK
ReadX 11246 10349 4096 4096 NT_STATUS_OK
ReadX 11246 14445 4096 4096 NT_STATUS_OK
ReadX 11246 18541 4096 4096 NT_STATUS_OK
ReadX 11246 22637 256 256 NT_STATUS_OK
ReadX 11246 22893 4096 4096 NT_STATUS_OK
ReadX 11246 26989 4096 4096 NT_STATUS_OK
ReadX 11246 31085 4096 4096 NT_STATUS_OK
ReadX 11246 35181 4096 4096 NT_STATUS_OK
ReadX 11246 39277 4096 4096 NT_STATUS_OK
ReadX 11246 43373 4096 4096 NT_STATUS_OK
ReadX 11246 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11246 2157 1024 1024 NT_STATUS_OK
ReadX 11246 1667 4688 4688 NT_STATUS_OK
ReadX 11246 6355 3516 3516 NT_STATUS_OK
ReadX 11246 9871 16384 16384 NT_STATUS_OK
ReadX 11246 26255 3771 3771 NT_STATUS_OK
ReadX 11246 30026 2048 2048 NT_STATUS_OK
ReadX 11246 32074 1024 1024 NT_STATUS_OK
ReadX 11246 33098 6652 6652 NT_STATUS_OK
ReadX 11246 39750 16384 16384 NT_STATUS_OK
ReadX 11246 56134 10496 10496 NT_STATUS_OK
ReadX 11246 66630 1784 1784 NT_STATUS_OK
ReadX 11246 68414 90 90 NT_STATUS_OK
ReadX 11246 68504 273 273 NT_STATUS_OK
ReadX 11246 68777 1600 1600 NT_STATUS_OK
ReadX 11246 70377 640 640 NT_STATUS_OK
ReadX 11246 71017 1280 1280 NT_STATUS_OK
ReadX 11246 72297 8464 8464 NT_STATUS_OK
ReadX 11246 80761 158 158 NT_STATUS_OK
ReadX 11246 80919 912 912 NT_STATUS_OK
ReadX 11246 81831 1980 1980 NT_STATUS_OK
ReadX 11246 83811 2256 2256 NT_STATUS_OK
ReadX 11246 86067 400 400 NT_STATUS_OK
ReadX 11246 86467 252 252 NT_STATUS_OK
ReadX 11246 86719 42 42 NT_STATUS_OK
ReadX 11246 86761 725 725 NT_STATUS_OK
ReadX 11246 2009 512 512 NT_STATUS_OK
ReadX 11246 3895 9 9 NT_STATUS_OK
ReadX 11246 3781 46 46 NT_STATUS_OK
ReadX 11246 4059 92 92 NT_STATUS_OK
ReadX 11246 3781 92 92 NT_STATUS_OK
ReadX 11246 3986 184 184 NT_STATUS_OK
ReadX 11246 3987 16384 16384 NT_STATUS_OK
ReadX 11246 3902 16384 16384 NT_STATUS_OK
ReadX 11246 3781 10240 10240 NT_STATUS_OK
ReadX 11246 3821 16384 16384 NT_STATUS_OK
ReadX 11246 3891 935 935 NT_STATUS_OK
ReadX 11246 4060 10240 10240 NT_STATUS_OK
ReadX 11246 4059 184 184 NT_STATUS_OK
ReadX 11246 256 184 184 NT_STATUS_OK
ReadX 11246 256 1026 1026 NT_STATUS_OK
ReadX 11246 3901 326 326 NT_STATUS_OK
ReadX 11246 3899 652 652 NT_STATUS_OK
ReadX 11246 256 2 2 NT_STATUS_OK
ReadX 11246 258 4948 4948 NT_STATUS_OK
Close 11246 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11261 NT_STATUS_OK
Close 11261 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11264 NT_STATUS_OK
WriteX 11264 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11264 258 NT_STATUS_OK
WriteX 11264 0 65536 65536 NT_STATUS_OK
WriteX 11264 65536 65536 65536 NT_STATUS_OK
WriteX 11264 131072 65536 65536 NT_STATUS_OK
WriteX 11264 196608 65536 65536 NT_STATUS_OK
WriteX 11264 262144 65536 65536 NT_STATUS_OK
WriteX 11264 327680 65536 65536 NT_STATUS_OK
WriteX 11264 393216 65536 65536 NT_STATUS_OK
WriteX 11264 458752 65536 65536 NT_STATUS_OK
WriteX 11264 524288 65536 65536 NT_STATUS_OK
WriteX 11264 589824 35257 35257 NT_STATUS_OK
Close 11264 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11266 NT_STATUS_OK
Close 11266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11269 NT_STATUS_OK
WriteX 11269 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11269 258 NT_STATUS_OK
WriteX 11269 0 65536 65536 NT_STATUS_OK
WriteX 11269 65536 65536 65536 NT_STATUS_OK
WriteX 11269 131072 65536 65536 NT_STATUS_OK
WriteX 11269 196608 65536 65536 NT_STATUS_OK
WriteX 11269 262144 65536 65536 NT_STATUS_OK
WriteX 11269 327680 65536 65536 NT_STATUS_OK
WriteX 11269 393216 65536 65536 NT_STATUS_OK
WriteX 11269 458752 65536 65536 NT_STATUS_OK
WriteX 11269 524288 65536 65536 NT_STATUS_OK
WriteX 11269 589824 57598 57598 NT_STATUS_OK
Close 11269 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11271 NT_STATUS_OK
WriteX 11271 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11271 258 NT_STATUS_OK
WriteX 11271 0 12543 12543 NT_STATUS_OK
Flush 11271 NT_STATUS_OK
Close 11271 NT_STATUS_OK
Close 11255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11273 NT_STATUS_OK
Close 11273 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11275 NT_STATUS_OK
ReadX 11275 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11276 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11277 NT_STATUS_OK
QUERY_FILE_INFORMATION 11277 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11277 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11277 1005 NT_STATUS_OK
ReadX 11277 1938 24 24 NT_STATUS_OK
ReadX 11277 1920 276 276 NT_STATUS_OK
ReadX 11277 1918 14 14 NT_STATUS_OK
ReadX 11277 1918 7 7 NT_STATUS_OK
ReadX 11277 1919 12 12 NT_STATUS_OK
ReadX 11277 1919 8 8 NT_STATUS_OK
ReadX 11277 1917 15 15 NT_STATUS_OK
ReadX 11277 0 16 16 NT_STATUS_OK
ReadX 11277 16 2048 2048 NT_STATUS_OK
ReadX 11277 2064 2048 2048 NT_STATUS_OK
ReadX 11277 257 2048 2048 NT_STATUS_OK
ReadX 11277 385 2048 2048 NT_STATUS_OK
ReadX 11277 513 2048 2048 NT_STATUS_OK
ReadX 11277 641 2048 2048 NT_STATUS_OK
ReadX 11277 769 2048 2048 NT_STATUS_OK
ReadX 11277 897 2048 2048 NT_STATUS_OK
ReadX 11277 1025 2048 2048 NT_STATUS_OK
ReadX 11277 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11279 NT_STATUS_OK
Close 11279 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11282 NT_STATUS_OK
WriteX 11282 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11282 258 NT_STATUS_OK
WriteX 11282 0 11588 11588 NT_STATUS_OK
Flush 11282 NT_STATUS_OK
Close 11282 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11283 NT_STATUS_OK
Close 11283 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11285 NT_STATUS_OK
ReadX 11285 0 4096 4096 NT_STATUS_OK
Close 11277 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11287 NT_STATUS_OK
WriteX 11287 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11287 258 NT_STATUS_OK
WriteX 11287 0 11615 11615 NT_STATUS_OK
Flush 11287 NT_STATUS_OK
Close 11287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11285 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11289 NT_STATUS_OK
Close 11289 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11291 NT_STATUS_OK
ReadX 11291 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11293 NT_STATUS_OK
Close 11293 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11296 NT_STATUS_OK
WriteX 11296 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11296 258 NT_STATUS_OK
WriteX 11296 0 65536 65536 NT_STATUS_OK
WriteX 11296 65536 16050 16050 NT_STATUS_OK
Close 11296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11276 1939 64 64 NT_STATUS_OK
ReadX 11276 128 248 248 NT_STATUS_OK
ReadX 11276 128 568 568 NT_STATUS_OK
ReadX 11276 3872 1536 1536 NT_STATUS_OK
ReadX 11276 3456 2560 2560 NT_STATUS_OK
ReadX 11276 3136 512 512 NT_STATUS_OK
ReadX 11276 2880 4096 4096 NT_STATUS_OK
ReadX 11276 3264 3072 3072 NT_STATUS_OK
ReadX 11276 320 4096 4096 NT_STATUS_OK
ReadX 11276 1024 4096 4096 NT_STATUS_OK
ReadX 11276 3616 4096 4096 NT_STATUS_OK
ReadX 11276 1939 64 64 NT_STATUS_OK
ReadX 11276 128 248 248 NT_STATUS_OK
ReadX 11276 128 608 608 NT_STATUS_OK
ReadX 11276 2858 1024 1024 NT_STATUS_OK
ReadX 11276 2810 4096 4096 NT_STATUS_OK
ReadX 11276 2826 4096 4096 NT_STATUS_OK
ReadX 11276 2580 2048 2048 NT_STATUS_OK
ReadX 11276 2800 2560 2560 NT_STATUS_OK
ReadX 11276 2100 4096 4096 NT_STATUS_OK
ReadX 11276 2084 4096 4096 NT_STATUS_OK
ReadX 11276 868 4096 4096 NT_STATUS_OK
ReadX 11276 2324 4096 4096 NT_STATUS_OK
ReadX 11276 884 4096 4096 NT_STATUS_OK
ReadX 11276 2604 1024 1024 NT_STATUS_OK
ReadX 11276 580 4096 4096 NT_STATUS_OK
ReadX 11276 596 4096 4096 NT_STATUS_OK
ReadX 11276 2752 4096 4096 NT_STATUS_OK
ReadX 11276 2842 1024 1024 NT_STATUS_OK
ReadX 11276 660 4096 4096 NT_STATUS_OK
ReadX 11276 2720 4096 4096 NT_STATUS_OK
ReadX 11276 2736 4096 4096 NT_STATUS_OK
ReadX 11276 628 4096 4096 NT_STATUS_OK
ReadX 11276 2704 4096 4096 NT_STATUS_OK
ReadX 11276 1556 4096 4096 NT_STATUS_OK
ReadX 11276 576 4096 4096 NT_STATUS_OK
ReadX 11276 3168 1536 1536 NT_STATUS_OK
ReadX 11276 832 4096 4096 NT_STATUS_OK
ReadX 11276 1088 4096 4096 NT_STATUS_OK
ReadX 11276 1344 4096 4096 NT_STATUS_OK
ReadX 11276 1600 4096 4096 NT_STATUS_OK
ReadX 11276 1856 4096 4096 NT_STATUS_OK
ReadX 11276 2112 4096 4096 NT_STATUS_OK
ReadX 11276 1892 4096 4096 NT_STATUS_OK
ReadX 11276 820 4096 4096 NT_STATUS_OK
ReadX 11276 788 4096 4096 NT_STATUS_OK
ReadX 11276 1604 4096 4096 NT_STATUS_OK
ReadX 11276 3648 4096 4096 NT_STATUS_OK
ReadX 11276 2608 4096 4096 NT_STATUS_OK
ReadX 11276 548 4096 4096 NT_STATUS_OK
ReadX 11276 740 4096 4096 NT_STATUS_OK
ReadX 11276 1344 4096 4096 NT_STATUS_OK
ReadX 11276 3392 4096 4096 NT_STATUS_OK
ReadX 11276 3904 4096 4096 NT_STATUS_OK
ReadX 11276 644 4096 4096 NT_STATUS_OK
ReadX 11276 676 4096 4096 NT_STATUS_OK
ReadX 11276 2688 4096 4096 NT_STATUS_OK
ReadX 11276 320 4096 4096 NT_STATUS_OK
ReadX 11276 900 4096 4096 NT_STATUS_OK
ReadX 11276 1908 4096 4096 NT_STATUS_OK
ReadX 11276 852 4096 4096 NT_STATUS_OK
ReadX 11276 724 4096 4096 NT_STATUS_OK
ReadX 11276 2292 4096 4096 NT_STATUS_OK
ReadX 11276 612 4096 4096 NT_STATUS_OK
ReadX 11276 388 4096 4096 NT_STATUS_OK
ReadX 11276 2368 4096 4096 NT_STATUS_OK
ReadX 11276 2624 4096 4096 NT_STATUS_OK
ReadX 11276 500 4096 4096 NT_STATUS_OK
ReadX 11276 356 4096 4096 NT_STATUS_OK
ReadX 11276 1024 4096 4096 NT_STATUS_OK
ReadX 11276 576 4096 4096 NT_STATUS_OK
ReadX 11276 340 4096 4096 NT_STATUS_OK
ReadX 11276 420 4096 4096 NT_STATUS_OK
ReadX 11276 1600 4096 4096 NT_STATUS_OK
ReadX 11276 404 4096 4096 NT_STATUS_OK
ReadX 11276 1428 4096 4096 NT_STATUS_OK
ReadX 11276 2656 4096 4096 NT_STATUS_OK
ReadX 11276 2624 4096 4096 NT_STATUS_OK
ReadX 11276 452 4096 4096 NT_STATUS_OK
ReadX 11276 692 4096 4096 NT_STATUS_OK
ReadX 11276 564 4096 4096 NT_STATUS_OK
ReadX 11276 372 4096 4096 NT_STATUS_OK
ReadX 11276 468 4096 4096 NT_STATUS_OK
ReadX 11276 484 4096 4096 NT_STATUS_OK
ReadX 11276 1088 4096 4096 NT_STATUS_OK
ReadX 11276 1924 4096 4096 NT_STATUS_OK
ReadX 11276 2768 4096 4096 NT_STATUS_OK
ReadX 11276 832 4096 4096 NT_STATUS_OK
ReadX 11276 836 4096 4096 NT_STATUS_OK
ReadX 11276 1856 4096 4096 NT_STATUS_OK
ReadX 11276 2640 4096 4096 NT_STATUS_OK
ReadX 11276 436 4096 4096 NT_STATUS_OK
ReadX 11276 1828 4096 4096 NT_STATUS_OK
ReadX 11276 804 4096 4096 NT_STATUS_OK
ReadX 11276 1860 4096 4096 NT_STATUS_OK
ReadX 11276 1812 4096 4096 NT_STATUS_OK
ReadX 11276 756 4096 4096 NT_STATUS_OK
ReadX 11276 1636 4096 4096 NT_STATUS_OK
ReadX 11276 772 4096 4096 NT_STATUS_OK
ReadX 11276 2036 4096 4096 NT_STATUS_OK
ReadX 11276 1220 4096 4096 NT_STATUS_OK
ReadX 11276 1652 4096 4096 NT_STATUS_OK
ReadX 11276 2588 4096 4096 NT_STATUS_OK
ReadX 11276 916 4096 4096 NT_STATUS_OK
ReadX 11276 260 4096 4096 NT_STATUS_OK
ReadX 11276 932 4096 4096 NT_STATUS_OK
ReadX 11276 2624 4096 4096 NT_STATUS_OK
ReadX 11276 308 4096 4096 NT_STATUS_OK
ReadX 11276 292 4096 4096 NT_STATUS_OK
ReadX 11276 1140 4096 4096 NT_STATUS_OK
ReadX 11276 276 4096 4096 NT_STATUS_OK
ReadX 11276 2020 4096 4096 NT_STATUS_OK
ReadX 11276 2880 4096 4096 NT_STATUS_OK
ReadX 11276 516 4096 4096 NT_STATUS_OK
ReadX 11276 1844 4096 4096 NT_STATUS_OK
ReadX 11276 1124 4096 4096 NT_STATUS_OK
ReadX 11276 3136 4096 4096 NT_STATUS_OK
ReadX 11276 324 4096 4096 NT_STATUS_OK
ReadX 11276 1156 4096 4096 NT_STATUS_OK
ReadX 11276 1172 4096 4096 NT_STATUS_OK
ReadX 11276 2112 4096 4096 NT_STATUS_OK
ReadX 11276 2368 4096 4096 NT_STATUS_OK
ReadX 11276 964 4096 4096 NT_STATUS_OK
ReadX 11276 980 4096 4096 NT_STATUS_OK
ReadX 11276 1012 4096 4096 NT_STATUS_OK
ReadX 11276 532 4096 4096 NT_STATUS_OK
ReadX 11276 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11276 1620 4096 4096 NT_STATUS_OK
ReadX 11276 1604 4096 4096 NT_STATUS_OK
ReadX 11276 2116 4096 4096 NT_STATUS_OK
ReadX 11276 2132 4096 4096 NT_STATUS_OK
ReadX 11276 2148 4096 4096 NT_STATUS_OK
ReadX 11276 2276 4096 4096 NT_STATUS_OK
ReadX 11276 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11298 NT_STATUS_OK
Close 11298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11301 NT_STATUS_OK
QUERY_FILE_INFORMATION 11256 1004 NT_STATUS_OK
Close 11256 NT_STATUS_OK
WriteX 11301 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11301 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11258 1004 NT_STATUS_OK
Close 11258 NT_STATUS_OK
WriteX 11301 0 65536 65536 NT_STATUS_OK
WriteX 11301 65536 64850 64850 NT_STATUS_OK
Close 11301 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11303 NT_STATUS_OK
WriteX 11303 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11303 258 NT_STATUS_OK
ReadX 11276 2068 4096 4096 NT_STATUS_OK
ReadX 11276 1588 4096 4096 NT_STATUS_OK
ReadX 11276 1572 4096 4096 NT_STATUS_OK
WriteX 11303 0 18630 18630 NT_STATUS_OK
Flush 11303 NT_STATUS_OK
Close 11303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11291 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11305 NT_STATUS_OK
Close 11305 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11307 NT_STATUS_OK
ReadX 11307 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11276 612 4096 4096 NT_STATUS_OK
ReadX 11276 564 4096 4096 NT_STATUS_OK
ReadX 11276 1876 4096 4096 NT_STATUS_OK
ReadX 11276 628 4096 4096 NT_STATUS_OK
ReadX 11276 740 4096 4096 NT_STATUS_OK
ReadX 11276 724 4096 4096 NT_STATUS_OK
ReadX 11276 644 4096 4096 NT_STATUS_OK
ReadX 11276 2324 4096 4096 NT_STATUS_OK
ReadX 11276 660 4096 4096 NT_STATUS_OK
ReadX 11276 852 4096 4096 NT_STATUS_OK
ReadX 11276 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11276 2368 4096 4096 NT_STATUS_OK
ReadX 11276 1024 4096 4096 NT_STATUS_OK
ReadX 11276 320 4096 4096 NT_STATUS_OK
ReadX 11276 580 4096 4096 NT_STATUS_OK
ReadX 11276 3136 512 512 NT_STATUS_OK
ReadX 11276 2880 4096 4096 NT_STATUS_OK
Close 11276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11308 NT_STATUS_OK
ReadX 11308 61440 4096 4096 NT_STATUS_OK
ReadX 11308 126976 4096 4096 NT_STATUS_OK
WriteX 11308 0 65536 65536 NT_STATUS_OK
WriteX 11308 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11309 NT_STATUS_OK
ReadX 11309 61440 4096 4096 NT_STATUS_OK
ReadX 11309 126976 4096 4096 NT_STATUS_OK
ReadX 11309 192512 4096 4096 NT_STATUS_OK
ReadX 11309 258048 4096 4096 NT_STATUS_OK
WriteX 11309 0 65536 65536 NT_STATUS_OK
WriteX 11309 65536 65536 65536 NT_STATUS_OK
WriteX 11309 131072 65536 65536 NT_STATUS_OK
WriteX 11309 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11310 NT_STATUS_OK
ReadX 11310 61440 4096 4096 NT_STATUS_OK
ReadX 11310 126976 4096 4096 NT_STATUS_OK
ReadX 11310 192512 4096 4096 NT_STATUS_OK
ReadX 11310 258048 4096 4096 NT_STATUS_OK
ReadX 11310 323584 4096 4096 NT_STATUS_OK
ReadX 11310 389120 4096 4096 NT_STATUS_OK
ReadX 11310 454656 4096 4096 NT_STATUS_OK
ReadX 11310 520192 4096 4096 NT_STATUS_OK
WriteX 11310 0 65536 65536 NT_STATUS_OK
WriteX 11310 65536 65536 65536 NT_STATUS_OK
WriteX 11310 131072 65536 65536 NT_STATUS_OK
WriteX 11310 196608 65536 65536 NT_STATUS_OK
WriteX 11310 262144 65536 65536 NT_STATUS_OK
WriteX 11310 327680 65536 65536 NT_STATUS_OK
WriteX 11310 393216 65536 65536 NT_STATUS_OK
WriteX 11310 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11311 NT_STATUS_OK
ReadX 11311 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11312 NT_STATUS_OK
Close 11312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11313 NT_STATUS_OK
WriteX 11313 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11313 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11311 0 8192 8192 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11311 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11311 0 8192 8192 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11311 0 8192 8192 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11311 0 8192 8192 NT_STATUS_OK
Flush 11311 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11315 NT_STATUS_OK
Close 11315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11307 NT_STATUS_OK
Close 11275 NT_STATUS_OK
Close 11308 NT_STATUS_OK
Close 11309 NT_STATUS_OK
Close 11310 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11318 NT_STATUS_OK
WriteX 11318 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11318 258 NT_STATUS_OK
WriteX 11318 0 62591 62591 NT_STATUS_OK
Close 11318 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11320 NT_STATUS_OK
Close 11320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11323 NT_STATUS_OK
WriteX 11323 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11323 258 NT_STATUS_OK
WriteX 11323 0 10845 10845 NT_STATUS_OK
Close 11323 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11325 NT_STATUS_OK
Close 11325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11328 NT_STATUS_OK
WriteX 11328 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11328 258 NT_STATUS_OK
WriteX 11328 0 30118 30118 NT_STATUS_OK
Close 11328 NT_STATUS_OK
WriteX 11311 0 4096 4096 NT_STATUS_OK
WriteX 11313 0 64 64 NT_STATUS_OK
Close 11313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11311 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11330 NT_STATUS_OK
ReadX 11330 0 61440 61440 NT_STATUS_OK
ReadX 11330 61440 4096 4096 NT_STATUS_OK
ReadX 11330 65536 61440 61440 NT_STATUS_OK
ReadX 11330 126976 4096 4096 NT_STATUS_OK
ReadX 11330 131072 61440 61440 NT_STATUS_OK
ReadX 11330 192512 4096 4096 NT_STATUS_OK
ReadX 11330 196608 61440 61440 NT_STATUS_OK
ReadX 11330 258048 4096 4096 NT_STATUS_OK
ReadX 11330 262144 61440 61440 NT_STATUS_OK
ReadX 11330 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11331 NT_STATUS_OK
ReadX 11331 0 61440 61440 NT_STATUS_OK
ReadX 11331 61440 4096 4096 NT_STATUS_OK
ReadX 11331 65536 61440 61440 NT_STATUS_OK
ReadX 11331 126976 4096 4096 NT_STATUS_OK
ReadX 11331 131072 61440 61440 NT_STATUS_OK
ReadX 11331 192512 4096 4096 NT_STATUS_OK
ReadX 11331 196608 61440 61440 NT_STATUS_OK
ReadX 11331 258048 4096 4096 NT_STATUS_OK
ReadX 11331 262144 61440 61440 NT_STATUS_OK
ReadX 11331 323584 4096 4096 NT_STATUS_OK
ReadX 11331 327680 61440 61440 NT_STATUS_OK
ReadX 11331 389120 4096 4096 NT_STATUS_OK
ReadX 11331 393216 61440 61440 NT_STATUS_OK
ReadX 11331 454656 4096 4096 NT_STATUS_OK
ReadX 11331 458752 61440 61440 NT_STATUS_OK
ReadX 11331 520192 4096 4096 NT_STATUS_OK
ReadX 11331 524288 61440 61440 NT_STATUS_OK
ReadX 11331 585728 4096 4096 NT_STATUS_OK
ReadX 11331 589824 61440 61440 NT_STATUS_OK
ReadX 11331 651264 4096 4096 NT_STATUS_OK
ReadX 11331 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11332 NT_STATUS_OK
ReadX 11332 0 61440 61440 NT_STATUS_OK
ReadX 11332 61440 4096 4096 NT_STATUS_OK
ReadX 11332 65536 61440 61440 NT_STATUS_OK
ReadX 11332 126976 4096 4096 NT_STATUS_OK
ReadX 11332 131072 61440 61440 NT_STATUS_OK
ReadX 11332 192512 4096 4096 NT_STATUS_OK
ReadX 11332 196608 61440 61440 NT_STATUS_OK
ReadX 11332 258048 4096 4096 NT_STATUS_OK
ReadX 11332 262144 61440 61440 NT_STATUS_OK
ReadX 11332 323584 4096 4096 NT_STATUS_OK
ReadX 11332 327680 61440 61440 NT_STATUS_OK
ReadX 11332 389120 4096 4096 NT_STATUS_OK
ReadX 11332 393216 61440 61440 NT_STATUS_OK
ReadX 11332 454656 4096 4096 NT_STATUS_OK
ReadX 11332 458752 61440 61440 NT_STATUS_OK
ReadX 11332 520192 4096 4096 NT_STATUS_OK
ReadX 11332 524288 61440 61440 NT_STATUS_OK
ReadX 11332 585728 4096 4096 NT_STATUS_OK
ReadX 11332 589824 61440 61440 NT_STATUS_OK
ReadX 11332 651264 4096 4096 NT_STATUS_OK
ReadX 11332 655360 61440 61440 NT_STATUS_OK
ReadX 11332 716800 4096 4096 NT_STATUS_OK
ReadX 11332 720896 61440 61440 NT_STATUS_OK
ReadX 11332 782336 4096 4096 NT_STATUS_OK
ReadX 11332 786432 61440 61440 NT_STATUS_OK
ReadX 11332 847872 4096 4096 NT_STATUS_OK
ReadX 11332 851968 61440 61440 NT_STATUS_OK
ReadX 11332 913408 4096 4096 NT_STATUS_OK
ReadX 11332 917504 61440 61440 NT_STATUS_OK
ReadX 11332 978944 4096 4096 NT_STATUS_OK
ReadX 11332 983040 61440 61440 NT_STATUS_OK
ReadX 11332 1044480 4096 4096 NT_STATUS_OK
ReadX 11332 1048576 61440 61440 NT_STATUS_OK
ReadX 11332 1110016 4096 4096 NT_STATUS_OK
ReadX 11332 1114112 61440 61440 NT_STATUS_OK
ReadX 11332 1175552 4096 4096 NT_STATUS_OK
ReadX 11332 1179648 61440 61440 NT_STATUS_OK
ReadX 11332 1241088 4096 4096 NT_STATUS_OK
ReadX 11332 1245184 61440 61440 NT_STATUS_OK
ReadX 11332 1306624 4096 4096 NT_STATUS_OK
ReadX 11332 1310720 61440 61440 NT_STATUS_OK
ReadX 11332 1372160 4096 4096 NT_STATUS_OK
ReadX 11332 1376256 61440 61440 NT_STATUS_OK
ReadX 11332 1437696 4096 4096 NT_STATUS_OK
ReadX 11332 1441792 61440 61440 NT_STATUS_OK
ReadX 11332 1503232 4096 4096 NT_STATUS_OK
ReadX 11332 1507328 61440 61440 NT_STATUS_OK
ReadX 11332 1568768 4096 4096 NT_STATUS_OK
ReadX 11332 1572864 61440 61440 NT_STATUS_OK
ReadX 11332 1634304 4096 4096 NT_STATUS_OK
ReadX 11332 1638400 61440 61440 NT_STATUS_OK
ReadX 11332 1699840 4096 4096 NT_STATUS_OK
ReadX 11332 1703936 61440 61440 NT_STATUS_OK
ReadX 11332 1765376 4096 4096 NT_STATUS_OK
ReadX 11332 1769472 61440 61440 NT_STATUS_OK
ReadX 11332 1830912 4096 4096 NT_STATUS_OK
ReadX 11332 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11330 NT_STATUS_OK
Close 11331 NT_STATUS_OK
Close 11332 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11335 NT_STATUS_OK
ReadX 11335 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11337 NT_STATUS_OK
ReadX 11337 0 4096 4096 NT_STATUS_OK
ReadX 11337 4096 4096 4096 NT_STATUS_OK
ReadX 11337 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11338 NT_STATUS_OK
Close 11338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11335 NT_STATUS_OK
Close 11336 NT_STATUS_OK
Close 11337 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11340 NT_STATUS_OK
ReadX 11340 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11341 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11341 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11342 NT_STATUS_OK
Close 11342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11340 NT_STATUS_OK
Close 11341 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11344 NT_STATUS_OK
ReadX 11344 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11345 NT_STATUS_OK
ReadX 11345 0 8192 8192 NT_STATUS_OK
ReadX 11345 8192 8192 8192 NT_STATUS_OK
ReadX 11345 16384 8192 8192 NT_STATUS_OK
ReadX 11345 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11347 NT_STATUS_OK
Close 11347 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11345 NT_STATUS_OK
Close 11344 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11350 NT_STATUS_OK
WriteX 11350 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11350 258 NT_STATUS_OK
WriteX 11350 0 10438 10438 NT_STATUS_OK
Close 11350 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11351 NT_STATUS_OK
Close 11351 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11352 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11354 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11355 NT_STATUS_OK
Close 11355 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11356 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11357 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11358 NT_STATUS_OK
Close 11358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11359 NT_STATUS_OK
ReadX 11359 0 4096 4096 NT_STATUS_OK
ReadX 11359 4096 4096 4096 NT_STATUS_OK
ReadX 11359 8192 4096 4096 NT_STATUS_OK
ReadX 11359 12288 8192 8192 NT_STATUS_OK
ReadX 11359 20480 8192 8192 NT_STATUS_OK
ReadX 11359 28672 8192 8192 NT_STATUS_OK
ReadX 11359 36864 8192 8192 NT_STATUS_OK
ReadX 11359 45056 8192 8192 NT_STATUS_OK
ReadX 11359 53248 8192 8192 NT_STATUS_OK
ReadX 11359 61440 8192 8192 NT_STATUS_OK
ReadX 11359 69632 8192 8192 NT_STATUS_OK
ReadX 11359 77824 8192 8192 NT_STATUS_OK
ReadX 11359 86016 8192 8192 NT_STATUS_OK
ReadX 11359 94208 8192 8192 NT_STATUS_OK
ReadX 11359 102400 8192 8192 NT_STATUS_OK
ReadX 11359 110592 8192 8192 NT_STATUS_OK
ReadX 11359 118784 8192 8192 NT_STATUS_OK
ReadX 11359 126976 8192 8192 NT_STATUS_OK
ReadX 11359 135168 8192 8192 NT_STATUS_OK
ReadX 11359 143360 8192 8192 NT_STATUS_OK
ReadX 11359 151552 8192 8192 NT_STATUS_OK
ReadX 11359 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11359 NT_STATUS_OK
Close 11352 NT_STATUS_OK
Close 11354 NT_STATUS_OK
Close 11356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11361 NT_STATUS_OK
Close 11361 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11364 NT_STATUS_OK
WriteX 11364 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11364 258 NT_STATUS_OK
WriteX 11364 0 28489 28489 NT_STATUS_OK
Close 11364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11365 NT_STATUS_OK
Close 11365 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11367 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11367 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11368 NT_STATUS_OK
Close 11368 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11367 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11370 NT_STATUS_OK
ReadX 11370 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11371 NT_STATUS_OK
ReadX 11371 0 8192 8192 NT_STATUS_OK
ReadX 11371 8192 8192 8192 NT_STATUS_OK
ReadX 11371 16384 8192 8192 NT_STATUS_OK
ReadX 11371 24576 8192 8192 NT_STATUS_OK
ReadX 11371 32768 16384 16384 NT_STATUS_OK
ReadX 11371 49152 8192 8192 NT_STATUS_OK
ReadX 11371 57344 8192 8192 NT_STATUS_OK
ReadX 11371 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11373 NT_STATUS_OK
Close 11373 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11371 NT_STATUS_OK
Close 11370 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11376 NT_STATUS_OK
WriteX 11376 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11376 258 NT_STATUS_OK
WriteX 11376 0 29253 29253 NT_STATUS_OK
Close 11376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11377 NT_STATUS_OK
Close 11377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11378 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11380 NT_STATUS_OK
Close 11380 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11383 NT_STATUS_OK
WriteX 11383 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11383 258 NT_STATUS_OK
WriteX 11383 0 30183 30183 NT_STATUS_OK
Close 11383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11384 NT_STATUS_OK
Close 11384 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11386 NT_STATUS_OK
WriteX 11386 0 510 510 NT_STATUS_OK
WriteX 11386 510 512 512 NT_STATUS_OK
WriteX 11386 1022 510 510 NT_STATUS_OK
WriteX 11386 1532 510 510 NT_STATUS_OK
WriteX 11386 2042 168 168 NT_STATUS_OK
Close 11386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11387 NT_STATUS_OK
Close 11387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11389 NT_STATUS_OK
ReadX 11389 0 4096 4096 NT_STATUS_OK
WriteX 11389 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11390 NT_STATUS_OK
ReadX 11390 61440 4096 4096 NT_STATUS_OK
ReadX 11390 126976 4096 4096 NT_STATUS_OK
WriteX 11390 0 65536 65536 NT_STATUS_OK
WriteX 11390 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11391 NT_STATUS_OK
ReadX 11391 61440 4096 4096 NT_STATUS_OK
ReadX 11391 126976 4096 4096 NT_STATUS_OK
ReadX 11391 192512 4096 4096 NT_STATUS_OK
ReadX 11391 258048 4096 4096 NT_STATUS_OK
WriteX 11391 0 65536 65536 NT_STATUS_OK
WriteX 11391 65536 65536 65536 NT_STATUS_OK
WriteX 11391 131072 65536 65536 NT_STATUS_OK
WriteX 11391 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11392 NT_STATUS_OK
ReadX 11392 61440 4096 4096 NT_STATUS_OK
ReadX 11392 126976 4096 4096 NT_STATUS_OK
ReadX 11392 192512 4096 4096 NT_STATUS_OK
ReadX 11392 258048 4096 4096 NT_STATUS_OK
ReadX 11392 323584 4096 4096 NT_STATUS_OK
ReadX 11392 389120 4096 4096 NT_STATUS_OK
ReadX 11392 454656 4096 4096 NT_STATUS_OK
ReadX 11392 520192 4096 4096 NT_STATUS_OK
WriteX 11392 0 65536 65536 NT_STATUS_OK
WriteX 11392 65536 65536 65536 NT_STATUS_OK
WriteX 11392 131072 65536 65536 NT_STATUS_OK
WriteX 11392 196608 65536 65536 NT_STATUS_OK
WriteX 11392 262144 65536 65536 NT_STATUS_OK
WriteX 11392 327680 65536 65536 NT_STATUS_OK
WriteX 11392 393216 65536 65536 NT_STATUS_OK
WriteX 11392 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11393 NT_STATUS_OK
Close 11393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11389 NT_STATUS_OK
Close 11390 NT_STATUS_OK
Close 11391 NT_STATUS_OK
Close 11392 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11395 NT_STATUS_OK
Close 11395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11399 NT_STATUS_OK
Close 11399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11402 NT_STATUS_OK
Close 11402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11404 NT_STATUS_OK
Close 11404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11408 NT_STATUS_OK
Close 11408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11411 NT_STATUS_OK
Close 11411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11413 NT_STATUS_OK
Close 11413 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11417 NT_STATUS_OK
Close 11417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11422 NT_STATUS_OK
Close 11422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11427 NT_STATUS_OK
Close 11427 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11432 NT_STATUS_OK
Close 11432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11437 NT_STATUS_OK
Close 11437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11442 NT_STATUS_OK
Close 11442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11447 NT_STATUS_OK
Close 11447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11452 NT_STATUS_OK
Close 11452 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11455 NT_STATUS_OK
Close 11455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11458 NT_STATUS_OK
Close 11458 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11461 NT_STATUS_OK
WriteX 11461 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11461 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11461 0 65536 65536 NT_STATUS_OK
WriteX 11461 65536 65536 65536 NT_STATUS_OK
WriteX 11461 131072 65536 65536 NT_STATUS_OK
WriteX 11461 196608 65536 65536 NT_STATUS_OK
WriteX 11461 262144 26634 26634 NT_STATUS_OK
Close 11461 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11466 NT_STATUS_OK
Close 11466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11467 NT_STATUS_OK
Close 11467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11468 NT_STATUS_OK
ReadX 11468 0 4096 4096 NT_STATUS_OK
Close 11468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11469 NT_STATUS_OK
ReadX 11469 0 4096 4096 NT_STATUS_OK
ReadX 11469 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11470 NT_STATUS_OK
Close 11470 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11469 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11474 NT_STATUS_OK
Close 11474 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11477 NT_STATUS_OK
Close 11477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11479 NT_STATUS_OK
Close 11479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11483 NT_STATUS_OK
Close 11483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11486 NT_STATUS_OK
Close 11486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11488 NT_STATUS_OK
Close 11488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11492 NT_STATUS_OK
Close 11492 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11497 NT_STATUS_OK
Close 11497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11502 NT_STATUS_OK
Close 11502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11507 NT_STATUS_OK
Close 11507 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11512 NT_STATUS_OK
Close 11512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11521 NT_STATUS_OK
Close 11521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11526 NT_STATUS_OK
Close 11526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11531 NT_STATUS_OK
Close 11531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11536 NT_STATUS_OK
Close 11536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11546 NT_STATUS_OK
Close 11546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11548 NT_STATUS_OK
ReadX 11548 0 4096 4096 NT_STATUS_OK
Close 11548 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11549 NT_STATUS_OK
ReadX 11549 0 4096 4096 NT_STATUS_OK
Close 11549 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11550 NT_STATUS_OK
ReadX 11550 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11560 NT_STATUS_OK
Close 11560 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11561 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11561 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11562 NT_STATUS_OK
ReadX 11562 0 4096 4096 NT_STATUS_OK
Close 11562 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11563 NT_STATUS_OK
ReadX 11563 0 4096 4096 NT_STATUS_OK
Close 11563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11564 NT_STATUS_OK
ReadX 11564 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11550 NT_STATUS_OK
Close 11564 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11593 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11593 0 4096 4096 NT_STATUS_OK
Close 11593 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11594 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 4096 4096 NT_STATUS_OK
ReadX 11595 4096 4096 4096 NT_STATUS_OK
ReadX 11595 8192 4096 4096 NT_STATUS_OK
ReadX 11595 12288 4096 4096 NT_STATUS_OK
ReadX 11595 16384 4096 4096 NT_STATUS_OK
ReadX 11595 20480 4096 4096 NT_STATUS_OK
ReadX 11595 24576 4096 4096 NT_STATUS_OK
ReadX 11595 28672 4096 4096 NT_STATUS_OK
ReadX 11595 32768 4096 4096 NT_STATUS_OK
ReadX 11595 36864 4096 4096 NT_STATUS_OK
ReadX 11595 40960 4096 4096 NT_STATUS_OK
ReadX 11595 45056 4096 4096 NT_STATUS_OK
ReadX 11595 49152 4096 4096 NT_STATUS_OK
ReadX 11595 53248 4096 4096 NT_STATUS_OK
ReadX 11595 57344 4096 4096 NT_STATUS_OK
ReadX 11595 61440 4096 4096 NT_STATUS_OK
ReadX 11595 65536 4096 4096 NT_STATUS_OK
ReadX 11595 69632 4096 4096 NT_STATUS_OK
ReadX 11595 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11595 1004 NT_STATUS_OK
WriteX 11595 0 4096 4096 NT_STATUS_OK
Close 11595 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11596 NT_STATUS_OK
SET_FILE_INFORMATION 11596 1004 NT_STATUS_OK
Close 11596 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11597 NT_STATUS_OK
ReadX 11597 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11598 NT_STATUS_OK
Close 11598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11601 NT_STATUS_OK
WriteX 11601 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11601 258 NT_STATUS_OK
WriteX 11601 0 65536 65536 NT_STATUS_OK
WriteX 11601 65536 19979 19979 NT_STATUS_OK
Close 11601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11602 NT_STATUS_OK
ReadX 11602 0 4096 4096 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
QUERY_FILE_INFORMATION 11602 1004 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
SET_FILE_INFORMATION 11602 1004 NT_STATUS_OK
WriteX 11602 0 4096 4096 NT_STATUS_OK
Flush 11602 NT_STATUS_OK
Close 11602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11603 NT_STATUS_OK
ReadX 11603 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11604 NT_STATUS_OK
ReadX 11604 0 4096 4096 NT_STATUS_OK
Close 11603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11605 NT_STATUS_OK
ReadX 11605 0 4096 4096 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 4096 4096 NT_STATUS_OK
Close 11606 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11607 NT_STATUS_OK
ReadX 11607 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11607 1004 NT_STATUS_OK
WriteX 11607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11608 NT_STATUS_OK
Close 11608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11604 NT_STATUS_OK
Close 11607 NT_STATUS_OK
Close 11597 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11610 NT_STATUS_OK
Close 11610 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11613 NT_STATUS_OK
WriteX 11613 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11613 258 NT_STATUS_OK
WriteX 11613 0 65536 65536 NT_STATUS_OK
WriteX 11613 65536 17654 17654 NT_STATUS_OK
Close 11613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
QUERY_FILE_INFORMATION 11614 1004 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
SET_FILE_INFORMATION 11614 1004 NT_STATUS_OK
WriteX 11614 0 4096 4096 NT_STATUS_OK
Flush 11614 NT_STATUS_OK
Close 11614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11615 NT_STATUS_OK
SET_FILE_INFORMATION 11615 1004 NT_STATUS_OK
Close 11615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11617 NT_STATUS_OK
Close 11617 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11619 NT_STATUS_OK
ReadX 11619 0 4096 4096 NT_STATUS_OK
ReadX 11619 4096 4096 4096 NT_STATUS_OK
ReadX 11619 8192 4096 4096 NT_STATUS_OK
ReadX 11619 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11619 16384 4096 4096 NT_STATUS_OK
ReadX 11619 20480 4096 4096 NT_STATUS_OK
ReadX 11619 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11620 NT_STATUS_OK
ReadX 11620 0 4096 4096 NT_STATUS_OK
Close 11620 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11621 NT_STATUS_OK
ReadX 11621 0 4096 4096 NT_STATUS_OK
Close 11621 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11622 NT_STATUS_OK
ReadX 11622 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11622 1004 NT_STATUS_OK
WriteX 11622 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11623 NT_STATUS_OK
Close 11623 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11622 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11625 NT_STATUS_OK
Close 11625 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11628 NT_STATUS_OK
WriteX 11628 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11628 258 NT_STATUS_OK
WriteX 11628 0 65536 65536 NT_STATUS_OK
WriteX 11628 65536 19490 19490 NT_STATUS_OK
Close 11628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11629 NT_STATUS_OK
ReadX 11629 0 4096 4096 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
QUERY_FILE_INFORMATION 11629 1004 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
SET_FILE_INFORMATION 11629 1004 NT_STATUS_OK
WriteX 11629 0 4096 4096 NT_STATUS_OK
Flush 11629 NT_STATUS_OK
Close 11629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11630 NT_STATUS_OK
SET_FILE_INFORMATION 11630 1004 NT_STATUS_OK
Close 11630 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11631 NT_STATUS_OK
ReadX 11631 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11632 NT_STATUS_OK
Close 11632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11634 0 4096 4096 NT_STATUS_OK
Close 11634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11635 NT_STATUS_OK
ReadX 11635 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 4096 4096 NT_STATUS_OK
ReadX 11636 4096 4096 4096 NT_STATUS_OK
ReadX 11636 8192 4096 4096 NT_STATUS_OK
ReadX 11636 12288 4096 4096 NT_STATUS_OK
ReadX 11636 16384 4096 4096 NT_STATUS_OK
ReadX 11636 20480 4096 4096 NT_STATUS_OK
ReadX 11636 24576 4096 4096 NT_STATUS_OK
ReadX 11636 28672 4096 4096 NT_STATUS_OK
ReadX 11636 32768 4096 4096 NT_STATUS_OK
ReadX 11636 36864 4096 4096 NT_STATUS_OK
ReadX 11636 40960 4096 4096 NT_STATUS_OK
ReadX 11636 45056 4096 4096 NT_STATUS_OK
ReadX 11636 49152 4096 4096 NT_STATUS_OK
ReadX 11636 53248 4096 4096 NT_STATUS_OK
ReadX 11636 57344 4096 4096 NT_STATUS_OK
ReadX 11636 61440 4096 4096 NT_STATUS_OK
ReadX 11636 65536 4096 4096 NT_STATUS_OK
ReadX 11636 69632 4096 4096 NT_STATUS_OK
ReadX 11636 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11636 1004 NT_STATUS_OK
WriteX 11636 0 4096 4096 NT_STATUS_OK
Close 11636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11637 NT_STATUS_OK
SET_FILE_INFORMATION 11637 1004 NT_STATUS_OK
Close 11637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11638 NT_STATUS_OK
ReadX 11638 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11639 NT_STATUS_OK
Close 11639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11631 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11642 NT_STATUS_OK
WriteX 11642 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11642 258 NT_STATUS_OK
WriteX 11642 0 65536 65536 NT_STATUS_OK
WriteX 11642 65536 8866 8866 NT_STATUS_OK
Close 11642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 4096 4096 NT_STATUS_OK
WriteX 11643 0 4096 4096 NT_STATUS_OK
Flush 11643 NT_STATUS_OK
SET_FILE_INFORMATION 11643 1004 NT_STATUS_OK
WriteX 11643 0 4096 4096 NT_STATUS_OK
Flush 11643 NT_STATUS_OK
Close 11643 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
Close 11645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
Close 11646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11647 1004 NT_STATUS_OK
WriteX 11647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11648 NT_STATUS_OK
Close 11648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11638 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11650 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11653 NT_STATUS_OK
WriteX 11653 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11653 258 NT_STATUS_OK
WriteX 11653 0 65536 65536 NT_STATUS_OK
WriteX 11653 65536 9298 9298 NT_STATUS_OK
Close 11653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
WriteX 11654 0 4096 4096 NT_STATUS_OK
Flush 11654 NT_STATUS_OK
SET_FILE_INFORMATION 11654 1004 NT_STATUS_OK
WriteX 11654 0 4096 4096 NT_STATUS_OK
Flush 11654 NT_STATUS_OK
Close 11654 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11655 NT_STATUS_OK
SET_FILE_INFORMATION 11655 1004 NT_STATUS_OK
Close 11655 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11656 NT_STATUS_OK
ReadX 11656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11657 NT_STATUS_OK
Close 11657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11660 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11660 0 4096 4096 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11661 4096 4096 4096 NT_STATUS_OK
ReadX 11661 8192 4096 4096 NT_STATUS_OK
ReadX 11661 12288 4096 4096 NT_STATUS_OK
ReadX 11661 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11656 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11662 NT_STATUS_OK
ReadX 11662 0 4096 4096 NT_STATUS_OK
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11663 NT_STATUS_OK
ReadX 11663 0 4096 4096 NT_STATUS_OK
Close 11663 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11664 NT_STATUS_OK
ReadX 11664 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11664 1004 NT_STATUS_OK
WriteX 11664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11665 NT_STATUS_OK
Close 11665 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11661 NT_STATUS_OK
Close 11664 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11667 NT_STATUS_OK
Close 11667 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11670 NT_STATUS_OK
WriteX 11670 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11670 258 NT_STATUS_OK
WriteX 11670 0 65536 65536 NT_STATUS_OK
WriteX 11670 65536 11540 11540 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11671 NT_STATUS_OK
ReadX 11671 0 4096 4096 NT_STATUS_OK
WriteX 11671 0 4096 4096 NT_STATUS_OK
Flush 11671 NT_STATUS_OK
SET_FILE_INFORMATION 11671 1004 NT_STATUS_OK
WriteX 11671 0 4096 4096 NT_STATUS_OK
Flush 11671 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11672 NT_STATUS_OK
SET_FILE_INFORMATION 11672 1004 NT_STATUS_OK
Close 11672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11673 NT_STATUS_OK
ReadX 11673 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11674 NT_STATUS_OK
Close 11674 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11676 NT_STATUS_OK
ReadX 11676 61440 4096 4096 NT_STATUS_OK
ReadX 11676 126976 4096 4096 NT_STATUS_OK
WriteX 11676 0 65536 65536 NT_STATUS_OK
WriteX 11676 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11677 NT_STATUS_OK
ReadX 11677 61440 4096 4096 NT_STATUS_OK
ReadX 11677 126976 4096 4096 NT_STATUS_OK
ReadX 11677 192512 4096 4096 NT_STATUS_OK
ReadX 11677 258048 4096 4096 NT_STATUS_OK
WriteX 11677 0 65536 65536 NT_STATUS_OK
WriteX 11677 65536 65536 65536 NT_STATUS_OK
WriteX 11677 131072 65536 65536 NT_STATUS_OK
WriteX 11677 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11678 NT_STATUS_OK
ReadX 11678 61440 4096 4096 NT_STATUS_OK
ReadX 11678 126976 4096 4096 NT_STATUS_OK
ReadX 11678 192512 4096 4096 NT_STATUS_OK
ReadX 11678 258048 4096 4096 NT_STATUS_OK
ReadX 11678 323584 4096 4096 NT_STATUS_OK
ReadX 11678 389120 4096 4096 NT_STATUS_OK
ReadX 11678 454656 4096 4096 NT_STATUS_OK
ReadX 11678 520192 4096 4096 NT_STATUS_OK
WriteX 11678 0 65536 65536 NT_STATUS_OK
WriteX 11678 65536 65536 65536 NT_STATUS_OK
WriteX 11678 131072 65536 65536 NT_STATUS_OK
WriteX 11678 196608 65536 65536 NT_STATUS_OK
WriteX 11678 262144 65536 65536 NT_STATUS_OK
WriteX 11678 327680 65536 65536 NT_STATUS_OK
WriteX 11678 393216 65536 65536 NT_STATUS_OK
WriteX 11678 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11679 NT_STATUS_OK
ReadX 11679 0 4096 4096 NT_STATUS_OK
ReadX 11679 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11680 NT_STATUS_OK
WriteX 11680 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11680 258 NT_STATUS_OK
WriteX 11680 0 53 53 NT_STATUS_OK
Close 11680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11673 NT_STATUS_OK
Close 11619 NT_STATUS_OK
Close 11676 NT_STATUS_OK
Close 11677 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11679 8192 4096 4096 NT_STATUS_OK
ReadX 11679 12288 4096 4096 NT_STATUS_OK
WriteX 11683 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11683 258 NT_STATUS_OK
ReadX 11679 16384 4096 4096 NT_STATUS_OK
ReadX 11679 20480 4096 4096 NT_STATUS_OK
WriteX 11683 0 15360 15360 NT_STATUS_OK
Close 11683 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11684 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11684 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11684 1004 NT_STATUS_OK
WriteX 11684 0 4096 4096 NT_STATUS_OK
Close 11684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11685 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11688 NT_STATUS_OK
Close 11688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11687 4096 4096 4096 NT_STATUS_OK
ReadX 11687 8192 4096 4096 NT_STATUS_OK
ReadX 11687 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
ReadX 11690 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 4096 4096 NT_STATUS_OK
ReadX 11691 4096 4096 4096 NT_STATUS_OK
ReadX 11691 8192 4096 4096 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Close 11691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11692 NT_STATUS_OK
WriteX 11692 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11692 258 NT_STATUS_OK
WriteX 11692 0 15360 15360 NT_STATUS_OK
Close 11692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11693 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11693 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11679 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11694 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11697 NT_STATUS_OK
SET_FILE_INFORMATION 11697 1004 NT_STATUS_OK
Close 11697 NT_STATUS_OK
WriteX 11693 0 4096 4096 NT_STATUS_OK
Close 11693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11698 NT_STATUS_OK
Close 11698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11700 NT_STATUS_OK
ReadX 11700 0 4096 4096 NT_STATUS_OK
ReadX 11700 4096 4096 4096 NT_STATUS_OK
ReadX 11700 8192 4096 4096 NT_STATUS_OK
ReadX 11700 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11700 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11700 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11701 NT_STATUS_OK
ReadX 11701 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11702 NT_STATUS_OK
WriteX 11702 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11702 258 NT_STATUS_OK
WriteX 11702 0 53 53 NT_STATUS_OK
Close 11702 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11703 NT_STATUS_OK
Close 11703 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11701 4096 4096 4096 NT_STATUS_OK
ReadX 11701 8192 4096 4096 NT_STATUS_OK
ReadX 11701 12288 4096 4096 NT_STATUS_OK
WriteX 11705 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11705 258 NT_STATUS_OK
WriteX 11705 0 12006 12006 NT_STATUS_OK
Close 11705 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11706 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11706 1004 NT_STATUS_OK
WriteX 11706 0 4096 4096 NT_STATUS_OK
Close 11706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11707 NT_STATUS_OK
Close 11707 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11710 NT_STATUS_OK
Close 11710 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11709 4096 4096 4096 NT_STATUS_OK
ReadX 11709 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11712 NT_STATUS_OK
WriteX 11712 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11712 258 NT_STATUS_OK
WriteX 11712 0 11991 11991 NT_STATUS_OK
Close 11712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11713 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11713 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11709 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11714 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11716 NT_STATUS_OK
ReadX 11716 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11717 NT_STATUS_OK
SET_FILE_INFORMATION 11717 1004 NT_STATUS_OK
Close 11717 NT_STATUS_OK
WriteX 11713 0 4096 4096 NT_STATUS_OK
Close 11713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11718 NT_STATUS_OK
Close 11718 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11721 NT_STATUS_OK
Close 11721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11720 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11720 1004 NT_STATUS_OK
ReadX 11720 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11720 1004 NT_STATUS_OK
WriteX 11720 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11720 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11720 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11720 1004 NT_STATUS_OK
Close 11696 NT_STATUS_OK
WriteX 11700 0 19054 19054 NT_STATUS_OK
WriteX 11720 0 12288 12288 NT_STATUS_OK
Close 11716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11723 NT_STATUS_OK
Close 11723 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11700 NT_STATUS_OK
Close 11720 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11725 NT_STATUS_OK
Close 11725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11727 NT_STATUS_OK
ReadX 11727 0 61440 61440 NT_STATUS_OK
ReadX 11727 61440 4096 4096 NT_STATUS_OK
ReadX 11727 65536 61440 61440 NT_STATUS_OK
ReadX 11727 126976 4096 4096 NT_STATUS_OK
ReadX 11727 131072 61440 61440 NT_STATUS_OK
ReadX 11727 192512 4096 4096 NT_STATUS_OK
ReadX 11727 196608 61440 61440 NT_STATUS_OK
ReadX 11727 258048 4096 4096 NT_STATUS_OK
ReadX 11727 262144 61440 61440 NT_STATUS_OK
ReadX 11727 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11728 NT_STATUS_OK
ReadX 11728 0 61440 61440 NT_STATUS_OK
ReadX 11728 61440 4096 4096 NT_STATUS_OK
ReadX 11728 65536 61440 61440 NT_STATUS_OK
ReadX 11728 126976 4096 4096 NT_STATUS_OK
ReadX 11728 131072 61440 61440 NT_STATUS_OK
ReadX 11728 192512 4096 4096 NT_STATUS_OK
ReadX 11728 196608 61440 61440 NT_STATUS_OK
ReadX 11728 258048 4096 4096 NT_STATUS_OK
ReadX 11728 262144 61440 61440 NT_STATUS_OK
ReadX 11728 323584 4096 4096 NT_STATUS_OK
ReadX 11728 327680 61440 61440 NT_STATUS_OK
ReadX 11728 389120 4096 4096 NT_STATUS_OK
ReadX 11728 393216 61440 61440 NT_STATUS_OK
ReadX 11728 454656 4096 4096 NT_STATUS_OK
ReadX 11728 458752 61440 61440 NT_STATUS_OK
ReadX 11728 520192 4096 4096 NT_STATUS_OK
ReadX 11728 524288 61440 61440 NT_STATUS_OK
ReadX 11728 585728 4096 4096 NT_STATUS_OK
ReadX 11728 589824 61440 61440 NT_STATUS_OK
ReadX 11728 651264 4096 4096 NT_STATUS_OK
ReadX 11728 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11729 NT_STATUS_OK
ReadX 11729 0 61440 61440 NT_STATUS_OK
ReadX 11729 61440 4096 4096 NT_STATUS_OK
ReadX 11729 65536 61440 61440 NT_STATUS_OK
ReadX 11729 126976 4096 4096 NT_STATUS_OK
ReadX 11729 131072 61440 61440 NT_STATUS_OK
ReadX 11729 192512 4096 4096 NT_STATUS_OK
ReadX 11729 196608 61440 61440 NT_STATUS_OK
ReadX 11729 258048 4096 4096 NT_STATUS_OK
ReadX 11729 262144 61440 61440 NT_STATUS_OK
ReadX 11729 323584 4096 4096 NT_STATUS_OK
ReadX 11729 327680 61440 61440 NT_STATUS_OK
ReadX 11729 389120 4096 4096 NT_STATUS_OK
ReadX 11729 393216 61440 61440 NT_STATUS_OK
ReadX 11729 454656 4096 4096 NT_STATUS_OK
ReadX 11729 458752 61440 61440 NT_STATUS_OK
ReadX 11729 520192 4096 4096 NT_STATUS_OK
ReadX 11729 524288 61440 61440 NT_STATUS_OK
ReadX 11729 585728 4096 4096 NT_STATUS_OK
ReadX 11729 589824 61440 61440 NT_STATUS_OK
ReadX 11729 651264 4096 4096 NT_STATUS_OK
ReadX 11729 655360 61440 61440 NT_STATUS_OK
ReadX 11729 716800 4096 4096 NT_STATUS_OK
ReadX 11729 720896 61440 61440 NT_STATUS_OK
ReadX 11729 782336 4096 4096 NT_STATUS_OK
ReadX 11729 786432 61440 61440 NT_STATUS_OK
ReadX 11729 847872 4096 4096 NT_STATUS_OK
ReadX 11729 851968 61440 61440 NT_STATUS_OK
ReadX 11729 913408 4096 4096 NT_STATUS_OK
ReadX 11729 917504 61440 61440 NT_STATUS_OK
ReadX 11729 978944 4096 4096 NT_STATUS_OK
ReadX 11729 983040 61440 61440 NT_STATUS_OK
ReadX 11729 1044480 4096 4096 NT_STATUS_OK
ReadX 11729 1048576 61440 61440 NT_STATUS_OK
ReadX 11729 1110016 4096 4096 NT_STATUS_OK
ReadX 11729 1114112 61440 61440 NT_STATUS_OK
ReadX 11729 1175552 4096 4096 NT_STATUS_OK
ReadX 11729 1179648 61440 61440 NT_STATUS_OK
ReadX 11729 1241088 4096 4096 NT_STATUS_OK
ReadX 11729 1245184 61440 61440 NT_STATUS_OK
ReadX 11729 1306624 4096 4096 NT_STATUS_OK
ReadX 11729 1310720 61440 61440 NT_STATUS_OK
ReadX 11729 1372160 4096 4096 NT_STATUS_OK
ReadX 11729 1376256 61440 61440 NT_STATUS_OK
ReadX 11729 1437696 4096 4096 NT_STATUS_OK
ReadX 11729 1441792 61440 61440 NT_STATUS_OK
ReadX 11729 1503232 4096 4096 NT_STATUS_OK
ReadX 11729 1507328 61440 61440 NT_STATUS_OK
ReadX 11729 1568768 4096 4096 NT_STATUS_OK
ReadX 11729 1572864 61440 61440 NT_STATUS_OK
ReadX 11729 1634304 4096 4096 NT_STATUS_OK
ReadX 11729 1638400 61440 61440 NT_STATUS_OK
ReadX 11729 1699840 4096 4096 NT_STATUS_OK
ReadX 11729 1703936 61440 61440 NT_STATUS_OK
ReadX 11729 1765376 4096 4096 NT_STATUS_OK
ReadX 11729 1769472 61440 61440 NT_STATUS_OK
ReadX 11729 1830912 4096 4096 NT_STATUS_OK
ReadX 11729 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11731 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11731 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11732 NT_STATUS_OK
ReadX 11732 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11733 NT_STATUS_OK
ReadX 11733 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11734 NT_STATUS_OK
ReadX 11734 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11735 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11735 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11736 NT_STATUS_OK
QUERY_FILE_INFORMATION 11736 1004 NT_STATUS_OK
WriteX 11736 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11736 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11737 NT_STATUS_OK
Close 11737 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11738 NT_STATUS_OK
WriteX 11738 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11738 258 NT_STATUS_OK
WriteX 11738 0 491 491 NT_STATUS_OK
Close 11738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11739 NT_STATUS_OK
ReadX 11739 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11736 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11741 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11742 NT_STATUS_OK
WriteX 11742 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11742 258 NT_STATUS_OK
WriteX 11742 0 543 543 NT_STATUS_OK
Close 11742 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11743 NT_STATUS_OK
ReadX 11743 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11739 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11727 NT_STATUS_OK
Close 11728 NT_STATUS_OK
Close 11729 NT_STATUS_OK
Close 11743 NT_STATUS_OK
Close 11731 NT_STATUS_OK
Close 11732 NT_STATUS_OK
Close 11733 NT_STATUS_OK
Close 11734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11746 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11747 NT_STATUS_OK
ReadX 11747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11748 NT_STATUS_OK
ReadX 11748 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11749 NT_STATUS_OK
ReadX 11749 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11756 NT_STATUS_OK
QUERY_FILE_INFORMATION 11756 1004 NT_STATUS_OK
WriteX 11756 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11756 258 NT_STATUS_OK
WriteX 11756 0 2048 2048 NT_STATUS_OK
Close 11756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
Flush 11757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11761 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11762 NT_STATUS_OK
WriteX 11762 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11762 258 NT_STATUS_OK
WriteX 11762 0 2048 2048 NT_STATUS_OK
Close 11762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11767 NT_STATUS_OK
Close 11767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11768 NT_STATUS_OK
WriteX 11768 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11768 258 NT_STATUS_OK
WriteX 11768 0 2048 2048 NT_STATUS_OK
Close 11768 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 2048 2048 NT_STATUS_OK
ReadX 11747 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11763 0 4096 4096 NT_STATUS_OK
WriteX 11747 0 8192 8192 NT_STATUS_OK
WriteX 11748 0 4096 4096 NT_STATUS_OK
WriteX 11749 0 4096 4096 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11747 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11772 NT_STATUS_OK
ReadX 11772 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11773 NT_STATUS_OK
QUERY_FILE_INFORMATION 11773 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11772 NT_STATUS_OK
Close 11748 NT_STATUS_OK
Close 11749 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11747 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11775 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11776 NT_STATUS_OK
ReadX 11776 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11778 NT_STATUS_OK
ReadX 11778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11780 NT_STATUS_OK
ReadX 11780 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11782 NT_STATUS_OK
ReadX 11782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11783 NT_STATUS_OK
ReadX 11783 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11784 NT_STATUS_OK
ReadX 11784 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11785 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11792 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11793 NT_STATUS_OK
QUERY_FILE_INFORMATION 11793 1004 NT_STATUS_OK
WriteX 11793 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11793 258 NT_STATUS_OK
WriteX 11793 0 2048 2048 NT_STATUS_OK
Close 11793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11795 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11796 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11800 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11801 NT_STATUS_OK
QUERY_FILE_INFORMATION 11801 1004 NT_STATUS_OK
WriteX 11801 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11801 258 NT_STATUS_OK
WriteX 11801 0 2048 2048 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11802 NT_STATUS_OK
ReadX 11802 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11794 0 4096 4096 NT_STATUS_OK
Flush 11794 NT_STATUS_OK
WriteX 11802 0 4096 4096 NT_STATUS_OK
Flush 11802 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11794 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11802 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11796 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11803 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11804 NT_STATUS_OK
WriteX 11804 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11804 258 NT_STATUS_OK
WriteX 11804 0 4096 4096 NT_STATUS_OK
Close 11804 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11805 NT_STATUS_OK
ReadX 11805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11806 NT_STATUS_OK
Close 11806 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11807 NT_STATUS_OK
WriteX 11807 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11807 258 NT_STATUS_OK
WriteX 11807 0 4096 4096 NT_STATUS_OK
Close 11807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11808 NT_STATUS_OK
ReadX 11808 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11808 0 4096 4096 NT_STATUS_OK
Close 11805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11782 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11783 NT_STATUS_OK
Close 11776 NT_STATUS_OK
Close 11777 NT_STATUS_OK
Close 11780 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11778 NT_STATUS_OK
Close 11779 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11811 NT_STATUS_OK
Close 11811 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11813 NT_STATUS_OK
ReadX 11813 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11814 NT_STATUS_OK
Close 11814 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11815 NT_STATUS_OK
WriteX 11815 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11815 258 NT_STATUS_OK
WriteX 11815 0 2048 2048 NT_STATUS_OK
Close 11815 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11817 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11818 NT_STATUS_OK
ReadX 11818 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11819 NT_STATUS_OK
ReadX 11819 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11820 NT_STATUS_OK
ReadX 11820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11821 NT_STATUS_OK
ReadX 11821 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11822 NT_STATUS_OK
ReadX 11822 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11823 NT_STATUS_OK
ReadX 11823 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11824 NT_STATUS_OK
ReadX 11824 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11825 NT_STATUS_OK
ReadX 11825 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11826 NT_STATUS_OK
ReadX 11826 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11827 NT_STATUS_OK
ReadX 11827 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11828 NT_STATUS_OK
ReadX 11828 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11794 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11830 NT_STATUS_OK
QUERY_FILE_INFORMATION 11830 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11813 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Close 11828 NT_STATUS_OK
Close 11823 NT_STATUS_OK
Close 11824 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11826 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Close 11829 NT_STATUS_OK
Close 11817 NT_STATUS_OK
Close 11818 NT_STATUS_OK
Close 11821 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Close 11819 NT_STATUS_OK
Close 11820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11832 NT_STATUS_OK
QUERY_FILE_INFORMATION 11832 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11832 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11834 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11835 NT_STATUS_OK
ReadX 11835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11836 NT_STATUS_OK
ReadX 11836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11837 NT_STATUS_OK
ReadX 11837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11838 NT_STATUS_OK
ReadX 11838 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11839 NT_STATUS_OK
ReadX 11839 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11840 NT_STATUS_OK
ReadX 11840 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11841 NT_STATUS_OK
ReadX 11841 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11842 NT_STATUS_OK
ReadX 11842 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11843 NT_STATUS_OK
ReadX 11843 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11844 NT_STATUS_OK
ReadX 11844 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11845 NT_STATUS_OK
ReadX 11845 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11846 NT_STATUS_OK
ReadX 11846 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11847 NT_STATUS_OK
ReadX 11847 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11851 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11852 NT_STATUS_OK
QUERY_FILE_INFORMATION 11852 1004 NT_STATUS_OK
WriteX 11852 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11852 258 NT_STATUS_OK
WriteX 11852 0 2048 2048 NT_STATUS_OK
Close 11852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11853 NT_STATUS_OK
ReadX 11853 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11854 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11854 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11855 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11856 NT_STATUS_OK
ReadX 11856 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11857 NT_STATUS_OK
ReadX 11857 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11858 NT_STATUS_OK
ReadX 11858 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11859 NT_STATUS_OK
ReadX 11859 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11863 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11863 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11864 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 1004 NT_STATUS_OK
WriteX 11864 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11864 258 NT_STATUS_OK
WriteX 11864 0 2048 2048 NT_STATUS_OK
Close 11864 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11865 NT_STATUS_OK
ReadX 11865 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11840 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11866 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11867 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11871 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11872 NT_STATUS_OK
QUERY_FILE_INFORMATION 11872 1004 NT_STATUS_OK
WriteX 11872 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11872 258 NT_STATUS_OK
WriteX 11872 0 2048 2048 NT_STATUS_OK
Close 11872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11853 0 4096 4096 NT_STATUS_OK
Flush 11853 NT_STATUS_OK
WriteX 11865 0 4096 4096 NT_STATUS_OK
Flush 11865 NT_STATUS_OK
WriteX 11873 0 4096 4096 NT_STATUS_OK
Flush 11873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11853 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11865 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11873 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11855 4096 16384 16384 NT_STATUS_OK
ReadX 11835 4096 16384 16384 NT_STATUS_OK
ReadX 11867 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11874 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11874 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 2048 2048 NT_STATUS_OK
WriteX 11875 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11853 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11876 NT_STATUS_OK
QUERY_FILE_INFORMATION 11876 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Close 11859 NT_STATUS_OK
Close 11847 NT_STATUS_OK
Close 11839 NT_STATUS_OK
Close 11855 NT_STATUS_OK
Close 11856 NT_STATUS_OK
Close 11857 NT_STATUS_OK
Close 11858 NT_STATUS_OK
Close 11846 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Close 11841 NT_STATUS_OK
Close 11844 NT_STATUS_OK
Close 11845 NT_STATUS_OK
Close 11842 NT_STATUS_OK
Close 11843 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11836 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Close 11838 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11878 NT_STATUS_OK
QUERY_FILE_INFORMATION 11878 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11878 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11873 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11880 NT_STATUS_OK
QUERY_FILE_INFORMATION 11880 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11880 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11883 NT_STATUS_OK
ReadX 11883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11884 NT_STATUS_OK
ReadX 11884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11886 NT_STATUS_OK
ReadX 11886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11887 NT_STATUS_OK
ReadX 11887 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11883 4096 16384 16384 NT_STATUS_OK
WriteX 11883 0 4096 4096 NT_STATUS_OK
WriteX 11884 0 4096 4096 NT_STATUS_OK
WriteX 11885 0 4096 4096 NT_STATUS_OK
WriteX 11886 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11888 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11889 NT_STATUS_OK
ReadX 11889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11890 NT_STATUS_OK
ReadX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11891 NT_STATUS_OK
ReadX 11891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11892 NT_STATUS_OK
ReadX 11892 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11893 NT_STATUS_OK
ReadX 11893 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11894 NT_STATUS_OK
ReadX 11894 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11895 NT_STATUS_OK
ReadX 11895 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11896 NT_STATUS_OK
ReadX 11896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11897 NT_STATUS_OK
ReadX 11897 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11898 NT_STATUS_OK
ReadX 11898 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11899 NT_STATUS_OK
ReadX 11899 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11900 NT_STATUS_OK
ReadX 11900 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11901 NT_STATUS_OK
ReadX 11901 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11902 NT_STATUS_OK
ReadX 11902 0 8192 8192 NT_STATUS_OK
ReadX 11889 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11903 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11903 0 4096 4096 NT_STATUS_OK
ReadX 11903 4096 4096 4096 NT_STATUS_OK
ReadX 11903 8192 4096 4096 NT_STATUS_OK
WriteX 11889 0 4096 4096 NT_STATUS_OK
WriteX 11890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11904 0 4096 4096 NT_STATUS_OK
ReadX 11904 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11883 0 4096 4096 NT_STATUS_OK
WriteX 11884 0 4096 4096 NT_STATUS_OK
WriteX 11885 0 4096 4096 NT_STATUS_OK
WriteX 11886 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11908 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11909 NT_STATUS_OK
QUERY_FILE_INFORMATION 11909 1004 NT_STATUS_OK
WriteX 11909 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11909 258 NT_STATUS_OK
WriteX 11909 0 2048 2048 NT_STATUS_OK
Close 11909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11910 NT_STATUS_OK
ReadX 11910 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11910 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11910 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11911 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11912 NT_STATUS_OK
ReadX 11912 0 4096 4096 NT_STATUS_OK
ReadX 11912 4096 4096 4096 NT_STATUS_OK
WriteX 11912 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11910 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11912 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11913 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11913 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11914 NT_STATUS_OK
ReadX 11914 0 4096 4096 NT_STATUS_OK
ReadX 11914 4096 4096 4096 NT_STATUS_OK
WriteX 11914 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11915 NT_STATUS_OK
QUERY_FILE_INFORMATION 11915 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11902 NT_STATUS_OK
Close 11887 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Close 11884 NT_STATUS_OK
Close 11885 NT_STATUS_OK
Close 11886 NT_STATUS_OK
Close 11895 NT_STATUS_OK
Close 11900 NT_STATUS_OK
Close 11896 NT_STATUS_OK
Close 11897 NT_STATUS_OK
Close 11898 NT_STATUS_OK
Close 11899 NT_STATUS_OK
Close 11901 NT_STATUS_OK
Close 11889 NT_STATUS_OK
Close 11890 NT_STATUS_OK
Close 11893 NT_STATUS_OK
Close 11894 NT_STATUS_OK
Close 11891 NT_STATUS_OK
Close 11892 NT_STATUS_OK
Close 11914 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Close 11904 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11917 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11917 0 4096 4096 NT_STATUS_OK
ReadX 11917 4096 4096 4096 NT_STATUS_OK
ReadX 11917 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11918 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11918 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11919 NT_STATUS_OK
ReadX 11919 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11920 NT_STATUS_OK
ReadX 11920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11921 NT_STATUS_OK
ReadX 11921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11922 NT_STATUS_OK
ReadX 11922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11923 NT_STATUS_OK
ReadX 11923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11924 NT_STATUS_OK
ReadX 11924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11925 NT_STATUS_OK
ReadX 11925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11926 NT_STATUS_OK
ReadX 11926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11927 NT_STATUS_OK
ReadX 11927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11928 NT_STATUS_OK
ReadX 11928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11929 NT_STATUS_OK
ReadX 11929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11930 NT_STATUS_OK
ReadX 11930 0 4096 4096 NT_STATUS_OK
ReadX 11918 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11934 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11935 NT_STATUS_OK
QUERY_FILE_INFORMATION 11935 1004 NT_STATUS_OK
WriteX 11935 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11935 258 NT_STATUS_OK
WriteX 11935 0 2048 2048 NT_STATUS_OK
Close 11935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11936 NT_STATUS_OK
ReadX 11936 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11936 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11940 NT_STATUS_OK
Close 11940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11941 NT_STATUS_OK
QUERY_FILE_INFORMATION 11941 1004 NT_STATUS_OK
WriteX 11941 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11941 258 NT_STATUS_OK
WriteX 11941 0 2048 2048 NT_STATUS_OK
Close 11941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11942 NT_STATUS_OK
ReadX 11942 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11942 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11925 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11936 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11943 NT_STATUS_OK
QUERY_FILE_INFORMATION 11943 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11929 NT_STATUS_OK
Close 11924 NT_STATUS_OK
Close 11930 NT_STATUS_OK
Close 11918 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Close 11922 NT_STATUS_OK
Close 11923 NT_STATUS_OK
Close 11920 NT_STATUS_OK
Close 11921 NT_STATUS_OK
Close 11925 NT_STATUS_OK
Close 11926 NT_STATUS_OK
Close 11927 NT_STATUS_OK
Close 11928 NT_STATUS_OK
Close 11917 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11945 NT_STATUS_OK
QUERY_FILE_INFORMATION 11945 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11947 NT_STATUS_OK
ReadX 11947 61440 4096 4096 NT_STATUS_OK
ReadX 11947 126976 4096 4096 NT_STATUS_OK
WriteX 11947 0 65536 65536 NT_STATUS_OK
WriteX 11947 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11948 NT_STATUS_OK
ReadX 11948 61440 4096 4096 NT_STATUS_OK
ReadX 11948 126976 4096 4096 NT_STATUS_OK
ReadX 11948 192512 4096 4096 NT_STATUS_OK
ReadX 11948 258048 4096 4096 NT_STATUS_OK
WriteX 11948 0 65536 65536 NT_STATUS_OK
WriteX 11948 65536 65536 65536 NT_STATUS_OK
WriteX 11948 131072 65536 65536 NT_STATUS_OK
WriteX 11948 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11949 NT_STATUS_OK
ReadX 11949 61440 4096 4096 NT_STATUS_OK
ReadX 11949 126976 4096 4096 NT_STATUS_OK
ReadX 11949 192512 4096 4096 NT_STATUS_OK
ReadX 11949 258048 4096 4096 NT_STATUS_OK
ReadX 11949 323584 4096 4096 NT_STATUS_OK
ReadX 11949 389120 4096 4096 NT_STATUS_OK
ReadX 11949 454656 4096 4096 NT_STATUS_OK
ReadX 11949 520192 4096 4096 NT_STATUS_OK
WriteX 11949 0 65536 65536 NT_STATUS_OK
WriteX 11949 65536 65536 65536 NT_STATUS_OK
WriteX 11949 131072 65536 65536 NT_STATUS_OK
WriteX 11949 196608 65536 65536 NT_STATUS_OK
WriteX 11949 262144 65536 65536 NT_STATUS_OK
WriteX 11949 327680 65536 65536 NT_STATUS_OK
WriteX 11949 393216 65536 65536 NT_STATUS_OK
WriteX 11949 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11950 NT_STATUS_OK
ReadX 11950 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11950 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11950 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11950 8192 4096 4096 NT_STATUS_OK
ReadX 11950 12288 4096 4096 NT_STATUS_OK
ReadX 11950 16384 4096 4096 NT_STATUS_OK
ReadX 11950 20480 4096 4096 NT_STATUS_OK
ReadX 11950 24576 4096 4096 NT_STATUS_OK
ReadX 11950 28672 4096 4096 NT_STATUS_OK
ReadX 11950 32768 4096 4096 NT_STATUS_OK
ReadX 11950 36864 4096 4096 NT_STATUS_OK
ReadX 11950 40960 4096 4096 NT_STATUS_OK
ReadX 11950 45056 4096 4096 NT_STATUS_OK
ReadX 11950 49152 4096 4096 NT_STATUS_OK
ReadX 11950 53248 4096 4096 NT_STATUS_OK
ReadX 11950 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11950 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11951 NT_STATUS_OK
Close 11951 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11947 NT_STATUS_OK
Close 11948 NT_STATUS_OK
Close 11949 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11953 NT_STATUS_OK
WriteX 11953 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11953 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11953 1004 NT_STATUS_OK
WriteX 11953 0 57088 57088 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
Flush 11953 NT_STATUS_OK
Close 11950 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11954 NT_STATUS_OK
SET_FILE_INFORMATION 11954 1004 NT_STATUS_OK
Close 11954 NT_STATUS_OK
SET_FILE_INFORMATION 11953 1004 NT_STATUS_OK
WriteX 11953 0 4096 4096 NT_STATUS_OK
Close 11953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11957 NT_STATUS_OK
ReadX 11957 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11957 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11958 NT_STATUS_OK
WriteX 11958 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11958 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11958 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11958 1004 NT_STATUS_OK
WriteX 11958 0 51456 51456 NT_STATUS_OK
WriteX 11958 0 4096 4096 NT_STATUS_OK
Flush 11958 NT_STATUS_OK
SET_FILE_INFORMATION 11958 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11958 1004 NT_STATUS_OK
WriteX 11958 0 4096 4096 NT_STATUS_OK
Close 11958 NT_STATUS_OK
Close 11957 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11960 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11962 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11964 NT_STATUS_OK
Close 11964 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11967 NT_STATUS_OK
WriteX 11967 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11967 258 NT_STATUS_OK
WriteX 11967 0 53077 53077 NT_STATUS_OK
Close 11967 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11968 NT_STATUS_OK
WriteX 11968 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11968 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11968 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
WriteX 11968 0 65536 65536 NT_STATUS_OK
WriteX 11968 65536 1856 1856 NT_STATUS_OK
WriteX 11968 0 4096 4096 NT_STATUS_OK
Flush 11968 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11968 1004 NT_STATUS_OK
WriteX 11968 0 4096 4096 NT_STATUS_OK
Close 11968 NT_STATUS_OK
Close 11962 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11970 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11972 NT_STATUS_OK
ReadX 11972 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11974 NT_STATUS_OK
Close 11974 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11977 NT_STATUS_OK
WriteX 11977 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11977 258 NT_STATUS_OK
WriteX 11977 0 7983 7983 NT_STATUS_OK
Close 11977 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11979 NT_STATUS_OK
Close 11979 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11982 NT_STATUS_OK
WriteX 11982 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11982 258 NT_STATUS_OK
WriteX 11982 0 65536 65536 NT_STATUS_OK
WriteX 11982 65536 65536 65536 NT_STATUS_OK
WriteX 11982 131072 65536 65536 NT_STATUS_OK
WriteX 11982 196608 65536 65536 NT_STATUS_OK
WriteX 11982 262144 65536 65536 NT_STATUS_OK
WriteX 11982 327680 65536 65536 NT_STATUS_OK
WriteX 11982 393216 65536 65536 NT_STATUS_OK
WriteX 11982 458752 46731 46731 NT_STATUS_OK
Close 11982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11983 NT_STATUS_OK
WriteX 11983 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11983 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11972 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11983 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11983 1004 NT_STATUS_OK
WriteX 11983 0 65536 65536 NT_STATUS_OK
WriteX 11983 65536 22848 22848 NT_STATUS_OK
WriteX 11983 0 4096 4096 NT_STATUS_OK
Flush 11983 NT_STATUS_OK
SET_FILE_INFORMATION 11983 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11983 1004 NT_STATUS_OK
WriteX 11983 0 4096 4096 NT_STATUS_OK
Close 11983 NT_STATUS_OK
Close 11972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11987 NT_STATUS_OK
ReadX 11987 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11987 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11988 NT_STATUS_OK
ReadX 11988 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11988 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11988 1004 NT_STATUS_OK
ReadX 11988 8192 4096 4096 NT_STATUS_OK
ReadX 11988 12288 4096 4096 NT_STATUS_OK
ReadX 11988 16384 4096 4096 NT_STATUS_OK
ReadX 11988 20480 4096 4096 NT_STATUS_OK
ReadX 11988 24576 4096 4096 NT_STATUS_OK
ReadX 11988 28672 4096 4096 NT_STATUS_OK
ReadX 11988 32768 4096 4096 NT_STATUS_OK
ReadX 11988 36864 4096 4096 NT_STATUS_OK
ReadX 11988 40960 4096 4096 NT_STATUS_OK
ReadX 11988 45056 4096 4096 NT_STATUS_OK
ReadX 11988 49152 4096 4096 NT_STATUS_OK
ReadX 11988 53248 4096 4096 NT_STATUS_OK
ReadX 11988 57344 4096 4096 NT_STATUS_OK
ReadX 11988 61440 4096 4096 NT_STATUS_OK
ReadX 11988 65536 4096 4096 NT_STATUS_OK
ReadX 11988 69632 4096 4096 NT_STATUS_OK
ReadX 11988 73728 4096 4096 NT_STATUS_OK
ReadX 11988 77824 4096 4096 NT_STATUS_OK
ReadX 11988 81920 4096 4096 NT_STATUS_OK
ReadX 11988 86016 4096 4096 NT_STATUS_OK
ReadX 11988 90112 4096 4096 NT_STATUS_OK
ReadX 11988 94208 4096 4096 NT_STATUS_OK
ReadX 11988 98304 4096 4096 NT_STATUS_OK
ReadX 11988 102400 4096 4096 NT_STATUS_OK
ReadX 11988 106496 4096 4096 NT_STATUS_OK
ReadX 11988 110592 4096 4096 NT_STATUS_OK
ReadX 11988 114688 4096 4096 NT_STATUS_OK
ReadX 11988 118784 4096 4096 NT_STATUS_OK
ReadX 11988 122880 4096 4096 NT_STATUS_OK
ReadX 11988 126976 4096 4096 NT_STATUS_OK
ReadX 11988 131072 4096 4096 NT_STATUS_OK
ReadX 11988 135168 4096 4096 NT_STATUS_OK
ReadX 11988 139264 4096 4096 NT_STATUS_OK
ReadX 11988 143360 4096 4096 NT_STATUS_OK
ReadX 11988 147456 4096 4096 NT_STATUS_OK
ReadX 11988 151552 4096 4096 NT_STATUS_OK
ReadX 11988 155648 4096 4096 NT_STATUS_OK
ReadX 11988 159744 4096 4096 NT_STATUS_OK
ReadX 11988 163840 4096 4096 NT_STATUS_OK
ReadX 11988 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11988 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11989 NT_STATUS_OK
Close 11989 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11987 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11991 NT_STATUS_OK
WriteX 11991 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11991 258 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11992 NT_STATUS_OK
SET_FILE_INFORMATION 11992 1004 NT_STATUS_OK
Close 11992 NT_STATUS_OK
WriteX 11991 0 42388 42388 NT_STATUS_OK
Close 11991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11993 NT_STATUS_OK
Close 11993 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11995 NT_STATUS_OK
ReadX 11995 0 4096 4096 NT_STATUS_OK
ReadX 11995 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11996 NT_STATUS_OK
WriteX 11996 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11996 258 NT_STATUS_OK
SET_FILE_INFORMATION 11996 1004 NT_STATUS_OK
WriteX 11996 0 42652 42652 NT_STATUS_OK
Close 11996 NT_STATUS_OK
Close 11995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11998 NT_STATUS_OK
Close 11998 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 4096 4096 NT_STATUS_OK
ReadX 12000 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12002 NT_STATUS_OK
Close 12002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12005 NT_STATUS_OK
WriteX 12005 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12005 258 NT_STATUS_OK
WriteX 12005 0 65536 65536 NT_STATUS_OK
WriteX 12005 65536 49 49 NT_STATUS_OK
Close 12005 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12006 NT_STATUS_OK
ReadX 12006 0 61440 61440 NT_STATUS_OK
ReadX 12006 61440 4096 4096 NT_STATUS_OK
ReadX 12006 65536 61440 61440 NT_STATUS_OK
ReadX 12006 126976 4096 4096 NT_STATUS_OK
ReadX 12006 131072 61440 61440 NT_STATUS_OK
ReadX 12006 192512 4096 4096 NT_STATUS_OK
ReadX 12006 196608 61440 61440 NT_STATUS_OK
ReadX 12006 258048 4096 4096 NT_STATUS_OK
ReadX 12006 262144 61440 61440 NT_STATUS_OK
ReadX 12006 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12007 NT_STATUS_OK
ReadX 12007 0 61440 61440 NT_STATUS_OK
ReadX 12007 61440 4096 4096 NT_STATUS_OK
ReadX 12007 65536 61440 61440 NT_STATUS_OK
ReadX 12007 126976 4096 4096 NT_STATUS_OK
ReadX 12007 131072 61440 61440 NT_STATUS_OK
ReadX 12007 192512 4096 4096 NT_STATUS_OK
ReadX 12007 196608 61440 61440 NT_STATUS_OK
ReadX 12007 258048 4096 4096 NT_STATUS_OK
ReadX 12007 262144 61440 61440 NT_STATUS_OK
ReadX 12007 323584 4096 4096 NT_STATUS_OK
ReadX 12007 327680 61440 61440 NT_STATUS_OK
ReadX 12007 389120 4096 4096 NT_STATUS_OK
ReadX 12007 393216 61440 61440 NT_STATUS_OK
ReadX 12007 454656 4096 4096 NT_STATUS_OK
ReadX 12007 458752 61440 61440 NT_STATUS_OK
ReadX 12007 520192 4096 4096 NT_STATUS_OK
ReadX 12007 524288 61440 61440 NT_STATUS_OK
ReadX 12007 585728 4096 4096 NT_STATUS_OK
ReadX 12007 589824 61440 61440 NT_STATUS_OK
ReadX 12007 651264 4096 4096 NT_STATUS_OK
ReadX 12007 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12008 NT_STATUS_OK
ReadX 12008 0 61440 61440 NT_STATUS_OK
ReadX 12008 61440 4096 4096 NT_STATUS_OK
ReadX 12008 65536 61440 61440 NT_STATUS_OK
ReadX 12008 126976 4096 4096 NT_STATUS_OK
ReadX 12008 131072 61440 61440 NT_STATUS_OK
ReadX 12008 192512 4096 4096 NT_STATUS_OK
ReadX 12008 196608 61440 61440 NT_STATUS_OK
ReadX 12008 258048 4096 4096 NT_STATUS_OK
ReadX 12008 262144 61440 61440 NT_STATUS_OK
ReadX 12008 323584 4096 4096 NT_STATUS_OK
ReadX 12008 327680 61440 61440 NT_STATUS_OK
ReadX 12008 389120 4096 4096 NT_STATUS_OK
ReadX 12008 393216 61440 61440 NT_STATUS_OK
ReadX 12008 454656 4096 4096 NT_STATUS_OK
ReadX 12008 458752 61440 61440 NT_STATUS_OK
ReadX 12008 520192 4096 4096 NT_STATUS_OK
ReadX 12008 524288 61440 61440 NT_STATUS_OK
ReadX 12008 585728 4096 4096 NT_STATUS_OK
ReadX 12008 589824 61440 61440 NT_STATUS_OK
ReadX 12008 651264 4096 4096 NT_STATUS_OK
ReadX 12008 655360 61440 61440 NT_STATUS_OK
ReadX 12008 716800 4096 4096 NT_STATUS_OK
ReadX 12008 720896 61440 61440 NT_STATUS_OK
ReadX 12008 782336 4096 4096 NT_STATUS_OK
ReadX 12008 786432 61440 61440 NT_STATUS_OK
ReadX 12008 847872 4096 4096 NT_STATUS_OK
ReadX 12008 851968 61440 61440 NT_STATUS_OK
ReadX 12008 913408 4096 4096 NT_STATUS_OK
ReadX 12008 917504 61440 61440 NT_STATUS_OK
ReadX 12008 978944 4096 4096 NT_STATUS_OK
ReadX 12008 983040 61440 61440 NT_STATUS_OK
ReadX 12008 1044480 4096 4096 NT_STATUS_OK
ReadX 12008 1048576 61440 61440 NT_STATUS_OK
ReadX 12008 1110016 4096 4096 NT_STATUS_OK
ReadX 12008 1114112 61440 61440 NT_STATUS_OK
ReadX 12008 1175552 4096 4096 NT_STATUS_OK
ReadX 12008 1179648 61440 61440 NT_STATUS_OK
ReadX 12008 1241088 4096 4096 NT_STATUS_OK
ReadX 12008 1245184 61440 61440 NT_STATUS_OK
ReadX 12008 1306624 4096 4096 NT_STATUS_OK
ReadX 12008 1310720 61440 61440 NT_STATUS_OK
ReadX 12008 1372160 4096 4096 NT_STATUS_OK
ReadX 12008 1376256 61440 61440 NT_STATUS_OK
ReadX 12008 1437696 4096 4096 NT_STATUS_OK
ReadX 12008 1441792 61440 61440 NT_STATUS_OK
ReadX 12008 1503232 4096 4096 NT_STATUS_OK
ReadX 12008 1507328 61440 61440 NT_STATUS_OK
ReadX 12008 1568768 4096 4096 NT_STATUS_OK
ReadX 12008 1572864 61440 61440 NT_STATUS_OK
ReadX 12008 1634304 4096 4096 NT_STATUS_OK
ReadX 12008 1638400 61440 61440 NT_STATUS_OK
ReadX 12008 1699840 4096 4096 NT_STATUS_OK
ReadX 12008 1703936 61440 61440 NT_STATUS_OK
ReadX 12008 1765376 4096 4096 NT_STATUS_OK
ReadX 12008 1769472 61440 61440 NT_STATUS_OK
Close 12006 NT_STATUS_OK
ReadX 12008 1830912 4096 4096 NT_STATUS_OK
Close 12000 NT_STATUS_OK
ReadX 12008 1835008 32768 32768 NT_STATUS_OK
Close 12007 NT_STATUS_OK
Close 12008 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12010 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12010 1005 NT_STATUS_OK
ReadX 12010 2156 24 24 NT_STATUS_OK
ReadX 12010 2139 276 276 NT_STATUS_OK
ReadX 12010 2136 14 14 NT_STATUS_OK
ReadX 12010 2136 7 7 NT_STATUS_OK
ReadX 12010 2138 12 12 NT_STATUS_OK
ReadX 12010 2137 8 8 NT_STATUS_OK
ReadX 12010 2135 15 15 NT_STATUS_OK
ReadX 12010 0 16 16 NT_STATUS_OK
ReadX 12010 16 2048 2048 NT_STATUS_OK
ReadX 12010 2064 2048 2048 NT_STATUS_OK
ReadX 12010 257 2048 2048 NT_STATUS_OK
ReadX 12010 385 2048 2048 NT_STATUS_OK
ReadX 12010 513 2048 2048 NT_STATUS_OK
ReadX 12010 641 2048 2048 NT_STATUS_OK
ReadX 12010 769 2048 2048 NT_STATUS_OK
ReadX 12010 897 2048 2048 NT_STATUS_OK
ReadX 12010 1025 2048 2048 NT_STATUS_OK
ReadX 12010 1153 2048 2048 NT_STATUS_OK
ReadX 12010 1281 2048 2048 NT_STATUS_OK
ReadX 12010 1409 2048 2048 NT_STATUS_OK
ReadX 12010 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12012 NT_STATUS_OK
Close 12012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12015 NT_STATUS_OK
WriteX 12015 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12015 258 NT_STATUS_OK
WriteX 12015 0 10575 10575 NT_STATUS_OK
Flush 12015 NT_STATUS_OK
Close 12015 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12016 NT_STATUS_OK
Close 12016 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12018 NT_STATUS_OK
ReadX 12018 0 4096 4096 NT_STATUS_OK
Close 12010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12020 NT_STATUS_OK
LockX 12020 2147483538 1 NT_STATUS_OK
UnlockX 12020 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12020 1005 NT_STATUS_OK
ReadX 12020 0 512 512 NT_STATUS_OK
ReadX 12020 512 512 512 NT_STATUS_OK
ReadX 12020 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12020 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12020 1004 NT_STATUS_OK
Close 12020 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12021 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 1005 NT_STATUS_OK
ReadX 12021 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12022 NT_STATUS_OK
LockX 12022 2147483538 1 NT_STATUS_OK
UnlockX 12022 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12022 1005 NT_STATUS_OK
ReadX 12022 0 512 512 NT_STATUS_OK
ReadX 12022 512 512 512 NT_STATUS_OK
ReadX 12022 1024 512 512 NT_STATUS_OK
ReadX 12022 288 20 20 NT_STATUS_OK
ReadX 12022 308 2084 2084 NT_STATUS_OK
ReadX 12022 388 2084 2084 NT_STATUS_OK
ReadX 12022 388 2084 2084 NT_STATUS_OK
ReadX 12009 2157 1386 1386 NT_STATUS_OK
ReadX 12022 2472 399 399 NT_STATUS_OK
ReadX 12022 3072 1536 1536 NT_STATUS_OK
ReadX 12022 544 149 149 NT_STATUS_OK
ReadX 12022 693 485 485 NT_STATUS_OK
Close 12022 NT_STATUS_OK
ReadX 12009 2157 4096 4096 NT_STATUS_OK
ReadX 12009 6253 4096 4096 NT_STATUS_OK
ReadX 12009 10349 4096 4096 NT_STATUS_OK
ReadX 12009 14445 4096 4096 NT_STATUS_OK
ReadX 12009 18541 4096 4096 NT_STATUS_OK
ReadX 12009 22637 256 256 NT_STATUS_OK
ReadX 12009 22893 4096 4096 NT_STATUS_OK
ReadX 12009 26989 4096 4096 NT_STATUS_OK
ReadX 12009 31085 4096 4096 NT_STATUS_OK
ReadX 12009 35181 4096 4096 NT_STATUS_OK
ReadX 12009 39277 4096 4096 NT_STATUS_OK
ReadX 12009 43373 4096 4096 NT_STATUS_OK
ReadX 12009 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12009 2157 1024 1024 NT_STATUS_OK
ReadX 12009 1667 4688 4688 NT_STATUS_OK
ReadX 12009 6355 3516 3516 NT_STATUS_OK
ReadX 12009 9871 16384 16384 NT_STATUS_OK
ReadX 12009 26255 3771 3771 NT_STATUS_OK
ReadX 12009 30026 2048 2048 NT_STATUS_OK
ReadX 12009 32074 1024 1024 NT_STATUS_OK
ReadX 12009 33098 6652 6652 NT_STATUS_OK
ReadX 12009 39750 16384 16384 NT_STATUS_OK
ReadX 12009 56134 10496 10496 NT_STATUS_OK
ReadX 12009 66630 1784 1784 NT_STATUS_OK
ReadX 12009 68414 90 90 NT_STATUS_OK
ReadX 12009 68504 273 273 NT_STATUS_OK
ReadX 12009 68777 1600 1600 NT_STATUS_OK
ReadX 12009 70377 640 640 NT_STATUS_OK
ReadX 12009 71017 1280 1280 NT_STATUS_OK
ReadX 12009 72297 8464 8464 NT_STATUS_OK
ReadX 12009 80761 158 158 NT_STATUS_OK
ReadX 12009 80919 912 912 NT_STATUS_OK
ReadX 12009 81831 1980 1980 NT_STATUS_OK
ReadX 12009 83811 2256 2256 NT_STATUS_OK
ReadX 12009 86067 400 400 NT_STATUS_OK
ReadX 12009 86467 252 252 NT_STATUS_OK
ReadX 12009 86719 42 42 NT_STATUS_OK
ReadX 12009 86761 725 725 NT_STATUS_OK
ReadX 12009 2009 512 512 NT_STATUS_OK
ReadX 12009 3895 9 9 NT_STATUS_OK
ReadX 12009 3781 46 46 NT_STATUS_OK
ReadX 12009 4059 92 92 NT_STATUS_OK
ReadX 12009 3781 92 92 NT_STATUS_OK
ReadX 12009 3986 184 184 NT_STATUS_OK
ReadX 12009 3987 16384 16384 NT_STATUS_OK
ReadX 12009 3902 16384 16384 NT_STATUS_OK
ReadX 12009 3781 10240 10240 NT_STATUS_OK
ReadX 12009 3821 16384 16384 NT_STATUS_OK
ReadX 12009 3891 935 935 NT_STATUS_OK
ReadX 12009 4060 10240 10240 NT_STATUS_OK
ReadX 12009 4059 184 184 NT_STATUS_OK
ReadX 12009 256 184 184 NT_STATUS_OK
ReadX 12009 256 1026 1026 NT_STATUS_OK
ReadX 12009 3901 326 326 NT_STATUS_OK
ReadX 12009 3899 652 652 NT_STATUS_OK
ReadX 12009 256 2 2 NT_STATUS_OK
ReadX 12009 258 4948 4948 NT_STATUS_OK
Close 12009 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12024 NT_STATUS_OK
Close 12024 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12027 NT_STATUS_OK
WriteX 12027 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12027 258 NT_STATUS_OK
WriteX 12027 0 65536 65536 NT_STATUS_OK
WriteX 12027 65536 65536 65536 NT_STATUS_OK
WriteX 12027 131072 65536 65536 NT_STATUS_OK
WriteX 12027 196608 65536 65536 NT_STATUS_OK
WriteX 12027 262144 65536 65536 NT_STATUS_OK
WriteX 12027 327680 65536 65536 NT_STATUS_OK
WriteX 12027 393216 65536 65536 NT_STATUS_OK
WriteX 12027 458752 65536 65536 NT_STATUS_OK
WriteX 12027 524288 65536 65536 NT_STATUS_OK
WriteX 12027 589824 35257 35257 NT_STATUS_OK
Close 12027 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12029 NT_STATUS_OK
Close 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12032 NT_STATUS_OK
WriteX 12032 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12032 258 NT_STATUS_OK
WriteX 12032 0 65536 65536 NT_STATUS_OK
WriteX 12032 65536 65536 65536 NT_STATUS_OK
WriteX 12032 131072 65536 65536 NT_STATUS_OK
WriteX 12032 196608 65536 65536 NT_STATUS_OK
WriteX 12032 262144 65536 65536 NT_STATUS_OK
WriteX 12032 327680 65536 65536 NT_STATUS_OK
WriteX 12032 393216 65536 65536 NT_STATUS_OK
WriteX 12032 458752 65536 65536 NT_STATUS_OK
WriteX 12032 524288 65536 65536 NT_STATUS_OK
WriteX 12032 589824 57598 57598 NT_STATUS_OK
Close 12032 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12034 NT_STATUS_OK
WriteX 12034 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12034 258 NT_STATUS_OK
WriteX 12034 0 12543 12543 NT_STATUS_OK
Flush 12034 NT_STATUS_OK
Close 12034 NT_STATUS_OK
Close 12018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12036 NT_STATUS_OK
Close 12036 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12038 NT_STATUS_OK
ReadX 12038 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12039 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12040 NT_STATUS_OK
QUERY_FILE_INFORMATION 12040 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12040 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12040 1005 NT_STATUS_OK
ReadX 12040 1938 24 24 NT_STATUS_OK
ReadX 12040 1920 276 276 NT_STATUS_OK
ReadX 12040 1918 14 14 NT_STATUS_OK
ReadX 12040 1918 7 7 NT_STATUS_OK
ReadX 12040 1919 12 12 NT_STATUS_OK
ReadX 12040 1919 8 8 NT_STATUS_OK
ReadX 12040 1917 15 15 NT_STATUS_OK
ReadX 12040 0 16 16 NT_STATUS_OK
ReadX 12040 16 2048 2048 NT_STATUS_OK
ReadX 12040 2064 2048 2048 NT_STATUS_OK
ReadX 12040 257 2048 2048 NT_STATUS_OK
ReadX 12040 385 2048 2048 NT_STATUS_OK
ReadX 12040 513 2048 2048 NT_STATUS_OK
ReadX 12040 641 2048 2048 NT_STATUS_OK
ReadX 12040 769 2048 2048 NT_STATUS_OK
ReadX 12040 897 2048 2048 NT_STATUS_OK
ReadX 12040 1025 2048 2048 NT_STATUS_OK
ReadX 12040 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12042 NT_STATUS_OK
Close 12042 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12045 NT_STATUS_OK
WriteX 12045 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12045 258 NT_STATUS_OK
WriteX 12045 0 11588 11588 NT_STATUS_OK
Flush 12045 NT_STATUS_OK
Close 12045 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12046 NT_STATUS_OK
Close 12046 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12048 NT_STATUS_OK
ReadX 12048 0 4096 4096 NT_STATUS_OK
Close 12040 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12050 NT_STATUS_OK
WriteX 12050 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12050 258 NT_STATUS_OK
WriteX 12050 0 11615 11615 NT_STATUS_OK
Flush 12050 NT_STATUS_OK
Close 12050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12052 NT_STATUS_OK
Close 12052 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12054 NT_STATUS_OK
ReadX 12054 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12056 NT_STATUS_OK
Close 12056 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12059 NT_STATUS_OK
WriteX 12059 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12059 258 NT_STATUS_OK
WriteX 12059 0 65536 65536 NT_STATUS_OK
WriteX 12059 65536 16050 16050 NT_STATUS_OK
Close 12059 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12039 1939 64 64 NT_STATUS_OK
ReadX 12039 128 248 248 NT_STATUS_OK
ReadX 12039 128 568 568 NT_STATUS_OK
ReadX 12039 3872 1536 1536 NT_STATUS_OK
ReadX 12039 3456 2560 2560 NT_STATUS_OK
ReadX 12039 3136 512 512 NT_STATUS_OK
ReadX 12039 2880 4096 4096 NT_STATUS_OK
ReadX 12039 3264 3072 3072 NT_STATUS_OK
ReadX 12039 320 4096 4096 NT_STATUS_OK
ReadX 12039 1024 4096 4096 NT_STATUS_OK
ReadX 12039 3616 4096 4096 NT_STATUS_OK
ReadX 12039 1939 64 64 NT_STATUS_OK
ReadX 12039 128 248 248 NT_STATUS_OK
ReadX 12039 128 608 608 NT_STATUS_OK
ReadX 12039 2858 1024 1024 NT_STATUS_OK
ReadX 12039 2810 4096 4096 NT_STATUS_OK
ReadX 12039 2826 4096 4096 NT_STATUS_OK
ReadX 12039 2580 2048 2048 NT_STATUS_OK
ReadX 12039 2800 2560 2560 NT_STATUS_OK
ReadX 12039 2100 4096 4096 NT_STATUS_OK
ReadX 12039 2084 4096 4096 NT_STATUS_OK
ReadX 12039 868 4096 4096 NT_STATUS_OK
ReadX 12039 2324 4096 4096 NT_STATUS_OK
ReadX 12039 884 4096 4096 NT_STATUS_OK
ReadX 12039 2604 1024 1024 NT_STATUS_OK
ReadX 12039 580 4096 4096 NT_STATUS_OK
ReadX 12039 596 4096 4096 NT_STATUS_OK
ReadX 12039 2752 4096 4096 NT_STATUS_OK
ReadX 12039 2842 1024 1024 NT_STATUS_OK
ReadX 12039 660 4096 4096 NT_STATUS_OK
ReadX 12039 2720 4096 4096 NT_STATUS_OK
ReadX 12039 2736 4096 4096 NT_STATUS_OK
ReadX 12039 628 4096 4096 NT_STATUS_OK
ReadX 12039 2704 4096 4096 NT_STATUS_OK
ReadX 12039 1556 4096 4096 NT_STATUS_OK
ReadX 12039 576 4096 4096 NT_STATUS_OK
ReadX 12039 3168 1536 1536 NT_STATUS_OK
ReadX 12039 832 4096 4096 NT_STATUS_OK
ReadX 12039 1088 4096 4096 NT_STATUS_OK
ReadX 12039 1344 4096 4096 NT_STATUS_OK
ReadX 12039 1600 4096 4096 NT_STATUS_OK
ReadX 12039 1856 4096 4096 NT_STATUS_OK
ReadX 12039 2112 4096 4096 NT_STATUS_OK
ReadX 12039 1892 4096 4096 NT_STATUS_OK
ReadX 12039 820 4096 4096 NT_STATUS_OK
ReadX 12039 788 4096 4096 NT_STATUS_OK
ReadX 12039 1604 4096 4096 NT_STATUS_OK
ReadX 12039 3648 4096 4096 NT_STATUS_OK
ReadX 12039 2608 4096 4096 NT_STATUS_OK
ReadX 12039 548 4096 4096 NT_STATUS_OK
ReadX 12039 740 4096 4096 NT_STATUS_OK
ReadX 12039 1344 4096 4096 NT_STATUS_OK
ReadX 12039 3392 4096 4096 NT_STATUS_OK
ReadX 12039 3904 4096 4096 NT_STATUS_OK
ReadX 12039 644 4096 4096 NT_STATUS_OK
ReadX 12039 676 4096 4096 NT_STATUS_OK
ReadX 12039 2688 4096 4096 NT_STATUS_OK
ReadX 12039 320 4096 4096 NT_STATUS_OK
ReadX 12039 900 4096 4096 NT_STATUS_OK
ReadX 12039 1908 4096 4096 NT_STATUS_OK
ReadX 12039 852 4096 4096 NT_STATUS_OK
ReadX 12039 724 4096 4096 NT_STATUS_OK
ReadX 12039 2292 4096 4096 NT_STATUS_OK
ReadX 12039 612 4096 4096 NT_STATUS_OK
ReadX 12039 388 4096 4096 NT_STATUS_OK
ReadX 12039 2368 4096 4096 NT_STATUS_OK
ReadX 12039 2624 4096 4096 NT_STATUS_OK
ReadX 12039 500 4096 4096 NT_STATUS_OK
ReadX 12039 356 4096 4096 NT_STATUS_OK
ReadX 12039 1024 4096 4096 NT_STATUS_OK
ReadX 12039 576 4096 4096 NT_STATUS_OK
ReadX 12039 340 4096 4096 NT_STATUS_OK
ReadX 12039 420 4096 4096 NT_STATUS_OK
ReadX 12039 1600 4096 4096 NT_STATUS_OK
ReadX 12039 404 4096 4096 NT_STATUS_OK
ReadX 12039 1428 4096 4096 NT_STATUS_OK
ReadX 12039 2656 4096 4096 NT_STATUS_OK
ReadX 12039 2624 4096 4096 NT_STATUS_OK
ReadX 12039 452 4096 4096 NT_STATUS_OK
ReadX 12039 692 4096 4096 NT_STATUS_OK
ReadX 12039 564 4096 4096 NT_STATUS_OK
ReadX 12039 372 4096 4096 NT_STATUS_OK
ReadX 12039 468 4096 4096 NT_STATUS_OK
ReadX 12039 484 4096 4096 NT_STATUS_OK
ReadX 12039 1088 4096 4096 NT_STATUS_OK
ReadX 12039 1924 4096 4096 NT_STATUS_OK
ReadX 12039 2768 4096 4096 NT_STATUS_OK
ReadX 12039 832 4096 4096 NT_STATUS_OK
ReadX 12039 836 4096 4096 NT_STATUS_OK
ReadX 12039 1856 4096 4096 NT_STATUS_OK
ReadX 12039 2640 4096 4096 NT_STATUS_OK
ReadX 12039 436 4096 4096 NT_STATUS_OK
ReadX 12039 1828 4096 4096 NT_STATUS_OK
ReadX 12039 804 4096 4096 NT_STATUS_OK
ReadX 12039 1860 4096 4096 NT_STATUS_OK
ReadX 12039 1812 4096 4096 NT_STATUS_OK
ReadX 12039 756 4096 4096 NT_STATUS_OK
ReadX 12039 1636 4096 4096 NT_STATUS_OK
ReadX 12039 772 4096 4096 NT_STATUS_OK
ReadX 12039 2036 4096 4096 NT_STATUS_OK
ReadX 12039 1220 4096 4096 NT_STATUS_OK
ReadX 12039 1652 4096 4096 NT_STATUS_OK
ReadX 12039 2588 4096 4096 NT_STATUS_OK
ReadX 12039 916 4096 4096 NT_STATUS_OK
ReadX 12039 260 4096 4096 NT_STATUS_OK
ReadX 12039 932 4096 4096 NT_STATUS_OK
ReadX 12039 2624 4096 4096 NT_STATUS_OK
ReadX 12039 308 4096 4096 NT_STATUS_OK
ReadX 12039 292 4096 4096 NT_STATUS_OK
ReadX 12039 1140 4096 4096 NT_STATUS_OK
ReadX 12039 276 4096 4096 NT_STATUS_OK
ReadX 12039 2020 4096 4096 NT_STATUS_OK
ReadX 12039 2880 4096 4096 NT_STATUS_OK
ReadX 12039 516 4096 4096 NT_STATUS_OK
ReadX 12039 1844 4096 4096 NT_STATUS_OK
ReadX 12039 1124 4096 4096 NT_STATUS_OK
ReadX 12039 3136 4096 4096 NT_STATUS_OK
ReadX 12039 324 4096 4096 NT_STATUS_OK
ReadX 12039 1156 4096 4096 NT_STATUS_OK
ReadX 12039 1172 4096 4096 NT_STATUS_OK
ReadX 12039 2112 4096 4096 NT_STATUS_OK
ReadX 12039 2368 4096 4096 NT_STATUS_OK
ReadX 12039 964 4096 4096 NT_STATUS_OK
ReadX 12039 980 4096 4096 NT_STATUS_OK
ReadX 12039 1012 4096 4096 NT_STATUS_OK
ReadX 12039 532 4096 4096 NT_STATUS_OK
ReadX 12039 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12039 1620 4096 4096 NT_STATUS_OK
ReadX 12039 1604 4096 4096 NT_STATUS_OK
ReadX 12039 2116 4096 4096 NT_STATUS_OK
ReadX 12039 2132 4096 4096 NT_STATUS_OK
ReadX 12039 2148 4096 4096 NT_STATUS_OK
ReadX 12039 2276 4096 4096 NT_STATUS_OK
ReadX 12039 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12061 NT_STATUS_OK
Close 12061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12064 NT_STATUS_OK
QUERY_FILE_INFORMATION 12019 1004 NT_STATUS_OK
Close 12019 NT_STATUS_OK
WriteX 12064 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12064 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12021 1004 NT_STATUS_OK
Close 12021 NT_STATUS_OK
WriteX 12064 0 65536 65536 NT_STATUS_OK
WriteX 12064 65536 64850 64850 NT_STATUS_OK
Close 12064 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12066 NT_STATUS_OK
WriteX 12066 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12066 258 NT_STATUS_OK
ReadX 12039 2068 4096 4096 NT_STATUS_OK
ReadX 12039 1588 4096 4096 NT_STATUS_OK
ReadX 12039 1572 4096 4096 NT_STATUS_OK
WriteX 12066 0 18630 18630 NT_STATUS_OK
Flush 12066 NT_STATUS_OK
Close 12066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12054 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12068 NT_STATUS_OK
Close 12068 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12070 NT_STATUS_OK
ReadX 12070 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12039 612 4096 4096 NT_STATUS_OK
ReadX 12039 564 4096 4096 NT_STATUS_OK
ReadX 12039 1876 4096 4096 NT_STATUS_OK
ReadX 12039 628 4096 4096 NT_STATUS_OK
ReadX 12039 740 4096 4096 NT_STATUS_OK
ReadX 12039 724 4096 4096 NT_STATUS_OK
ReadX 12039 644 4096 4096 NT_STATUS_OK
ReadX 12039 2324 4096 4096 NT_STATUS_OK
ReadX 12039 660 4096 4096 NT_STATUS_OK
ReadX 12039 852 4096 4096 NT_STATUS_OK
ReadX 12039 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12039 2368 4096 4096 NT_STATUS_OK
ReadX 12039 1024 4096 4096 NT_STATUS_OK
ReadX 12039 320 4096 4096 NT_STATUS_OK
ReadX 12039 580 4096 4096 NT_STATUS_OK
ReadX 12039 3136 512 512 NT_STATUS_OK
ReadX 12039 2880 4096 4096 NT_STATUS_OK
Close 12039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12071 NT_STATUS_OK
ReadX 12071 61440 4096 4096 NT_STATUS_OK
ReadX 12071 126976 4096 4096 NT_STATUS_OK
WriteX 12071 0 65536 65536 NT_STATUS_OK
WriteX 12071 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12072 NT_STATUS_OK
ReadX 12072 61440 4096 4096 NT_STATUS_OK
ReadX 12072 126976 4096 4096 NT_STATUS_OK
ReadX 12072 192512 4096 4096 NT_STATUS_OK
ReadX 12072 258048 4096 4096 NT_STATUS_OK
WriteX 12072 0 65536 65536 NT_STATUS_OK
WriteX 12072 65536 65536 65536 NT_STATUS_OK
WriteX 12072 131072 65536 65536 NT_STATUS_OK
WriteX 12072 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12073 NT_STATUS_OK
ReadX 12073 61440 4096 4096 NT_STATUS_OK
ReadX 12073 126976 4096 4096 NT_STATUS_OK
ReadX 12073 192512 4096 4096 NT_STATUS_OK
ReadX 12073 258048 4096 4096 NT_STATUS_OK
ReadX 12073 323584 4096 4096 NT_STATUS_OK
ReadX 12073 389120 4096 4096 NT_STATUS_OK
ReadX 12073 454656 4096 4096 NT_STATUS_OK
ReadX 12073 520192 4096 4096 NT_STATUS_OK
WriteX 12073 0 65536 65536 NT_STATUS_OK
WriteX 12073 65536 65536 65536 NT_STATUS_OK
WriteX 12073 131072 65536 65536 NT_STATUS_OK
WriteX 12073 196608 65536 65536 NT_STATUS_OK
WriteX 12073 262144 65536 65536 NT_STATUS_OK
WriteX 12073 327680 65536 65536 NT_STATUS_OK
WriteX 12073 393216 65536 65536 NT_STATUS_OK
WriteX 12073 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12074 NT_STATUS_OK
ReadX 12074 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12075 NT_STATUS_OK
Close 12075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12076 NT_STATUS_OK
WriteX 12076 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12076 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12074 0 8192 8192 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12074 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12074 0 8192 8192 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12074 0 8192 8192 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12074 0 8192 8192 NT_STATUS_OK
Flush 12074 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12078 NT_STATUS_OK
Close 12078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12070 NT_STATUS_OK
Close 12038 NT_STATUS_OK
Close 12071 NT_STATUS_OK
Close 12072 NT_STATUS_OK
Close 12073 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12081 NT_STATUS_OK
WriteX 12081 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12081 258 NT_STATUS_OK
WriteX 12081 0 62591 62591 NT_STATUS_OK
Close 12081 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12083 NT_STATUS_OK
Close 12083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12086 NT_STATUS_OK
WriteX 12086 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12086 258 NT_STATUS_OK
WriteX 12086 0 10845 10845 NT_STATUS_OK
Close 12086 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12088 NT_STATUS_OK
Close 12088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12091 NT_STATUS_OK
WriteX 12091 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12091 258 NT_STATUS_OK
WriteX 12091 0 30118 30118 NT_STATUS_OK
Close 12091 NT_STATUS_OK
WriteX 12074 0 4096 4096 NT_STATUS_OK
WriteX 12076 0 64 64 NT_STATUS_OK
Close 12076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12074 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12093 NT_STATUS_OK
ReadX 12093 0 61440 61440 NT_STATUS_OK
ReadX 12093 61440 4096 4096 NT_STATUS_OK
ReadX 12093 65536 61440 61440 NT_STATUS_OK
ReadX 12093 126976 4096 4096 NT_STATUS_OK
ReadX 12093 131072 61440 61440 NT_STATUS_OK
ReadX 12093 192512 4096 4096 NT_STATUS_OK
ReadX 12093 196608 61440 61440 NT_STATUS_OK
ReadX 12093 258048 4096 4096 NT_STATUS_OK
ReadX 12093 262144 61440 61440 NT_STATUS_OK
ReadX 12093 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12094 NT_STATUS_OK
ReadX 12094 0 61440 61440 NT_STATUS_OK
ReadX 12094 61440 4096 4096 NT_STATUS_OK
ReadX 12094 65536 61440 61440 NT_STATUS_OK
ReadX 12094 126976 4096 4096 NT_STATUS_OK
ReadX 12094 131072 61440 61440 NT_STATUS_OK
ReadX 12094 192512 4096 4096 NT_STATUS_OK
ReadX 12094 196608 61440 61440 NT_STATUS_OK
ReadX 12094 258048 4096 4096 NT_STATUS_OK
ReadX 12094 262144 61440 61440 NT_STATUS_OK
ReadX 12094 323584 4096 4096 NT_STATUS_OK
ReadX 12094 327680 61440 61440 NT_STATUS_OK
ReadX 12094 389120 4096 4096 NT_STATUS_OK
ReadX 12094 393216 61440 61440 NT_STATUS_OK
ReadX 12094 454656 4096 4096 NT_STATUS_OK
ReadX 12094 458752 61440 61440 NT_STATUS_OK
ReadX 12094 520192 4096 4096 NT_STATUS_OK
ReadX 12094 524288 61440 61440 NT_STATUS_OK
ReadX 12094 585728 4096 4096 NT_STATUS_OK
ReadX 12094 589824 61440 61440 NT_STATUS_OK
ReadX 12094 651264 4096 4096 NT_STATUS_OK
ReadX 12094 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12095 NT_STATUS_OK
ReadX 12095 0 61440 61440 NT_STATUS_OK
ReadX 12095 61440 4096 4096 NT_STATUS_OK
ReadX 12095 65536 61440 61440 NT_STATUS_OK
ReadX 12095 126976 4096 4096 NT_STATUS_OK
ReadX 12095 131072 61440 61440 NT_STATUS_OK
ReadX 12095 192512 4096 4096 NT_STATUS_OK
ReadX 12095 196608 61440 61440 NT_STATUS_OK
ReadX 12095 258048 4096 4096 NT_STATUS_OK
ReadX 12095 262144 61440 61440 NT_STATUS_OK
ReadX 12095 323584 4096 4096 NT_STATUS_OK
ReadX 12095 327680 61440 61440 NT_STATUS_OK
ReadX 12095 389120 4096 4096 NT_STATUS_OK
ReadX 12095 393216 61440 61440 NT_STATUS_OK
ReadX 12095 454656 4096 4096 NT_STATUS_OK
ReadX 12095 458752 61440 61440 NT_STATUS_OK
ReadX 12095 520192 4096 4096 NT_STATUS_OK
ReadX 12095 524288 61440 61440 NT_STATUS_OK
ReadX 12095 585728 4096 4096 NT_STATUS_OK
ReadX 12095 589824 61440 61440 NT_STATUS_OK
ReadX 12095 651264 4096 4096 NT_STATUS_OK
ReadX 12095 655360 61440 61440 NT_STATUS_OK
ReadX 12095 716800 4096 4096 NT_STATUS_OK
ReadX 12095 720896 61440 61440 NT_STATUS_OK
ReadX 12095 782336 4096 4096 NT_STATUS_OK
ReadX 12095 786432 61440 61440 NT_STATUS_OK
ReadX 12095 847872 4096 4096 NT_STATUS_OK
ReadX 12095 851968 61440 61440 NT_STATUS_OK
ReadX 12095 913408 4096 4096 NT_STATUS_OK
ReadX 12095 917504 61440 61440 NT_STATUS_OK
ReadX 12095 978944 4096 4096 NT_STATUS_OK
ReadX 12095 983040 61440 61440 NT_STATUS_OK
ReadX 12095 1044480 4096 4096 NT_STATUS_OK
ReadX 12095 1048576 61440 61440 NT_STATUS_OK
ReadX 12095 1110016 4096 4096 NT_STATUS_OK
ReadX 12095 1114112 61440 61440 NT_STATUS_OK
ReadX 12095 1175552 4096 4096 NT_STATUS_OK
ReadX 12095 1179648 61440 61440 NT_STATUS_OK
ReadX 12095 1241088 4096 4096 NT_STATUS_OK
ReadX 12095 1245184 61440 61440 NT_STATUS_OK
ReadX 12095 1306624 4096 4096 NT_STATUS_OK
ReadX 12095 1310720 61440 61440 NT_STATUS_OK
ReadX 12095 1372160 4096 4096 NT_STATUS_OK
ReadX 12095 1376256 61440 61440 NT_STATUS_OK
ReadX 12095 1437696 4096 4096 NT_STATUS_OK
ReadX 12095 1441792 61440 61440 NT_STATUS_OK
ReadX 12095 1503232 4096 4096 NT_STATUS_OK
ReadX 12095 1507328 61440 61440 NT_STATUS_OK
ReadX 12095 1568768 4096 4096 NT_STATUS_OK
ReadX 12095 1572864 61440 61440 NT_STATUS_OK
ReadX 12095 1634304 4096 4096 NT_STATUS_OK
ReadX 12095 1638400 61440 61440 NT_STATUS_OK
ReadX 12095 1699840 4096 4096 NT_STATUS_OK
ReadX 12095 1703936 61440 61440 NT_STATUS_OK
ReadX 12095 1765376 4096 4096 NT_STATUS_OK
ReadX 12095 1769472 61440 61440 NT_STATUS_OK
ReadX 12095 1830912 4096 4096 NT_STATUS_OK
ReadX 12095 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12093 NT_STATUS_OK
Close 12094 NT_STATUS_OK
Close 12095 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12098 NT_STATUS_OK
ReadX 12098 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12100 NT_STATUS_OK
ReadX 12100 0 4096 4096 NT_STATUS_OK
ReadX 12100 4096 4096 4096 NT_STATUS_OK
ReadX 12100 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12101 NT_STATUS_OK
Close 12101 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12098 NT_STATUS_OK
Close 12099 NT_STATUS_OK
Close 12100 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12103 NT_STATUS_OK
ReadX 12103 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12104 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12104 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12105 NT_STATUS_OK
Close 12105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12103 NT_STATUS_OK
Close 12104 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12107 NT_STATUS_OK
ReadX 12107 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12108 NT_STATUS_OK
ReadX 12108 0 8192 8192 NT_STATUS_OK
ReadX 12108 8192 8192 8192 NT_STATUS_OK
ReadX 12108 16384 8192 8192 NT_STATUS_OK
ReadX 12108 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12110 NT_STATUS_OK
Close 12110 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12108 NT_STATUS_OK
Close 12107 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12113 NT_STATUS_OK
WriteX 12113 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12113 258 NT_STATUS_OK
WriteX 12113 0 10438 10438 NT_STATUS_OK
Close 12113 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12114 NT_STATUS_OK
Close 12114 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12115 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12117 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12118 NT_STATUS_OK
Close 12118 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12119 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12120 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12121 NT_STATUS_OK
Close 12121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12122 NT_STATUS_OK
ReadX 12122 0 4096 4096 NT_STATUS_OK
ReadX 12122 4096 4096 4096 NT_STATUS_OK
ReadX 12122 8192 4096 4096 NT_STATUS_OK
ReadX 12122 12288 8192 8192 NT_STATUS_OK
ReadX 12122 20480 8192 8192 NT_STATUS_OK
ReadX 12122 28672 8192 8192 NT_STATUS_OK
ReadX 12122 36864 8192 8192 NT_STATUS_OK
ReadX 12122 45056 8192 8192 NT_STATUS_OK
ReadX 12122 53248 8192 8192 NT_STATUS_OK
ReadX 12122 61440 8192 8192 NT_STATUS_OK
ReadX 12122 69632 8192 8192 NT_STATUS_OK
ReadX 12122 77824 8192 8192 NT_STATUS_OK
ReadX 12122 86016 8192 8192 NT_STATUS_OK
ReadX 12122 94208 8192 8192 NT_STATUS_OK
ReadX 12122 102400 8192 8192 NT_STATUS_OK
ReadX 12122 110592 8192 8192 NT_STATUS_OK
ReadX 12122 118784 8192 8192 NT_STATUS_OK
ReadX 12122 126976 8192 8192 NT_STATUS_OK
ReadX 12122 135168 8192 8192 NT_STATUS_OK
ReadX 12122 143360 8192 8192 NT_STATUS_OK
ReadX 12122 151552 8192 8192 NT_STATUS_OK
ReadX 12122 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12123 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12122 NT_STATUS_OK
Close 12115 NT_STATUS_OK
Close 12117 NT_STATUS_OK
Close 12119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12124 NT_STATUS_OK
Close 12124 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12127 NT_STATUS_OK
WriteX 12127 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12127 258 NT_STATUS_OK
WriteX 12127 0 28489 28489 NT_STATUS_OK
Close 12127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12128 NT_STATUS_OK
Close 12128 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12130 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12130 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12131 NT_STATUS_OK
Close 12131 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12130 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12133 NT_STATUS_OK
ReadX 12133 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12134 NT_STATUS_OK
ReadX 12134 0 8192 8192 NT_STATUS_OK
ReadX 12134 8192 8192 8192 NT_STATUS_OK
ReadX 12134 16384 8192 8192 NT_STATUS_OK
ReadX 12134 24576 8192 8192 NT_STATUS_OK
ReadX 12134 32768 16384 16384 NT_STATUS_OK
ReadX 12134 49152 8192 8192 NT_STATUS_OK
ReadX 12134 57344 8192 8192 NT_STATUS_OK
ReadX 12134 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12136 NT_STATUS_OK
Close 12136 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12134 NT_STATUS_OK
Close 12133 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12139 NT_STATUS_OK
WriteX 12139 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12139 258 NT_STATUS_OK
WriteX 12139 0 29253 29253 NT_STATUS_OK
Close 12139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12140 NT_STATUS_OK
Close 12140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12141 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12143 NT_STATUS_OK
Close 12143 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12146 NT_STATUS_OK
WriteX 12146 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12146 258 NT_STATUS_OK
WriteX 12146 0 30183 30183 NT_STATUS_OK
Close 12146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12147 NT_STATUS_OK
Close 12147 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12149 NT_STATUS_OK
WriteX 12149 0 510 510 NT_STATUS_OK
WriteX 12149 510 512 512 NT_STATUS_OK
WriteX 12149 1022 510 510 NT_STATUS_OK
WriteX 12149 1532 510 510 NT_STATUS_OK
WriteX 12149 2042 168 168 NT_STATUS_OK
Close 12149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12150 NT_STATUS_OK
Close 12150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12152 NT_STATUS_OK
ReadX 12152 0 4096 4096 NT_STATUS_OK
WriteX 12152 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12153 NT_STATUS_OK
ReadX 12153 61440 4096 4096 NT_STATUS_OK
ReadX 12153 126976 4096 4096 NT_STATUS_OK
WriteX 12153 0 65536 65536 NT_STATUS_OK
WriteX 12153 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12154 NT_STATUS_OK
ReadX 12154 61440 4096 4096 NT_STATUS_OK
ReadX 12154 126976 4096 4096 NT_STATUS_OK
ReadX 12154 192512 4096 4096 NT_STATUS_OK
ReadX 12154 258048 4096 4096 NT_STATUS_OK
WriteX 12154 0 65536 65536 NT_STATUS_OK
WriteX 12154 65536 65536 65536 NT_STATUS_OK
WriteX 12154 131072 65536 65536 NT_STATUS_OK
WriteX 12154 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12155 NT_STATUS_OK
ReadX 12155 61440 4096 4096 NT_STATUS_OK
ReadX 12155 126976 4096 4096 NT_STATUS_OK
ReadX 12155 192512 4096 4096 NT_STATUS_OK
ReadX 12155 258048 4096 4096 NT_STATUS_OK
ReadX 12155 323584 4096 4096 NT_STATUS_OK
ReadX 12155 389120 4096 4096 NT_STATUS_OK
ReadX 12155 454656 4096 4096 NT_STATUS_OK
ReadX 12155 520192 4096 4096 NT_STATUS_OK
WriteX 12155 0 65536 65536 NT_STATUS_OK
WriteX 12155 65536 65536 65536 NT_STATUS_OK
WriteX 12155 131072 65536 65536 NT_STATUS_OK
WriteX 12155 196608 65536 65536 NT_STATUS_OK
WriteX 12155 262144 65536 65536 NT_STATUS_OK
WriteX 12155 327680 65536 65536 NT_STATUS_OK
WriteX 12155 393216 65536 65536 NT_STATUS_OK
WriteX 12155 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12156 NT_STATUS_OK
Close 12156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12152 NT_STATUS_OK
Close 12153 NT_STATUS_OK
Close 12154 NT_STATUS_OK
Close 12155 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12158 NT_STATUS_OK
Close 12158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12162 NT_STATUS_OK
Close 12162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12165 NT_STATUS_OK
Close 12165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12167 NT_STATUS_OK
Close 12167 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12171 NT_STATUS_OK
Close 12171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12174 NT_STATUS_OK
Close 12174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12180 NT_STATUS_OK
Close 12180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12185 NT_STATUS_OK
Close 12185 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12190 NT_STATUS_OK
Close 12190 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12195 NT_STATUS_OK
Close 12195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12200 NT_STATUS_OK
Close 12200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12205 NT_STATUS_OK
Close 12205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12210 NT_STATUS_OK
Close 12210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12215 NT_STATUS_OK
Close 12215 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12218 NT_STATUS_OK
Close 12218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12221 NT_STATUS_OK
Close 12221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12224 NT_STATUS_OK
WriteX 12224 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12224 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12224 0 65536 65536 NT_STATUS_OK
WriteX 12224 65536 65536 65536 NT_STATUS_OK
WriteX 12224 131072 65536 65536 NT_STATUS_OK
WriteX 12224 196608 65536 65536 NT_STATUS_OK
WriteX 12224 262144 26634 26634 NT_STATUS_OK
Close 12224 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12229 NT_STATUS_OK
Close 12229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12230 NT_STATUS_OK
Close 12230 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12231 NT_STATUS_OK
ReadX 12231 0 4096 4096 NT_STATUS_OK
Close 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12232 NT_STATUS_OK
ReadX 12232 0 4096 4096 NT_STATUS_OK
ReadX 12232 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12233 NT_STATUS_OK
Close 12233 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12232 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12237 NT_STATUS_OK
Close 12237 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12240 NT_STATUS_OK
Close 12240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12242 NT_STATUS_OK
Close 12242 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12246 NT_STATUS_OK
Close 12246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12249 NT_STATUS_OK
Close 12249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12251 NT_STATUS_OK
Close 12251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12255 NT_STATUS_OK
Close 12255 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12260 NT_STATUS_OK
Close 12260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12265 NT_STATUS_OK
Close 12265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12270 NT_STATUS_OK
Close 12270 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12275 NT_STATUS_OK
Close 12275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12284 NT_STATUS_OK
Close 12284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12289 NT_STATUS_OK
Close 12289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12294 NT_STATUS_OK
Close 12294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12299 NT_STATUS_OK
Close 12299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12309 NT_STATUS_OK
Close 12309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12311 NT_STATUS_OK
ReadX 12311 0 4096 4096 NT_STATUS_OK
Close 12311 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12312 NT_STATUS_OK
ReadX 12312 0 4096 4096 NT_STATUS_OK
Close 12312 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12313 NT_STATUS_OK
ReadX 12313 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12323 NT_STATUS_OK
Close 12323 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12324 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12324 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12325 NT_STATUS_OK
ReadX 12325 0 4096 4096 NT_STATUS_OK
Close 12325 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12326 NT_STATUS_OK
ReadX 12326 0 4096 4096 NT_STATUS_OK
Close 12326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12327 NT_STATUS_OK
ReadX 12327 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12313 NT_STATUS_OK
Close 12327 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12356 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12356 0 4096 4096 NT_STATUS_OK
Close 12356 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12357 NT_STATUS_OK
ReadX 12357 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12357 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 4096 4096 NT_STATUS_OK
ReadX 12358 4096 4096 4096 NT_STATUS_OK
ReadX 12358 8192 4096 4096 NT_STATUS_OK
ReadX 12358 12288 4096 4096 NT_STATUS_OK
ReadX 12358 16384 4096 4096 NT_STATUS_OK
ReadX 12358 20480 4096 4096 NT_STATUS_OK
ReadX 12358 24576 4096 4096 NT_STATUS_OK
ReadX 12358 28672 4096 4096 NT_STATUS_OK
ReadX 12358 32768 4096 4096 NT_STATUS_OK
ReadX 12358 36864 4096 4096 NT_STATUS_OK
ReadX 12358 40960 4096 4096 NT_STATUS_OK
ReadX 12358 45056 4096 4096 NT_STATUS_OK
ReadX 12358 49152 4096 4096 NT_STATUS_OK
ReadX 12358 53248 4096 4096 NT_STATUS_OK
ReadX 12358 57344 4096 4096 NT_STATUS_OK
ReadX 12358 61440 4096 4096 NT_STATUS_OK
ReadX 12358 65536 4096 4096 NT_STATUS_OK
ReadX 12358 69632 4096 4096 NT_STATUS_OK
ReadX 12358 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12358 1004 NT_STATUS_OK
WriteX 12358 0 4096 4096 NT_STATUS_OK
Close 12358 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12359 NT_STATUS_OK
SET_FILE_INFORMATION 12359 1004 NT_STATUS_OK
Close 12359 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12360 NT_STATUS_OK
ReadX 12360 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12361 NT_STATUS_OK
Close 12361 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12364 NT_STATUS_OK
WriteX 12364 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12364 258 NT_STATUS_OK
WriteX 12364 0 65536 65536 NT_STATUS_OK
WriteX 12364 65536 19979 19979 NT_STATUS_OK
Close 12364 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12365 NT_STATUS_OK
ReadX 12365 0 4096 4096 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
QUERY_FILE_INFORMATION 12365 1004 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
SET_FILE_INFORMATION 12365 1004 NT_STATUS_OK
WriteX 12365 0 4096 4096 NT_STATUS_OK
Flush 12365 NT_STATUS_OK
Close 12365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12366 NT_STATUS_OK
ReadX 12366 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12367 NT_STATUS_OK
ReadX 12367 0 4096 4096 NT_STATUS_OK
Close 12366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12368 NT_STATUS_OK
ReadX 12368 0 4096 4096 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 4096 4096 NT_STATUS_OK
Close 12369 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12370 NT_STATUS_OK
ReadX 12370 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12370 1004 NT_STATUS_OK
WriteX 12370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12371 NT_STATUS_OK
Close 12371 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12367 NT_STATUS_OK
Close 12370 NT_STATUS_OK
Close 12360 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12373 NT_STATUS_OK
Close 12373 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12376 NT_STATUS_OK
WriteX 12376 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12376 258 NT_STATUS_OK
WriteX 12376 0 65536 65536 NT_STATUS_OK
WriteX 12376 65536 17654 17654 NT_STATUS_OK
Close 12376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
QUERY_FILE_INFORMATION 12377 1004 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
SET_FILE_INFORMATION 12377 1004 NT_STATUS_OK
WriteX 12377 0 4096 4096 NT_STATUS_OK
Flush 12377 NT_STATUS_OK
Close 12377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12378 NT_STATUS_OK
SET_FILE_INFORMATION 12378 1004 NT_STATUS_OK
Close 12378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12380 NT_STATUS_OK
Close 12380 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12382 NT_STATUS_OK
ReadX 12382 0 4096 4096 NT_STATUS_OK
ReadX 12382 4096 4096 4096 NT_STATUS_OK
ReadX 12382 8192 4096 4096 NT_STATUS_OK
ReadX 12382 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12382 16384 4096 4096 NT_STATUS_OK
ReadX 12382 20480 4096 4096 NT_STATUS_OK
ReadX 12382 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12383 NT_STATUS_OK
ReadX 12383 0 4096 4096 NT_STATUS_OK
Close 12383 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12384 NT_STATUS_OK
ReadX 12384 0 4096 4096 NT_STATUS_OK
Close 12384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12385 NT_STATUS_OK
ReadX 12385 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12385 1004 NT_STATUS_OK
WriteX 12385 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12386 NT_STATUS_OK
Close 12386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12385 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12388 NT_STATUS_OK
Close 12388 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12391 NT_STATUS_OK
WriteX 12391 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12391 258 NT_STATUS_OK
WriteX 12391 0 65536 65536 NT_STATUS_OK
WriteX 12391 65536 19490 19490 NT_STATUS_OK
Close 12391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12392 NT_STATUS_OK
ReadX 12392 0 4096 4096 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
QUERY_FILE_INFORMATION 12392 1004 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
SET_FILE_INFORMATION 12392 1004 NT_STATUS_OK
WriteX 12392 0 4096 4096 NT_STATUS_OK
Flush 12392 NT_STATUS_OK
Close 12392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12393 NT_STATUS_OK
SET_FILE_INFORMATION 12393 1004 NT_STATUS_OK
Close 12393 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12394 NT_STATUS_OK
ReadX 12394 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12395 NT_STATUS_OK
Close 12395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12397 0 4096 4096 NT_STATUS_OK
Close 12397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12398 NT_STATUS_OK
ReadX 12398 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 4096 4096 NT_STATUS_OK
ReadX 12399 4096 4096 4096 NT_STATUS_OK
ReadX 12399 8192 4096 4096 NT_STATUS_OK
ReadX 12399 12288 4096 4096 NT_STATUS_OK
ReadX 12399 16384 4096 4096 NT_STATUS_OK
ReadX 12399 20480 4096 4096 NT_STATUS_OK
ReadX 12399 24576 4096 4096 NT_STATUS_OK
ReadX 12399 28672 4096 4096 NT_STATUS_OK
ReadX 12399 32768 4096 4096 NT_STATUS_OK
ReadX 12399 36864 4096 4096 NT_STATUS_OK
ReadX 12399 40960 4096 4096 NT_STATUS_OK
ReadX 12399 45056 4096 4096 NT_STATUS_OK
ReadX 12399 49152 4096 4096 NT_STATUS_OK
ReadX 12399 53248 4096 4096 NT_STATUS_OK
ReadX 12399 57344 4096 4096 NT_STATUS_OK
ReadX 12399 61440 4096 4096 NT_STATUS_OK
ReadX 12399 65536 4096 4096 NT_STATUS_OK
ReadX 12399 69632 4096 4096 NT_STATUS_OK
ReadX 12399 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12399 1004 NT_STATUS_OK
WriteX 12399 0 4096 4096 NT_STATUS_OK
Close 12399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12400 NT_STATUS_OK
SET_FILE_INFORMATION 12400 1004 NT_STATUS_OK
Close 12400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12401 NT_STATUS_OK
ReadX 12401 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12402 NT_STATUS_OK
Close 12402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12394 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12405 NT_STATUS_OK
WriteX 12405 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12405 258 NT_STATUS_OK
WriteX 12405 0 65536 65536 NT_STATUS_OK
WriteX 12405 65536 8866 8866 NT_STATUS_OK
Close 12405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 4096 4096 NT_STATUS_OK
WriteX 12406 0 4096 4096 NT_STATUS_OK
Flush 12406 NT_STATUS_OK
SET_FILE_INFORMATION 12406 1004 NT_STATUS_OK
WriteX 12406 0 4096 4096 NT_STATUS_OK
Flush 12406 NT_STATUS_OK
Close 12406 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12407 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
Close 12408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
Close 12409 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12410 1004 NT_STATUS_OK
WriteX 12410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12411 NT_STATUS_OK
Close 12411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12401 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12413 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12416 NT_STATUS_OK
WriteX 12416 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12416 258 NT_STATUS_OK
WriteX 12416 0 65536 65536 NT_STATUS_OK
WriteX 12416 65536 9298 9298 NT_STATUS_OK
Close 12416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
WriteX 12417 0 4096 4096 NT_STATUS_OK
Flush 12417 NT_STATUS_OK
SET_FILE_INFORMATION 12417 1004 NT_STATUS_OK
WriteX 12417 0 4096 4096 NT_STATUS_OK
Flush 12417 NT_STATUS_OK
Close 12417 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12418 NT_STATUS_OK
SET_FILE_INFORMATION 12418 1004 NT_STATUS_OK
Close 12418 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12419 NT_STATUS_OK
ReadX 12419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12420 NT_STATUS_OK
Close 12420 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12423 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12423 0 4096 4096 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12424 4096 4096 4096 NT_STATUS_OK
ReadX 12424 8192 4096 4096 NT_STATUS_OK
ReadX 12424 12288 4096 4096 NT_STATUS_OK
ReadX 12424 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12419 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12425 NT_STATUS_OK
ReadX 12425 0 4096 4096 NT_STATUS_OK
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12426 NT_STATUS_OK
ReadX 12426 0 4096 4096 NT_STATUS_OK
Close 12426 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12427 NT_STATUS_OK
ReadX 12427 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12427 1004 NT_STATUS_OK
WriteX 12427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12428 NT_STATUS_OK
Close 12428 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12424 NT_STATUS_OK
Close 12427 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12430 NT_STATUS_OK
Close 12430 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12433 NT_STATUS_OK
WriteX 12433 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12433 258 NT_STATUS_OK
WriteX 12433 0 65536 65536 NT_STATUS_OK
WriteX 12433 65536 11540 11540 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12434 NT_STATUS_OK
ReadX 12434 0 4096 4096 NT_STATUS_OK
WriteX 12434 0 4096 4096 NT_STATUS_OK
Flush 12434 NT_STATUS_OK
SET_FILE_INFORMATION 12434 1004 NT_STATUS_OK
WriteX 12434 0 4096 4096 NT_STATUS_OK
Flush 12434 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12435 NT_STATUS_OK
SET_FILE_INFORMATION 12435 1004 NT_STATUS_OK
Close 12435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12436 NT_STATUS_OK
ReadX 12436 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12437 NT_STATUS_OK
Close 12437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12439 NT_STATUS_OK
ReadX 12439 61440 4096 4096 NT_STATUS_OK
ReadX 12439 126976 4096 4096 NT_STATUS_OK
WriteX 12439 0 65536 65536 NT_STATUS_OK
WriteX 12439 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12440 NT_STATUS_OK
ReadX 12440 61440 4096 4096 NT_STATUS_OK
ReadX 12440 126976 4096 4096 NT_STATUS_OK
ReadX 12440 192512 4096 4096 NT_STATUS_OK
ReadX 12440 258048 4096 4096 NT_STATUS_OK
WriteX 12440 0 65536 65536 NT_STATUS_OK
WriteX 12440 65536 65536 65536 NT_STATUS_OK
WriteX 12440 131072 65536 65536 NT_STATUS_OK
WriteX 12440 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12441 NT_STATUS_OK
ReadX 12441 61440 4096 4096 NT_STATUS_OK
ReadX 12441 126976 4096 4096 NT_STATUS_OK
ReadX 12441 192512 4096 4096 NT_STATUS_OK
ReadX 12441 258048 4096 4096 NT_STATUS_OK
ReadX 12441 323584 4096 4096 NT_STATUS_OK
ReadX 12441 389120 4096 4096 NT_STATUS_OK
ReadX 12441 454656 4096 4096 NT_STATUS_OK
ReadX 12441 520192 4096 4096 NT_STATUS_OK
WriteX 12441 0 65536 65536 NT_STATUS_OK
WriteX 12441 65536 65536 65536 NT_STATUS_OK
WriteX 12441 131072 65536 65536 NT_STATUS_OK
WriteX 12441 196608 65536 65536 NT_STATUS_OK
WriteX 12441 262144 65536 65536 NT_STATUS_OK
WriteX 12441 327680 65536 65536 NT_STATUS_OK
WriteX 12441 393216 65536 65536 NT_STATUS_OK
WriteX 12441 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12442 NT_STATUS_OK
ReadX 12442 0 4096 4096 NT_STATUS_OK
ReadX 12442 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12443 NT_STATUS_OK
WriteX 12443 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12443 258 NT_STATUS_OK
WriteX 12443 0 53 53 NT_STATUS_OK
Close 12443 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12436 NT_STATUS_OK
Close 12382 NT_STATUS_OK
Close 12439 NT_STATUS_OK
Close 12440 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12442 8192 4096 4096 NT_STATUS_OK
ReadX 12442 12288 4096 4096 NT_STATUS_OK
WriteX 12446 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12446 258 NT_STATUS_OK
ReadX 12442 16384 4096 4096 NT_STATUS_OK
ReadX 12442 20480 4096 4096 NT_STATUS_OK
WriteX 12446 0 15360 15360 NT_STATUS_OK
Close 12446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12447 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12447 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12447 1004 NT_STATUS_OK
WriteX 12447 0 4096 4096 NT_STATUS_OK
Close 12447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12448 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12451 NT_STATUS_OK
Close 12451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12450 4096 4096 4096 NT_STATUS_OK
ReadX 12450 8192 4096 4096 NT_STATUS_OK
ReadX 12450 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
ReadX 12453 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 4096 4096 NT_STATUS_OK
ReadX 12454 4096 4096 4096 NT_STATUS_OK
ReadX 12454 8192 4096 4096 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Close 12454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12455 NT_STATUS_OK
WriteX 12455 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12455 258 NT_STATUS_OK
WriteX 12455 0 15360 15360 NT_STATUS_OK
Close 12455 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12456 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12456 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12450 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12442 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12457 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12460 NT_STATUS_OK
SET_FILE_INFORMATION 12460 1004 NT_STATUS_OK
Close 12460 NT_STATUS_OK
WriteX 12456 0 4096 4096 NT_STATUS_OK
Close 12456 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12461 NT_STATUS_OK
Close 12461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12463 NT_STATUS_OK
ReadX 12463 0 4096 4096 NT_STATUS_OK
ReadX 12463 4096 4096 4096 NT_STATUS_OK
ReadX 12463 8192 4096 4096 NT_STATUS_OK
ReadX 12463 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12463 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12463 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12464 NT_STATUS_OK
ReadX 12464 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12465 NT_STATUS_OK
WriteX 12465 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12465 258 NT_STATUS_OK
WriteX 12465 0 53 53 NT_STATUS_OK
Close 12465 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12466 NT_STATUS_OK
Close 12466 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12464 4096 4096 4096 NT_STATUS_OK
ReadX 12464 8192 4096 4096 NT_STATUS_OK
ReadX 12464 12288 4096 4096 NT_STATUS_OK
WriteX 12468 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12468 258 NT_STATUS_OK
WriteX 12468 0 12006 12006 NT_STATUS_OK
Close 12468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12469 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12469 1004 NT_STATUS_OK
WriteX 12469 0 4096 4096 NT_STATUS_OK
Close 12469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12470 NT_STATUS_OK
Close 12470 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12473 NT_STATUS_OK
Close 12473 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12472 4096 4096 4096 NT_STATUS_OK
ReadX 12472 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12475 NT_STATUS_OK
WriteX 12475 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12475 258 NT_STATUS_OK
WriteX 12475 0 11991 11991 NT_STATUS_OK
Close 12475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12476 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12476 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12477 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12479 NT_STATUS_OK
ReadX 12479 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12480 NT_STATUS_OK
SET_FILE_INFORMATION 12480 1004 NT_STATUS_OK
Close 12480 NT_STATUS_OK
WriteX 12476 0 4096 4096 NT_STATUS_OK
Close 12476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12481 NT_STATUS_OK
Close 12481 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12483 NT_STATUS_OK
ReadX 12483 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12484 NT_STATUS_OK
Close 12484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12483 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12483 1004 NT_STATUS_OK
ReadX 12483 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12483 1004 NT_STATUS_OK
WriteX 12483 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12483 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12483 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12483 1004 NT_STATUS_OK
Close 12459 NT_STATUS_OK
WriteX 12463 0 19054 19054 NT_STATUS_OK
WriteX 12483 0 12288 12288 NT_STATUS_OK
Close 12479 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12486 NT_STATUS_OK
Close 12486 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12463 NT_STATUS_OK
Close 12483 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12488 NT_STATUS_OK
Close 12488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12490 NT_STATUS_OK
ReadX 12490 0 61440 61440 NT_STATUS_OK
ReadX 12490 61440 4096 4096 NT_STATUS_OK
ReadX 12490 65536 61440 61440 NT_STATUS_OK
ReadX 12490 126976 4096 4096 NT_STATUS_OK
ReadX 12490 131072 61440 61440 NT_STATUS_OK
ReadX 12490 192512 4096 4096 NT_STATUS_OK
ReadX 12490 196608 61440 61440 NT_STATUS_OK
ReadX 12490 258048 4096 4096 NT_STATUS_OK
ReadX 12490 262144 61440 61440 NT_STATUS_OK
ReadX 12490 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12491 NT_STATUS_OK
ReadX 12491 0 61440 61440 NT_STATUS_OK
ReadX 12491 61440 4096 4096 NT_STATUS_OK
ReadX 12491 65536 61440 61440 NT_STATUS_OK
ReadX 12491 126976 4096 4096 NT_STATUS_OK
ReadX 12491 131072 61440 61440 NT_STATUS_OK
ReadX 12491 192512 4096 4096 NT_STATUS_OK
ReadX 12491 196608 61440 61440 NT_STATUS_OK
ReadX 12491 258048 4096 4096 NT_STATUS_OK
ReadX 12491 262144 61440 61440 NT_STATUS_OK
ReadX 12491 323584 4096 4096 NT_STATUS_OK
ReadX 12491 327680 61440 61440 NT_STATUS_OK
ReadX 12491 389120 4096 4096 NT_STATUS_OK
ReadX 12491 393216 61440 61440 NT_STATUS_OK
ReadX 12491 454656 4096 4096 NT_STATUS_OK
ReadX 12491 458752 61440 61440 NT_STATUS_OK
ReadX 12491 520192 4096 4096 NT_STATUS_OK
ReadX 12491 524288 61440 61440 NT_STATUS_OK
ReadX 12491 585728 4096 4096 NT_STATUS_OK
ReadX 12491 589824 61440 61440 NT_STATUS_OK
ReadX 12491 651264 4096 4096 NT_STATUS_OK
ReadX 12491 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12492 NT_STATUS_OK
ReadX 12492 0 61440 61440 NT_STATUS_OK
ReadX 12492 61440 4096 4096 NT_STATUS_OK
ReadX 12492 65536 61440 61440 NT_STATUS_OK
ReadX 12492 126976 4096 4096 NT_STATUS_OK
ReadX 12492 131072 61440 61440 NT_STATUS_OK
ReadX 12492 192512 4096 4096 NT_STATUS_OK
ReadX 12492 196608 61440 61440 NT_STATUS_OK
ReadX 12492 258048 4096 4096 NT_STATUS_OK
ReadX 12492 262144 61440 61440 NT_STATUS_OK
ReadX 12492 323584 4096 4096 NT_STATUS_OK
ReadX 12492 327680 61440 61440 NT_STATUS_OK
ReadX 12492 389120 4096 4096 NT_STATUS_OK
ReadX 12492 393216 61440 61440 NT_STATUS_OK
ReadX 12492 454656 4096 4096 NT_STATUS_OK
ReadX 12492 458752 61440 61440 NT_STATUS_OK
ReadX 12492 520192 4096 4096 NT_STATUS_OK
ReadX 12492 524288 61440 61440 NT_STATUS_OK
ReadX 12492 585728 4096 4096 NT_STATUS_OK
ReadX 12492 589824 61440 61440 NT_STATUS_OK
ReadX 12492 651264 4096 4096 NT_STATUS_OK
ReadX 12492 655360 61440 61440 NT_STATUS_OK
ReadX 12492 716800 4096 4096 NT_STATUS_OK
ReadX 12492 720896 61440 61440 NT_STATUS_OK
ReadX 12492 782336 4096 4096 NT_STATUS_OK
ReadX 12492 786432 61440 61440 NT_STATUS_OK
ReadX 12492 847872 4096 4096 NT_STATUS_OK
ReadX 12492 851968 61440 61440 NT_STATUS_OK
ReadX 12492 913408 4096 4096 NT_STATUS_OK
ReadX 12492 917504 61440 61440 NT_STATUS_OK
ReadX 12492 978944 4096 4096 NT_STATUS_OK
ReadX 12492 983040 61440 61440 NT_STATUS_OK
ReadX 12492 1044480 4096 4096 NT_STATUS_OK
ReadX 12492 1048576 61440 61440 NT_STATUS_OK
ReadX 12492 1110016 4096 4096 NT_STATUS_OK
ReadX 12492 1114112 61440 61440 NT_STATUS_OK
ReadX 12492 1175552 4096 4096 NT_STATUS_OK
ReadX 12492 1179648 61440 61440 NT_STATUS_OK
ReadX 12492 1241088 4096 4096 NT_STATUS_OK
ReadX 12492 1245184 61440 61440 NT_STATUS_OK
ReadX 12492 1306624 4096 4096 NT_STATUS_OK
ReadX 12492 1310720 61440 61440 NT_STATUS_OK
ReadX 12492 1372160 4096 4096 NT_STATUS_OK
ReadX 12492 1376256 61440 61440 NT_STATUS_OK
ReadX 12492 1437696 4096 4096 NT_STATUS_OK
ReadX 12492 1441792 61440 61440 NT_STATUS_OK
ReadX 12492 1503232 4096 4096 NT_STATUS_OK
ReadX 12492 1507328 61440 61440 NT_STATUS_OK
ReadX 12492 1568768 4096 4096 NT_STATUS_OK
ReadX 12492 1572864 61440 61440 NT_STATUS_OK
ReadX 12492 1634304 4096 4096 NT_STATUS_OK
ReadX 12492 1638400 61440 61440 NT_STATUS_OK
ReadX 12492 1699840 4096 4096 NT_STATUS_OK
ReadX 12492 1703936 61440 61440 NT_STATUS_OK
ReadX 12492 1765376 4096 4096 NT_STATUS_OK
ReadX 12492 1769472 61440 61440 NT_STATUS_OK
ReadX 12492 1830912 4096 4096 NT_STATUS_OK
ReadX 12492 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12494 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12494 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12495 NT_STATUS_OK
ReadX 12495 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12496 NT_STATUS_OK
ReadX 12496 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12497 NT_STATUS_OK
ReadX 12497 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12498 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12498 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12499 NT_STATUS_OK
QUERY_FILE_INFORMATION 12499 1004 NT_STATUS_OK
WriteX 12499 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12499 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12500 NT_STATUS_OK
Close 12500 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12501 NT_STATUS_OK
WriteX 12501 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12501 258 NT_STATUS_OK
WriteX 12501 0 491 491 NT_STATUS_OK
Close 12501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12502 NT_STATUS_OK
ReadX 12502 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12499 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12504 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12505 NT_STATUS_OK
WriteX 12505 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12505 258 NT_STATUS_OK
WriteX 12505 0 543 543 NT_STATUS_OK
Close 12505 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12506 NT_STATUS_OK
ReadX 12506 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12502 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12490 NT_STATUS_OK
Close 12491 NT_STATUS_OK
Close 12492 NT_STATUS_OK
Close 12506 NT_STATUS_OK
Close 12494 NT_STATUS_OK
Close 12495 NT_STATUS_OK
Close 12496 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12509 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12510 NT_STATUS_OK
ReadX 12510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12511 NT_STATUS_OK
ReadX 12511 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12512 NT_STATUS_OK
ReadX 12512 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12519 NT_STATUS_OK
QUERY_FILE_INFORMATION 12519 1004 NT_STATUS_OK
WriteX 12519 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12519 258 NT_STATUS_OK
WriteX 12519 0 2048 2048 NT_STATUS_OK
Close 12519 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
Flush 12520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12524 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12524 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12525 NT_STATUS_OK
WriteX 12525 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12525 258 NT_STATUS_OK
WriteX 12525 0 2048 2048 NT_STATUS_OK
Close 12525 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12530 NT_STATUS_OK
Close 12530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12531 NT_STATUS_OK
WriteX 12531 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12531 258 NT_STATUS_OK
WriteX 12531 0 2048 2048 NT_STATUS_OK
Close 12531 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 2048 2048 NT_STATUS_OK
ReadX 12510 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12526 0 4096 4096 NT_STATUS_OK
WriteX 12510 0 8192 8192 NT_STATUS_OK
WriteX 12511 0 4096 4096 NT_STATUS_OK
WriteX 12512 0 4096 4096 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12510 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12535 NT_STATUS_OK
ReadX 12535 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12536 NT_STATUS_OK
QUERY_FILE_INFORMATION 12536 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12535 NT_STATUS_OK
Close 12511 NT_STATUS_OK
Close 12512 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12510 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12539 NT_STATUS_OK
ReadX 12539 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12541 NT_STATUS_OK
ReadX 12541 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12543 NT_STATUS_OK
ReadX 12543 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12545 NT_STATUS_OK
ReadX 12545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12546 NT_STATUS_OK
ReadX 12546 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12547 NT_STATUS_OK
ReadX 12547 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12548 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12555 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12555 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12556 NT_STATUS_OK
QUERY_FILE_INFORMATION 12556 1004 NT_STATUS_OK
WriteX 12556 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12556 258 NT_STATUS_OK
WriteX 12556 0 2048 2048 NT_STATUS_OK
Close 12556 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12547 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12558 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12559 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12563 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12563 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12564 NT_STATUS_OK
QUERY_FILE_INFORMATION 12564 1004 NT_STATUS_OK
WriteX 12564 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12564 258 NT_STATUS_OK
WriteX 12564 0 2048 2048 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12565 NT_STATUS_OK
ReadX 12565 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12557 0 4096 4096 NT_STATUS_OK
Flush 12557 NT_STATUS_OK
WriteX 12565 0 4096 4096 NT_STATUS_OK
Flush 12565 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12557 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12565 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12559 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12566 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12567 NT_STATUS_OK
WriteX 12567 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12567 258 NT_STATUS_OK
WriteX 12567 0 4096 4096 NT_STATUS_OK
Close 12567 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12568 NT_STATUS_OK
ReadX 12568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12569 NT_STATUS_OK
Close 12569 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12570 NT_STATUS_OK
WriteX 12570 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12570 258 NT_STATUS_OK
WriteX 12570 0 4096 4096 NT_STATUS_OK
Close 12570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12571 NT_STATUS_OK
ReadX 12571 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12571 0 4096 4096 NT_STATUS_OK
Close 12568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12545 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12546 NT_STATUS_OK
Close 12539 NT_STATUS_OK
Close 12540 NT_STATUS_OK
Close 12543 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12541 NT_STATUS_OK
Close 12542 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12574 NT_STATUS_OK
Close 12574 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12576 NT_STATUS_OK
ReadX 12576 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12577 NT_STATUS_OK
Close 12577 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12578 NT_STATUS_OK
WriteX 12578 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12578 258 NT_STATUS_OK
WriteX 12578 0 2048 2048 NT_STATUS_OK
Close 12578 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12580 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12581 NT_STATUS_OK
ReadX 12581 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12582 NT_STATUS_OK
ReadX 12582 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12583 NT_STATUS_OK
ReadX 12583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12584 NT_STATUS_OK
ReadX 12584 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12585 NT_STATUS_OK
ReadX 12585 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12586 NT_STATUS_OK
ReadX 12586 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12587 NT_STATUS_OK
ReadX 12587 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12588 NT_STATUS_OK
ReadX 12588 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12589 NT_STATUS_OK
ReadX 12589 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12590 NT_STATUS_OK
ReadX 12590 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12591 NT_STATUS_OK
ReadX 12591 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12557 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12593 NT_STATUS_OK
QUERY_FILE_INFORMATION 12593 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12576 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Close 12591 NT_STATUS_OK
Close 12586 NT_STATUS_OK
Close 12587 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Close 12589 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Close 12592 NT_STATUS_OK
Close 12580 NT_STATUS_OK
Close 12581 NT_STATUS_OK
Close 12584 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Close 12582 NT_STATUS_OK
Close 12583 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12595 NT_STATUS_OK
QUERY_FILE_INFORMATION 12595 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12595 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12598 NT_STATUS_OK
ReadX 12598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12599 NT_STATUS_OK
ReadX 12599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12600 NT_STATUS_OK
ReadX 12600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12601 NT_STATUS_OK
ReadX 12601 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12603 NT_STATUS_OK
ReadX 12603 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12604 NT_STATUS_OK
ReadX 12604 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12605 NT_STATUS_OK
ReadX 12605 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12606 NT_STATUS_OK
ReadX 12606 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12607 NT_STATUS_OK
ReadX 12607 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12608 NT_STATUS_OK
ReadX 12608 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12609 NT_STATUS_OK
ReadX 12609 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12610 NT_STATUS_OK
ReadX 12610 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12614 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12614 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12615 NT_STATUS_OK
QUERY_FILE_INFORMATION 12615 1004 NT_STATUS_OK
WriteX 12615 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12615 258 NT_STATUS_OK
WriteX 12615 0 2048 2048 NT_STATUS_OK
Close 12615 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12616 NT_STATUS_OK
ReadX 12616 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12617 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12617 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12618 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12619 NT_STATUS_OK
ReadX 12619 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12620 NT_STATUS_OK
ReadX 12620 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12621 NT_STATUS_OK
ReadX 12621 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12622 NT_STATUS_OK
ReadX 12622 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12626 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12626 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12627 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 1004 NT_STATUS_OK
WriteX 12627 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12627 258 NT_STATUS_OK
WriteX 12627 0 2048 2048 NT_STATUS_OK
Close 12627 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12628 NT_STATUS_OK
ReadX 12628 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12603 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12629 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12634 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12635 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 1004 NT_STATUS_OK
WriteX 12635 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 258 NT_STATUS_OK
WriteX 12635 0 2048 2048 NT_STATUS_OK
Close 12635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12616 0 4096 4096 NT_STATUS_OK
Flush 12616 NT_STATUS_OK
WriteX 12628 0 4096 4096 NT_STATUS_OK
Flush 12628 NT_STATUS_OK
WriteX 12636 0 4096 4096 NT_STATUS_OK
Flush 12636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12616 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 12628 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12636 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12618 4096 16384 16384 NT_STATUS_OK
ReadX 12598 4096 16384 16384 NT_STATUS_OK
ReadX 12630 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12637 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12637 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 2048 2048 NT_STATUS_OK
WriteX 12638 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12616 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12639 NT_STATUS_OK
QUERY_FILE_INFORMATION 12639 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Close 12622 NT_STATUS_OK
Close 12610 NT_STATUS_OK
Close 12602 NT_STATUS_OK
Close 12618 NT_STATUS_OK
Close 12619 NT_STATUS_OK
Close 12620 NT_STATUS_OK
Close 12621 NT_STATUS_OK
Close 12609 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Close 12604 NT_STATUS_OK
Close 12607 NT_STATUS_OK
Close 12608 NT_STATUS_OK
Close 12605 NT_STATUS_OK
Close 12606 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12599 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Close 12601 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12641 NT_STATUS_OK
QUERY_FILE_INFORMATION 12641 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12641 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12636 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12643 NT_STATUS_OK
QUERY_FILE_INFORMATION 12643 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12643 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12645 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12646 NT_STATUS_OK
ReadX 12646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12647 NT_STATUS_OK
ReadX 12647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12649 NT_STATUS_OK
ReadX 12649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12650 NT_STATUS_OK
ReadX 12650 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12646 4096 16384 16384 NT_STATUS_OK
WriteX 12646 0 4096 4096 NT_STATUS_OK
WriteX 12647 0 4096 4096 NT_STATUS_OK
WriteX 12648 0 4096 4096 NT_STATUS_OK
WriteX 12649 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12652 NT_STATUS_OK
ReadX 12652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12653 NT_STATUS_OK
ReadX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12654 NT_STATUS_OK
ReadX 12654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12655 NT_STATUS_OK
ReadX 12655 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12656 NT_STATUS_OK
ReadX 12656 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12657 NT_STATUS_OK
ReadX 12657 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12658 NT_STATUS_OK
ReadX 12658 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12659 NT_STATUS_OK
ReadX 12659 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12660 NT_STATUS_OK
ReadX 12660 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12661 NT_STATUS_OK
ReadX 12661 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12662 NT_STATUS_OK
ReadX 12662 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12663 NT_STATUS_OK
ReadX 12663 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12664 NT_STATUS_OK
ReadX 12664 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12665 NT_STATUS_OK
ReadX 12665 0 8192 8192 NT_STATUS_OK
ReadX 12652 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12666 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12666 0 4096 4096 NT_STATUS_OK
ReadX 12666 4096 4096 4096 NT_STATUS_OK
ReadX 12666 8192 4096 4096 NT_STATUS_OK
WriteX 12652 0 4096 4096 NT_STATUS_OK
WriteX 12653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12667 0 4096 4096 NT_STATUS_OK
ReadX 12667 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12646 0 4096 4096 NT_STATUS_OK
WriteX 12647 0 4096 4096 NT_STATUS_OK
WriteX 12648 0 4096 4096 NT_STATUS_OK
WriteX 12649 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12671 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12672 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 1004 NT_STATUS_OK
WriteX 12672 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12672 258 NT_STATUS_OK
WriteX 12672 0 2048 2048 NT_STATUS_OK
Close 12672 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12673 NT_STATUS_OK
ReadX 12673 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12673 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12673 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12674 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12675 NT_STATUS_OK
ReadX 12675 0 4096 4096 NT_STATUS_OK
ReadX 12675 4096 4096 4096 NT_STATUS_OK
WriteX 12675 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12673 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12675 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12676 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12676 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12677 NT_STATUS_OK
ReadX 12677 0 4096 4096 NT_STATUS_OK
ReadX 12677 4096 4096 4096 NT_STATUS_OK
WriteX 12677 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12678 NT_STATUS_OK
QUERY_FILE_INFORMATION 12678 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12665 NT_STATUS_OK
Close 12650 NT_STATUS_OK
Close 12646 NT_STATUS_OK
Close 12647 NT_STATUS_OK
Close 12648 NT_STATUS_OK
Close 12649 NT_STATUS_OK
Close 12658 NT_STATUS_OK
Close 12663 NT_STATUS_OK
Close 12659 NT_STATUS_OK
Close 12660 NT_STATUS_OK
Close 12661 NT_STATUS_OK
Close 12662 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Close 12652 NT_STATUS_OK
Close 12653 NT_STATUS_OK
Close 12656 NT_STATUS_OK
Close 12657 NT_STATUS_OK
Close 12654 NT_STATUS_OK
Close 12655 NT_STATUS_OK
Close 12677 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Close 12667 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12680 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12680 0 4096 4096 NT_STATUS_OK
ReadX 12680 4096 4096 4096 NT_STATUS_OK
ReadX 12680 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12681 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12681 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12682 NT_STATUS_OK
ReadX 12682 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12683 NT_STATUS_OK
ReadX 12683 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12684 NT_STATUS_OK
ReadX 12684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12685 NT_STATUS_OK
ReadX 12685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12686 NT_STATUS_OK
ReadX 12686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12687 NT_STATUS_OK
ReadX 12687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12688 NT_STATUS_OK
ReadX 12688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12689 NT_STATUS_OK
ReadX 12689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12690 NT_STATUS_OK
ReadX 12690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12691 NT_STATUS_OK
ReadX 12691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12692 NT_STATUS_OK
ReadX 12692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12693 NT_STATUS_OK
ReadX 12693 0 4096 4096 NT_STATUS_OK
ReadX 12681 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12698 NT_STATUS_OK
QUERY_FILE_INFORMATION 12698 1004 NT_STATUS_OK
WriteX 12698 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12698 258 NT_STATUS_OK
WriteX 12698 0 2048 2048 NT_STATUS_OK
Close 12698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12699 NT_STATUS_OK
ReadX 12699 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12699 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12703 NT_STATUS_OK
Close 12703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12704 NT_STATUS_OK
QUERY_FILE_INFORMATION 12704 1004 NT_STATUS_OK
WriteX 12704 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12704 258 NT_STATUS_OK
WriteX 12704 0 2048 2048 NT_STATUS_OK
Close 12704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12705 NT_STATUS_OK
ReadX 12705 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12705 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12688 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12706 NT_STATUS_OK
QUERY_FILE_INFORMATION 12706 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12692 NT_STATUS_OK
Close 12687 NT_STATUS_OK
Close 12693 NT_STATUS_OK
Close 12681 NT_STATUS_OK
Close 12682 NT_STATUS_OK
Close 12685 NT_STATUS_OK
Close 12686 NT_STATUS_OK
Close 12683 NT_STATUS_OK
Close 12684 NT_STATUS_OK
Close 12688 NT_STATUS_OK
Close 12689 NT_STATUS_OK
Close 12690 NT_STATUS_OK
Close 12691 NT_STATUS_OK
Close 12680 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12708 NT_STATUS_OK
QUERY_FILE_INFORMATION 12708 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12710 NT_STATUS_OK
ReadX 12710 61440 4096 4096 NT_STATUS_OK
ReadX 12710 126976 4096 4096 NT_STATUS_OK
WriteX 12710 0 65536 65536 NT_STATUS_OK
WriteX 12710 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12711 NT_STATUS_OK
ReadX 12711 61440 4096 4096 NT_STATUS_OK
ReadX 12711 126976 4096 4096 NT_STATUS_OK
ReadX 12711 192512 4096 4096 NT_STATUS_OK
ReadX 12711 258048 4096 4096 NT_STATUS_OK
WriteX 12711 0 65536 65536 NT_STATUS_OK
WriteX 12711 65536 65536 65536 NT_STATUS_OK
WriteX 12711 131072 65536 65536 NT_STATUS_OK
WriteX 12711 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12712 NT_STATUS_OK
ReadX 12712 61440 4096 4096 NT_STATUS_OK
ReadX 12712 126976 4096 4096 NT_STATUS_OK
ReadX 12712 192512 4096 4096 NT_STATUS_OK
ReadX 12712 258048 4096 4096 NT_STATUS_OK
ReadX 12712 323584 4096 4096 NT_STATUS_OK
ReadX 12712 389120 4096 4096 NT_STATUS_OK
ReadX 12712 454656 4096 4096 NT_STATUS_OK
ReadX 12712 520192 4096 4096 NT_STATUS_OK
WriteX 12712 0 65536 65536 NT_STATUS_OK
WriteX 12712 65536 65536 65536 NT_STATUS_OK
WriteX 12712 131072 65536 65536 NT_STATUS_OK
WriteX 12712 196608 65536 65536 NT_STATUS_OK
WriteX 12712 262144 65536 65536 NT_STATUS_OK
WriteX 12712 327680 65536 65536 NT_STATUS_OK
WriteX 12712 393216 65536 65536 NT_STATUS_OK
WriteX 12712 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12713 NT_STATUS_OK
ReadX 12713 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12713 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12713 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12713 8192 4096 4096 NT_STATUS_OK
ReadX 12713 12288 4096 4096 NT_STATUS_OK
ReadX 12713 16384 4096 4096 NT_STATUS_OK
ReadX 12713 20480 4096 4096 NT_STATUS_OK
ReadX 12713 24576 4096 4096 NT_STATUS_OK
ReadX 12713 28672 4096 4096 NT_STATUS_OK
ReadX 12713 32768 4096 4096 NT_STATUS_OK
ReadX 12713 36864 4096 4096 NT_STATUS_OK
ReadX 12713 40960 4096 4096 NT_STATUS_OK
ReadX 12713 45056 4096 4096 NT_STATUS_OK
ReadX 12713 49152 4096 4096 NT_STATUS_OK
ReadX 12713 53248 4096 4096 NT_STATUS_OK
ReadX 12713 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12713 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12714 NT_STATUS_OK
Close 12714 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12710 NT_STATUS_OK
Close 12711 NT_STATUS_OK
Close 12712 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12716 NT_STATUS_OK
WriteX 12716 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12716 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12716 1004 NT_STATUS_OK
WriteX 12716 0 57088 57088 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
Flush 12716 NT_STATUS_OK
Close 12713 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12717 NT_STATUS_OK
SET_FILE_INFORMATION 12717 1004 NT_STATUS_OK
Close 12717 NT_STATUS_OK
SET_FILE_INFORMATION 12716 1004 NT_STATUS_OK
WriteX 12716 0 4096 4096 NT_STATUS_OK
Close 12716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12720 NT_STATUS_OK
ReadX 12720 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12720 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12721 NT_STATUS_OK
WriteX 12721 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12721 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12721 1004 NT_STATUS_OK
WriteX 12721 0 51456 51456 NT_STATUS_OK
WriteX 12721 0 4096 4096 NT_STATUS_OK
Flush 12721 NT_STATUS_OK
SET_FILE_INFORMATION 12721 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12721 1004 NT_STATUS_OK
WriteX 12721 0 4096 4096 NT_STATUS_OK
Close 12721 NT_STATUS_OK
Close 12720 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12723 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12725 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12727 NT_STATUS_OK
Close 12727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12730 NT_STATUS_OK
WriteX 12730 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12730 258 NT_STATUS_OK
WriteX 12730 0 53077 53077 NT_STATUS_OK
Close 12730 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12731 NT_STATUS_OK
WriteX 12731 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12731 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12731 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
WriteX 12731 0 65536 65536 NT_STATUS_OK
WriteX 12731 65536 1856 1856 NT_STATUS_OK
WriteX 12731 0 4096 4096 NT_STATUS_OK
Flush 12731 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12731 1004 NT_STATUS_OK
WriteX 12731 0 4096 4096 NT_STATUS_OK
Close 12731 NT_STATUS_OK
Close 12725 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12733 NT_STATUS_OK
Close 12733 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12735 NT_STATUS_OK
ReadX 12735 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12737 NT_STATUS_OK
Close 12737 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12740 NT_STATUS_OK
WriteX 12740 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12740 258 NT_STATUS_OK
WriteX 12740 0 7983 7983 NT_STATUS_OK
Close 12740 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12742 NT_STATUS_OK
Close 12742 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12745 NT_STATUS_OK
WriteX 12745 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12745 258 NT_STATUS_OK
WriteX 12745 0 65536 65536 NT_STATUS_OK
WriteX 12745 65536 65536 65536 NT_STATUS_OK
WriteX 12745 131072 65536 65536 NT_STATUS_OK
WriteX 12745 196608 65536 65536 NT_STATUS_OK
WriteX 12745 262144 65536 65536 NT_STATUS_OK
WriteX 12745 327680 65536 65536 NT_STATUS_OK
WriteX 12745 393216 65536 65536 NT_STATUS_OK
WriteX 12745 458752 46731 46731 NT_STATUS_OK
Close 12745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12746 NT_STATUS_OK
WriteX 12746 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12746 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12735 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12746 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12746 1004 NT_STATUS_OK
WriteX 12746 0 65536 65536 NT_STATUS_OK
WriteX 12746 65536 22848 22848 NT_STATUS_OK
WriteX 12746 0 4096 4096 NT_STATUS_OK
Flush 12746 NT_STATUS_OK
SET_FILE_INFORMATION 12746 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12746 1004 NT_STATUS_OK
WriteX 12746 0 4096 4096 NT_STATUS_OK
Close 12746 NT_STATUS_OK
Close 12735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12750 NT_STATUS_OK
ReadX 12750 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12750 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12751 NT_STATUS_OK
ReadX 12751 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12751 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12751 1004 NT_STATUS_OK
ReadX 12751 8192 4096 4096 NT_STATUS_OK
ReadX 12751 12288 4096 4096 NT_STATUS_OK
ReadX 12751 16384 4096 4096 NT_STATUS_OK
ReadX 12751 20480 4096 4096 NT_STATUS_OK
ReadX 12751 24576 4096 4096 NT_STATUS_OK
ReadX 12751 28672 4096 4096 NT_STATUS_OK
ReadX 12751 32768 4096 4096 NT_STATUS_OK
ReadX 12751 36864 4096 4096 NT_STATUS_OK
ReadX 12751 40960 4096 4096 NT_STATUS_OK
ReadX 12751 45056 4096 4096 NT_STATUS_OK
ReadX 12751 49152 4096 4096 NT_STATUS_OK
ReadX 12751 53248 4096 4096 NT_STATUS_OK
ReadX 12751 57344 4096 4096 NT_STATUS_OK
ReadX 12751 61440 4096 4096 NT_STATUS_OK
ReadX 12751 65536 4096 4096 NT_STATUS_OK
ReadX 12751 69632 4096 4096 NT_STATUS_OK
ReadX 12751 73728 4096 4096 NT_STATUS_OK
ReadX 12751 77824 4096 4096 NT_STATUS_OK
ReadX 12751 81920 4096 4096 NT_STATUS_OK
ReadX 12751 86016 4096 4096 NT_STATUS_OK
ReadX 12751 90112 4096 4096 NT_STATUS_OK
ReadX 12751 94208 4096 4096 NT_STATUS_OK
ReadX 12751 98304 4096 4096 NT_STATUS_OK
ReadX 12751 102400 4096 4096 NT_STATUS_OK
ReadX 12751 106496 4096 4096 NT_STATUS_OK
ReadX 12751 110592 4096 4096 NT_STATUS_OK
ReadX 12751 114688 4096 4096 NT_STATUS_OK
ReadX 12751 118784 4096 4096 NT_STATUS_OK
ReadX 12751 122880 4096 4096 NT_STATUS_OK
ReadX 12751 126976 4096 4096 NT_STATUS_OK
ReadX 12751 131072 4096 4096 NT_STATUS_OK
ReadX 12751 135168 4096 4096 NT_STATUS_OK
ReadX 12751 139264 4096 4096 NT_STATUS_OK
ReadX 12751 143360 4096 4096 NT_STATUS_OK
ReadX 12751 147456 4096 4096 NT_STATUS_OK
ReadX 12751 151552 4096 4096 NT_STATUS_OK
ReadX 12751 155648 4096 4096 NT_STATUS_OK
ReadX 12751 159744 4096 4096 NT_STATUS_OK
ReadX 12751 163840 4096 4096 NT_STATUS_OK
ReadX 12751 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12751 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12752 NT_STATUS_OK
Close 12752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12750 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12754 NT_STATUS_OK
WriteX 12754 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12754 258 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12755 NT_STATUS_OK
SET_FILE_INFORMATION 12755 1004 NT_STATUS_OK
Close 12755 NT_STATUS_OK
WriteX 12754 0 42388 42388 NT_STATUS_OK
Close 12754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12756 NT_STATUS_OK
Close 12756 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12758 NT_STATUS_OK
ReadX 12758 0 4096 4096 NT_STATUS_OK
ReadX 12758 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12759 NT_STATUS_OK
WriteX 12759 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12759 258 NT_STATUS_OK
SET_FILE_INFORMATION 12759 1004 NT_STATUS_OK
WriteX 12759 0 42652 42652 NT_STATUS_OK
Close 12759 NT_STATUS_OK
Close 12758 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12761 NT_STATUS_OK
Close 12761 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 4096 4096 NT_STATUS_OK
ReadX 12763 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12765 NT_STATUS_OK
Close 12765 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12768 NT_STATUS_OK
WriteX 12768 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12768 258 NT_STATUS_OK
WriteX 12768 0 65536 65536 NT_STATUS_OK
WriteX 12768 65536 49 49 NT_STATUS_OK
Close 12768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12769 NT_STATUS_OK
ReadX 12769 0 61440 61440 NT_STATUS_OK
ReadX 12769 61440 4096 4096 NT_STATUS_OK
ReadX 12769 65536 61440 61440 NT_STATUS_OK
ReadX 12769 126976 4096 4096 NT_STATUS_OK
ReadX 12769 131072 61440 61440 NT_STATUS_OK
ReadX 12769 192512 4096 4096 NT_STATUS_OK
ReadX 12769 196608 61440 61440 NT_STATUS_OK
ReadX 12769 258048 4096 4096 NT_STATUS_OK
ReadX 12769 262144 61440 61440 NT_STATUS_OK
ReadX 12769 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12770 NT_STATUS_OK
ReadX 12770 0 61440 61440 NT_STATUS_OK
ReadX 12770 61440 4096 4096 NT_STATUS_OK
ReadX 12770 65536 61440 61440 NT_STATUS_OK
ReadX 12770 126976 4096 4096 NT_STATUS_OK
ReadX 12770 131072 61440 61440 NT_STATUS_OK
ReadX 12770 192512 4096 4096 NT_STATUS_OK
ReadX 12770 196608 61440 61440 NT_STATUS_OK
ReadX 12770 258048 4096 4096 NT_STATUS_OK
ReadX 12770 262144 61440 61440 NT_STATUS_OK
ReadX 12770 323584 4096 4096 NT_STATUS_OK
ReadX 12770 327680 61440 61440 NT_STATUS_OK
ReadX 12770 389120 4096 4096 NT_STATUS_OK
ReadX 12770 393216 61440 61440 NT_STATUS_OK
ReadX 12770 454656 4096 4096 NT_STATUS_OK
ReadX 12770 458752 61440 61440 NT_STATUS_OK
ReadX 12770 520192 4096 4096 NT_STATUS_OK
ReadX 12770 524288 61440 61440 NT_STATUS_OK
ReadX 12770 585728 4096 4096 NT_STATUS_OK
ReadX 12770 589824 61440 61440 NT_STATUS_OK
ReadX 12770 651264 4096 4096 NT_STATUS_OK
ReadX 12770 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12771 NT_STATUS_OK
ReadX 12771 0 61440 61440 NT_STATUS_OK
ReadX 12771 61440 4096 4096 NT_STATUS_OK
ReadX 12771 65536 61440 61440 NT_STATUS_OK
ReadX 12771 126976 4096 4096 NT_STATUS_OK
ReadX 12771 131072 61440 61440 NT_STATUS_OK
ReadX 12771 192512 4096 4096 NT_STATUS_OK
ReadX 12771 196608 61440 61440 NT_STATUS_OK
ReadX 12771 258048 4096 4096 NT_STATUS_OK
ReadX 12771 262144 61440 61440 NT_STATUS_OK
ReadX 12771 323584 4096 4096 NT_STATUS_OK
ReadX 12771 327680 61440 61440 NT_STATUS_OK
ReadX 12771 389120 4096 4096 NT_STATUS_OK
ReadX 12771 393216 61440 61440 NT_STATUS_OK
ReadX 12771 454656 4096 4096 NT_STATUS_OK
ReadX 12771 458752 61440 61440 NT_STATUS_OK
ReadX 12771 520192 4096 4096 NT_STATUS_OK
ReadX 12771 524288 61440 61440 NT_STATUS_OK
ReadX 12771 585728 4096 4096 NT_STATUS_OK
ReadX 12771 589824 61440 61440 NT_STATUS_OK
ReadX 12771 651264 4096 4096 NT_STATUS_OK
ReadX 12771 655360 61440 61440 NT_STATUS_OK
ReadX 12771 716800 4096 4096 NT_STATUS_OK
ReadX 12771 720896 61440 61440 NT_STATUS_OK
ReadX 12771 782336 4096 4096 NT_STATUS_OK
ReadX 12771 786432 61440 61440 NT_STATUS_OK
ReadX 12771 847872 4096 4096 NT_STATUS_OK
ReadX 12771 851968 61440 61440 NT_STATUS_OK
ReadX 12771 913408 4096 4096 NT_STATUS_OK
ReadX 12771 917504 61440 61440 NT_STATUS_OK
ReadX 12771 978944 4096 4096 NT_STATUS_OK
ReadX 12771 983040 61440 61440 NT_STATUS_OK
ReadX 12771 1044480 4096 4096 NT_STATUS_OK
ReadX 12771 1048576 61440 61440 NT_STATUS_OK
ReadX 12771 1110016 4096 4096 NT_STATUS_OK
ReadX 12771 1114112 61440 61440 NT_STATUS_OK
ReadX 12771 1175552 4096 4096 NT_STATUS_OK
ReadX 12771 1179648 61440 61440 NT_STATUS_OK
ReadX 12771 1241088 4096 4096 NT_STATUS_OK
ReadX 12771 1245184 61440 61440 NT_STATUS_OK
ReadX 12771 1306624 4096 4096 NT_STATUS_OK
ReadX 12771 1310720 61440 61440 NT_STATUS_OK
ReadX 12771 1372160 4096 4096 NT_STATUS_OK
ReadX 12771 1376256 61440 61440 NT_STATUS_OK
ReadX 12771 1437696 4096 4096 NT_STATUS_OK
ReadX 12771 1441792 61440 61440 NT_STATUS_OK
ReadX 12771 1503232 4096 4096 NT_STATUS_OK
ReadX 12771 1507328 61440 61440 NT_STATUS_OK
ReadX 12771 1568768 4096 4096 NT_STATUS_OK
ReadX 12771 1572864 61440 61440 NT_STATUS_OK
ReadX 12771 1634304 4096 4096 NT_STATUS_OK
ReadX 12771 1638400 61440 61440 NT_STATUS_OK
ReadX 12771 1699840 4096 4096 NT_STATUS_OK
ReadX 12771 1703936 61440 61440 NT_STATUS_OK
ReadX 12771 1765376 4096 4096 NT_STATUS_OK
ReadX 12771 1769472 61440 61440 NT_STATUS_OK
ReadX 12771 1830912 4096 4096 NT_STATUS_OK
ReadX 12771 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12773 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12773 1005 NT_STATUS_OK
ReadX 12773 2156 24 24 NT_STATUS_OK
ReadX 12773 2139 276 276 NT_STATUS_OK
ReadX 12773 2136 14 14 NT_STATUS_OK
ReadX 12773 2136 7 7 NT_STATUS_OK
ReadX 12773 2138 12 12 NT_STATUS_OK
ReadX 12773 2137 8 8 NT_STATUS_OK
ReadX 12773 2135 15 15 NT_STATUS_OK
ReadX 12773 0 16 16 NT_STATUS_OK
ReadX 12773 16 2048 2048 NT_STATUS_OK
ReadX 12773 2064 2048 2048 NT_STATUS_OK
ReadX 12773 257 2048 2048 NT_STATUS_OK
ReadX 12773 385 2048 2048 NT_STATUS_OK
ReadX 12773 513 2048 2048 NT_STATUS_OK
ReadX 12773 641 2048 2048 NT_STATUS_OK
ReadX 12773 769 2048 2048 NT_STATUS_OK
ReadX 12773 897 2048 2048 NT_STATUS_OK
ReadX 12773 1025 2048 2048 NT_STATUS_OK
ReadX 12773 1153 2048 2048 NT_STATUS_OK
ReadX 12773 1281 2048 2048 NT_STATUS_OK
ReadX 12773 1409 2048 2048 NT_STATUS_OK
ReadX 12773 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12775 NT_STATUS_OK
Close 12775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12769 NT_STATUS_OK
Close 12770 NT_STATUS_OK
Close 12771 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12778 NT_STATUS_OK
WriteX 12778 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12778 258 NT_STATUS_OK
WriteX 12778 0 10575 10575 NT_STATUS_OK
Flush 12778 NT_STATUS_OK
Close 12778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12779 NT_STATUS_OK
Close 12779 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12781 NT_STATUS_OK
ReadX 12781 0 4096 4096 NT_STATUS_OK
Close 12773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12782 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12783 NT_STATUS_OK
LockX 12783 2147483538 1 NT_STATUS_OK
UnlockX 12783 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12783 1005 NT_STATUS_OK
ReadX 12783 0 512 512 NT_STATUS_OK
ReadX 12783 512 512 512 NT_STATUS_OK
ReadX 12783 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12783 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12783 1004 NT_STATUS_OK
Close 12783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12784 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 1005 NT_STATUS_OK
ReadX 12784 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12785 NT_STATUS_OK
LockX 12785 2147483538 1 NT_STATUS_OK
UnlockX 12785 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12785 1005 NT_STATUS_OK
ReadX 12785 0 512 512 NT_STATUS_OK
ReadX 12785 512 512 512 NT_STATUS_OK
ReadX 12785 1024 512 512 NT_STATUS_OK
ReadX 12785 288 20 20 NT_STATUS_OK
ReadX 12785 308 2084 2084 NT_STATUS_OK
ReadX 12785 388 2084 2084 NT_STATUS_OK
ReadX 12785 388 2084 2084 NT_STATUS_OK
ReadX 12772 2157 1386 1386 NT_STATUS_OK
ReadX 12785 2472 399 399 NT_STATUS_OK
ReadX 12785 3072 1536 1536 NT_STATUS_OK
ReadX 12785 544 149 149 NT_STATUS_OK
ReadX 12785 693 485 485 NT_STATUS_OK
Close 12785 NT_STATUS_OK
ReadX 12772 2157 4096 4096 NT_STATUS_OK
ReadX 12772 6253 4096 4096 NT_STATUS_OK
ReadX 12772 10349 4096 4096 NT_STATUS_OK
ReadX 12772 14445 4096 4096 NT_STATUS_OK
ReadX 12772 18541 4096 4096 NT_STATUS_OK
ReadX 12772 22637 256 256 NT_STATUS_OK
ReadX 12772 22893 4096 4096 NT_STATUS_OK
ReadX 12772 26989 4096 4096 NT_STATUS_OK
ReadX 12772 31085 4096 4096 NT_STATUS_OK
ReadX 12772 35181 4096 4096 NT_STATUS_OK
ReadX 12772 39277 4096 4096 NT_STATUS_OK
ReadX 12772 43373 4096 4096 NT_STATUS_OK
ReadX 12772 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12772 2157 1024 1024 NT_STATUS_OK
ReadX 12772 1667 4688 4688 NT_STATUS_OK
ReadX 12772 6355 3516 3516 NT_STATUS_OK
ReadX 12772 9871 16384 16384 NT_STATUS_OK
ReadX 12772 26255 3771 3771 NT_STATUS_OK
ReadX 12772 30026 2048 2048 NT_STATUS_OK
ReadX 12772 32074 1024 1024 NT_STATUS_OK
ReadX 12772 33098 6652 6652 NT_STATUS_OK
ReadX 12772 39750 16384 16384 NT_STATUS_OK
ReadX 12772 56134 10496 10496 NT_STATUS_OK
ReadX 12772 66630 1784 1784 NT_STATUS_OK
ReadX 12772 68414 90 90 NT_STATUS_OK
ReadX 12772 68504 273 273 NT_STATUS_OK
ReadX 12772 68777 1600 1600 NT_STATUS_OK
ReadX 12772 70377 640 640 NT_STATUS_OK
ReadX 12772 71017 1280 1280 NT_STATUS_OK
ReadX 12772 72297 8464 8464 NT_STATUS_OK
ReadX 12772 80761 158 158 NT_STATUS_OK
ReadX 12772 80919 912 912 NT_STATUS_OK
ReadX 12772 81831 1980 1980 NT_STATUS_OK
ReadX 12772 83811 2256 2256 NT_STATUS_OK
ReadX 12772 86067 400 400 NT_STATUS_OK
ReadX 12772 86467 252 252 NT_STATUS_OK
ReadX 12772 86719 42 42 NT_STATUS_OK
ReadX 12772 86761 725 725 NT_STATUS_OK
ReadX 12772 2009 512 512 NT_STATUS_OK
ReadX 12772 3895 9 9 NT_STATUS_OK
ReadX 12772 3781 46 46 NT_STATUS_OK
ReadX 12772 4059 92 92 NT_STATUS_OK
ReadX 12772 3781 92 92 NT_STATUS_OK
ReadX 12772 3986 184 184 NT_STATUS_OK
ReadX 12772 3987 16384 16384 NT_STATUS_OK
ReadX 12772 3902 16384 16384 NT_STATUS_OK
ReadX 12772 3781 10240 10240 NT_STATUS_OK
ReadX 12772 3821 16384 16384 NT_STATUS_OK
ReadX 12772 3891 935 935 NT_STATUS_OK
ReadX 12772 4060 10240 10240 NT_STATUS_OK
ReadX 12772 4059 184 184 NT_STATUS_OK
ReadX 12772 256 184 184 NT_STATUS_OK
ReadX 12772 256 1026 1026 NT_STATUS_OK
ReadX 12772 3901 326 326 NT_STATUS_OK
ReadX 12772 3899 652 652 NT_STATUS_OK
ReadX 12772 256 2 2 NT_STATUS_OK
ReadX 12772 258 4948 4948 NT_STATUS_OK
Close 12772 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12787 NT_STATUS_OK
Close 12787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12790 NT_STATUS_OK
WriteX 12790 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12790 258 NT_STATUS_OK
WriteX 12790 0 65536 65536 NT_STATUS_OK
WriteX 12790 65536 65536 65536 NT_STATUS_OK
WriteX 12790 131072 65536 65536 NT_STATUS_OK
WriteX 12790 196608 65536 65536 NT_STATUS_OK
WriteX 12790 262144 65536 65536 NT_STATUS_OK
WriteX 12790 327680 65536 65536 NT_STATUS_OK
WriteX 12790 393216 65536 65536 NT_STATUS_OK
WriteX 12790 458752 65536 65536 NT_STATUS_OK
WriteX 12790 524288 65536 65536 NT_STATUS_OK
WriteX 12790 589824 35257 35257 NT_STATUS_OK
Close 12790 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12792 NT_STATUS_OK
Close 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12795 NT_STATUS_OK
WriteX 12795 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12795 258 NT_STATUS_OK
WriteX 12795 0 65536 65536 NT_STATUS_OK
WriteX 12795 65536 65536 65536 NT_STATUS_OK
WriteX 12795 131072 65536 65536 NT_STATUS_OK
WriteX 12795 196608 65536 65536 NT_STATUS_OK
WriteX 12795 262144 65536 65536 NT_STATUS_OK
WriteX 12795 327680 65536 65536 NT_STATUS_OK
WriteX 12795 393216 65536 65536 NT_STATUS_OK
WriteX 12795 458752 65536 65536 NT_STATUS_OK
WriteX 12795 524288 65536 65536 NT_STATUS_OK
WriteX 12795 589824 57598 57598 NT_STATUS_OK
Close 12795 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12797 NT_STATUS_OK
WriteX 12797 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12797 258 NT_STATUS_OK
WriteX 12797 0 12543 12543 NT_STATUS_OK
Flush 12797 NT_STATUS_OK
Close 12797 NT_STATUS_OK
Close 12781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12799 NT_STATUS_OK
Close 12799 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12801 NT_STATUS_OK
ReadX 12801 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12802 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12803 NT_STATUS_OK
QUERY_FILE_INFORMATION 12803 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12803 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12803 1005 NT_STATUS_OK
ReadX 12803 1938 24 24 NT_STATUS_OK
ReadX 12803 1920 276 276 NT_STATUS_OK
ReadX 12803 1918 14 14 NT_STATUS_OK
ReadX 12803 1918 7 7 NT_STATUS_OK
ReadX 12803 1919 12 12 NT_STATUS_OK
ReadX 12803 1919 8 8 NT_STATUS_OK
ReadX 12803 1917 15 15 NT_STATUS_OK
ReadX 12803 0 16 16 NT_STATUS_OK
ReadX 12803 16 2048 2048 NT_STATUS_OK
ReadX 12803 2064 2048 2048 NT_STATUS_OK
ReadX 12803 257 2048 2048 NT_STATUS_OK
ReadX 12803 385 2048 2048 NT_STATUS_OK
ReadX 12803 513 2048 2048 NT_STATUS_OK
ReadX 12803 641 2048 2048 NT_STATUS_OK
ReadX 12803 769 2048 2048 NT_STATUS_OK
ReadX 12803 897 2048 2048 NT_STATUS_OK
ReadX 12803 1025 2048 2048 NT_STATUS_OK
ReadX 12803 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12805 NT_STATUS_OK
Close 12805 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12808 NT_STATUS_OK
WriteX 12808 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12808 258 NT_STATUS_OK
WriteX 12808 0 11588 11588 NT_STATUS_OK
Flush 12808 NT_STATUS_OK
Close 12808 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12809 NT_STATUS_OK
Close 12809 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12811 NT_STATUS_OK
ReadX 12811 0 4096 4096 NT_STATUS_OK
Close 12803 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12813 NT_STATUS_OK
WriteX 12813 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12813 258 NT_STATUS_OK
WriteX 12813 0 11615 11615 NT_STATUS_OK
Flush 12813 NT_STATUS_OK
Close 12813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12811 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12815 NT_STATUS_OK
Close 12815 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12817 NT_STATUS_OK
ReadX 12817 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12819 NT_STATUS_OK
Close 12819 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12822 NT_STATUS_OK
WriteX 12822 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12822 258 NT_STATUS_OK
WriteX 12822 0 65536 65536 NT_STATUS_OK
WriteX 12822 65536 16050 16050 NT_STATUS_OK
Close 12822 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12802 1939 64 64 NT_STATUS_OK
ReadX 12802 128 248 248 NT_STATUS_OK
ReadX 12802 128 568 568 NT_STATUS_OK
ReadX 12802 3872 1536 1536 NT_STATUS_OK
ReadX 12802 3456 2560 2560 NT_STATUS_OK
ReadX 12802 3136 512 512 NT_STATUS_OK
ReadX 12802 2880 4096 4096 NT_STATUS_OK
ReadX 12802 3264 3072 3072 NT_STATUS_OK
ReadX 12802 320 4096 4096 NT_STATUS_OK
ReadX 12802 1024 4096 4096 NT_STATUS_OK
ReadX 12802 3616 4096 4096 NT_STATUS_OK
ReadX 12802 1939 64 64 NT_STATUS_OK
ReadX 12802 128 248 248 NT_STATUS_OK
ReadX 12802 128 608 608 NT_STATUS_OK
ReadX 12802 2858 1024 1024 NT_STATUS_OK
ReadX 12802 2810 4096 4096 NT_STATUS_OK
ReadX 12802 2826 4096 4096 NT_STATUS_OK
ReadX 12802 2580 2048 2048 NT_STATUS_OK
ReadX 12802 2800 2560 2560 NT_STATUS_OK
ReadX 12802 2100 4096 4096 NT_STATUS_OK
ReadX 12802 2084 4096 4096 NT_STATUS_OK
ReadX 12802 868 4096 4096 NT_STATUS_OK
ReadX 12802 2324 4096 4096 NT_STATUS_OK
ReadX 12802 884 4096 4096 NT_STATUS_OK
ReadX 12802 2604 1024 1024 NT_STATUS_OK
ReadX 12802 580 4096 4096 NT_STATUS_OK
ReadX 12802 596 4096 4096 NT_STATUS_OK
ReadX 12802 2752 4096 4096 NT_STATUS_OK
ReadX 12802 2842 1024 1024 NT_STATUS_OK
ReadX 12802 660 4096 4096 NT_STATUS_OK
ReadX 12802 2720 4096 4096 NT_STATUS_OK
ReadX 12802 2736 4096 4096 NT_STATUS_OK
ReadX 12802 628 4096 4096 NT_STATUS_OK
ReadX 12802 2704 4096 4096 NT_STATUS_OK
ReadX 12802 1556 4096 4096 NT_STATUS_OK
ReadX 12802 576 4096 4096 NT_STATUS_OK
ReadX 12802 3168 1536 1536 NT_STATUS_OK
ReadX 12802 832 4096 4096 NT_STATUS_OK
ReadX 12802 1088 4096 4096 NT_STATUS_OK
ReadX 12802 1344 4096 4096 NT_STATUS_OK
ReadX 12802 1600 4096 4096 NT_STATUS_OK
ReadX 12802 1856 4096 4096 NT_STATUS_OK
ReadX 12802 2112 4096 4096 NT_STATUS_OK
ReadX 12802 1892 4096 4096 NT_STATUS_OK
ReadX 12802 820 4096 4096 NT_STATUS_OK
ReadX 12802 788 4096 4096 NT_STATUS_OK
ReadX 12802 1604 4096 4096 NT_STATUS_OK
ReadX 12802 3648 4096 4096 NT_STATUS_OK
ReadX 12802 2608 4096 4096 NT_STATUS_OK
ReadX 12802 548 4096 4096 NT_STATUS_OK
ReadX 12802 740 4096 4096 NT_STATUS_OK
ReadX 12802 1344 4096 4096 NT_STATUS_OK
ReadX 12802 3392 4096 4096 NT_STATUS_OK
ReadX 12802 3904 4096 4096 NT_STATUS_OK
ReadX 12802 644 4096 4096 NT_STATUS_OK
ReadX 12802 676 4096 4096 NT_STATUS_OK
ReadX 12802 2688 4096 4096 NT_STATUS_OK
ReadX 12802 320 4096 4096 NT_STATUS_OK
ReadX 12802 900 4096 4096 NT_STATUS_OK
ReadX 12802 1908 4096 4096 NT_STATUS_OK
ReadX 12802 852 4096 4096 NT_STATUS_OK
ReadX 12802 724 4096 4096 NT_STATUS_OK
ReadX 12802 2292 4096 4096 NT_STATUS_OK
ReadX 12802 612 4096 4096 NT_STATUS_OK
ReadX 12802 388 4096 4096 NT_STATUS_OK
ReadX 12802 2368 4096 4096 NT_STATUS_OK
ReadX 12802 2624 4096 4096 NT_STATUS_OK
ReadX 12802 500 4096 4096 NT_STATUS_OK
ReadX 12802 356 4096 4096 NT_STATUS_OK
ReadX 12802 1024 4096 4096 NT_STATUS_OK
ReadX 12802 576 4096 4096 NT_STATUS_OK
ReadX 12802 340 4096 4096 NT_STATUS_OK
ReadX 12802 420 4096 4096 NT_STATUS_OK
ReadX 12802 1600 4096 4096 NT_STATUS_OK
ReadX 12802 404 4096 4096 NT_STATUS_OK
ReadX 12802 1428 4096 4096 NT_STATUS_OK
ReadX 12802 2656 4096 4096 NT_STATUS_OK
ReadX 12802 2624 4096 4096 NT_STATUS_OK
ReadX 12802 452 4096 4096 NT_STATUS_OK
ReadX 12802 692 4096 4096 NT_STATUS_OK
ReadX 12802 564 4096 4096 NT_STATUS_OK
ReadX 12802 372 4096 4096 NT_STATUS_OK
ReadX 12802 468 4096 4096 NT_STATUS_OK
ReadX 12802 484 4096 4096 NT_STATUS_OK
ReadX 12802 1088 4096 4096 NT_STATUS_OK
ReadX 12802 1924 4096 4096 NT_STATUS_OK
ReadX 12802 2768 4096 4096 NT_STATUS_OK
ReadX 12802 832 4096 4096 NT_STATUS_OK
ReadX 12802 836 4096 4096 NT_STATUS_OK
ReadX 12802 1856 4096 4096 NT_STATUS_OK
ReadX 12802 2640 4096 4096 NT_STATUS_OK
ReadX 12802 436 4096 4096 NT_STATUS_OK
ReadX 12802 1828 4096 4096 NT_STATUS_OK
ReadX 12802 804 4096 4096 NT_STATUS_OK
ReadX 12802 1860 4096 4096 NT_STATUS_OK
ReadX 12802 1812 4096 4096 NT_STATUS_OK
ReadX 12802 756 4096 4096 NT_STATUS_OK
ReadX 12802 1636 4096 4096 NT_STATUS_OK
ReadX 12802 772 4096 4096 NT_STATUS_OK
ReadX 12802 2036 4096 4096 NT_STATUS_OK
ReadX 12802 1220 4096 4096 NT_STATUS_OK
ReadX 12802 1652 4096 4096 NT_STATUS_OK
ReadX 12802 2588 4096 4096 NT_STATUS_OK
ReadX 12802 916 4096 4096 NT_STATUS_OK
ReadX 12802 260 4096 4096 NT_STATUS_OK
ReadX 12802 932 4096 4096 NT_STATUS_OK
ReadX 12802 2624 4096 4096 NT_STATUS_OK
ReadX 12802 308 4096 4096 NT_STATUS_OK
ReadX 12802 292 4096 4096 NT_STATUS_OK
ReadX 12802 1140 4096 4096 NT_STATUS_OK
ReadX 12802 276 4096 4096 NT_STATUS_OK
ReadX 12802 2020 4096 4096 NT_STATUS_OK
ReadX 12802 2880 4096 4096 NT_STATUS_OK
ReadX 12802 516 4096 4096 NT_STATUS_OK
ReadX 12802 1844 4096 4096 NT_STATUS_OK
ReadX 12802 1124 4096 4096 NT_STATUS_OK
ReadX 12802 3136 4096 4096 NT_STATUS_OK
ReadX 12802 324 4096 4096 NT_STATUS_OK
ReadX 12802 1156 4096 4096 NT_STATUS_OK
ReadX 12802 1172 4096 4096 NT_STATUS_OK
ReadX 12802 2112 4096 4096 NT_STATUS_OK
ReadX 12802 2368 4096 4096 NT_STATUS_OK
ReadX 12802 964 4096 4096 NT_STATUS_OK
ReadX 12802 980 4096 4096 NT_STATUS_OK
ReadX 12802 1012 4096 4096 NT_STATUS_OK
ReadX 12802 532 4096 4096 NT_STATUS_OK
ReadX 12802 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12802 1620 4096 4096 NT_STATUS_OK
ReadX 12802 1604 4096 4096 NT_STATUS_OK
ReadX 12802 2116 4096 4096 NT_STATUS_OK
ReadX 12802 2132 4096 4096 NT_STATUS_OK
ReadX 12802 2148 4096 4096 NT_STATUS_OK
ReadX 12802 2276 4096 4096 NT_STATUS_OK
ReadX 12802 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12824 NT_STATUS_OK
Close 12824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12827 NT_STATUS_OK
QUERY_FILE_INFORMATION 12782 1004 NT_STATUS_OK
Close 12782 NT_STATUS_OK
WriteX 12827 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12827 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12784 1004 NT_STATUS_OK
Close 12784 NT_STATUS_OK
WriteX 12827 0 65536 65536 NT_STATUS_OK
WriteX 12827 65536 64850 64850 NT_STATUS_OK
Close 12827 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12829 NT_STATUS_OK
WriteX 12829 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12829 258 NT_STATUS_OK
ReadX 12802 2068 4096 4096 NT_STATUS_OK
ReadX 12802 1588 4096 4096 NT_STATUS_OK
ReadX 12802 1572 4096 4096 NT_STATUS_OK
WriteX 12829 0 18630 18630 NT_STATUS_OK
Flush 12829 NT_STATUS_OK
Close 12829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12831 NT_STATUS_OK
Close 12831 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12833 NT_STATUS_OK
ReadX 12833 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12802 612 4096 4096 NT_STATUS_OK
ReadX 12802 564 4096 4096 NT_STATUS_OK
ReadX 12802 1876 4096 4096 NT_STATUS_OK
ReadX 12802 628 4096 4096 NT_STATUS_OK
ReadX 12802 740 4096 4096 NT_STATUS_OK
ReadX 12802 724 4096 4096 NT_STATUS_OK
ReadX 12802 644 4096 4096 NT_STATUS_OK
ReadX 12802 2324 4096 4096 NT_STATUS_OK
ReadX 12802 660 4096 4096 NT_STATUS_OK
ReadX 12802 852 4096 4096 NT_STATUS_OK
ReadX 12802 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12802 2368 4096 4096 NT_STATUS_OK
ReadX 12802 1024 4096 4096 NT_STATUS_OK
ReadX 12802 320 4096 4096 NT_STATUS_OK
ReadX 12802 580 4096 4096 NT_STATUS_OK
ReadX 12802 3136 512 512 NT_STATUS_OK
ReadX 12802 2880 4096 4096 NT_STATUS_OK
Close 12802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12834 NT_STATUS_OK
ReadX 12834 61440 4096 4096 NT_STATUS_OK
ReadX 12834 126976 4096 4096 NT_STATUS_OK
WriteX 12834 0 65536 65536 NT_STATUS_OK
WriteX 12834 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12835 NT_STATUS_OK
ReadX 12835 61440 4096 4096 NT_STATUS_OK
ReadX 12835 126976 4096 4096 NT_STATUS_OK
ReadX 12835 192512 4096 4096 NT_STATUS_OK
ReadX 12835 258048 4096 4096 NT_STATUS_OK
WriteX 12835 0 65536 65536 NT_STATUS_OK
WriteX 12835 65536 65536 65536 NT_STATUS_OK
WriteX 12835 131072 65536 65536 NT_STATUS_OK
WriteX 12835 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12836 NT_STATUS_OK
ReadX 12836 61440 4096 4096 NT_STATUS_OK
ReadX 12836 126976 4096 4096 NT_STATUS_OK
ReadX 12836 192512 4096 4096 NT_STATUS_OK
ReadX 12836 258048 4096 4096 NT_STATUS_OK
ReadX 12836 323584 4096 4096 NT_STATUS_OK
ReadX 12836 389120 4096 4096 NT_STATUS_OK
ReadX 12836 454656 4096 4096 NT_STATUS_OK
ReadX 12836 520192 4096 4096 NT_STATUS_OK
WriteX 12836 0 65536 65536 NT_STATUS_OK
WriteX 12836 65536 65536 65536 NT_STATUS_OK
WriteX 12836 131072 65536 65536 NT_STATUS_OK
WriteX 12836 196608 65536 65536 NT_STATUS_OK
WriteX 12836 262144 65536 65536 NT_STATUS_OK
WriteX 12836 327680 65536 65536 NT_STATUS_OK
WriteX 12836 393216 65536 65536 NT_STATUS_OK
WriteX 12836 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12837 NT_STATUS_OK
ReadX 12837 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12838 NT_STATUS_OK
Close 12838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12839 NT_STATUS_OK
WriteX 12839 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12839 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12837 0 8192 8192 NT_STATUS_OK
Flush 12837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12837 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12837 0 8192 8192 NT_STATUS_OK
Flush 12837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12837 0 8192 8192 NT_STATUS_OK
Flush 12837 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12837 0 8192 8192 NT_STATUS_OK
Flush 12837 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12841 NT_STATUS_OK
Close 12841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12833 NT_STATUS_OK
Close 12801 NT_STATUS_OK
Close 12834 NT_STATUS_OK
Close 12835 NT_STATUS_OK
Close 12836 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12844 NT_STATUS_OK
WriteX 12844 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12844 258 NT_STATUS_OK
WriteX 12844 0 62591 62591 NT_STATUS_OK
Close 12844 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12846 NT_STATUS_OK
Close 12846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12849 NT_STATUS_OK
WriteX 12849 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12849 258 NT_STATUS_OK
WriteX 12849 0 10845 10845 NT_STATUS_OK
Close 12849 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12851 NT_STATUS_OK
Close 12851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12854 NT_STATUS_OK
WriteX 12854 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12854 258 NT_STATUS_OK
WriteX 12854 0 30118 30118 NT_STATUS_OK
Close 12854 NT_STATUS_OK
WriteX 12837 0 4096 4096 NT_STATUS_OK
WriteX 12839 0 64 64 NT_STATUS_OK
Close 12839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12837 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12856 NT_STATUS_OK
ReadX 12856 0 61440 61440 NT_STATUS_OK
ReadX 12856 61440 4096 4096 NT_STATUS_OK
ReadX 12856 65536 61440 61440 NT_STATUS_OK
ReadX 12856 126976 4096 4096 NT_STATUS_OK
ReadX 12856 131072 61440 61440 NT_STATUS_OK
ReadX 12856 192512 4096 4096 NT_STATUS_OK
ReadX 12856 196608 61440 61440 NT_STATUS_OK
ReadX 12856 258048 4096 4096 NT_STATUS_OK
ReadX 12856 262144 61440 61440 NT_STATUS_OK
ReadX 12856 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12857 NT_STATUS_OK
ReadX 12857 0 61440 61440 NT_STATUS_OK
ReadX 12857 61440 4096 4096 NT_STATUS_OK
ReadX 12857 65536 61440 61440 NT_STATUS_OK
ReadX 12857 126976 4096 4096 NT_STATUS_OK
ReadX 12857 131072 61440 61440 NT_STATUS_OK
ReadX 12857 192512 4096 4096 NT_STATUS_OK
ReadX 12857 196608 61440 61440 NT_STATUS_OK
ReadX 12857 258048 4096 4096 NT_STATUS_OK
ReadX 12857 262144 61440 61440 NT_STATUS_OK
ReadX 12857 323584 4096 4096 NT_STATUS_OK
ReadX 12857 327680 61440 61440 NT_STATUS_OK
ReadX 12857 389120 4096 4096 NT_STATUS_OK
ReadX 12857 393216 61440 61440 NT_STATUS_OK
ReadX 12857 454656 4096 4096 NT_STATUS_OK
ReadX 12857 458752 61440 61440 NT_STATUS_OK
ReadX 12857 520192 4096 4096 NT_STATUS_OK
ReadX 12857 524288 61440 61440 NT_STATUS_OK
ReadX 12857 585728 4096 4096 NT_STATUS_OK
ReadX 12857 589824 61440 61440 NT_STATUS_OK
ReadX 12857 651264 4096 4096 NT_STATUS_OK
ReadX 12857 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12858 NT_STATUS_OK
ReadX 12858 0 61440 61440 NT_STATUS_OK
ReadX 12858 61440 4096 4096 NT_STATUS_OK
ReadX 12858 65536 61440 61440 NT_STATUS_OK
ReadX 12858 126976 4096 4096 NT_STATUS_OK
ReadX 12858 131072 61440 61440 NT_STATUS_OK
ReadX 12858 192512 4096 4096 NT_STATUS_OK
ReadX 12858 196608 61440 61440 NT_STATUS_OK
ReadX 12858 258048 4096 4096 NT_STATUS_OK
ReadX 12858 262144 61440 61440 NT_STATUS_OK
ReadX 12858 323584 4096 4096 NT_STATUS_OK
ReadX 12858 327680 61440 61440 NT_STATUS_OK
ReadX 12858 389120 4096 4096 NT_STATUS_OK
ReadX 12858 393216 61440 61440 NT_STATUS_OK
ReadX 12858 454656 4096 4096 NT_STATUS_OK
ReadX 12858 458752 61440 61440 NT_STATUS_OK
ReadX 12858 520192 4096 4096 NT_STATUS_OK
ReadX 12858 524288 61440 61440 NT_STATUS_OK
ReadX 12858 585728 4096 4096 NT_STATUS_OK
ReadX 12858 589824 61440 61440 NT_STATUS_OK
ReadX 12858 651264 4096 4096 NT_STATUS_OK
ReadX 12858 655360 61440 61440 NT_STATUS_OK
ReadX 12858 716800 4096 4096 NT_STATUS_OK
ReadX 12858 720896 61440 61440 NT_STATUS_OK
ReadX 12858 782336 4096 4096 NT_STATUS_OK
ReadX 12858 786432 61440 61440 NT_STATUS_OK
ReadX 12858 847872 4096 4096 NT_STATUS_OK
ReadX 12858 851968 61440 61440 NT_STATUS_OK
ReadX 12858 913408 4096 4096 NT_STATUS_OK
ReadX 12858 917504 61440 61440 NT_STATUS_OK
ReadX 12858 978944 4096 4096 NT_STATUS_OK
ReadX 12858 983040 61440 61440 NT_STATUS_OK
ReadX 12858 1044480 4096 4096 NT_STATUS_OK
ReadX 12858 1048576 61440 61440 NT_STATUS_OK
ReadX 12858 1110016 4096 4096 NT_STATUS_OK
ReadX 12858 1114112 61440 61440 NT_STATUS_OK
ReadX 12858 1175552 4096 4096 NT_STATUS_OK
ReadX 12858 1179648 61440 61440 NT_STATUS_OK
ReadX 12858 1241088 4096 4096 NT_STATUS_OK
ReadX 12858 1245184 61440 61440 NT_STATUS_OK
ReadX 12858 1306624 4096 4096 NT_STATUS_OK
ReadX 12858 1310720 61440 61440 NT_STATUS_OK
ReadX 12858 1372160 4096 4096 NT_STATUS_OK
ReadX 12858 1376256 61440 61440 NT_STATUS_OK
ReadX 12858 1437696 4096 4096 NT_STATUS_OK
ReadX 12858 1441792 61440 61440 NT_STATUS_OK
ReadX 12858 1503232 4096 4096 NT_STATUS_OK
ReadX 12858 1507328 61440 61440 NT_STATUS_OK
ReadX 12858 1568768 4096 4096 NT_STATUS_OK
ReadX 12858 1572864 61440 61440 NT_STATUS_OK
ReadX 12858 1634304 4096 4096 NT_STATUS_OK
ReadX 12858 1638400 61440 61440 NT_STATUS_OK
ReadX 12858 1699840 4096 4096 NT_STATUS_OK
ReadX 12858 1703936 61440 61440 NT_STATUS_OK
ReadX 12858 1765376 4096 4096 NT_STATUS_OK
ReadX 12858 1769472 61440 61440 NT_STATUS_OK
ReadX 12858 1830912 4096 4096 NT_STATUS_OK
ReadX 12858 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12856 NT_STATUS_OK
Close 12857 NT_STATUS_OK
Close 12858 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12861 NT_STATUS_OK
ReadX 12861 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12863 NT_STATUS_OK
ReadX 12863 0 4096 4096 NT_STATUS_OK
ReadX 12863 4096 4096 4096 NT_STATUS_OK
ReadX 12863 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12864 NT_STATUS_OK
Close 12864 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12861 NT_STATUS_OK
Close 12862 NT_STATUS_OK
Close 12863 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12866 NT_STATUS_OK
ReadX 12866 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12867 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12867 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12868 NT_STATUS_OK
Close 12868 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12866 NT_STATUS_OK
Close 12867 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12870 NT_STATUS_OK
ReadX 12870 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12871 NT_STATUS_OK
ReadX 12871 0 8192 8192 NT_STATUS_OK
ReadX 12871 8192 8192 8192 NT_STATUS_OK
ReadX 12871 16384 8192 8192 NT_STATUS_OK
ReadX 12871 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12873 NT_STATUS_OK
Close 12873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12871 NT_STATUS_OK
Close 12870 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12876 NT_STATUS_OK
WriteX 12876 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12876 258 NT_STATUS_OK
WriteX 12876 0 10438 10438 NT_STATUS_OK
Close 12876 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12877 NT_STATUS_OK
Close 12877 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12878 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12879 NT_STATUS_OK
Close 12879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12880 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12881 NT_STATUS_OK
Close 12881 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12882 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12883 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12884 NT_STATUS_OK
Close 12884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12885 NT_STATUS_OK
ReadX 12885 0 4096 4096 NT_STATUS_OK
ReadX 12885 4096 4096 4096 NT_STATUS_OK
ReadX 12885 8192 4096 4096 NT_STATUS_OK
ReadX 12885 12288 8192 8192 NT_STATUS_OK
ReadX 12885 20480 8192 8192 NT_STATUS_OK
ReadX 12885 28672 8192 8192 NT_STATUS_OK
ReadX 12885 36864 8192 8192 NT_STATUS_OK
ReadX 12885 45056 8192 8192 NT_STATUS_OK
ReadX 12885 53248 8192 8192 NT_STATUS_OK
ReadX 12885 61440 8192 8192 NT_STATUS_OK
ReadX 12885 69632 8192 8192 NT_STATUS_OK
ReadX 12885 77824 8192 8192 NT_STATUS_OK
ReadX 12885 86016 8192 8192 NT_STATUS_OK
ReadX 12885 94208 8192 8192 NT_STATUS_OK
ReadX 12885 102400 8192 8192 NT_STATUS_OK
ReadX 12885 110592 8192 8192 NT_STATUS_OK
ReadX 12885 118784 8192 8192 NT_STATUS_OK
ReadX 12885 126976 8192 8192 NT_STATUS_OK
ReadX 12885 135168 8192 8192 NT_STATUS_OK
ReadX 12885 143360 8192 8192 NT_STATUS_OK
ReadX 12885 151552 8192 8192 NT_STATUS_OK
ReadX 12885 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12886 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12885 NT_STATUS_OK
Close 12878 NT_STATUS_OK
Close 12880 NT_STATUS_OK
Close 12882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12887 NT_STATUS_OK
Close 12887 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12890 NT_STATUS_OK
WriteX 12890 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12890 258 NT_STATUS_OK
WriteX 12890 0 28489 28489 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12891 NT_STATUS_OK
Close 12891 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12893 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12893 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12894 NT_STATUS_OK
Close 12894 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12893 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12896 NT_STATUS_OK
ReadX 12896 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12897 NT_STATUS_OK
ReadX 12897 0 8192 8192 NT_STATUS_OK
ReadX 12897 8192 8192 8192 NT_STATUS_OK
ReadX 12897 16384 8192 8192 NT_STATUS_OK
ReadX 12897 24576 8192 8192 NT_STATUS_OK
ReadX 12897 32768 16384 16384 NT_STATUS_OK
ReadX 12897 49152 8192 8192 NT_STATUS_OK
ReadX 12897 57344 8192 8192 NT_STATUS_OK
ReadX 12897 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12899 NT_STATUS_OK
Close 12899 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12897 NT_STATUS_OK
Close 12896 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12902 NT_STATUS_OK
WriteX 12902 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12902 258 NT_STATUS_OK
WriteX 12902 0 29253 29253 NT_STATUS_OK
Close 12902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12903 NT_STATUS_OK
Close 12903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12906 NT_STATUS_OK
Close 12906 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12909 NT_STATUS_OK
WriteX 12909 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12909 258 NT_STATUS_OK
WriteX 12909 0 30183 30183 NT_STATUS_OK
Close 12909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12912 NT_STATUS_OK
WriteX 12912 0 510 510 NT_STATUS_OK
WriteX 12912 510 512 512 NT_STATUS_OK
WriteX 12912 1022 510 510 NT_STATUS_OK
WriteX 12912 1532 510 510 NT_STATUS_OK
WriteX 12912 2042 168 168 NT_STATUS_OK
Close 12912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12913 NT_STATUS_OK
Close 12913 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12915 NT_STATUS_OK
ReadX 12915 0 4096 4096 NT_STATUS_OK
WriteX 12915 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12916 NT_STATUS_OK
ReadX 12916 61440 4096 4096 NT_STATUS_OK
ReadX 12916 126976 4096 4096 NT_STATUS_OK
WriteX 12916 0 65536 65536 NT_STATUS_OK
WriteX 12916 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12917 NT_STATUS_OK
ReadX 12917 61440 4096 4096 NT_STATUS_OK
ReadX 12917 126976 4096 4096 NT_STATUS_OK
ReadX 12917 192512 4096 4096 NT_STATUS_OK
ReadX 12917 258048 4096 4096 NT_STATUS_OK
WriteX 12917 0 65536 65536 NT_STATUS_OK
WriteX 12917 65536 65536 65536 NT_STATUS_OK
WriteX 12917 131072 65536 65536 NT_STATUS_OK
WriteX 12917 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12918 NT_STATUS_OK
ReadX 12918 61440 4096 4096 NT_STATUS_OK
ReadX 12918 126976 4096 4096 NT_STATUS_OK
ReadX 12918 192512 4096 4096 NT_STATUS_OK
ReadX 12918 258048 4096 4096 NT_STATUS_OK
ReadX 12918 323584 4096 4096 NT_STATUS_OK
ReadX 12918 389120 4096 4096 NT_STATUS_OK
ReadX 12918 454656 4096 4096 NT_STATUS_OK
ReadX 12918 520192 4096 4096 NT_STATUS_OK
WriteX 12918 0 65536 65536 NT_STATUS_OK
WriteX 12918 65536 65536 65536 NT_STATUS_OK
WriteX 12918 131072 65536 65536 NT_STATUS_OK
WriteX 12918 196608 65536 65536 NT_STATUS_OK
WriteX 12918 262144 65536 65536 NT_STATUS_OK
WriteX 12918 327680 65536 65536 NT_STATUS_OK
WriteX 12918 393216 65536 65536 NT_STATUS_OK
WriteX 12918 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12915 NT_STATUS_OK
Close 12916 NT_STATUS_OK
Close 12917 NT_STATUS_OK
Close 12918 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12921 NT_STATUS_OK
Close 12921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12925 NT_STATUS_OK
Close 12925 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12928 NT_STATUS_OK
Close 12928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12930 NT_STATUS_OK
Close 12930 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12934 NT_STATUS_OK
Close 12934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12937 NT_STATUS_OK
Close 12937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12939 NT_STATUS_OK
Close 12939 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12943 NT_STATUS_OK
Close 12943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12948 NT_STATUS_OK
Close 12948 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12953 NT_STATUS_OK
Close 12953 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12958 NT_STATUS_OK
Close 12958 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12963 NT_STATUS_OK
Close 12963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12968 NT_STATUS_OK
Close 12968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12973 NT_STATUS_OK
Close 12973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12978 NT_STATUS_OK
Close 12978 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12981 NT_STATUS_OK
Close 12981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12984 NT_STATUS_OK
Close 12984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12987 NT_STATUS_OK
WriteX 12987 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12987 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12987 0 65536 65536 NT_STATUS_OK
WriteX 12987 65536 65536 65536 NT_STATUS_OK
WriteX 12987 131072 65536 65536 NT_STATUS_OK
WriteX 12987 196608 65536 65536 NT_STATUS_OK
WriteX 12987 262144 26634 26634 NT_STATUS_OK
Close 12987 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12992 NT_STATUS_OK
Close 12992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12993 NT_STATUS_OK
Close 12993 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12994 NT_STATUS_OK
ReadX 12994 0 4096 4096 NT_STATUS_OK
Close 12994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
ReadX 12995 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12996 NT_STATUS_OK
Close 12996 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12995 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13000 NT_STATUS_OK
Close 13000 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13003 NT_STATUS_OK
Close 13003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13005 NT_STATUS_OK
Close 13005 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13009 NT_STATUS_OK
Close 13009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13012 NT_STATUS_OK
Close 13012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13014 NT_STATUS_OK
Close 13014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13018 NT_STATUS_OK
Close 13018 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13023 NT_STATUS_OK
Close 13023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13028 NT_STATUS_OK
Close 13028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13033 NT_STATUS_OK
Close 13033 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13038 NT_STATUS_OK
Close 13038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13047 NT_STATUS_OK
Close 13047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13052 NT_STATUS_OK
Close 13052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13057 NT_STATUS_OK
Close 13057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13062 NT_STATUS_OK
Close 13062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13072 NT_STATUS_OK
Close 13072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13074 NT_STATUS_OK
ReadX 13074 0 4096 4096 NT_STATUS_OK
Close 13074 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13075 NT_STATUS_OK
ReadX 13075 0 4096 4096 NT_STATUS_OK
Close 13075 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13076 NT_STATUS_OK
ReadX 13076 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13086 NT_STATUS_OK
Close 13086 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13087 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13087 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13088 NT_STATUS_OK
ReadX 13088 0 4096 4096 NT_STATUS_OK
Close 13088 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13089 NT_STATUS_OK
ReadX 13089 0 4096 4096 NT_STATUS_OK
Close 13089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13090 NT_STATUS_OK
ReadX 13090 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13076 NT_STATUS_OK
Close 13090 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13119 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13119 0 4096 4096 NT_STATUS_OK
Close 13119 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13120 NT_STATUS_OK
ReadX 13120 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13120 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 4096 4096 NT_STATUS_OK
ReadX 13121 4096 4096 4096 NT_STATUS_OK
ReadX 13121 8192 4096 4096 NT_STATUS_OK
ReadX 13121 12288 4096 4096 NT_STATUS_OK
ReadX 13121 16384 4096 4096 NT_STATUS_OK
ReadX 13121 20480 4096 4096 NT_STATUS_OK
ReadX 13121 24576 4096 4096 NT_STATUS_OK
ReadX 13121 28672 4096 4096 NT_STATUS_OK
ReadX 13121 32768 4096 4096 NT_STATUS_OK
ReadX 13121 36864 4096 4096 NT_STATUS_OK
ReadX 13121 40960 4096 4096 NT_STATUS_OK
ReadX 13121 45056 4096 4096 NT_STATUS_OK
ReadX 13121 49152 4096 4096 NT_STATUS_OK
ReadX 13121 53248 4096 4096 NT_STATUS_OK
ReadX 13121 57344 4096 4096 NT_STATUS_OK
ReadX 13121 61440 4096 4096 NT_STATUS_OK
ReadX 13121 65536 4096 4096 NT_STATUS_OK
ReadX 13121 69632 4096 4096 NT_STATUS_OK
ReadX 13121 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13121 1004 NT_STATUS_OK
WriteX 13121 0 4096 4096 NT_STATUS_OK
Close 13121 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13122 NT_STATUS_OK
SET_FILE_INFORMATION 13122 1004 NT_STATUS_OK
Close 13122 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13123 NT_STATUS_OK
ReadX 13123 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13124 NT_STATUS_OK
Close 13124 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13127 NT_STATUS_OK
WriteX 13127 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13127 258 NT_STATUS_OK
WriteX 13127 0 65536 65536 NT_STATUS_OK
WriteX 13127 65536 19979 19979 NT_STATUS_OK
Close 13127 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13128 NT_STATUS_OK
ReadX 13128 0 4096 4096 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
QUERY_FILE_INFORMATION 13128 1004 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
SET_FILE_INFORMATION 13128 1004 NT_STATUS_OK
WriteX 13128 0 4096 4096 NT_STATUS_OK
Flush 13128 NT_STATUS_OK
Close 13128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13129 NT_STATUS_OK
ReadX 13129 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13130 NT_STATUS_OK
ReadX 13130 0 4096 4096 NT_STATUS_OK
Close 13129 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13131 NT_STATUS_OK
ReadX 13131 0 4096 4096 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 4096 4096 NT_STATUS_OK
Close 13132 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13133 NT_STATUS_OK
ReadX 13133 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13133 1004 NT_STATUS_OK
WriteX 13133 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13134 NT_STATUS_OK
Close 13134 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13130 NT_STATUS_OK
Close 13133 NT_STATUS_OK
Close 13123 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13136 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13139 NT_STATUS_OK
WriteX 13139 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13139 258 NT_STATUS_OK
WriteX 13139 0 65536 65536 NT_STATUS_OK
WriteX 13139 65536 17654 17654 NT_STATUS_OK
Close 13139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 0 4096 4096 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
QUERY_FILE_INFORMATION 13140 1004 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
SET_FILE_INFORMATION 13140 1004 NT_STATUS_OK
WriteX 13140 0 4096 4096 NT_STATUS_OK
Flush 13140 NT_STATUS_OK
Close 13140 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13141 NT_STATUS_OK
SET_FILE_INFORMATION 13141 1004 NT_STATUS_OK
Close 13141 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13143 NT_STATUS_OK
Close 13143 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13145 NT_STATUS_OK
ReadX 13145 0 4096 4096 NT_STATUS_OK
ReadX 13145 4096 4096 4096 NT_STATUS_OK
ReadX 13145 8192 4096 4096 NT_STATUS_OK
ReadX 13145 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13145 16384 4096 4096 NT_STATUS_OK
ReadX 13145 20480 4096 4096 NT_STATUS_OK
ReadX 13145 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13142 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13146 NT_STATUS_OK
ReadX 13146 0 4096 4096 NT_STATUS_OK
Close 13146 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13147 NT_STATUS_OK
ReadX 13147 0 4096 4096 NT_STATUS_OK
Close 13147 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13148 NT_STATUS_OK
ReadX 13148 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13148 1004 NT_STATUS_OK
WriteX 13148 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13149 NT_STATUS_OK
Close 13149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13148 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13151 NT_STATUS_OK
Close 13151 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13154 NT_STATUS_OK
WriteX 13154 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13154 258 NT_STATUS_OK
WriteX 13154 0 65536 65536 NT_STATUS_OK
WriteX 13154 65536 19490 19490 NT_STATUS_OK
Close 13154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13155 NT_STATUS_OK
ReadX 13155 0 4096 4096 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
QUERY_FILE_INFORMATION 13155 1004 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
SET_FILE_INFORMATION 13155 1004 NT_STATUS_OK
WriteX 13155 0 4096 4096 NT_STATUS_OK
Flush 13155 NT_STATUS_OK
Close 13155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13156 NT_STATUS_OK
SET_FILE_INFORMATION 13156 1004 NT_STATUS_OK
Close 13156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13157 NT_STATUS_OK
ReadX 13157 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13158 NT_STATUS_OK
Close 13158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13160 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13160 0 4096 4096 NT_STATUS_OK
Close 13160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13161 NT_STATUS_OK
ReadX 13161 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 4096 4096 NT_STATUS_OK
ReadX 13162 4096 4096 4096 NT_STATUS_OK
ReadX 13162 8192 4096 4096 NT_STATUS_OK
ReadX 13162 12288 4096 4096 NT_STATUS_OK
ReadX 13162 16384 4096 4096 NT_STATUS_OK
ReadX 13162 20480 4096 4096 NT_STATUS_OK
ReadX 13162 24576 4096 4096 NT_STATUS_OK
ReadX 13162 28672 4096 4096 NT_STATUS_OK
ReadX 13162 32768 4096 4096 NT_STATUS_OK
ReadX 13162 36864 4096 4096 NT_STATUS_OK
ReadX 13162 40960 4096 4096 NT_STATUS_OK
ReadX 13162 45056 4096 4096 NT_STATUS_OK
ReadX 13162 49152 4096 4096 NT_STATUS_OK
ReadX 13162 53248 4096 4096 NT_STATUS_OK
ReadX 13162 57344 4096 4096 NT_STATUS_OK
ReadX 13162 61440 4096 4096 NT_STATUS_OK
ReadX 13162 65536 4096 4096 NT_STATUS_OK
ReadX 13162 69632 4096 4096 NT_STATUS_OK
ReadX 13162 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13162 1004 NT_STATUS_OK
WriteX 13162 0 4096 4096 NT_STATUS_OK
Close 13162 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13163 NT_STATUS_OK
SET_FILE_INFORMATION 13163 1004 NT_STATUS_OK
Close 13163 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13164 NT_STATUS_OK
ReadX 13164 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13165 NT_STATUS_OK
Close 13165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13157 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13168 NT_STATUS_OK
WriteX 13168 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13168 258 NT_STATUS_OK
WriteX 13168 0 65536 65536 NT_STATUS_OK
WriteX 13168 65536 8866 8866 NT_STATUS_OK
Close 13168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
WriteX 13169 0 4096 4096 NT_STATUS_OK
Flush 13169 NT_STATUS_OK
SET_FILE_INFORMATION 13169 1004 NT_STATUS_OK
WriteX 13169 0 4096 4096 NT_STATUS_OK
Flush 13169 NT_STATUS_OK
Close 13169 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13170 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
Close 13171 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
Close 13172 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13173 1004 NT_STATUS_OK
WriteX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13174 NT_STATUS_OK
Close 13174 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13164 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13176 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13179 NT_STATUS_OK
WriteX 13179 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13179 258 NT_STATUS_OK
WriteX 13179 0 65536 65536 NT_STATUS_OK
WriteX 13179 65536 9298 9298 NT_STATUS_OK
Close 13179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
WriteX 13180 0 4096 4096 NT_STATUS_OK
Flush 13180 NT_STATUS_OK
SET_FILE_INFORMATION 13180 1004 NT_STATUS_OK
WriteX 13180 0 4096 4096 NT_STATUS_OK
Flush 13180 NT_STATUS_OK
Close 13180 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13181 NT_STATUS_OK
SET_FILE_INFORMATION 13181 1004 NT_STATUS_OK
Close 13181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13182 NT_STATUS_OK
ReadX 13182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13183 NT_STATUS_OK
Close 13183 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13186 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13186 0 4096 4096 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13187 4096 4096 4096 NT_STATUS_OK
ReadX 13187 8192 4096 4096 NT_STATUS_OK
ReadX 13187 12288 4096 4096 NT_STATUS_OK
ReadX 13187 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13182 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13188 NT_STATUS_OK
ReadX 13188 0 4096 4096 NT_STATUS_OK
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13189 NT_STATUS_OK
ReadX 13189 0 4096 4096 NT_STATUS_OK
Close 13189 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13190 NT_STATUS_OK
ReadX 13190 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13190 1004 NT_STATUS_OK
WriteX 13190 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13191 NT_STATUS_OK
Close 13191 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13187 NT_STATUS_OK
Close 13190 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13193 NT_STATUS_OK
Close 13193 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13196 NT_STATUS_OK
WriteX 13196 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13196 258 NT_STATUS_OK
WriteX 13196 0 65536 65536 NT_STATUS_OK
WriteX 13196 65536 11540 11540 NT_STATUS_OK
Close 13196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13197 NT_STATUS_OK
ReadX 13197 0 4096 4096 NT_STATUS_OK
WriteX 13197 0 4096 4096 NT_STATUS_OK
Flush 13197 NT_STATUS_OK
SET_FILE_INFORMATION 13197 1004 NT_STATUS_OK
WriteX 13197 0 4096 4096 NT_STATUS_OK
Flush 13197 NT_STATUS_OK
Close 13197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13198 NT_STATUS_OK
SET_FILE_INFORMATION 13198 1004 NT_STATUS_OK
Close 13198 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13199 NT_STATUS_OK
ReadX 13199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13200 NT_STATUS_OK
Close 13200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13202 NT_STATUS_OK
ReadX 13202 61440 4096 4096 NT_STATUS_OK
ReadX 13202 126976 4096 4096 NT_STATUS_OK
WriteX 13202 0 65536 65536 NT_STATUS_OK
WriteX 13202 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13203 NT_STATUS_OK
ReadX 13203 61440 4096 4096 NT_STATUS_OK
ReadX 13203 126976 4096 4096 NT_STATUS_OK
ReadX 13203 192512 4096 4096 NT_STATUS_OK
ReadX 13203 258048 4096 4096 NT_STATUS_OK
WriteX 13203 0 65536 65536 NT_STATUS_OK
WriteX 13203 65536 65536 65536 NT_STATUS_OK
WriteX 13203 131072 65536 65536 NT_STATUS_OK
WriteX 13203 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13204 NT_STATUS_OK
ReadX 13204 61440 4096 4096 NT_STATUS_OK
ReadX 13204 126976 4096 4096 NT_STATUS_OK
ReadX 13204 192512 4096 4096 NT_STATUS_OK
ReadX 13204 258048 4096 4096 NT_STATUS_OK
ReadX 13204 323584 4096 4096 NT_STATUS_OK
ReadX 13204 389120 4096 4096 NT_STATUS_OK
ReadX 13204 454656 4096 4096 NT_STATUS_OK
ReadX 13204 520192 4096 4096 NT_STATUS_OK
WriteX 13204 0 65536 65536 NT_STATUS_OK
WriteX 13204 65536 65536 65536 NT_STATUS_OK
WriteX 13204 131072 65536 65536 NT_STATUS_OK
WriteX 13204 196608 65536 65536 NT_STATUS_OK
WriteX 13204 262144 65536 65536 NT_STATUS_OK
WriteX 13204 327680 65536 65536 NT_STATUS_OK
WriteX 13204 393216 65536 65536 NT_STATUS_OK
WriteX 13204 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13205 NT_STATUS_OK
ReadX 13205 0 4096 4096 NT_STATUS_OK
ReadX 13205 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13206 NT_STATUS_OK
WriteX 13206 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13206 258 NT_STATUS_OK
WriteX 13206 0 53 53 NT_STATUS_OK
Close 13206 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13199 NT_STATUS_OK
Close 13145 NT_STATUS_OK
Close 13202 NT_STATUS_OK
Close 13203 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13205 8192 4096 4096 NT_STATUS_OK
ReadX 13205 12288 4096 4096 NT_STATUS_OK
WriteX 13209 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13209 258 NT_STATUS_OK
ReadX 13205 16384 4096 4096 NT_STATUS_OK
ReadX 13205 20480 4096 4096 NT_STATUS_OK
WriteX 13209 0 15360 15360 NT_STATUS_OK
Close 13209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13210 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13210 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13210 1004 NT_STATUS_OK
WriteX 13210 0 4096 4096 NT_STATUS_OK
Close 13210 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13211 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13214 NT_STATUS_OK
Close 13214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13213 4096 4096 4096 NT_STATUS_OK
ReadX 13213 8192 4096 4096 NT_STATUS_OK
ReadX 13213 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
ReadX 13216 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 4096 4096 NT_STATUS_OK
ReadX 13217 4096 4096 4096 NT_STATUS_OK
ReadX 13217 8192 4096 4096 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Close 13217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13218 NT_STATUS_OK
WriteX 13218 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13218 258 NT_STATUS_OK
WriteX 13218 0 15360 15360 NT_STATUS_OK
Close 13218 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13219 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13219 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13213 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13220 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13223 NT_STATUS_OK
SET_FILE_INFORMATION 13223 1004 NT_STATUS_OK
Close 13223 NT_STATUS_OK
WriteX 13219 0 4096 4096 NT_STATUS_OK
Close 13219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13224 NT_STATUS_OK
Close 13224 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13226 NT_STATUS_OK
ReadX 13226 0 4096 4096 NT_STATUS_OK
ReadX 13226 4096 4096 4096 NT_STATUS_OK
ReadX 13226 8192 4096 4096 NT_STATUS_OK
ReadX 13226 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13226 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13226 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13227 NT_STATUS_OK
ReadX 13227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13228 NT_STATUS_OK
WriteX 13228 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13228 258 NT_STATUS_OK
WriteX 13228 0 53 53 NT_STATUS_OK
Close 13228 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13229 NT_STATUS_OK
Close 13229 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13227 4096 4096 4096 NT_STATUS_OK
ReadX 13227 8192 4096 4096 NT_STATUS_OK
ReadX 13227 12288 4096 4096 NT_STATUS_OK
WriteX 13231 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13231 258 NT_STATUS_OK
WriteX 13231 0 12006 12006 NT_STATUS_OK
Close 13231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13232 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13232 1004 NT_STATUS_OK
WriteX 13232 0 4096 4096 NT_STATUS_OK
Close 13232 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13233 NT_STATUS_OK
Close 13233 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13236 NT_STATUS_OK
Close 13236 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13235 4096 4096 4096 NT_STATUS_OK
ReadX 13235 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13238 NT_STATUS_OK
WriteX 13238 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13238 258 NT_STATUS_OK
WriteX 13238 0 11991 11991 NT_STATUS_OK
Close 13238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13239 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13239 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13240 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13242 NT_STATUS_OK
ReadX 13242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13243 NT_STATUS_OK
SET_FILE_INFORMATION 13243 1004 NT_STATUS_OK
Close 13243 NT_STATUS_OK
WriteX 13239 0 4096 4096 NT_STATUS_OK
Close 13239 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13244 NT_STATUS_OK
Close 13244 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13246 NT_STATUS_OK
ReadX 13246 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13247 NT_STATUS_OK
Close 13247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13246 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13246 1004 NT_STATUS_OK
ReadX 13246 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13246 1004 NT_STATUS_OK
WriteX 13246 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13246 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13246 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13246 1004 NT_STATUS_OK
Close 13222 NT_STATUS_OK
WriteX 13226 0 19054 19054 NT_STATUS_OK
WriteX 13246 0 12288 12288 NT_STATUS_OK
Close 13242 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13249 NT_STATUS_OK
Close 13249 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13226 NT_STATUS_OK
Close 13246 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13251 NT_STATUS_OK
Close 13251 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13253 NT_STATUS_OK
ReadX 13253 0 61440 61440 NT_STATUS_OK
ReadX 13253 61440 4096 4096 NT_STATUS_OK
ReadX 13253 65536 61440 61440 NT_STATUS_OK
ReadX 13253 126976 4096 4096 NT_STATUS_OK
ReadX 13253 131072 61440 61440 NT_STATUS_OK
ReadX 13253 192512 4096 4096 NT_STATUS_OK
ReadX 13253 196608 61440 61440 NT_STATUS_OK
ReadX 13253 258048 4096 4096 NT_STATUS_OK
ReadX 13253 262144 61440 61440 NT_STATUS_OK
ReadX 13253 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13254 NT_STATUS_OK
ReadX 13254 0 61440 61440 NT_STATUS_OK
ReadX 13254 61440 4096 4096 NT_STATUS_OK
ReadX 13254 65536 61440 61440 NT_STATUS_OK
ReadX 13254 126976 4096 4096 NT_STATUS_OK
ReadX 13254 131072 61440 61440 NT_STATUS_OK
ReadX 13254 192512 4096 4096 NT_STATUS_OK
ReadX 13254 196608 61440 61440 NT_STATUS_OK
ReadX 13254 258048 4096 4096 NT_STATUS_OK
ReadX 13254 262144 61440 61440 NT_STATUS_OK
ReadX 13254 323584 4096 4096 NT_STATUS_OK
ReadX 13254 327680 61440 61440 NT_STATUS_OK
ReadX 13254 389120 4096 4096 NT_STATUS_OK
ReadX 13254 393216 61440 61440 NT_STATUS_OK
ReadX 13254 454656 4096 4096 NT_STATUS_OK
ReadX 13254 458752 61440 61440 NT_STATUS_OK
ReadX 13254 520192 4096 4096 NT_STATUS_OK
ReadX 13254 524288 61440 61440 NT_STATUS_OK
ReadX 13254 585728 4096 4096 NT_STATUS_OK
ReadX 13254 589824 61440 61440 NT_STATUS_OK
ReadX 13254 651264 4096 4096 NT_STATUS_OK
ReadX 13254 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13255 NT_STATUS_OK
ReadX 13255 0 61440 61440 NT_STATUS_OK
ReadX 13255 61440 4096 4096 NT_STATUS_OK
ReadX 13255 65536 61440 61440 NT_STATUS_OK
ReadX 13255 126976 4096 4096 NT_STATUS_OK
ReadX 13255 131072 61440 61440 NT_STATUS_OK
ReadX 13255 192512 4096 4096 NT_STATUS_OK
ReadX 13255 196608 61440 61440 NT_STATUS_OK
ReadX 13255 258048 4096 4096 NT_STATUS_OK
ReadX 13255 262144 61440 61440 NT_STATUS_OK
ReadX 13255 323584 4096 4096 NT_STATUS_OK
ReadX 13255 327680 61440 61440 NT_STATUS_OK
ReadX 13255 389120 4096 4096 NT_STATUS_OK
ReadX 13255 393216 61440 61440 NT_STATUS_OK
ReadX 13255 454656 4096 4096 NT_STATUS_OK
ReadX 13255 458752 61440 61440 NT_STATUS_OK
ReadX 13255 520192 4096 4096 NT_STATUS_OK
ReadX 13255 524288 61440 61440 NT_STATUS_OK
ReadX 13255 585728 4096 4096 NT_STATUS_OK
ReadX 13255 589824 61440 61440 NT_STATUS_OK
ReadX 13255 651264 4096 4096 NT_STATUS_OK
ReadX 13255 655360 61440 61440 NT_STATUS_OK
ReadX 13255 716800 4096 4096 NT_STATUS_OK
ReadX 13255 720896 61440 61440 NT_STATUS_OK
ReadX 13255 782336 4096 4096 NT_STATUS_OK
ReadX 13255 786432 61440 61440 NT_STATUS_OK
ReadX 13255 847872 4096 4096 NT_STATUS_OK
ReadX 13255 851968 61440 61440 NT_STATUS_OK
ReadX 13255 913408 4096 4096 NT_STATUS_OK
ReadX 13255 917504 61440 61440 NT_STATUS_OK
ReadX 13255 978944 4096 4096 NT_STATUS_OK
ReadX 13255 983040 61440 61440 NT_STATUS_OK
ReadX 13255 1044480 4096 4096 NT_STATUS_OK
ReadX 13255 1048576 61440 61440 NT_STATUS_OK
ReadX 13255 1110016 4096 4096 NT_STATUS_OK
ReadX 13255 1114112 61440 61440 NT_STATUS_OK
ReadX 13255 1175552 4096 4096 NT_STATUS_OK
ReadX 13255 1179648 61440 61440 NT_STATUS_OK
ReadX 13255 1241088 4096 4096 NT_STATUS_OK
ReadX 13255 1245184 61440 61440 NT_STATUS_OK
ReadX 13255 1306624 4096 4096 NT_STATUS_OK
ReadX 13255 1310720 61440 61440 NT_STATUS_OK
ReadX 13255 1372160 4096 4096 NT_STATUS_OK
ReadX 13255 1376256 61440 61440 NT_STATUS_OK
ReadX 13255 1437696 4096 4096 NT_STATUS_OK
ReadX 13255 1441792 61440 61440 NT_STATUS_OK
ReadX 13255 1503232 4096 4096 NT_STATUS_OK
ReadX 13255 1507328 61440 61440 NT_STATUS_OK
ReadX 13255 1568768 4096 4096 NT_STATUS_OK
ReadX 13255 1572864 61440 61440 NT_STATUS_OK
ReadX 13255 1634304 4096 4096 NT_STATUS_OK
ReadX 13255 1638400 61440 61440 NT_STATUS_OK
ReadX 13255 1699840 4096 4096 NT_STATUS_OK
ReadX 13255 1703936 61440 61440 NT_STATUS_OK
ReadX 13255 1765376 4096 4096 NT_STATUS_OK
ReadX 13255 1769472 61440 61440 NT_STATUS_OK
ReadX 13255 1830912 4096 4096 NT_STATUS_OK
ReadX 13255 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13257 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13257 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13258 NT_STATUS_OK
ReadX 13258 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13259 NT_STATUS_OK
ReadX 13259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13260 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13261 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13261 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13262 NT_STATUS_OK
QUERY_FILE_INFORMATION 13262 1004 NT_STATUS_OK
WriteX 13262 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13262 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13263 NT_STATUS_OK
Close 13263 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13264 NT_STATUS_OK
WriteX 13264 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13264 258 NT_STATUS_OK
WriteX 13264 0 491 491 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13265 NT_STATUS_OK
ReadX 13265 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13262 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13267 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13268 NT_STATUS_OK
WriteX 13268 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13268 258 NT_STATUS_OK
WriteX 13268 0 543 543 NT_STATUS_OK
Close 13268 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13269 NT_STATUS_OK
ReadX 13269 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13265 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13253 NT_STATUS_OK
Close 13254 NT_STATUS_OK
Close 13255 NT_STATUS_OK
Close 13269 NT_STATUS_OK
Close 13257 NT_STATUS_OK
Close 13258 NT_STATUS_OK
Close 13259 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13272 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13273 NT_STATUS_OK
ReadX 13273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13274 NT_STATUS_OK
ReadX 13274 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13275 NT_STATUS_OK
ReadX 13275 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13282 NT_STATUS_OK
QUERY_FILE_INFORMATION 13282 1004 NT_STATUS_OK
WriteX 13282 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13282 258 NT_STATUS_OK
WriteX 13282 0 2048 2048 NT_STATUS_OK
Close 13282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13283 0 4096 4096 NT_STATUS_OK
Flush 13283 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13283 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13287 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13287 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13288 NT_STATUS_OK
WriteX 13288 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13288 258 NT_STATUS_OK
WriteX 13288 0 2048 2048 NT_STATUS_OK
Close 13288 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13293 NT_STATUS_OK
Close 13293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13294 NT_STATUS_OK
WriteX 13294 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13294 258 NT_STATUS_OK
WriteX 13294 0 2048 2048 NT_STATUS_OK
Close 13294 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 2048 2048 NT_STATUS_OK
ReadX 13273 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13289 0 4096 4096 NT_STATUS_OK
WriteX 13273 0 8192 8192 NT_STATUS_OK
WriteX 13274 0 4096 4096 NT_STATUS_OK
WriteX 13275 0 4096 4096 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13273 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13298 NT_STATUS_OK
ReadX 13298 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13299 NT_STATUS_OK
QUERY_FILE_INFORMATION 13299 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13298 NT_STATUS_OK
Close 13274 NT_STATUS_OK
Close 13275 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13273 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13301 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13302 NT_STATUS_OK
ReadX 13302 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13304 NT_STATUS_OK
ReadX 13304 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13306 NT_STATUS_OK
ReadX 13306 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13308 NT_STATUS_OK
ReadX 13308 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13309 NT_STATUS_OK
ReadX 13309 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13310 NT_STATUS_OK
ReadX 13310 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13311 NT_STATUS_OK
ReadX 13311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13318 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13318 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13319 NT_STATUS_OK
QUERY_FILE_INFORMATION 13319 1004 NT_STATUS_OK
WriteX 13319 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13319 258 NT_STATUS_OK
WriteX 13319 0 2048 2048 NT_STATUS_OK
Close 13319 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13310 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13321 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13321 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13322 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13326 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13326 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13327 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 1004 NT_STATUS_OK
WriteX 13327 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13327 258 NT_STATUS_OK
WriteX 13327 0 2048 2048 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13328 NT_STATUS_OK
ReadX 13328 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13320 0 4096 4096 NT_STATUS_OK
Flush 13320 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
Flush 13328 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13320 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13328 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13322 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13329 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13330 NT_STATUS_OK
WriteX 13330 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13330 258 NT_STATUS_OK
WriteX 13330 0 4096 4096 NT_STATUS_OK
Close 13330 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13331 NT_STATUS_OK
ReadX 13331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13332 NT_STATUS_OK
Close 13332 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13333 NT_STATUS_OK
WriteX 13333 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13333 258 NT_STATUS_OK
WriteX 13333 0 4096 4096 NT_STATUS_OK
Close 13333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13334 NT_STATUS_OK
ReadX 13334 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13334 0 4096 4096 NT_STATUS_OK
Close 13331 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13308 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13309 NT_STATUS_OK
Close 13302 NT_STATUS_OK
Close 13303 NT_STATUS_OK
Close 13306 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13304 NT_STATUS_OK
Close 13305 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13334 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13337 NT_STATUS_OK
Close 13337 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13339 NT_STATUS_OK
ReadX 13339 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13340 NT_STATUS_OK
Close 13340 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13341 NT_STATUS_OK
WriteX 13341 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13341 258 NT_STATUS_OK
WriteX 13341 0 2048 2048 NT_STATUS_OK
Close 13341 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13343 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13344 NT_STATUS_OK
ReadX 13344 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13345 NT_STATUS_OK
ReadX 13345 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13346 NT_STATUS_OK
ReadX 13346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13347 NT_STATUS_OK
ReadX 13347 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13348 NT_STATUS_OK
ReadX 13348 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13349 NT_STATUS_OK
ReadX 13349 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13350 NT_STATUS_OK
ReadX 13350 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13351 NT_STATUS_OK
ReadX 13351 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13352 NT_STATUS_OK
ReadX 13352 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13353 NT_STATUS_OK
ReadX 13353 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13354 NT_STATUS_OK
ReadX 13354 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13320 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13356 NT_STATUS_OK
QUERY_FILE_INFORMATION 13356 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13339 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Close 13354 NT_STATUS_OK
Close 13349 NT_STATUS_OK
Close 13350 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Close 13352 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Close 13355 NT_STATUS_OK
Close 13343 NT_STATUS_OK
Close 13344 NT_STATUS_OK
Close 13347 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Close 13345 NT_STATUS_OK
Close 13346 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13358 NT_STATUS_OK
QUERY_FILE_INFORMATION 13358 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13358 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13361 NT_STATUS_OK
ReadX 13361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13362 NT_STATUS_OK
ReadX 13362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13363 NT_STATUS_OK
ReadX 13363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13364 NT_STATUS_OK
ReadX 13364 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13366 NT_STATUS_OK
ReadX 13366 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13367 NT_STATUS_OK
ReadX 13367 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13368 NT_STATUS_OK
ReadX 13368 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13369 NT_STATUS_OK
ReadX 13369 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13370 NT_STATUS_OK
ReadX 13370 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13371 NT_STATUS_OK
ReadX 13371 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13372 NT_STATUS_OK
ReadX 13372 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13373 NT_STATUS_OK
ReadX 13373 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13377 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13377 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13378 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 1004 NT_STATUS_OK
WriteX 13378 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13378 258 NT_STATUS_OK
WriteX 13378 0 2048 2048 NT_STATUS_OK
Close 13378 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13379 NT_STATUS_OK
ReadX 13379 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13380 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13381 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13382 NT_STATUS_OK
ReadX 13382 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13383 NT_STATUS_OK
ReadX 13383 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13384 NT_STATUS_OK
ReadX 13384 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13385 NT_STATUS_OK
ReadX 13385 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13389 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13389 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13390 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 1004 NT_STATUS_OK
WriteX 13390 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13390 258 NT_STATUS_OK
WriteX 13390 0 2048 2048 NT_STATUS_OK
Close 13390 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13391 NT_STATUS_OK
ReadX 13391 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13366 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13392 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13393 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13397 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13398 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 1004 NT_STATUS_OK
WriteX 13398 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 258 NT_STATUS_OK
WriteX 13398 0 2048 2048 NT_STATUS_OK
Close 13398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13379 0 4096 4096 NT_STATUS_OK
Flush 13379 NT_STATUS_OK
WriteX 13391 0 4096 4096 NT_STATUS_OK
Flush 13391 NT_STATUS_OK
WriteX 13399 0 4096 4096 NT_STATUS_OK
Flush 13399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13379 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13391 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13399 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13381 4096 16384 16384 NT_STATUS_OK
ReadX 13361 4096 16384 16384 NT_STATUS_OK
ReadX 13393 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13400 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 2048 2048 NT_STATUS_OK
WriteX 13401 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13379 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13402 NT_STATUS_OK
QUERY_FILE_INFORMATION 13402 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13385 NT_STATUS_OK
Close 13373 NT_STATUS_OK
Close 13365 NT_STATUS_OK
Close 13381 NT_STATUS_OK
Close 13382 NT_STATUS_OK
Close 13383 NT_STATUS_OK
Close 13384 NT_STATUS_OK
Close 13372 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Close 13367 NT_STATUS_OK
Close 13370 NT_STATUS_OK
Close 13371 NT_STATUS_OK
Close 13368 NT_STATUS_OK
Close 13369 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13362 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Close 13364 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13404 NT_STATUS_OK
QUERY_FILE_INFORMATION 13404 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13404 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13399 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13406 NT_STATUS_OK
QUERY_FILE_INFORMATION 13406 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13406 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13408 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13409 NT_STATUS_OK
ReadX 13409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13410 NT_STATUS_OK
ReadX 13410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13412 NT_STATUS_OK
ReadX 13412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13413 NT_STATUS_OK
ReadX 13413 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13409 4096 16384 16384 NT_STATUS_OK
WriteX 13409 0 4096 4096 NT_STATUS_OK
WriteX 13410 0 4096 4096 NT_STATUS_OK
WriteX 13411 0 4096 4096 NT_STATUS_OK
WriteX 13412 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13415 NT_STATUS_OK
ReadX 13415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13416 NT_STATUS_OK
ReadX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13417 NT_STATUS_OK
ReadX 13417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13418 NT_STATUS_OK
ReadX 13418 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13419 NT_STATUS_OK
ReadX 13419 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13420 NT_STATUS_OK
ReadX 13420 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13421 NT_STATUS_OK
ReadX 13421 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13422 NT_STATUS_OK
ReadX 13422 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13423 NT_STATUS_OK
ReadX 13423 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13424 NT_STATUS_OK
ReadX 13424 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13425 NT_STATUS_OK
ReadX 13425 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13426 NT_STATUS_OK
ReadX 13426 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13427 NT_STATUS_OK
ReadX 13427 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13428 NT_STATUS_OK
ReadX 13428 0 8192 8192 NT_STATUS_OK
ReadX 13415 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13429 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13429 0 4096 4096 NT_STATUS_OK
ReadX 13429 4096 4096 4096 NT_STATUS_OK
ReadX 13429 8192 4096 4096 NT_STATUS_OK
WriteX 13415 0 4096 4096 NT_STATUS_OK
WriteX 13416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13430 0 4096 4096 NT_STATUS_OK
ReadX 13430 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13409 0 4096 4096 NT_STATUS_OK
WriteX 13410 0 4096 4096 NT_STATUS_OK
WriteX 13411 0 4096 4096 NT_STATUS_OK
WriteX 13412 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13434 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13435 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 1004 NT_STATUS_OK
WriteX 13435 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13435 258 NT_STATUS_OK
WriteX 13435 0 2048 2048 NT_STATUS_OK
Close 13435 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13436 NT_STATUS_OK
ReadX 13436 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13436 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13436 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13437 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13438 NT_STATUS_OK
ReadX 13438 0 4096 4096 NT_STATUS_OK
ReadX 13438 4096 4096 4096 NT_STATUS_OK
WriteX 13438 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13436 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13438 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13439 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13439 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13440 NT_STATUS_OK
ReadX 13440 0 4096 4096 NT_STATUS_OK
ReadX 13440 4096 4096 4096 NT_STATUS_OK
WriteX 13440 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13441 NT_STATUS_OK
QUERY_FILE_INFORMATION 13441 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13428 NT_STATUS_OK
Close 13413 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Close 13410 NT_STATUS_OK
Close 13411 NT_STATUS_OK
Close 13412 NT_STATUS_OK
Close 13421 NT_STATUS_OK
Close 13426 NT_STATUS_OK
Close 13422 NT_STATUS_OK
Close 13423 NT_STATUS_OK
Close 13424 NT_STATUS_OK
Close 13425 NT_STATUS_OK
Close 13427 NT_STATUS_OK
Close 13415 NT_STATUS_OK
Close 13416 NT_STATUS_OK
Close 13419 NT_STATUS_OK
Close 13420 NT_STATUS_OK
Close 13417 NT_STATUS_OK
Close 13418 NT_STATUS_OK
Close 13440 NT_STATUS_OK
Close 13429 NT_STATUS_OK
Close 13430 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13443 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13443 0 4096 4096 NT_STATUS_OK
ReadX 13443 4096 4096 4096 NT_STATUS_OK
ReadX 13443 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13444 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13444 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13445 NT_STATUS_OK
ReadX 13445 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13446 NT_STATUS_OK
ReadX 13446 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13447 NT_STATUS_OK
ReadX 13447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13448 NT_STATUS_OK
ReadX 13448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13449 NT_STATUS_OK
ReadX 13449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13450 NT_STATUS_OK
ReadX 13450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13451 NT_STATUS_OK
ReadX 13451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13452 NT_STATUS_OK
ReadX 13452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13453 NT_STATUS_OK
ReadX 13453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13454 NT_STATUS_OK
ReadX 13454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13455 NT_STATUS_OK
ReadX 13455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13456 NT_STATUS_OK
ReadX 13456 0 4096 4096 NT_STATUS_OK
ReadX 13444 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13461 NT_STATUS_OK
QUERY_FILE_INFORMATION 13461 1004 NT_STATUS_OK
WriteX 13461 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13461 258 NT_STATUS_OK
WriteX 13461 0 2048 2048 NT_STATUS_OK
Close 13461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13462 NT_STATUS_OK
ReadX 13462 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13462 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13466 NT_STATUS_OK
Close 13466 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13467 NT_STATUS_OK
QUERY_FILE_INFORMATION 13467 1004 NT_STATUS_OK
WriteX 13467 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13467 258 NT_STATUS_OK
WriteX 13467 0 2048 2048 NT_STATUS_OK
Close 13467 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13468 NT_STATUS_OK
ReadX 13468 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13468 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13451 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13469 NT_STATUS_OK
QUERY_FILE_INFORMATION 13469 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13455 NT_STATUS_OK
Close 13450 NT_STATUS_OK
Close 13456 NT_STATUS_OK
Close 13444 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Close 13448 NT_STATUS_OK
Close 13449 NT_STATUS_OK
Close 13446 NT_STATUS_OK
Close 13447 NT_STATUS_OK
Close 13451 NT_STATUS_OK
Close 13452 NT_STATUS_OK
Close 13453 NT_STATUS_OK
Close 13454 NT_STATUS_OK
Close 13443 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13471 NT_STATUS_OK
QUERY_FILE_INFORMATION 13471 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13473 NT_STATUS_OK
ReadX 13473 61440 4096 4096 NT_STATUS_OK
ReadX 13473 126976 4096 4096 NT_STATUS_OK
WriteX 13473 0 65536 65536 NT_STATUS_OK
WriteX 13473 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13474 NT_STATUS_OK
ReadX 13474 61440 4096 4096 NT_STATUS_OK
ReadX 13474 126976 4096 4096 NT_STATUS_OK
ReadX 13474 192512 4096 4096 NT_STATUS_OK
ReadX 13474 258048 4096 4096 NT_STATUS_OK
WriteX 13474 0 65536 65536 NT_STATUS_OK
WriteX 13474 65536 65536 65536 NT_STATUS_OK
WriteX 13474 131072 65536 65536 NT_STATUS_OK
WriteX 13474 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13475 NT_STATUS_OK
ReadX 13475 61440 4096 4096 NT_STATUS_OK
ReadX 13475 126976 4096 4096 NT_STATUS_OK
ReadX 13475 192512 4096 4096 NT_STATUS_OK
ReadX 13475 258048 4096 4096 NT_STATUS_OK
ReadX 13475 323584 4096 4096 NT_STATUS_OK
ReadX 13475 389120 4096 4096 NT_STATUS_OK
ReadX 13475 454656 4096 4096 NT_STATUS_OK
ReadX 13475 520192 4096 4096 NT_STATUS_OK
WriteX 13475 0 65536 65536 NT_STATUS_OK
WriteX 13475 65536 65536 65536 NT_STATUS_OK
WriteX 13475 131072 65536 65536 NT_STATUS_OK
WriteX 13475 196608 65536 65536 NT_STATUS_OK
WriteX 13475 262144 65536 65536 NT_STATUS_OK
WriteX 13475 327680 65536 65536 NT_STATUS_OK
WriteX 13475 393216 65536 65536 NT_STATUS_OK
WriteX 13475 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13476 NT_STATUS_OK
ReadX 13476 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13476 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13476 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13476 8192 4096 4096 NT_STATUS_OK
ReadX 13476 12288 4096 4096 NT_STATUS_OK
ReadX 13476 16384 4096 4096 NT_STATUS_OK
ReadX 13476 20480 4096 4096 NT_STATUS_OK
ReadX 13476 24576 4096 4096 NT_STATUS_OK
ReadX 13476 28672 4096 4096 NT_STATUS_OK
ReadX 13476 32768 4096 4096 NT_STATUS_OK
ReadX 13476 36864 4096 4096 NT_STATUS_OK
ReadX 13476 40960 4096 4096 NT_STATUS_OK
ReadX 13476 45056 4096 4096 NT_STATUS_OK
ReadX 13476 49152 4096 4096 NT_STATUS_OK
ReadX 13476 53248 4096 4096 NT_STATUS_OK
ReadX 13476 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13476 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13477 NT_STATUS_OK
Close 13477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13473 NT_STATUS_OK
Close 13474 NT_STATUS_OK
Close 13475 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13479 NT_STATUS_OK
WriteX 13479 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13479 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13479 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13479 1004 NT_STATUS_OK
WriteX 13479 0 57088 57088 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
Flush 13479 NT_STATUS_OK
Close 13476 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13480 NT_STATUS_OK
SET_FILE_INFORMATION 13480 1004 NT_STATUS_OK
Close 13480 NT_STATUS_OK
SET_FILE_INFORMATION 13479 1004 NT_STATUS_OK
WriteX 13479 0 4096 4096 NT_STATUS_OK
Close 13479 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13483 NT_STATUS_OK
ReadX 13483 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13483 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13484 NT_STATUS_OK
WriteX 13484 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13484 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13484 1004 NT_STATUS_OK
WriteX 13484 0 51456 51456 NT_STATUS_OK
WriteX 13484 0 4096 4096 NT_STATUS_OK
Flush 13484 NT_STATUS_OK
SET_FILE_INFORMATION 13484 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13484 1004 NT_STATUS_OK
WriteX 13484 0 4096 4096 NT_STATUS_OK
Close 13484 NT_STATUS_OK
Close 13483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13486 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13488 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13490 NT_STATUS_OK
Close 13490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13493 NT_STATUS_OK
WriteX 13493 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13493 258 NT_STATUS_OK
WriteX 13493 0 53077 53077 NT_STATUS_OK
Close 13493 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13494 NT_STATUS_OK
WriteX 13494 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13494 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13494 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
WriteX 13494 0 65536 65536 NT_STATUS_OK
WriteX 13494 65536 1856 1856 NT_STATUS_OK
WriteX 13494 0 4096 4096 NT_STATUS_OK
Flush 13494 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13494 1004 NT_STATUS_OK
WriteX 13494 0 4096 4096 NT_STATUS_OK
Close 13494 NT_STATUS_OK
Close 13488 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13496 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13498 NT_STATUS_OK
ReadX 13498 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13500 NT_STATUS_OK
Close 13500 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13503 NT_STATUS_OK
WriteX 13503 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13503 258 NT_STATUS_OK
WriteX 13503 0 7983 7983 NT_STATUS_OK
Close 13503 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13505 NT_STATUS_OK
Close 13505 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13508 NT_STATUS_OK
WriteX 13508 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13508 258 NT_STATUS_OK
WriteX 13508 0 65536 65536 NT_STATUS_OK
WriteX 13508 65536 65536 65536 NT_STATUS_OK
WriteX 13508 131072 65536 65536 NT_STATUS_OK
WriteX 13508 196608 65536 65536 NT_STATUS_OK
WriteX 13508 262144 65536 65536 NT_STATUS_OK
WriteX 13508 327680 65536 65536 NT_STATUS_OK
WriteX 13508 393216 65536 65536 NT_STATUS_OK
WriteX 13508 458752 46731 46731 NT_STATUS_OK
Close 13508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13509 NT_STATUS_OK
WriteX 13509 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13509 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13498 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13509 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13509 1004 NT_STATUS_OK
WriteX 13509 0 65536 65536 NT_STATUS_OK
WriteX 13509 65536 22848 22848 NT_STATUS_OK
WriteX 13509 0 4096 4096 NT_STATUS_OK
Flush 13509 NT_STATUS_OK
SET_FILE_INFORMATION 13509 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13509 1004 NT_STATUS_OK
WriteX 13509 0 4096 4096 NT_STATUS_OK
Close 13509 NT_STATUS_OK
Close 13498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13513 NT_STATUS_OK
ReadX 13513 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13513 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13514 NT_STATUS_OK
ReadX 13514 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13514 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13514 1004 NT_STATUS_OK
ReadX 13514 8192 4096 4096 NT_STATUS_OK
ReadX 13514 12288 4096 4096 NT_STATUS_OK
ReadX 13514 16384 4096 4096 NT_STATUS_OK
ReadX 13514 20480 4096 4096 NT_STATUS_OK
ReadX 13514 24576 4096 4096 NT_STATUS_OK
ReadX 13514 28672 4096 4096 NT_STATUS_OK
ReadX 13514 32768 4096 4096 NT_STATUS_OK
ReadX 13514 36864 4096 4096 NT_STATUS_OK
ReadX 13514 40960 4096 4096 NT_STATUS_OK
ReadX 13514 45056 4096 4096 NT_STATUS_OK
ReadX 13514 49152 4096 4096 NT_STATUS_OK
ReadX 13514 53248 4096 4096 NT_STATUS_OK
ReadX 13514 57344 4096 4096 NT_STATUS_OK
ReadX 13514 61440 4096 4096 NT_STATUS_OK
ReadX 13514 65536 4096 4096 NT_STATUS_OK
ReadX 13514 69632 4096 4096 NT_STATUS_OK
ReadX 13514 73728 4096 4096 NT_STATUS_OK
ReadX 13514 77824 4096 4096 NT_STATUS_OK
ReadX 13514 81920 4096 4096 NT_STATUS_OK
ReadX 13514 86016 4096 4096 NT_STATUS_OK
ReadX 13514 90112 4096 4096 NT_STATUS_OK
ReadX 13514 94208 4096 4096 NT_STATUS_OK
ReadX 13514 98304 4096 4096 NT_STATUS_OK
ReadX 13514 102400 4096 4096 NT_STATUS_OK
ReadX 13514 106496 4096 4096 NT_STATUS_OK
ReadX 13514 110592 4096 4096 NT_STATUS_OK
ReadX 13514 114688 4096 4096 NT_STATUS_OK
ReadX 13514 118784 4096 4096 NT_STATUS_OK
ReadX 13514 122880 4096 4096 NT_STATUS_OK
ReadX 13514 126976 4096 4096 NT_STATUS_OK
ReadX 13514 131072 4096 4096 NT_STATUS_OK
ReadX 13514 135168 4096 4096 NT_STATUS_OK
ReadX 13514 139264 4096 4096 NT_STATUS_OK
ReadX 13514 143360 4096 4096 NT_STATUS_OK
ReadX 13514 147456 4096 4096 NT_STATUS_OK
ReadX 13514 151552 4096 4096 NT_STATUS_OK
ReadX 13514 155648 4096 4096 NT_STATUS_OK
ReadX 13514 159744 4096 4096 NT_STATUS_OK
ReadX 13514 163840 4096 4096 NT_STATUS_OK
ReadX 13514 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13514 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13515 NT_STATUS_OK
Close 13515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13513 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13517 NT_STATUS_OK
WriteX 13517 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13517 258 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13518 NT_STATUS_OK
SET_FILE_INFORMATION 13518 1004 NT_STATUS_OK
Close 13518 NT_STATUS_OK
WriteX 13517 0 42388 42388 NT_STATUS_OK
Close 13517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13519 NT_STATUS_OK
Close 13519 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13521 NT_STATUS_OK
ReadX 13521 0 4096 4096 NT_STATUS_OK
ReadX 13521 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13522 NT_STATUS_OK
WriteX 13522 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13522 258 NT_STATUS_OK
SET_FILE_INFORMATION 13522 1004 NT_STATUS_OK
WriteX 13522 0 42652 42652 NT_STATUS_OK
Close 13522 NT_STATUS_OK
Close 13521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13524 NT_STATUS_OK
Close 13524 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 4096 4096 NT_STATUS_OK
ReadX 13526 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13528 NT_STATUS_OK
Close 13528 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13531 NT_STATUS_OK
WriteX 13531 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13531 258 NT_STATUS_OK
WriteX 13531 0 65536 65536 NT_STATUS_OK
WriteX 13531 65536 49 49 NT_STATUS_OK
Close 13531 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13532 NT_STATUS_OK
ReadX 13532 0 61440 61440 NT_STATUS_OK
ReadX 13532 61440 4096 4096 NT_STATUS_OK
ReadX 13532 65536 61440 61440 NT_STATUS_OK
ReadX 13532 126976 4096 4096 NT_STATUS_OK
ReadX 13532 131072 61440 61440 NT_STATUS_OK
ReadX 13532 192512 4096 4096 NT_STATUS_OK
ReadX 13532 196608 61440 61440 NT_STATUS_OK
ReadX 13532 258048 4096 4096 NT_STATUS_OK
ReadX 13532 262144 61440 61440 NT_STATUS_OK
ReadX 13532 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13533 NT_STATUS_OK
ReadX 13533 0 61440 61440 NT_STATUS_OK
ReadX 13533 61440 4096 4096 NT_STATUS_OK
ReadX 13533 65536 61440 61440 NT_STATUS_OK
ReadX 13533 126976 4096 4096 NT_STATUS_OK
ReadX 13533 131072 61440 61440 NT_STATUS_OK
ReadX 13533 192512 4096 4096 NT_STATUS_OK
ReadX 13533 196608 61440 61440 NT_STATUS_OK
ReadX 13533 258048 4096 4096 NT_STATUS_OK
ReadX 13533 262144 61440 61440 NT_STATUS_OK
ReadX 13533 323584 4096 4096 NT_STATUS_OK
ReadX 13533 327680 61440 61440 NT_STATUS_OK
ReadX 13533 389120 4096 4096 NT_STATUS_OK
ReadX 13533 393216 61440 61440 NT_STATUS_OK
ReadX 13533 454656 4096 4096 NT_STATUS_OK
ReadX 13533 458752 61440 61440 NT_STATUS_OK
ReadX 13533 520192 4096 4096 NT_STATUS_OK
ReadX 13533 524288 61440 61440 NT_STATUS_OK
ReadX 13533 585728 4096 4096 NT_STATUS_OK
ReadX 13533 589824 61440 61440 NT_STATUS_OK
ReadX 13533 651264 4096 4096 NT_STATUS_OK
ReadX 13533 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13534 NT_STATUS_OK
ReadX 13534 0 61440 61440 NT_STATUS_OK
ReadX 13534 61440 4096 4096 NT_STATUS_OK
ReadX 13534 65536 61440 61440 NT_STATUS_OK
ReadX 13534 126976 4096 4096 NT_STATUS_OK
ReadX 13534 131072 61440 61440 NT_STATUS_OK
ReadX 13534 192512 4096 4096 NT_STATUS_OK
ReadX 13534 196608 61440 61440 NT_STATUS_OK
ReadX 13534 258048 4096 4096 NT_STATUS_OK
ReadX 13534 262144 61440 61440 NT_STATUS_OK
ReadX 13534 323584 4096 4096 NT_STATUS_OK
ReadX 13534 327680 61440 61440 NT_STATUS_OK
ReadX 13534 389120 4096 4096 NT_STATUS_OK
ReadX 13534 393216 61440 61440 NT_STATUS_OK
ReadX 13534 454656 4096 4096 NT_STATUS_OK
ReadX 13534 458752 61440 61440 NT_STATUS_OK
ReadX 13534 520192 4096 4096 NT_STATUS_OK
ReadX 13534 524288 61440 61440 NT_STATUS_OK
ReadX 13534 585728 4096 4096 NT_STATUS_OK
ReadX 13534 589824 61440 61440 NT_STATUS_OK
ReadX 13534 651264 4096 4096 NT_STATUS_OK
ReadX 13534 655360 61440 61440 NT_STATUS_OK
ReadX 13534 716800 4096 4096 NT_STATUS_OK
ReadX 13534 720896 61440 61440 NT_STATUS_OK
ReadX 13534 782336 4096 4096 NT_STATUS_OK
ReadX 13534 786432 61440 61440 NT_STATUS_OK
ReadX 13534 847872 4096 4096 NT_STATUS_OK
ReadX 13534 851968 61440 61440 NT_STATUS_OK
ReadX 13534 913408 4096 4096 NT_STATUS_OK
ReadX 13534 917504 61440 61440 NT_STATUS_OK
ReadX 13534 978944 4096 4096 NT_STATUS_OK
ReadX 13534 983040 61440 61440 NT_STATUS_OK
ReadX 13534 1044480 4096 4096 NT_STATUS_OK
ReadX 13534 1048576 61440 61440 NT_STATUS_OK
ReadX 13534 1110016 4096 4096 NT_STATUS_OK
ReadX 13534 1114112 61440 61440 NT_STATUS_OK
ReadX 13534 1175552 4096 4096 NT_STATUS_OK
ReadX 13534 1179648 61440 61440 NT_STATUS_OK
ReadX 13534 1241088 4096 4096 NT_STATUS_OK
ReadX 13534 1245184 61440 61440 NT_STATUS_OK
ReadX 13534 1306624 4096 4096 NT_STATUS_OK
ReadX 13534 1310720 61440 61440 NT_STATUS_OK
ReadX 13534 1372160 4096 4096 NT_STATUS_OK
ReadX 13534 1376256 61440 61440 NT_STATUS_OK
ReadX 13534 1437696 4096 4096 NT_STATUS_OK
ReadX 13534 1441792 61440 61440 NT_STATUS_OK
ReadX 13534 1503232 4096 4096 NT_STATUS_OK
ReadX 13534 1507328 61440 61440 NT_STATUS_OK
ReadX 13534 1568768 4096 4096 NT_STATUS_OK
ReadX 13534 1572864 61440 61440 NT_STATUS_OK
ReadX 13534 1634304 4096 4096 NT_STATUS_OK
ReadX 13534 1638400 61440 61440 NT_STATUS_OK
ReadX 13534 1699840 4096 4096 NT_STATUS_OK
ReadX 13534 1703936 61440 61440 NT_STATUS_OK
ReadX 13534 1765376 4096 4096 NT_STATUS_OK
ReadX 13534 1769472 61440 61440 NT_STATUS_OK
ReadX 13534 1830912 4096 4096 NT_STATUS_OK
ReadX 13534 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13536 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13536 1005 NT_STATUS_OK
ReadX 13536 2156 24 24 NT_STATUS_OK
ReadX 13536 2139 276 276 NT_STATUS_OK
ReadX 13536 2136 14 14 NT_STATUS_OK
ReadX 13536 2136 7 7 NT_STATUS_OK
ReadX 13536 2138 12 12 NT_STATUS_OK
ReadX 13536 2137 8 8 NT_STATUS_OK
ReadX 13536 2135 15 15 NT_STATUS_OK
ReadX 13536 0 16 16 NT_STATUS_OK
ReadX 13536 16 2048 2048 NT_STATUS_OK
ReadX 13536 2064 2048 2048 NT_STATUS_OK
ReadX 13536 257 2048 2048 NT_STATUS_OK
ReadX 13536 385 2048 2048 NT_STATUS_OK
ReadX 13536 513 2048 2048 NT_STATUS_OK
ReadX 13536 641 2048 2048 NT_STATUS_OK
ReadX 13536 769 2048 2048 NT_STATUS_OK
ReadX 13536 897 2048 2048 NT_STATUS_OK
ReadX 13536 1025 2048 2048 NT_STATUS_OK
ReadX 13536 1153 2048 2048 NT_STATUS_OK
ReadX 13536 1281 2048 2048 NT_STATUS_OK
ReadX 13536 1409 2048 2048 NT_STATUS_OK
ReadX 13536 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13538 NT_STATUS_OK
Close 13538 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13532 NT_STATUS_OK
Close 13533 NT_STATUS_OK
Close 13534 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13541 NT_STATUS_OK
WriteX 13541 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13541 258 NT_STATUS_OK
WriteX 13541 0 10575 10575 NT_STATUS_OK
Flush 13541 NT_STATUS_OK
Close 13541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13542 NT_STATUS_OK
Close 13542 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13544 NT_STATUS_OK
ReadX 13544 0 4096 4096 NT_STATUS_OK
Close 13536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13545 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13546 NT_STATUS_OK
LockX 13546 2147483538 1 NT_STATUS_OK
UnlockX 13546 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13546 1005 NT_STATUS_OK
ReadX 13546 0 512 512 NT_STATUS_OK
ReadX 13546 512 512 512 NT_STATUS_OK
ReadX 13546 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13546 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13546 1004 NT_STATUS_OK
Close 13546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13547 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 1005 NT_STATUS_OK
ReadX 13547 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13548 NT_STATUS_OK
LockX 13548 2147483538 1 NT_STATUS_OK
UnlockX 13548 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13548 1005 NT_STATUS_OK
ReadX 13548 0 512 512 NT_STATUS_OK
ReadX 13548 512 512 512 NT_STATUS_OK
ReadX 13548 1024 512 512 NT_STATUS_OK
ReadX 13548 288 20 20 NT_STATUS_OK
ReadX 13548 308 2084 2084 NT_STATUS_OK
ReadX 13548 388 2084 2084 NT_STATUS_OK
ReadX 13548 388 2084 2084 NT_STATUS_OK
ReadX 13535 2157 1386 1386 NT_STATUS_OK
ReadX 13548 2472 399 399 NT_STATUS_OK
ReadX 13548 3072 1536 1536 NT_STATUS_OK
ReadX 13548 544 149 149 NT_STATUS_OK
ReadX 13548 693 485 485 NT_STATUS_OK
Close 13548 NT_STATUS_OK
ReadX 13535 2157 4096 4096 NT_STATUS_OK
ReadX 13535 6253 4096 4096 NT_STATUS_OK
ReadX 13535 10349 4096 4096 NT_STATUS_OK
ReadX 13535 14445 4096 4096 NT_STATUS_OK
ReadX 13535 18541 4096 4096 NT_STATUS_OK
ReadX 13535 22637 256 256 NT_STATUS_OK
ReadX 13535 22893 4096 4096 NT_STATUS_OK
ReadX 13535 26989 4096 4096 NT_STATUS_OK
ReadX 13535 31085 4096 4096 NT_STATUS_OK
ReadX 13535 35181 4096 4096 NT_STATUS_OK
ReadX 13535 39277 4096 4096 NT_STATUS_OK
ReadX 13535 43373 4096 4096 NT_STATUS_OK
ReadX 13535 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13535 2157 1024 1024 NT_STATUS_OK
ReadX 13535 1667 4688 4688 NT_STATUS_OK
ReadX 13535 6355 3516 3516 NT_STATUS_OK
ReadX 13535 9871 16384 16384 NT_STATUS_OK
ReadX 13535 26255 3771 3771 NT_STATUS_OK
ReadX 13535 30026 2048 2048 NT_STATUS_OK
ReadX 13535 32074 1024 1024 NT_STATUS_OK
ReadX 13535 33098 6652 6652 NT_STATUS_OK
ReadX 13535 39750 16384 16384 NT_STATUS_OK
ReadX 13535 56134 10496 10496 NT_STATUS_OK
ReadX 13535 66630 1784 1784 NT_STATUS_OK
ReadX 13535 68414 90 90 NT_STATUS_OK
ReadX 13535 68504 273 273 NT_STATUS_OK
ReadX 13535 68777 1600 1600 NT_STATUS_OK
ReadX 13535 70377 640 640 NT_STATUS_OK
ReadX 13535 71017 1280 1280 NT_STATUS_OK
ReadX 13535 72297 8464 8464 NT_STATUS_OK
ReadX 13535 80761 158 158 NT_STATUS_OK
ReadX 13535 80919 912 912 NT_STATUS_OK
ReadX 13535 81831 1980 1980 NT_STATUS_OK
ReadX 13535 83811 2256 2256 NT_STATUS_OK
ReadX 13535 86067 400 400 NT_STATUS_OK
ReadX 13535 86467 252 252 NT_STATUS_OK
ReadX 13535 86719 42 42 NT_STATUS_OK
ReadX 13535 86761 725 725 NT_STATUS_OK
ReadX 13535 2009 512 512 NT_STATUS_OK
ReadX 13535 3895 9 9 NT_STATUS_OK
ReadX 13535 3781 46 46 NT_STATUS_OK
ReadX 13535 4059 92 92 NT_STATUS_OK
ReadX 13535 3781 92 92 NT_STATUS_OK
ReadX 13535 3986 184 184 NT_STATUS_OK
ReadX 13535 3987 16384 16384 NT_STATUS_OK
ReadX 13535 3902 16384 16384 NT_STATUS_OK
ReadX 13535 3781 10240 10240 NT_STATUS_OK
ReadX 13535 3821 16384 16384 NT_STATUS_OK
ReadX 13535 3891 935 935 NT_STATUS_OK
ReadX 13535 4060 10240 10240 NT_STATUS_OK
ReadX 13535 4059 184 184 NT_STATUS_OK
ReadX 13535 256 184 184 NT_STATUS_OK
ReadX 13535 256 1026 1026 NT_STATUS_OK
ReadX 13535 3901 326 326 NT_STATUS_OK
ReadX 13535 3899 652 652 NT_STATUS_OK
ReadX 13535 256 2 2 NT_STATUS_OK
ReadX 13535 258 4948 4948 NT_STATUS_OK
Close 13535 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13550 NT_STATUS_OK
Close 13550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13553 NT_STATUS_OK
WriteX 13553 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13553 258 NT_STATUS_OK
WriteX 13553 0 65536 65536 NT_STATUS_OK
WriteX 13553 65536 65536 65536 NT_STATUS_OK
WriteX 13553 131072 65536 65536 NT_STATUS_OK
WriteX 13553 196608 65536 65536 NT_STATUS_OK
WriteX 13553 262144 65536 65536 NT_STATUS_OK
WriteX 13553 327680 65536 65536 NT_STATUS_OK
WriteX 13553 393216 65536 65536 NT_STATUS_OK
WriteX 13553 458752 65536 65536 NT_STATUS_OK
WriteX 13553 524288 65536 65536 NT_STATUS_OK
WriteX 13553 589824 35257 35257 NT_STATUS_OK
Close 13553 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13555 NT_STATUS_OK
Close 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13558 NT_STATUS_OK
WriteX 13558 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13558 258 NT_STATUS_OK
WriteX 13558 0 65536 65536 NT_STATUS_OK
WriteX 13558 65536 65536 65536 NT_STATUS_OK
WriteX 13558 131072 65536 65536 NT_STATUS_OK
WriteX 13558 196608 65536 65536 NT_STATUS_OK
WriteX 13558 262144 65536 65536 NT_STATUS_OK
WriteX 13558 327680 65536 65536 NT_STATUS_OK
WriteX 13558 393216 65536 65536 NT_STATUS_OK
WriteX 13558 458752 65536 65536 NT_STATUS_OK
WriteX 13558 524288 65536 65536 NT_STATUS_OK
WriteX 13558 589824 57598 57598 NT_STATUS_OK
Close 13558 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13560 NT_STATUS_OK
WriteX 13560 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13560 258 NT_STATUS_OK
WriteX 13560 0 12543 12543 NT_STATUS_OK
Flush 13560 NT_STATUS_OK
Close 13560 NT_STATUS_OK
Close 13544 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13562 NT_STATUS_OK
Close 13562 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13564 NT_STATUS_OK
ReadX 13564 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13565 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13566 NT_STATUS_OK
QUERY_FILE_INFORMATION 13566 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13566 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13566 1005 NT_STATUS_OK
ReadX 13566 1938 24 24 NT_STATUS_OK
ReadX 13566 1920 276 276 NT_STATUS_OK
ReadX 13566 1918 14 14 NT_STATUS_OK
ReadX 13566 1918 7 7 NT_STATUS_OK
ReadX 13566 1919 12 12 NT_STATUS_OK
ReadX 13566 1919 8 8 NT_STATUS_OK
ReadX 13566 1917 15 15 NT_STATUS_OK
ReadX 13566 0 16 16 NT_STATUS_OK
ReadX 13566 16 2048 2048 NT_STATUS_OK
ReadX 13566 2064 2048 2048 NT_STATUS_OK
ReadX 13566 257 2048 2048 NT_STATUS_OK
ReadX 13566 385 2048 2048 NT_STATUS_OK
ReadX 13566 513 2048 2048 NT_STATUS_OK
ReadX 13566 641 2048 2048 NT_STATUS_OK
ReadX 13566 769 2048 2048 NT_STATUS_OK
ReadX 13566 897 2048 2048 NT_STATUS_OK
ReadX 13566 1025 2048 2048 NT_STATUS_OK
ReadX 13566 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13568 NT_STATUS_OK
Close 13568 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13571 NT_STATUS_OK
WriteX 13571 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13571 258 NT_STATUS_OK
WriteX 13571 0 11588 11588 NT_STATUS_OK
Flush 13571 NT_STATUS_OK
Close 13571 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13572 NT_STATUS_OK
Close 13572 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13574 NT_STATUS_OK
ReadX 13574 0 4096 4096 NT_STATUS_OK
Close 13566 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13576 NT_STATUS_OK
WriteX 13576 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13576 258 NT_STATUS_OK
WriteX 13576 0 11615 11615 NT_STATUS_OK
Flush 13576 NT_STATUS_OK
Close 13576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13578 NT_STATUS_OK
Close 13578 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13580 NT_STATUS_OK
ReadX 13580 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13582 NT_STATUS_OK
Close 13582 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13585 NT_STATUS_OK
WriteX 13585 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13585 258 NT_STATUS_OK
WriteX 13585 0 65536 65536 NT_STATUS_OK
WriteX 13585 65536 16050 16050 NT_STATUS_OK
Close 13585 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13565 1939 64 64 NT_STATUS_OK
ReadX 13565 128 248 248 NT_STATUS_OK
ReadX 13565 128 568 568 NT_STATUS_OK
ReadX 13565 3872 1536 1536 NT_STATUS_OK
ReadX 13565 3456 2560 2560 NT_STATUS_OK
ReadX 13565 3136 512 512 NT_STATUS_OK
ReadX 13565 2880 4096 4096 NT_STATUS_OK
ReadX 13565 3264 3072 3072 NT_STATUS_OK
ReadX 13565 320 4096 4096 NT_STATUS_OK
ReadX 13565 1024 4096 4096 NT_STATUS_OK
ReadX 13565 3616 4096 4096 NT_STATUS_OK
ReadX 13565 1939 64 64 NT_STATUS_OK
ReadX 13565 128 248 248 NT_STATUS_OK
ReadX 13565 128 608 608 NT_STATUS_OK
ReadX 13565 2858 1024 1024 NT_STATUS_OK
ReadX 13565 2810 4096 4096 NT_STATUS_OK
ReadX 13565 2826 4096 4096 NT_STATUS_OK
ReadX 13565 2580 2048 2048 NT_STATUS_OK
ReadX 13565 2800 2560 2560 NT_STATUS_OK
ReadX 13565 2100 4096 4096 NT_STATUS_OK
ReadX 13565 2084 4096 4096 NT_STATUS_OK
ReadX 13565 868 4096 4096 NT_STATUS_OK
ReadX 13565 2324 4096 4096 NT_STATUS_OK
ReadX 13565 884 4096 4096 NT_STATUS_OK
ReadX 13565 2604 1024 1024 NT_STATUS_OK
ReadX 13565 580 4096 4096 NT_STATUS_OK
ReadX 13565 596 4096 4096 NT_STATUS_OK
ReadX 13565 2752 4096 4096 NT_STATUS_OK
ReadX 13565 2842 1024 1024 NT_STATUS_OK
ReadX 13565 660 4096 4096 NT_STATUS_OK
ReadX 13565 2720 4096 4096 NT_STATUS_OK
ReadX 13565 2736 4096 4096 NT_STATUS_OK
ReadX 13565 628 4096 4096 NT_STATUS_OK
ReadX 13565 2704 4096 4096 NT_STATUS_OK
ReadX 13565 1556 4096 4096 NT_STATUS_OK
ReadX 13565 576 4096 4096 NT_STATUS_OK
ReadX 13565 3168 1536 1536 NT_STATUS_OK
ReadX 13565 832 4096 4096 NT_STATUS_OK
ReadX 13565 1088 4096 4096 NT_STATUS_OK
ReadX 13565 1344 4096 4096 NT_STATUS_OK
ReadX 13565 1600 4096 4096 NT_STATUS_OK
ReadX 13565 1856 4096 4096 NT_STATUS_OK
ReadX 13565 2112 4096 4096 NT_STATUS_OK
ReadX 13565 1892 4096 4096 NT_STATUS_OK
ReadX 13565 820 4096 4096 NT_STATUS_OK
ReadX 13565 788 4096 4096 NT_STATUS_OK
ReadX 13565 1604 4096 4096 NT_STATUS_OK
ReadX 13565 3648 4096 4096 NT_STATUS_OK
ReadX 13565 2608 4096 4096 NT_STATUS_OK
ReadX 13565 548 4096 4096 NT_STATUS_OK
ReadX 13565 740 4096 4096 NT_STATUS_OK
ReadX 13565 1344 4096 4096 NT_STATUS_OK
ReadX 13565 3392 4096 4096 NT_STATUS_OK
ReadX 13565 3904 4096 4096 NT_STATUS_OK
ReadX 13565 644 4096 4096 NT_STATUS_OK
ReadX 13565 676 4096 4096 NT_STATUS_OK
ReadX 13565 2688 4096 4096 NT_STATUS_OK
ReadX 13565 320 4096 4096 NT_STATUS_OK
ReadX 13565 900 4096 4096 NT_STATUS_OK
ReadX 13565 1908 4096 4096 NT_STATUS_OK
ReadX 13565 852 4096 4096 NT_STATUS_OK
ReadX 13565 724 4096 4096 NT_STATUS_OK
ReadX 13565 2292 4096 4096 NT_STATUS_OK
ReadX 13565 612 4096 4096 NT_STATUS_OK
ReadX 13565 388 4096 4096 NT_STATUS_OK
ReadX 13565 2368 4096 4096 NT_STATUS_OK
ReadX 13565 2624 4096 4096 NT_STATUS_OK
ReadX 13565 500 4096 4096 NT_STATUS_OK
ReadX 13565 356 4096 4096 NT_STATUS_OK
ReadX 13565 1024 4096 4096 NT_STATUS_OK
ReadX 13565 576 4096 4096 NT_STATUS_OK
ReadX 13565 340 4096 4096 NT_STATUS_OK
ReadX 13565 420 4096 4096 NT_STATUS_OK
ReadX 13565 1600 4096 4096 NT_STATUS_OK
ReadX 13565 404 4096 4096 NT_STATUS_OK
ReadX 13565 1428 4096 4096 NT_STATUS_OK
ReadX 13565 2656 4096 4096 NT_STATUS_OK
ReadX 13565 2624 4096 4096 NT_STATUS_OK
ReadX 13565 452 4096 4096 NT_STATUS_OK
ReadX 13565 692 4096 4096 NT_STATUS_OK
ReadX 13565 564 4096 4096 NT_STATUS_OK
ReadX 13565 372 4096 4096 NT_STATUS_OK
ReadX 13565 468 4096 4096 NT_STATUS_OK
ReadX 13565 484 4096 4096 NT_STATUS_OK
ReadX 13565 1088 4096 4096 NT_STATUS_OK
ReadX 13565 1924 4096 4096 NT_STATUS_OK
ReadX 13565 2768 4096 4096 NT_STATUS_OK
ReadX 13565 832 4096 4096 NT_STATUS_OK
ReadX 13565 836 4096 4096 NT_STATUS_OK
ReadX 13565 1856 4096 4096 NT_STATUS_OK
ReadX 13565 2640 4096 4096 NT_STATUS_OK
ReadX 13565 436 4096 4096 NT_STATUS_OK
ReadX 13565 1828 4096 4096 NT_STATUS_OK
ReadX 13565 804 4096 4096 NT_STATUS_OK
ReadX 13565 1860 4096 4096 NT_STATUS_OK
ReadX 13565 1812 4096 4096 NT_STATUS_OK
ReadX 13565 756 4096 4096 NT_STATUS_OK
ReadX 13565 1636 4096 4096 NT_STATUS_OK
ReadX 13565 772 4096 4096 NT_STATUS_OK
ReadX 13565 2036 4096 4096 NT_STATUS_OK
ReadX 13565 1220 4096 4096 NT_STATUS_OK
ReadX 13565 1652 4096 4096 NT_STATUS_OK
ReadX 13565 2588 4096 4096 NT_STATUS_OK
ReadX 13565 916 4096 4096 NT_STATUS_OK
ReadX 13565 260 4096 4096 NT_STATUS_OK
ReadX 13565 932 4096 4096 NT_STATUS_OK
ReadX 13565 2624 4096 4096 NT_STATUS_OK
ReadX 13565 308 4096 4096 NT_STATUS_OK
ReadX 13565 292 4096 4096 NT_STATUS_OK
ReadX 13565 1140 4096 4096 NT_STATUS_OK
ReadX 13565 276 4096 4096 NT_STATUS_OK
ReadX 13565 2020 4096 4096 NT_STATUS_OK
ReadX 13565 2880 4096 4096 NT_STATUS_OK
ReadX 13565 516 4096 4096 NT_STATUS_OK
ReadX 13565 1844 4096 4096 NT_STATUS_OK
ReadX 13565 1124 4096 4096 NT_STATUS_OK
ReadX 13565 3136 4096 4096 NT_STATUS_OK
ReadX 13565 324 4096 4096 NT_STATUS_OK
ReadX 13565 1156 4096 4096 NT_STATUS_OK
ReadX 13565 1172 4096 4096 NT_STATUS_OK
ReadX 13565 2112 4096 4096 NT_STATUS_OK
ReadX 13565 2368 4096 4096 NT_STATUS_OK
ReadX 13565 964 4096 4096 NT_STATUS_OK
ReadX 13565 980 4096 4096 NT_STATUS_OK
ReadX 13565 1012 4096 4096 NT_STATUS_OK
ReadX 13565 532 4096 4096 NT_STATUS_OK
ReadX 13565 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13565 1620 4096 4096 NT_STATUS_OK
ReadX 13565 1604 4096 4096 NT_STATUS_OK
ReadX 13565 2116 4096 4096 NT_STATUS_OK
ReadX 13565 2132 4096 4096 NT_STATUS_OK
ReadX 13565 2148 4096 4096 NT_STATUS_OK
ReadX 13565 2276 4096 4096 NT_STATUS_OK
ReadX 13565 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13587 NT_STATUS_OK
Close 13587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13590 NT_STATUS_OK
QUERY_FILE_INFORMATION 13545 1004 NT_STATUS_OK
Close 13545 NT_STATUS_OK
WriteX 13590 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13590 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13547 1004 NT_STATUS_OK
Close 13547 NT_STATUS_OK
WriteX 13590 0 65536 65536 NT_STATUS_OK
WriteX 13590 65536 64850 64850 NT_STATUS_OK
Close 13590 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13592 NT_STATUS_OK
WriteX 13592 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13592 258 NT_STATUS_OK
ReadX 13565 2068 4096 4096 NT_STATUS_OK
ReadX 13565 1588 4096 4096 NT_STATUS_OK
ReadX 13565 1572 4096 4096 NT_STATUS_OK
WriteX 13592 0 18630 18630 NT_STATUS_OK
Flush 13592 NT_STATUS_OK
Close 13592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13594 NT_STATUS_OK
Close 13594 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13596 NT_STATUS_OK
ReadX 13596 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13565 612 4096 4096 NT_STATUS_OK
ReadX 13565 564 4096 4096 NT_STATUS_OK
ReadX 13565 1876 4096 4096 NT_STATUS_OK
ReadX 13565 628 4096 4096 NT_STATUS_OK
ReadX 13565 740 4096 4096 NT_STATUS_OK
ReadX 13565 724 4096 4096 NT_STATUS_OK
ReadX 13565 644 4096 4096 NT_STATUS_OK
ReadX 13565 2324 4096 4096 NT_STATUS_OK
ReadX 13565 660 4096 4096 NT_STATUS_OK
ReadX 13565 852 4096 4096 NT_STATUS_OK
ReadX 13565 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13565 2368 4096 4096 NT_STATUS_OK
ReadX 13565 1024 4096 4096 NT_STATUS_OK
ReadX 13565 320 4096 4096 NT_STATUS_OK
ReadX 13565 580 4096 4096 NT_STATUS_OK
ReadX 13565 3136 512 512 NT_STATUS_OK
ReadX 13565 2880 4096 4096 NT_STATUS_OK
Close 13565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13597 NT_STATUS_OK
ReadX 13597 61440 4096 4096 NT_STATUS_OK
ReadX 13597 126976 4096 4096 NT_STATUS_OK
WriteX 13597 0 65536 65536 NT_STATUS_OK
WriteX 13597 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13598 NT_STATUS_OK
ReadX 13598 61440 4096 4096 NT_STATUS_OK
ReadX 13598 126976 4096 4096 NT_STATUS_OK
ReadX 13598 192512 4096 4096 NT_STATUS_OK
ReadX 13598 258048 4096 4096 NT_STATUS_OK
WriteX 13598 0 65536 65536 NT_STATUS_OK
WriteX 13598 65536 65536 65536 NT_STATUS_OK
WriteX 13598 131072 65536 65536 NT_STATUS_OK
WriteX 13598 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13599 NT_STATUS_OK
ReadX 13599 61440 4096 4096 NT_STATUS_OK
ReadX 13599 126976 4096 4096 NT_STATUS_OK
ReadX 13599 192512 4096 4096 NT_STATUS_OK
ReadX 13599 258048 4096 4096 NT_STATUS_OK
ReadX 13599 323584 4096 4096 NT_STATUS_OK
ReadX 13599 389120 4096 4096 NT_STATUS_OK
ReadX 13599 454656 4096 4096 NT_STATUS_OK
ReadX 13599 520192 4096 4096 NT_STATUS_OK
WriteX 13599 0 65536 65536 NT_STATUS_OK
WriteX 13599 65536 65536 65536 NT_STATUS_OK
WriteX 13599 131072 65536 65536 NT_STATUS_OK
WriteX 13599 196608 65536 65536 NT_STATUS_OK
WriteX 13599 262144 65536 65536 NT_STATUS_OK
WriteX 13599 327680 65536 65536 NT_STATUS_OK
WriteX 13599 393216 65536 65536 NT_STATUS_OK
WriteX 13599 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13600 NT_STATUS_OK
ReadX 13600 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13601 NT_STATUS_OK
Close 13601 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13602 NT_STATUS_OK
WriteX 13602 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13602 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13600 0 8192 8192 NT_STATUS_OK
Flush 13600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13600 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13600 0 8192 8192 NT_STATUS_OK
Flush 13600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13600 0 8192 8192 NT_STATUS_OK
Flush 13600 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13600 0 8192 8192 NT_STATUS_OK
Flush 13600 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13604 NT_STATUS_OK
Close 13604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13596 NT_STATUS_OK
Close 13564 NT_STATUS_OK
Close 13597 NT_STATUS_OK
Close 13598 NT_STATUS_OK
Close 13599 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13607 NT_STATUS_OK
WriteX 13607 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13607 258 NT_STATUS_OK
WriteX 13607 0 62591 62591 NT_STATUS_OK
Close 13607 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13609 NT_STATUS_OK
Close 13609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13612 NT_STATUS_OK
WriteX 13612 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13612 258 NT_STATUS_OK
WriteX 13612 0 10845 10845 NT_STATUS_OK
Close 13612 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13614 NT_STATUS_OK
Close 13614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13617 NT_STATUS_OK
WriteX 13617 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13617 258 NT_STATUS_OK
WriteX 13617 0 30118 30118 NT_STATUS_OK
Close 13617 NT_STATUS_OK
WriteX 13600 0 4096 4096 NT_STATUS_OK
WriteX 13602 0 64 64 NT_STATUS_OK
Close 13602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13600 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13619 NT_STATUS_OK
ReadX 13619 0 61440 61440 NT_STATUS_OK
ReadX 13619 61440 4096 4096 NT_STATUS_OK
ReadX 13619 65536 61440 61440 NT_STATUS_OK
ReadX 13619 126976 4096 4096 NT_STATUS_OK
ReadX 13619 131072 61440 61440 NT_STATUS_OK
ReadX 13619 192512 4096 4096 NT_STATUS_OK
ReadX 13619 196608 61440 61440 NT_STATUS_OK
ReadX 13619 258048 4096 4096 NT_STATUS_OK
ReadX 13619 262144 61440 61440 NT_STATUS_OK
ReadX 13619 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13620 NT_STATUS_OK
ReadX 13620 0 61440 61440 NT_STATUS_OK
ReadX 13620 61440 4096 4096 NT_STATUS_OK
ReadX 13620 65536 61440 61440 NT_STATUS_OK
ReadX 13620 126976 4096 4096 NT_STATUS_OK
ReadX 13620 131072 61440 61440 NT_STATUS_OK
ReadX 13620 192512 4096 4096 NT_STATUS_OK
ReadX 13620 196608 61440 61440 NT_STATUS_OK
ReadX 13620 258048 4096 4096 NT_STATUS_OK
ReadX 13620 262144 61440 61440 NT_STATUS_OK
ReadX 13620 323584 4096 4096 NT_STATUS_OK
ReadX 13620 327680 61440 61440 NT_STATUS_OK
ReadX 13620 389120 4096 4096 NT_STATUS_OK
ReadX 13620 393216 61440 61440 NT_STATUS_OK
ReadX 13620 454656 4096 4096 NT_STATUS_OK
ReadX 13620 458752 61440 61440 NT_STATUS_OK
ReadX 13620 520192 4096 4096 NT_STATUS_OK
ReadX 13620 524288 61440 61440 NT_STATUS_OK
ReadX 13620 585728 4096 4096 NT_STATUS_OK
ReadX 13620 589824 61440 61440 NT_STATUS_OK
ReadX 13620 651264 4096 4096 NT_STATUS_OK
ReadX 13620 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13621 NT_STATUS_OK
ReadX 13621 0 61440 61440 NT_STATUS_OK
ReadX 13621 61440 4096 4096 NT_STATUS_OK
ReadX 13621 65536 61440 61440 NT_STATUS_OK
ReadX 13621 126976 4096 4096 NT_STATUS_OK
ReadX 13621 131072 61440 61440 NT_STATUS_OK
ReadX 13621 192512 4096 4096 NT_STATUS_OK
ReadX 13621 196608 61440 61440 NT_STATUS_OK
ReadX 13621 258048 4096 4096 NT_STATUS_OK
ReadX 13621 262144 61440 61440 NT_STATUS_OK
ReadX 13621 323584 4096 4096 NT_STATUS_OK
ReadX 13621 327680 61440 61440 NT_STATUS_OK
ReadX 13621 389120 4096 4096 NT_STATUS_OK
ReadX 13621 393216 61440 61440 NT_STATUS_OK
ReadX 13621 454656 4096 4096 NT_STATUS_OK
ReadX 13621 458752 61440 61440 NT_STATUS_OK
ReadX 13621 520192 4096 4096 NT_STATUS_OK
ReadX 13621 524288 61440 61440 NT_STATUS_OK
ReadX 13621 585728 4096 4096 NT_STATUS_OK
ReadX 13621 589824 61440 61440 NT_STATUS_OK
ReadX 13621 651264 4096 4096 NT_STATUS_OK
ReadX 13621 655360 61440 61440 NT_STATUS_OK
ReadX 13621 716800 4096 4096 NT_STATUS_OK
ReadX 13621 720896 61440 61440 NT_STATUS_OK
ReadX 13621 782336 4096 4096 NT_STATUS_OK
ReadX 13621 786432 61440 61440 NT_STATUS_OK
ReadX 13621 847872 4096 4096 NT_STATUS_OK
ReadX 13621 851968 61440 61440 NT_STATUS_OK
ReadX 13621 913408 4096 4096 NT_STATUS_OK
ReadX 13621 917504 61440 61440 NT_STATUS_OK
ReadX 13621 978944 4096 4096 NT_STATUS_OK
ReadX 13621 983040 61440 61440 NT_STATUS_OK
ReadX 13621 1044480 4096 4096 NT_STATUS_OK
ReadX 13621 1048576 61440 61440 NT_STATUS_OK
ReadX 13621 1110016 4096 4096 NT_STATUS_OK
ReadX 13621 1114112 61440 61440 NT_STATUS_OK
ReadX 13621 1175552 4096 4096 NT_STATUS_OK
ReadX 13621 1179648 61440 61440 NT_STATUS_OK
ReadX 13621 1241088 4096 4096 NT_STATUS_OK
ReadX 13621 1245184 61440 61440 NT_STATUS_OK
ReadX 13621 1306624 4096 4096 NT_STATUS_OK
ReadX 13621 1310720 61440 61440 NT_STATUS_OK
ReadX 13621 1372160 4096 4096 NT_STATUS_OK
ReadX 13621 1376256 61440 61440 NT_STATUS_OK
ReadX 13621 1437696 4096 4096 NT_STATUS_OK
ReadX 13621 1441792 61440 61440 NT_STATUS_OK
ReadX 13621 1503232 4096 4096 NT_STATUS_OK
ReadX 13621 1507328 61440 61440 NT_STATUS_OK
ReadX 13621 1568768 4096 4096 NT_STATUS_OK
ReadX 13621 1572864 61440 61440 NT_STATUS_OK
ReadX 13621 1634304 4096 4096 NT_STATUS_OK
ReadX 13621 1638400 61440 61440 NT_STATUS_OK
ReadX 13621 1699840 4096 4096 NT_STATUS_OK
ReadX 13621 1703936 61440 61440 NT_STATUS_OK
ReadX 13621 1765376 4096 4096 NT_STATUS_OK
ReadX 13621 1769472 61440 61440 NT_STATUS_OK
ReadX 13621 1830912 4096 4096 NT_STATUS_OK
ReadX 13621 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13619 NT_STATUS_OK
Close 13620 NT_STATUS_OK
Close 13621 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13624 NT_STATUS_OK
ReadX 13624 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13626 NT_STATUS_OK
ReadX 13626 0 4096 4096 NT_STATUS_OK
ReadX 13626 4096 4096 4096 NT_STATUS_OK
ReadX 13626 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13627 NT_STATUS_OK
Close 13627 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13624 NT_STATUS_OK
Close 13625 NT_STATUS_OK
Close 13626 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13629 NT_STATUS_OK
ReadX 13629 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13630 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13630 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13631 NT_STATUS_OK
Close 13631 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13629 NT_STATUS_OK
Close 13630 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13633 NT_STATUS_OK
ReadX 13633 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13634 NT_STATUS_OK
ReadX 13634 0 8192 8192 NT_STATUS_OK
ReadX 13634 8192 8192 8192 NT_STATUS_OK
ReadX 13634 16384 8192 8192 NT_STATUS_OK
ReadX 13634 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13636 NT_STATUS_OK
Close 13636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13634 NT_STATUS_OK
Close 13633 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13639 NT_STATUS_OK
WriteX 13639 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13639 258 NT_STATUS_OK
WriteX 13639 0 10438 10438 NT_STATUS_OK
Close 13639 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13640 NT_STATUS_OK
Close 13640 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13641 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13642 NT_STATUS_OK
Close 13642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13643 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13644 NT_STATUS_OK
Close 13644 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13645 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13646 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13646 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13647 NT_STATUS_OK
Close 13647 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13648 NT_STATUS_OK
ReadX 13648 0 4096 4096 NT_STATUS_OK
ReadX 13648 4096 4096 4096 NT_STATUS_OK
ReadX 13648 8192 4096 4096 NT_STATUS_OK
ReadX 13648 12288 8192 8192 NT_STATUS_OK
ReadX 13648 20480 8192 8192 NT_STATUS_OK
ReadX 13648 28672 8192 8192 NT_STATUS_OK
ReadX 13648 36864 8192 8192 NT_STATUS_OK
ReadX 13648 45056 8192 8192 NT_STATUS_OK
ReadX 13648 53248 8192 8192 NT_STATUS_OK
ReadX 13648 61440 8192 8192 NT_STATUS_OK
ReadX 13648 69632 8192 8192 NT_STATUS_OK
ReadX 13648 77824 8192 8192 NT_STATUS_OK
ReadX 13648 86016 8192 8192 NT_STATUS_OK
ReadX 13648 94208 8192 8192 NT_STATUS_OK
ReadX 13648 102400 8192 8192 NT_STATUS_OK
ReadX 13648 110592 8192 8192 NT_STATUS_OK
ReadX 13648 118784 8192 8192 NT_STATUS_OK
ReadX 13648 126976 8192 8192 NT_STATUS_OK
ReadX 13648 135168 8192 8192 NT_STATUS_OK
ReadX 13648 143360 8192 8192 NT_STATUS_OK
ReadX 13648 151552 8192 8192 NT_STATUS_OK
ReadX 13648 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13649 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13648 NT_STATUS_OK
Close 13641 NT_STATUS_OK
Close 13643 NT_STATUS_OK
Close 13645 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13650 NT_STATUS_OK
Close 13650 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13653 NT_STATUS_OK
WriteX 13653 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13653 258 NT_STATUS_OK
WriteX 13653 0 28489 28489 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13654 NT_STATUS_OK
Close 13654 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13656 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13656 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13657 NT_STATUS_OK
Close 13657 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13656 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13659 NT_STATUS_OK
ReadX 13659 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13660 NT_STATUS_OK
ReadX 13660 0 8192 8192 NT_STATUS_OK
ReadX 13660 8192 8192 8192 NT_STATUS_OK
ReadX 13660 16384 8192 8192 NT_STATUS_OK
ReadX 13660 24576 8192 8192 NT_STATUS_OK
ReadX 13660 32768 16384 16384 NT_STATUS_OK
ReadX 13660 49152 8192 8192 NT_STATUS_OK
ReadX 13660 57344 8192 8192 NT_STATUS_OK
ReadX 13660 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13662 NT_STATUS_OK
Close 13662 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13660 NT_STATUS_OK
Close 13659 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13665 NT_STATUS_OK
WriteX 13665 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13665 258 NT_STATUS_OK
WriteX 13665 0 29253 29253 NT_STATUS_OK
Close 13665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13666 NT_STATUS_OK
Close 13666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13669 NT_STATUS_OK
Close 13669 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13672 NT_STATUS_OK
WriteX 13672 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13672 258 NT_STATUS_OK
WriteX 13672 0 30183 30183 NT_STATUS_OK
Close 13672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13675 NT_STATUS_OK
WriteX 13675 0 510 510 NT_STATUS_OK
WriteX 13675 510 512 512 NT_STATUS_OK
WriteX 13675 1022 510 510 NT_STATUS_OK
WriteX 13675 1532 510 510 NT_STATUS_OK
WriteX 13675 2042 168 168 NT_STATUS_OK
Close 13675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13676 NT_STATUS_OK
Close 13676 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13678 NT_STATUS_OK
ReadX 13678 0 4096 4096 NT_STATUS_OK
WriteX 13678 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13679 NT_STATUS_OK
ReadX 13679 61440 4096 4096 NT_STATUS_OK
ReadX 13679 126976 4096 4096 NT_STATUS_OK
WriteX 13679 0 65536 65536 NT_STATUS_OK
WriteX 13679 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13680 NT_STATUS_OK
ReadX 13680 61440 4096 4096 NT_STATUS_OK
ReadX 13680 126976 4096 4096 NT_STATUS_OK
ReadX 13680 192512 4096 4096 NT_STATUS_OK
ReadX 13680 258048 4096 4096 NT_STATUS_OK
WriteX 13680 0 65536 65536 NT_STATUS_OK
WriteX 13680 65536 65536 65536 NT_STATUS_OK
WriteX 13680 131072 65536 65536 NT_STATUS_OK
WriteX 13680 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13681 NT_STATUS_OK
ReadX 13681 61440 4096 4096 NT_STATUS_OK
ReadX 13681 126976 4096 4096 NT_STATUS_OK
ReadX 13681 192512 4096 4096 NT_STATUS_OK
ReadX 13681 258048 4096 4096 NT_STATUS_OK
ReadX 13681 323584 4096 4096 NT_STATUS_OK
ReadX 13681 389120 4096 4096 NT_STATUS_OK
ReadX 13681 454656 4096 4096 NT_STATUS_OK
ReadX 13681 520192 4096 4096 NT_STATUS_OK
WriteX 13681 0 65536 65536 NT_STATUS_OK
WriteX 13681 65536 65536 65536 NT_STATUS_OK
WriteX 13681 131072 65536 65536 NT_STATUS_OK
WriteX 13681 196608 65536 65536 NT_STATUS_OK
WriteX 13681 262144 65536 65536 NT_STATUS_OK
WriteX 13681 327680 65536 65536 NT_STATUS_OK
WriteX 13681 393216 65536 65536 NT_STATUS_OK
WriteX 13681 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13678 NT_STATUS_OK
Close 13679 NT_STATUS_OK
Close 13680 NT_STATUS_OK
Close 13681 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13684 NT_STATUS_OK
Close 13684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13688 NT_STATUS_OK
Close 13688 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13691 NT_STATUS_OK
Close 13691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13693 NT_STATUS_OK
Close 13693 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13697 NT_STATUS_OK
Close 13697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13700 NT_STATUS_OK
Close 13700 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13702 NT_STATUS_OK
Close 13702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13706 NT_STATUS_OK
Close 13706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13711 NT_STATUS_OK
Close 13711 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13716 NT_STATUS_OK
Close 13716 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13721 NT_STATUS_OK
Close 13721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13726 NT_STATUS_OK
Close 13726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13731 NT_STATUS_OK
Close 13731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13736 NT_STATUS_OK
Close 13736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13741 NT_STATUS_OK
Close 13741 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13744 NT_STATUS_OK
Close 13744 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13747 NT_STATUS_OK
Close 13747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13750 NT_STATUS_OK
WriteX 13750 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13750 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13750 0 65536 65536 NT_STATUS_OK
WriteX 13750 65536 65536 65536 NT_STATUS_OK
WriteX 13750 131072 65536 65536 NT_STATUS_OK
WriteX 13750 196608 65536 65536 NT_STATUS_OK
WriteX 13750 262144 26634 26634 NT_STATUS_OK
Close 13750 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13755 NT_STATUS_OK
Close 13755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13756 NT_STATUS_OK
Close 13756 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13757 NT_STATUS_OK
ReadX 13757 0 4096 4096 NT_STATUS_OK
Close 13757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
ReadX 13758 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13759 NT_STATUS_OK
Close 13759 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13758 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13763 NT_STATUS_OK
Close 13763 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13766 NT_STATUS_OK
Close 13766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13768 NT_STATUS_OK
Close 13768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13772 NT_STATUS_OK
Close 13772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13775 NT_STATUS_OK
Close 13775 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13777 NT_STATUS_OK
Close 13777 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13781 NT_STATUS_OK
Close 13781 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13786 NT_STATUS_OK
Close 13786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13791 NT_STATUS_OK
Close 13791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13796 NT_STATUS_OK
Close 13796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13801 NT_STATUS_OK
Close 13801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13810 NT_STATUS_OK
Close 13810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13815 NT_STATUS_OK
Close 13815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13820 NT_STATUS_OK
Close 13820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13825 NT_STATUS_OK
Close 13825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13835 NT_STATUS_OK
Close 13835 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13836 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13837 NT_STATUS_OK
ReadX 13837 0 4096 4096 NT_STATUS_OK
Close 13837 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13838 NT_STATUS_OK
ReadX 13838 0 4096 4096 NT_STATUS_OK
Close 13838 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13839 NT_STATUS_OK
ReadX 13839 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13849 NT_STATUS_OK
Close 13849 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13850 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13851 NT_STATUS_OK
ReadX 13851 0 4096 4096 NT_STATUS_OK
Close 13851 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13852 NT_STATUS_OK
ReadX 13852 0 4096 4096 NT_STATUS_OK
Close 13852 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13853 NT_STATUS_OK
ReadX 13853 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13839 NT_STATUS_OK
Close 13853 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13882 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13882 0 4096 4096 NT_STATUS_OK
Close 13882 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13883 NT_STATUS_OK
ReadX 13883 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13883 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13884 NT_STATUS_OK
ReadX 13884 0 4096 4096 NT_STATUS_OK
ReadX 13884 4096 4096 4096 NT_STATUS_OK
ReadX 13884 8192 4096 4096 NT_STATUS_OK
ReadX 13884 12288 4096 4096 NT_STATUS_OK
ReadX 13884 16384 4096 4096 NT_STATUS_OK
ReadX 13884 20480 4096 4096 NT_STATUS_OK
ReadX 13884 24576 4096 4096 NT_STATUS_OK
ReadX 13884 28672 4096 4096 NT_STATUS_OK
ReadX 13884 32768 4096 4096 NT_STATUS_OK
ReadX 13884 36864 4096 4096 NT_STATUS_OK
ReadX 13884 40960 4096 4096 NT_STATUS_OK
ReadX 13884 45056 4096 4096 NT_STATUS_OK
ReadX 13884 49152 4096 4096 NT_STATUS_OK
ReadX 13884 53248 4096 4096 NT_STATUS_OK
ReadX 13884 57344 4096 4096 NT_STATUS_OK
ReadX 13884 61440 4096 4096 NT_STATUS_OK
ReadX 13884 65536 4096 4096 NT_STATUS_OK
ReadX 13884 69632 4096 4096 NT_STATUS_OK
ReadX 13884 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13884 1004 NT_STATUS_OK
WriteX 13884 0 4096 4096 NT_STATUS_OK
Close 13884 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13885 NT_STATUS_OK
SET_FILE_INFORMATION 13885 1004 NT_STATUS_OK
Close 13885 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13886 NT_STATUS_OK
ReadX 13886 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13887 NT_STATUS_OK
Close 13887 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13890 NT_STATUS_OK
WriteX 13890 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13890 258 NT_STATUS_OK
WriteX 13890 0 65536 65536 NT_STATUS_OK
WriteX 13890 65536 19979 19979 NT_STATUS_OK
Close 13890 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13891 NT_STATUS_OK
ReadX 13891 0 4096 4096 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
QUERY_FILE_INFORMATION 13891 1004 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
SET_FILE_INFORMATION 13891 1004 NT_STATUS_OK
WriteX 13891 0 4096 4096 NT_STATUS_OK
Flush 13891 NT_STATUS_OK
Close 13891 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13892 NT_STATUS_OK
ReadX 13892 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13893 NT_STATUS_OK
ReadX 13893 0 4096 4096 NT_STATUS_OK
Close 13892 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13894 NT_STATUS_OK
ReadX 13894 0 4096 4096 NT_STATUS_OK
Close 13894 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13895 NT_STATUS_OK
ReadX 13895 0 4096 4096 NT_STATUS_OK
Close 13895 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13896 NT_STATUS_OK
ReadX 13896 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13896 1004 NT_STATUS_OK
WriteX 13896 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13897 NT_STATUS_OK
Close 13897 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13893 NT_STATUS_OK
Close 13896 NT_STATUS_OK
Close 13886 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13899 NT_STATUS_OK
Close 13899 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13902 NT_STATUS_OK
WriteX 13902 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13902 258 NT_STATUS_OK
WriteX 13902 0 65536 65536 NT_STATUS_OK
WriteX 13902 65536 17654 17654 NT_STATUS_OK
Close 13902 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13903 NT_STATUS_OK
ReadX 13903 0 4096 4096 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
QUERY_FILE_INFORMATION 13903 1004 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
SET_FILE_INFORMATION 13903 1004 NT_STATUS_OK
WriteX 13903 0 4096 4096 NT_STATUS_OK
Flush 13903 NT_STATUS_OK
Close 13903 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13904 NT_STATUS_OK
SET_FILE_INFORMATION 13904 1004 NT_STATUS_OK
Close 13904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13905 NT_STATUS_OK
ReadX 13905 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13906 NT_STATUS_OK
Close 13906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13908 NT_STATUS_OK
ReadX 13908 0 4096 4096 NT_STATUS_OK
ReadX 13908 4096 4096 4096 NT_STATUS_OK
ReadX 13908 8192 4096 4096 NT_STATUS_OK
ReadX 13908 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13908 16384 4096 4096 NT_STATUS_OK
ReadX 13908 20480 4096 4096 NT_STATUS_OK
ReadX 13908 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13909 NT_STATUS_OK
ReadX 13909 0 4096 4096 NT_STATUS_OK
Close 13909 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13910 NT_STATUS_OK
ReadX 13910 0 4096 4096 NT_STATUS_OK
Close 13910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13911 NT_STATUS_OK
ReadX 13911 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13911 1004 NT_STATUS_OK
WriteX 13911 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13912 NT_STATUS_OK
Close 13912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13911 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13914 NT_STATUS_OK
Close 13914 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13917 NT_STATUS_OK
WriteX 13917 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13917 258 NT_STATUS_OK
WriteX 13917 0 65536 65536 NT_STATUS_OK
WriteX 13917 65536 19490 19490 NT_STATUS_OK
Close 13917 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13918 NT_STATUS_OK
ReadX 13918 0 4096 4096 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
QUERY_FILE_INFORMATION 13918 1004 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
SET_FILE_INFORMATION 13918 1004 NT_STATUS_OK
WriteX 13918 0 4096 4096 NT_STATUS_OK
Flush 13918 NT_STATUS_OK
Close 13918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13919 NT_STATUS_OK
SET_FILE_INFORMATION 13919 1004 NT_STATUS_OK
Close 13919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13920 NT_STATUS_OK
ReadX 13920 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13921 NT_STATUS_OK
Close 13921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13923 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13923 0 4096 4096 NT_STATUS_OK
Close 13923 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13924 NT_STATUS_OK
ReadX 13924 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13924 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13925 NT_STATUS_OK
ReadX 13925 0 4096 4096 NT_STATUS_OK
ReadX 13925 4096 4096 4096 NT_STATUS_OK
ReadX 13925 8192 4096 4096 NT_STATUS_OK
ReadX 13925 12288 4096 4096 NT_STATUS_OK
ReadX 13925 16384 4096 4096 NT_STATUS_OK
ReadX 13925 20480 4096 4096 NT_STATUS_OK
ReadX 13925 24576 4096 4096 NT_STATUS_OK
ReadX 13925 28672 4096 4096 NT_STATUS_OK
ReadX 13925 32768 4096 4096 NT_STATUS_OK
ReadX 13925 36864 4096 4096 NT_STATUS_OK
ReadX 13925 40960 4096 4096 NT_STATUS_OK
ReadX 13925 45056 4096 4096 NT_STATUS_OK
ReadX 13925 49152 4096 4096 NT_STATUS_OK
ReadX 13925 53248 4096 4096 NT_STATUS_OK
ReadX 13925 57344 4096 4096 NT_STATUS_OK
ReadX 13925 61440 4096 4096 NT_STATUS_OK
ReadX 13925 65536 4096 4096 NT_STATUS_OK
ReadX 13925 69632 4096 4096 NT_STATUS_OK
ReadX 13925 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13925 1004 NT_STATUS_OK
WriteX 13925 0 4096 4096 NT_STATUS_OK
Close 13925 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13926 NT_STATUS_OK
SET_FILE_INFORMATION 13926 1004 NT_STATUS_OK
Close 13926 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13927 NT_STATUS_OK
ReadX 13927 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13928 NT_STATUS_OK
Close 13928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13920 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13931 NT_STATUS_OK
WriteX 13931 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13931 258 NT_STATUS_OK
WriteX 13931 0 65536 65536 NT_STATUS_OK
WriteX 13931 65536 8866 8866 NT_STATUS_OK
Close 13931 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13932 NT_STATUS_OK
ReadX 13932 0 4096 4096 NT_STATUS_OK
WriteX 13932 0 4096 4096 NT_STATUS_OK
Flush 13932 NT_STATUS_OK
SET_FILE_INFORMATION 13932 1004 NT_STATUS_OK
WriteX 13932 0 4096 4096 NT_STATUS_OK
Flush 13932 NT_STATUS_OK
Close 13932 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13933 NT_STATUS_OK
ReadX 13933 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13933 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13934 NT_STATUS_OK
ReadX 13934 0 4096 4096 NT_STATUS_OK
Close 13934 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13935 NT_STATUS_OK
ReadX 13935 0 4096 4096 NT_STATUS_OK
Close 13935 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13936 NT_STATUS_OK
ReadX 13936 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13936 1004 NT_STATUS_OK
WriteX 13936 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13937 NT_STATUS_OK
Close 13937 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13936 NT_STATUS_OK
Close 13927 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13939 NT_STATUS_OK
Close 13939 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13942 NT_STATUS_OK
WriteX 13942 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13942 258 NT_STATUS_OK
WriteX 13942 0 65536 65536 NT_STATUS_OK
WriteX 13942 65536 9298 9298 NT_STATUS_OK
Close 13942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13943 NT_STATUS_OK
ReadX 13943 0 4096 4096 NT_STATUS_OK
WriteX 13943 0 4096 4096 NT_STATUS_OK
Flush 13943 NT_STATUS_OK
SET_FILE_INFORMATION 13943 1004 NT_STATUS_OK
WriteX 13943 0 4096 4096 NT_STATUS_OK
Flush 13943 NT_STATUS_OK
Close 13943 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13944 NT_STATUS_OK
SET_FILE_INFORMATION 13944 1004 NT_STATUS_OK
Close 13944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13945 NT_STATUS_OK
ReadX 13945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13946 NT_STATUS_OK
Close 13946 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13949 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13949 0 4096 4096 NT_STATUS_OK
Close 13949 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13950 NT_STATUS_OK
ReadX 13950 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13950 4096 4096 4096 NT_STATUS_OK
ReadX 13950 8192 4096 4096 NT_STATUS_OK
ReadX 13950 12288 4096 4096 NT_STATUS_OK
ReadX 13950 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13945 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13951 NT_STATUS_OK
ReadX 13951 0 4096 4096 NT_STATUS_OK
Close 13951 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13952 NT_STATUS_OK
ReadX 13952 0 4096 4096 NT_STATUS_OK
Close 13952 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13953 NT_STATUS_OK
ReadX 13953 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13953 1004 NT_STATUS_OK
WriteX 13953 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13954 NT_STATUS_OK
Close 13954 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13950 NT_STATUS_OK
Close 13953 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13956 NT_STATUS_OK
Close 13956 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13959 NT_STATUS_OK
WriteX 13959 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13959 258 NT_STATUS_OK
WriteX 13959 0 65536 65536 NT_STATUS_OK
WriteX 13959 65536 11540 11540 NT_STATUS_OK
Close 13959 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13960 NT_STATUS_OK
ReadX 13960 0 4096 4096 NT_STATUS_OK
WriteX 13960 0 4096 4096 NT_STATUS_OK
Flush 13960 NT_STATUS_OK
SET_FILE_INFORMATION 13960 1004 NT_STATUS_OK
WriteX 13960 0 4096 4096 NT_STATUS_OK
Flush 13960 NT_STATUS_OK
Close 13960 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13961 NT_STATUS_OK
SET_FILE_INFORMATION 13961 1004 NT_STATUS_OK
Close 13961 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13962 NT_STATUS_OK
ReadX 13962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13963 NT_STATUS_OK
Close 13963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13965 NT_STATUS_OK
ReadX 13965 61440 4096 4096 NT_STATUS_OK
ReadX 13965 126976 4096 4096 NT_STATUS_OK
WriteX 13965 0 65536 65536 NT_STATUS_OK
WriteX 13965 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13966 NT_STATUS_OK
ReadX 13966 61440 4096 4096 NT_STATUS_OK
ReadX 13966 126976 4096 4096 NT_STATUS_OK
ReadX 13966 192512 4096 4096 NT_STATUS_OK
ReadX 13966 258048 4096 4096 NT_STATUS_OK
WriteX 13966 0 65536 65536 NT_STATUS_OK
WriteX 13966 65536 65536 65536 NT_STATUS_OK
WriteX 13966 131072 65536 65536 NT_STATUS_OK
WriteX 13966 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13967 NT_STATUS_OK
ReadX 13967 61440 4096 4096 NT_STATUS_OK
ReadX 13967 126976 4096 4096 NT_STATUS_OK
ReadX 13967 192512 4096 4096 NT_STATUS_OK
ReadX 13967 258048 4096 4096 NT_STATUS_OK
ReadX 13967 323584 4096 4096 NT_STATUS_OK
ReadX 13967 389120 4096 4096 NT_STATUS_OK
ReadX 13967 454656 4096 4096 NT_STATUS_OK
ReadX 13967 520192 4096 4096 NT_STATUS_OK
WriteX 13967 0 65536 65536 NT_STATUS_OK
WriteX 13967 65536 65536 65536 NT_STATUS_OK
WriteX 13967 131072 65536 65536 NT_STATUS_OK
WriteX 13967 196608 65536 65536 NT_STATUS_OK
WriteX 13967 262144 65536 65536 NT_STATUS_OK
WriteX 13967 327680 65536 65536 NT_STATUS_OK
WriteX 13967 393216 65536 65536 NT_STATUS_OK
WriteX 13967 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13968 NT_STATUS_OK
ReadX 13968 0 4096 4096 NT_STATUS_OK
ReadX 13968 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13969 NT_STATUS_OK
WriteX 13969 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13969 258 NT_STATUS_OK
WriteX 13969 0 53 53 NT_STATUS_OK
Close 13969 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13970 NT_STATUS_OK
Close 13970 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13962 NT_STATUS_OK
Close 13908 NT_STATUS_OK
Close 13965 NT_STATUS_OK
Close 13966 NT_STATUS_OK
Close 13967 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13968 8192 4096 4096 NT_STATUS_OK
ReadX 13968 12288 4096 4096 NT_STATUS_OK
WriteX 13972 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13972 258 NT_STATUS_OK
ReadX 13968 16384 4096 4096 NT_STATUS_OK
ReadX 13968 20480 4096 4096 NT_STATUS_OK
WriteX 13972 0 15360 15360 NT_STATUS_OK
Close 13972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13973 NT_STATUS_OK
ReadX 13973 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13973 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13973 1004 NT_STATUS_OK
WriteX 13973 0 4096 4096 NT_STATUS_OK
Close 13973 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13974 NT_STATUS_OK
Close 13974 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13976 NT_STATUS_OK
ReadX 13976 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13977 NT_STATUS_OK
Close 13977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13976 4096 4096 4096 NT_STATUS_OK
ReadX 13976 8192 4096 4096 NT_STATUS_OK
ReadX 13976 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13979 NT_STATUS_OK
ReadX 13979 0 4096 4096 NT_STATUS_OK
ReadX 13979 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13980 NT_STATUS_OK
ReadX 13980 0 4096 4096 NT_STATUS_OK
ReadX 13980 4096 4096 4096 NT_STATUS_OK
ReadX 13980 8192 4096 4096 NT_STATUS_OK
Close 13979 NT_STATUS_OK
Close 13980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13981 NT_STATUS_OK
WriteX 13981 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13981 258 NT_STATUS_OK
WriteX 13981 0 15360 15360 NT_STATUS_OK
Close 13981 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13982 NT_STATUS_OK
ReadX 13982 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13982 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13982 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13976 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13983 NT_STATUS_OK
Close 13983 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13985 NT_STATUS_OK
ReadX 13985 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13986 NT_STATUS_OK
SET_FILE_INFORMATION 13986 1004 NT_STATUS_OK
Close 13986 NT_STATUS_OK
WriteX 13982 0 4096 4096 NT_STATUS_OK
Close 13982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13987 NT_STATUS_OK
Close 13987 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13989 NT_STATUS_OK
ReadX 13989 0 4096 4096 NT_STATUS_OK
ReadX 13989 4096 4096 4096 NT_STATUS_OK
ReadX 13989 8192 4096 4096 NT_STATUS_OK
ReadX 13989 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13989 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13989 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13990 NT_STATUS_OK
ReadX 13990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13991 NT_STATUS_OK
WriteX 13991 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13991 258 NT_STATUS_OK
WriteX 13991 0 53 53 NT_STATUS_OK
Close 13991 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13992 NT_STATUS_OK
Close 13992 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13990 4096 4096 4096 NT_STATUS_OK
ReadX 13990 8192 4096 4096 NT_STATUS_OK
ReadX 13990 12288 4096 4096 NT_STATUS_OK
WriteX 13994 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13994 258 NT_STATUS_OK
WriteX 13994 0 12006 12006 NT_STATUS_OK
Close 13994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13995 NT_STATUS_OK
ReadX 13995 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13995 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13995 1004 NT_STATUS_OK
WriteX 13995 0 4096 4096 NT_STATUS_OK
Close 13995 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13996 NT_STATUS_OK
Close 13996 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13998 NT_STATUS_OK
ReadX 13998 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13999 NT_STATUS_OK
Close 13999 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13998 4096 4096 4096 NT_STATUS_OK
ReadX 13998 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 14001 NT_STATUS_OK
WriteX 14001 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14001 258 NT_STATUS_OK
WriteX 14001 0 11991 11991 NT_STATUS_OK
Close 14001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 14002 NT_STATUS_OK
ReadX 14002 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14002 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14002 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13990 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 14003 NT_STATUS_OK
Close 14003 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 14005 NT_STATUS_OK
ReadX 14005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 14006 NT_STATUS_OK
SET_FILE_INFORMATION 14006 1004 NT_STATUS_OK
Close 14006 NT_STATUS_OK
WriteX 14002 0 4096 4096 NT_STATUS_OK
Close 14002 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 14007 NT_STATUS_OK
Close 14007 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 14009 NT_STATUS_OK
ReadX 14009 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 14010 NT_STATUS_OK
Close 14010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 14009 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 14009 1004 NT_STATUS_OK
ReadX 14009 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 14009 1004 NT_STATUS_OK
WriteX 14009 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 14009 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14009 1004 NT_STATUS_OK
SET_FILE_INFORMATION 14009 1004 NT_STATUS_OK
Close 13985 NT_STATUS_OK
WriteX 13989 0 19054 19054 NT_STATUS_OK
WriteX 14009 0 12288 12288 NT_STATUS_OK
Close 14005 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 14012 NT_STATUS_OK
Close 14012 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13989 NT_STATUS_OK
Close 14009 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 14014 NT_STATUS_OK
Close 14014 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 14016 NT_STATUS_OK
ReadX 14016 0 61440 61440 NT_STATUS_OK
ReadX 14016 61440 4096 4096 NT_STATUS_OK
ReadX 14016 65536 61440 61440 NT_STATUS_OK
ReadX 14016 126976 4096 4096 NT_STATUS_OK
ReadX 14016 131072 61440 61440 NT_STATUS_OK
ReadX 14016 192512 4096 4096 NT_STATUS_OK
ReadX 14016 196608 61440 61440 NT_STATUS_OK
ReadX 14016 258048 4096 4096 NT_STATUS_OK
ReadX 14016 262144 61440 61440 NT_STATUS_OK
ReadX 14016 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 14017 NT_STATUS_OK
ReadX 14017 0 61440 61440 NT_STATUS_OK
ReadX 14017 61440 4096 4096 NT_STATUS_OK
ReadX 14017 65536 61440 61440 NT_STATUS_OK
ReadX 14017 126976 4096 4096 NT_STATUS_OK
ReadX 14017 131072 61440 61440 NT_STATUS_OK
ReadX 14017 192512 4096 4096 NT_STATUS_OK
ReadX 14017 196608 61440 61440 NT_STATUS_OK
ReadX 14017 258048 4096 4096 NT_STATUS_OK
ReadX 14017 262144 61440 61440 NT_STATUS_OK
ReadX 14017 323584 4096 4096 NT_STATUS_OK
ReadX 14017 327680 61440 61440 NT_STATUS_OK
ReadX 14017 389120 4096 4096 NT_STATUS_OK
ReadX 14017 393216 61440 61440 NT_STATUS_OK
ReadX 14017 454656 4096 4096 NT_STATUS_OK
ReadX 14017 458752 61440 61440 NT_STATUS_OK
ReadX 14017 520192 4096 4096 NT_STATUS_OK
ReadX 14017 524288 61440 61440 NT_STATUS_OK
ReadX 14017 585728 4096 4096 NT_STATUS_OK
ReadX 14017 589824 61440 61440 NT_STATUS_OK
ReadX 14017 651264 4096 4096 NT_STATUS_OK
ReadX 14017 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 14018 NT_STATUS_OK
ReadX 14018 0 61440 61440 NT_STATUS_OK
ReadX 14018 61440 4096 4096 NT_STATUS_OK
ReadX 14018 65536 61440 61440 NT_STATUS_OK
ReadX 14018 126976 4096 4096 NT_STATUS_OK
ReadX 14018 131072 61440 61440 NT_STATUS_OK
ReadX 14018 192512 4096 4096 NT_STATUS_OK
ReadX 14018 196608 61440 61440 NT_STATUS_OK
ReadX 14018 258048 4096 4096 NT_STATUS_OK
ReadX 14018 262144 61440 61440 NT_STATUS_OK
ReadX 14018 323584 4096 4096 NT_STATUS_OK
ReadX 14018 327680 61440 61440 NT_STATUS_OK
ReadX 14018 389120 4096 4096 NT_STATUS_OK
ReadX 14018 393216 61440 61440 NT_STATUS_OK
ReadX 14018 454656 4096 4096 NT_STATUS_OK
ReadX 14018 458752 61440 61440 NT_STATUS_OK
ReadX 14018 520192 4096 4096 NT_STATUS_OK
ReadX 14018 524288 61440 61440 NT_STATUS_OK
ReadX 14018 585728 4096 4096 NT_STATUS_OK
ReadX 14018 589824 61440 61440 NT_STATUS_OK
ReadX 14018 651264 4096 4096 NT_STATUS_OK
ReadX 14018 655360 61440 61440 NT_STATUS_OK
ReadX 14018 716800 4096 4096 NT_STATUS_OK
ReadX 14018 720896 61440 61440 NT_STATUS_OK
ReadX 14018 782336 4096 4096 NT_STATUS_OK
ReadX 14018 786432 61440 61440 NT_STATUS_OK
ReadX 14018 847872 4096 4096 NT_STATUS_OK
ReadX 14018 851968 61440 61440 NT_STATUS_OK
ReadX 14018 913408 4096 4096 NT_STATUS_OK
ReadX 14018 917504 61440 61440 NT_STATUS_OK
ReadX 14018 978944 4096 4096 NT_STATUS_OK
ReadX 14018 983040 61440 61440 NT_STATUS_OK
ReadX 14018 1044480 4096 4096 NT_STATUS_OK
ReadX 14018 1048576 61440 61440 NT_STATUS_OK
ReadX 14018 1110016 4096 4096 NT_STATUS_OK
ReadX 14018 1114112 61440 61440 NT_STATUS_OK
ReadX 14018 1175552 4096 4096 NT_STATUS_OK
ReadX 14018 1179648 61440 61440 NT_STATUS_OK
ReadX 14018 1241088 4096 4096 NT_STATUS_OK
ReadX 14018 1245184 61440 61440 NT_STATUS_OK
ReadX 14018 1306624 4096 4096 NT_STATUS_OK
ReadX 14018 1310720 61440 61440 NT_STATUS_OK
ReadX 14018 1372160 4096 4096 NT_STATUS_OK
ReadX 14018 1376256 61440 61440 NT_STATUS_OK
ReadX 14018 1437696 4096 4096 NT_STATUS_OK
ReadX 14018 1441792 61440 61440 NT_STATUS_OK
ReadX 14018 1503232 4096 4096 NT_STATUS_OK
ReadX 14018 1507328 61440 61440 NT_STATUS_OK
ReadX 14018 1568768 4096 4096 NT_STATUS_OK
ReadX 14018 1572864 61440 61440 NT_STATUS_OK
ReadX 14018 1634304 4096 4096 NT_STATUS_OK
ReadX 14018 1638400 61440 61440 NT_STATUS_OK
ReadX 14018 1699840 4096 4096 NT_STATUS_OK
ReadX 14018 1703936 61440 61440 NT_STATUS_OK
ReadX 14018 1765376 4096 4096 NT_STATUS_OK
ReadX 14018 1769472 61440 61440 NT_STATUS_OK
ReadX 14018 1830912 4096 4096 NT_STATUS_OK
ReadX 14018 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14019 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14019 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14020 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14020 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14021 NT_STATUS_OK
ReadX 14021 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14022 NT_STATUS_OK
ReadX 14022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14023 NT_STATUS_OK
ReadX 14023 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 14024 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14024 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 14025 NT_STATUS_OK
QUERY_FILE_INFORMATION 14025 1004 NT_STATUS_OK
WriteX 14025 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14025 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 14026 NT_STATUS_OK
Close 14026 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 14027 NT_STATUS_OK
WriteX 14027 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14027 258 NT_STATUS_OK
WriteX 14027 0 491 491 NT_STATUS_OK
Close 14027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 14028 NT_STATUS_OK
ReadX 14028 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 14025 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 14030 NT_STATUS_OK
Close 14030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14031 NT_STATUS_OK
WriteX 14031 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14031 258 NT_STATUS_OK
WriteX 14031 0 543 543 NT_STATUS_OK
Close 14031 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14032 NT_STATUS_OK
ReadX 14032 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14028 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 14016 NT_STATUS_OK
Close 14017 NT_STATUS_OK
Close 14018 NT_STATUS_OK
Close 14032 NT_STATUS_OK
Close 14020 NT_STATUS_OK
Close 14021 NT_STATUS_OK
Close 14022 NT_STATUS_OK
Close 14023 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 14025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14035 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 14036 NT_STATUS_OK
ReadX 14036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 14037 NT_STATUS_OK
ReadX 14037 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 14038 NT_STATUS_OK
ReadX 14038 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 14039 NT_STATUS_OK
ReadX 14039 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14040 NT_STATUS_OK
ReadX 14040 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 14044 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14045 NT_STATUS_OK
QUERY_FILE_INFORMATION 14045 1004 NT_STATUS_OK
WriteX 14045 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14045 258 NT_STATUS_OK
WriteX 14045 0 2048 2048 NT_STATUS_OK
Close 14045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14046 NT_STATUS_OK
ReadX 14046 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 14046 0 4096 4096 NT_STATUS_OK
Flush 14046 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 14046 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 14050 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14050 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 14051 NT_STATUS_OK
WriteX 14051 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14051 258 NT_STATUS_OK
WriteX 14051 0 2048 2048 NT_STATUS_OK
Close 14051 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 14052 NT_STATUS_OK
ReadX 14052 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 14056 NT_STATUS_OK
Close 14056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 14057 NT_STATUS_OK
WriteX 14057 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14057 258 NT_STATUS_OK
WriteX 14057 0 2048 2048 NT_STATUS_OK
Close 14057 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 14058 NT_STATUS_OK
ReadX 14058 0 2048 2048 NT_STATUS_OK
ReadX 14036 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 14040 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 14052 0 4096 4096 NT_STATUS_OK
WriteX 14036 0 8192 8192 NT_STATUS_OK
WriteX 14037 0 4096 4096 NT_STATUS_OK
WriteX 14038 0 4096 4096 NT_STATUS_OK
ReadX 14052 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14036 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 14061 NT_STATUS_OK
ReadX 14061 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 14046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 14062 NT_STATUS_OK
QUERY_FILE_INFORMATION 14062 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 14062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 14061 NT_STATUS_OK
Close 14037 NT_STATUS_OK
Close 14038 NT_STATUS_OK
Close 14039 NT_STATUS_OK
Close 14052 NT_STATUS_OK
Close 14036 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14064 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 14065 NT_STATUS_OK
ReadX 14065 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 14066 NT_STATUS_OK
ReadX 14066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 14067 NT_STATUS_OK
ReadX 14067 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 14068 NT_STATUS_OK
ReadX 14068 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 14069 NT_STATUS_OK
ReadX 14069 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 14070 NT_STATUS_OK
ReadX 14070 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 14071 NT_STATUS_OK
ReadX 14071 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 14072 NT_STATUS_OK
ReadX 14072 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14073 NT_STATUS_OK
ReadX 14073 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 14074 NT_STATUS_OK
ReadX 14074 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 14075 NT_STATUS_OK
ReadX 14075 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 14076 NT_STATUS_OK
ReadX 14076 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 14077 NT_STATUS_OK
ReadX 14077 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 14081 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14081 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14082 NT_STATUS_OK
QUERY_FILE_INFORMATION 14082 1004 NT_STATUS_OK
WriteX 14082 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14082 258 NT_STATUS_OK
WriteX 14082 0 2048 2048 NT_STATUS_OK
Close 14082 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 14083 NT_STATUS_OK
ReadX 14083 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14073 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14084 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 14084 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 14085 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14085 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 14089 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14089 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14090 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 1004 NT_STATUS_OK
WriteX 14090 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14090 258 NT_STATUS_OK
WriteX 14090 0 2048 2048 NT_STATUS_OK
Close 14090 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 14091 NT_STATUS_OK
ReadX 14091 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14083 0 4096 4096 NT_STATUS_OK
Flush 14083 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
Flush 14091 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 14083 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 14091 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 14085 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 14092 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 14092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14093 NT_STATUS_OK
WriteX 14093 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 14093 258 NT_STATUS_OK
WriteX 14093 0 4096 4096 NT_STATUS_OK
Close 14093 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 14094 NT_STATUS_OK
ReadX 14094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 14095 NT_STATUS_OK
Close 14095 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10148 NT_STATUS_OK
WriteX 10148 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10148 258 NT_STATUS_OK
WriteX 10148 0 4096 4096 NT_STATUS_OK
Close 10148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10149 NT_STATUS_OK
ReadX 10149 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10149 0 4096 4096 NT_STATUS_OK
Close 14094 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 14077 NT_STATUS_OK
Close 14071 NT_STATUS_OK
Close 14085 NT_STATUS_OK
Close 14074 NT_STATUS_OK
Close 14075 NT_STATUS_OK
Close 14076 NT_STATUS_OK
Close 14072 NT_STATUS_OK
Close 14065 NT_STATUS_OK
Close 14066 NT_STATUS_OK
Close 14069 NT_STATUS_OK
Close 14070 NT_STATUS_OK
Close 14067 NT_STATUS_OK
Close 14068 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10152 NT_STATUS_OK
Close 10152 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10154 NT_STATUS_OK
ReadX 10154 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10155 NT_STATUS_OK
Close 10155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10156 NT_STATUS_OK
WriteX 10156 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10156 258 NT_STATUS_OK
WriteX 10156 0 2048 2048 NT_STATUS_OK
Close 10156 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10157 NT_STATUS_OK
ReadX 10157 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10158 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10158 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10159 NT_STATUS_OK
ReadX 10159 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10160 NT_STATUS_OK
ReadX 10160 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10161 NT_STATUS_OK
ReadX 10161 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10162 NT_STATUS_OK
ReadX 10162 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10163 NT_STATUS_OK
ReadX 10163 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10164 NT_STATUS_OK
ReadX 10164 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10165 NT_STATUS_OK
ReadX 10165 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10166 NT_STATUS_OK
ReadX 10166 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10167 NT_STATUS_OK
ReadX 10167 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10168 NT_STATUS_OK
ReadX 10168 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10169 NT_STATUS_OK
ReadX 10169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10170 NT_STATUS_OK
ReadX 10170 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 14083 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10171 NT_STATUS_OK
QUERY_FILE_INFORMATION 10171 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10171 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10154 NT_STATUS_OK
Close 10157 NT_STATUS_OK
Close 10169 NT_STATUS_OK
Close 10164 NT_STATUS_OK
Close 10165 NT_STATUS_OK
Close 10166 NT_STATUS_OK
Close 10167 NT_STATUS_OK
Close 10168 NT_STATUS_OK
Close 10170 NT_STATUS_OK
Close 10158 NT_STATUS_OK
Close 10159 NT_STATUS_OK
Close 10162 NT_STATUS_OK
Close 10163 NT_STATUS_OK
Close 10160 NT_STATUS_OK
Close 10161 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 14091 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10173 NT_STATUS_OK
QUERY_FILE_INFORMATION 10173 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10173 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10175 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10175 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10176 NT_STATUS_OK
ReadX 10176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10177 NT_STATUS_OK
ReadX 10177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10178 NT_STATUS_OK
ReadX 10178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10179 NT_STATUS_OK
ReadX 10179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10180 NT_STATUS_OK
ReadX 10180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10181 NT_STATUS_OK
ReadX 10181 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10182 NT_STATUS_OK
ReadX 10182 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10183 NT_STATUS_OK
ReadX 10183 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10184 NT_STATUS_OK
ReadX 10184 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10185 NT_STATUS_OK
ReadX 10185 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10186 NT_STATUS_OK
ReadX 10186 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10187 NT_STATUS_OK
ReadX 10187 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10188 NT_STATUS_OK
ReadX 10188 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10193 NT_STATUS_OK
QUERY_FILE_INFORMATION 10193 1004 NT_STATUS_OK
WriteX 10193 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10193 258 NT_STATUS_OK
WriteX 10193 0 2048 2048 NT_STATUS_OK
Close 10193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10194 NT_STATUS_OK
ReadX 10194 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10195 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10196 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10197 NT_STATUS_OK
ReadX 10197 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10198 NT_STATUS_OK
ReadX 10198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10199 NT_STATUS_OK
ReadX 10199 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10200 NT_STATUS_OK
ReadX 10200 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10204 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10204 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10205 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 1004 NT_STATUS_OK
WriteX 10205 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10205 258 NT_STATUS_OK
WriteX 10205 0 2048 2048 NT_STATUS_OK
Close 10205 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10206 NT_STATUS_OK
ReadX 10206 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10181 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10207 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10208 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10212 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10212 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10213 NT_STATUS_OK
QUERY_FILE_INFORMATION 10213 1004 NT_STATUS_OK
WriteX 10213 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10213 258 NT_STATUS_OK
WriteX 10213 0 2048 2048 NT_STATUS_OK
Close 10213 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10214 NT_STATUS_OK
ReadX 10214 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
Flush 10194 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
Flush 10206 NT_STATUS_OK
WriteX 10214 0 4096 4096 NT_STATUS_OK
Flush 10214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10194 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10206 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10214 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10196 4096 16384 16384 NT_STATUS_OK
ReadX 10176 4096 16384 16384 NT_STATUS_OK
ReadX 10208 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10215 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10215 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10216 NT_STATUS_OK
ReadX 10216 0 2048 2048 NT_STATUS_OK
WriteX 10216 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10217 NT_STATUS_OK
QUERY_FILE_INFORMATION 10217 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10217 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10216 NT_STATUS_OK
Close 10200 NT_STATUS_OK
Close 10188 NT_STATUS_OK
Close 10180 NT_STATUS_OK
Close 10196 NT_STATUS_OK
Close 10197 NT_STATUS_OK
Close 10198 NT_STATUS_OK
Close 10199 NT_STATUS_OK
Close 10187 NT_STATUS_OK
Close 10208 NT_STATUS_OK
Close 10182 NT_STATUS_OK
Close 10185 NT_STATUS_OK
Close 10186 NT_STATUS_OK
Close 10183 NT_STATUS_OK
Close 10184 NT_STATUS_OK
Close 10176 NT_STATUS_OK
Close 10177 NT_STATUS_OK
Close 10178 NT_STATUS_OK
Close 10179 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10206 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10219 NT_STATUS_OK
QUERY_FILE_INFORMATION 10219 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10219 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10214 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10221 NT_STATUS_OK
QUERY_FILE_INFORMATION 10221 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10221 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10224 NT_STATUS_OK
ReadX 10224 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10225 NT_STATUS_OK
ReadX 10225 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10226 NT_STATUS_OK
ReadX 10226 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10227 NT_STATUS_OK
ReadX 10227 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10228 NT_STATUS_OK
ReadX 10228 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10224 4096 16384 16384 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10226 0 4096 4096 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10229 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10229 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10230 NT_STATUS_OK
ReadX 10230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10231 NT_STATUS_OK
ReadX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10232 NT_STATUS_OK
ReadX 10232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10233 NT_STATUS_OK
ReadX 10233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10234 NT_STATUS_OK
ReadX 10234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10235 NT_STATUS_OK
ReadX 10235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10236 NT_STATUS_OK
ReadX 10236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10237 NT_STATUS_OK
ReadX 10237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10238 NT_STATUS_OK
ReadX 10238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10239 NT_STATUS_OK
ReadX 10239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10240 NT_STATUS_OK
ReadX 10240 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10241 NT_STATUS_OK
ReadX 10241 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10242 NT_STATUS_OK
ReadX 10242 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 10243 NT_STATUS_OK
ReadX 10243 0 8192 8192 NT_STATUS_OK
ReadX 10230 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10244 0 4096 4096 NT_STATUS_OK
ReadX 10244 4096 4096 4096 NT_STATUS_OK
ReadX 10244 8192 4096 4096 NT_STATUS_OK
WriteX 10230 0 4096 4096 NT_STATUS_OK
WriteX 10231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 10245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10245 0 4096 4096 NT_STATUS_OK
ReadX 10245 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10224 0 4096 4096 NT_STATUS_OK
WriteX 10225 0 4096 4096 NT_STATUS_OK
WriteX 10226 0 4096 4096 NT_STATUS_OK
WriteX 10227 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 10249 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10249 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10250 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 1004 NT_STATUS_OK
WriteX 10250 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10250 258 NT_STATUS_OK
WriteX 10250 0 2048 2048 NT_STATUS_OK
Close 10250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10251 NT_STATUS_OK
ReadX 10251 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10252 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10252 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10253 NT_STATUS_OK
ReadX 10253 0 4096 4096 NT_STATUS_OK
ReadX 10253 4096 4096 4096 NT_STATUS_OK
WriteX 10253 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 10251 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10253 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10254 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10254 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10255 NT_STATUS_OK
ReadX 10255 0 4096 4096 NT_STATUS_OK
ReadX 10255 4096 4096 4096 NT_STATUS_OK
WriteX 10255 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 10256 NT_STATUS_OK
QUERY_FILE_INFORMATION 10256 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 10256 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 10243 NT_STATUS_OK
Close 10228 NT_STATUS_OK
Close 10224 NT_STATUS_OK
Close 10225 NT_STATUS_OK
Close 10226 NT_STATUS_OK
Close 10227 NT_STATUS_OK
Close 10236 NT_STATUS_OK
Close 10241 NT_STATUS_OK
Close 10237 NT_STATUS_OK
Close 10238 NT_STATUS_OK
Close 10239 NT_STATUS_OK
Close 10240 NT_STATUS_OK
Close 10242 NT_STATUS_OK
Close 10230 NT_STATUS_OK
Close 10231 NT_STATUS_OK
Close 10234 NT_STATUS_OK
Close 10235 NT_STATUS_OK
Close 10232 NT_STATUS_OK
Close 10233 NT_STATUS_OK
Close 10255 NT_STATUS_OK
Close 10244 NT_STATUS_OK
Close 10245 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 10258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10258 0 4096 4096 NT_STATUS_OK
ReadX 10258 4096 4096 4096 NT_STATUS_OK
ReadX 10258 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10259 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10260 NT_STATUS_OK
ReadX 10260 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10261 NT_STATUS_OK
ReadX 10261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10262 NT_STATUS_OK
ReadX 10262 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10263 NT_STATUS_OK
ReadX 10263 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10264 NT_STATUS_OK
ReadX 10264 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10265 NT_STATUS_OK
ReadX 10265 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10266 NT_STATUS_OK
ReadX 10266 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10267 NT_STATUS_OK
ReadX 10267 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10268 NT_STATUS_OK
ReadX 10268 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10269 NT_STATUS_OK
ReadX 10269 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10270 NT_STATUS_OK
ReadX 10270 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10271 NT_STATUS_OK
ReadX 10271 0 4096 4096 NT_STATUS_OK
ReadX 10259 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 10275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10276 NT_STATUS_OK
QUERY_FILE_INFORMATION 10276 1004 NT_STATUS_OK
WriteX 10276 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10276 258 NT_STATUS_OK
WriteX 10276 0 2048 2048 NT_STATUS_OK
Close 10276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10277 NT_STATUS_OK
ReadX 10277 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 10277 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 10281 NT_STATUS_OK
Close 10281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10282 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 1004 NT_STATUS_OK
WriteX 10282 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10282 258 NT_STATUS_OK
WriteX 10282 0 2048 2048 NT_STATUS_OK
Close 10282 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10283 NT_STATUS_OK
ReadX 10283 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 10283 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10266 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10277 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 10284 NT_STATUS_OK
QUERY_FILE_INFORMATION 10284 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 10284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 10270 NT_STATUS_OK
Close 10265 NT_STATUS_OK
Close 10271 NT_STATUS_OK
Close 10259 NT_STATUS_OK
Close 10260 NT_STATUS_OK
Close 10263 NT_STATUS_OK
Close 10264 NT_STATUS_OK
Close 10261 NT_STATUS_OK
Close 10262 NT_STATUS_OK
Close 10266 NT_STATUS_OK
Close 10267 NT_STATUS_OK
Close 10268 NT_STATUS_OK
Close 10269 NT_STATUS_OK
Close 10258 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 10286 NT_STATUS_OK
QUERY_FILE_INFORMATION 10286 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 10286 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10288 NT_STATUS_OK
ReadX 10288 61440 4096 4096 NT_STATUS_OK
ReadX 10288 126976 4096 4096 NT_STATUS_OK
WriteX 10288 0 65536 65536 NT_STATUS_OK
WriteX 10288 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10289 NT_STATUS_OK
ReadX 10289 61440 4096 4096 NT_STATUS_OK
ReadX 10289 126976 4096 4096 NT_STATUS_OK
ReadX 10289 192512 4096 4096 NT_STATUS_OK
ReadX 10289 258048 4096 4096 NT_STATUS_OK
WriteX 10289 0 65536 65536 NT_STATUS_OK
WriteX 10289 65536 65536 65536 NT_STATUS_OK
WriteX 10289 131072 65536 65536 NT_STATUS_OK
WriteX 10289 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10290 NT_STATUS_OK
ReadX 10290 61440 4096 4096 NT_STATUS_OK
ReadX 10290 126976 4096 4096 NT_STATUS_OK
ReadX 10290 192512 4096 4096 NT_STATUS_OK
ReadX 10290 258048 4096 4096 NT_STATUS_OK
ReadX 10290 323584 4096 4096 NT_STATUS_OK
ReadX 10290 389120 4096 4096 NT_STATUS_OK
ReadX 10290 454656 4096 4096 NT_STATUS_OK
ReadX 10290 520192 4096 4096 NT_STATUS_OK
WriteX 10290 0 65536 65536 NT_STATUS_OK
WriteX 10290 65536 65536 65536 NT_STATUS_OK
WriteX 10290 131072 65536 65536 NT_STATUS_OK
WriteX 10290 196608 65536 65536 NT_STATUS_OK
WriteX 10290 262144 65536 65536 NT_STATUS_OK
WriteX 10290 327680 65536 65536 NT_STATUS_OK
WriteX 10290 393216 65536 65536 NT_STATUS_OK
WriteX 10290 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10291 NT_STATUS_OK
ReadX 10291 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10291 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10291 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10291 8192 4096 4096 NT_STATUS_OK
ReadX 10291 12288 4096 4096 NT_STATUS_OK
ReadX 10291 16384 4096 4096 NT_STATUS_OK
ReadX 10291 20480 4096 4096 NT_STATUS_OK
ReadX 10291 24576 4096 4096 NT_STATUS_OK
ReadX 10291 28672 4096 4096 NT_STATUS_OK
ReadX 10291 32768 4096 4096 NT_STATUS_OK
ReadX 10291 36864 4096 4096 NT_STATUS_OK
ReadX 10291 40960 4096 4096 NT_STATUS_OK
ReadX 10291 45056 4096 4096 NT_STATUS_OK
ReadX 10291 49152 4096 4096 NT_STATUS_OK
ReadX 10291 53248 4096 4096 NT_STATUS_OK
ReadX 10291 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10291 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 10292 NT_STATUS_OK
Close 10292 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 10288 NT_STATUS_OK
Close 10289 NT_STATUS_OK
Close 10290 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 10294 NT_STATUS_OK
WriteX 10294 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10294 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10294 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10294 1004 NT_STATUS_OK
WriteX 10294 0 57088 57088 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
Flush 10294 NT_STATUS_OK
Close 10291 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 10295 NT_STATUS_OK
SET_FILE_INFORMATION 10295 1004 NT_STATUS_OK
Close 10295 NT_STATUS_OK
SET_FILE_INFORMATION 10294 1004 NT_STATUS_OK
WriteX 10294 0 4096 4096 NT_STATUS_OK
Close 10294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 10296 NT_STATUS_OK
Close 10296 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10298 NT_STATUS_OK
ReadX 10298 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10298 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 10299 NT_STATUS_OK
WriteX 10299 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10299 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10299 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10299 1004 NT_STATUS_OK
WriteX 10299 0 51456 51456 NT_STATUS_OK
WriteX 10299 0 4096 4096 NT_STATUS_OK
Flush 10299 NT_STATUS_OK
SET_FILE_INFORMATION 10299 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10299 1004 NT_STATUS_OK
WriteX 10299 0 4096 4096 NT_STATUS_OK
Close 10299 NT_STATUS_OK
Close 10298 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 10301 NT_STATUS_OK
Close 10301 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10303 NT_STATUS_OK
ReadX 10303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10303 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10305 NT_STATUS_OK
Close 10305 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 10308 NT_STATUS_OK
WriteX 10308 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10308 258 NT_STATUS_OK
WriteX 10308 0 53077 53077 NT_STATUS_OK
Close 10308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 10309 NT_STATUS_OK
WriteX 10309 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10309 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 10309 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10309 1004 NT_STATUS_OK
WriteX 10309 0 65536 65536 NT_STATUS_OK
WriteX 10309 65536 1856 1856 NT_STATUS_OK
WriteX 10309 0 4096 4096 NT_STATUS_OK
Flush 10309 NT_STATUS_OK
SET_FILE_INFORMATION 10309 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10309 1004 NT_STATUS_OK
WriteX 10309 0 4096 4096 NT_STATUS_OK
Close 10309 NT_STATUS_OK
Close 10303 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 10311 NT_STATUS_OK
Close 10311 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10313 NT_STATUS_OK
ReadX 10313 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10315 NT_STATUS_OK
Close 10315 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 10318 NT_STATUS_OK
WriteX 10318 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10318 258 NT_STATUS_OK
WriteX 10318 0 7983 7983 NT_STATUS_OK
Close 10318 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10320 NT_STATUS_OK
Close 10320 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 10323 NT_STATUS_OK
WriteX 10323 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10323 258 NT_STATUS_OK
WriteX 10323 0 65536 65536 NT_STATUS_OK
WriteX 10323 65536 65536 65536 NT_STATUS_OK
WriteX 10323 131072 65536 65536 NT_STATUS_OK
WriteX 10323 196608 65536 65536 NT_STATUS_OK
WriteX 10323 262144 65536 65536 NT_STATUS_OK
WriteX 10323 327680 65536 65536 NT_STATUS_OK
WriteX 10323 393216 65536 65536 NT_STATUS_OK
WriteX 10323 458752 46731 46731 NT_STATUS_OK
Close 10323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 10324 NT_STATUS_OK
WriteX 10324 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10313 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 10324 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10324 1004 NT_STATUS_OK
WriteX 10324 0 65536 65536 NT_STATUS_OK
WriteX 10324 65536 22848 22848 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Flush 10324 NT_STATUS_OK
SET_FILE_INFORMATION 10324 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10324 1004 NT_STATUS_OK
WriteX 10324 0 4096 4096 NT_STATUS_OK
Close 10324 NT_STATUS_OK
Close 10313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 10326 NT_STATUS_OK
Close 10326 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 10328 NT_STATUS_OK
ReadX 10328 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10328 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10329 NT_STATUS_OK
ReadX 10329 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10329 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10329 1004 NT_STATUS_OK
ReadX 10329 8192 4096 4096 NT_STATUS_OK
ReadX 10329 12288 4096 4096 NT_STATUS_OK
ReadX 10329 16384 4096 4096 NT_STATUS_OK
ReadX 10329 20480 4096 4096 NT_STATUS_OK
ReadX 10329 24576 4096 4096 NT_STATUS_OK
ReadX 10329 28672 4096 4096 NT_STATUS_OK
ReadX 10329 32768 4096 4096 NT_STATUS_OK
ReadX 10329 36864 4096 4096 NT_STATUS_OK
ReadX 10329 40960 4096 4096 NT_STATUS_OK
ReadX 10329 45056 4096 4096 NT_STATUS_OK
ReadX 10329 49152 4096 4096 NT_STATUS_OK
ReadX 10329 53248 4096 4096 NT_STATUS_OK
ReadX 10329 57344 4096 4096 NT_STATUS_OK
ReadX 10329 61440 4096 4096 NT_STATUS_OK
ReadX 10329 65536 4096 4096 NT_STATUS_OK
ReadX 10329 69632 4096 4096 NT_STATUS_OK
ReadX 10329 73728 4096 4096 NT_STATUS_OK
ReadX 10329 77824 4096 4096 NT_STATUS_OK
ReadX 10329 81920 4096 4096 NT_STATUS_OK
ReadX 10329 86016 4096 4096 NT_STATUS_OK
ReadX 10329 90112 4096 4096 NT_STATUS_OK
ReadX 10329 94208 4096 4096 NT_STATUS_OK
ReadX 10329 98304 4096 4096 NT_STATUS_OK
ReadX 10329 102400 4096 4096 NT_STATUS_OK
ReadX 10329 106496 4096 4096 NT_STATUS_OK
ReadX 10329 110592 4096 4096 NT_STATUS_OK
ReadX 10329 114688 4096 4096 NT_STATUS_OK
ReadX 10329 118784 4096 4096 NT_STATUS_OK
ReadX 10329 122880 4096 4096 NT_STATUS_OK
ReadX 10329 126976 4096 4096 NT_STATUS_OK
ReadX 10329 131072 4096 4096 NT_STATUS_OK
ReadX 10329 135168 4096 4096 NT_STATUS_OK
ReadX 10329 139264 4096 4096 NT_STATUS_OK
ReadX 10329 143360 4096 4096 NT_STATUS_OK
ReadX 10329 147456 4096 4096 NT_STATUS_OK
ReadX 10329 151552 4096 4096 NT_STATUS_OK
ReadX 10329 155648 4096 4096 NT_STATUS_OK
ReadX 10329 159744 4096 4096 NT_STATUS_OK
ReadX 10329 163840 4096 4096 NT_STATUS_OK
ReadX 10329 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10329 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 10330 NT_STATUS_OK
Close 10330 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 10328 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 10332 NT_STATUS_OK
WriteX 10332 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10332 258 NT_STATUS_OK
Close 10329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 10333 NT_STATUS_OK
SET_FILE_INFORMATION 10333 1004 NT_STATUS_OK
Close 10333 NT_STATUS_OK
WriteX 10332 0 42388 42388 NT_STATUS_OK
Close 10332 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 10334 NT_STATUS_OK
Close 10334 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10336 NT_STATUS_OK
ReadX 10336 0 4096 4096 NT_STATUS_OK
ReadX 10336 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 10337 NT_STATUS_OK
WriteX 10337 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10337 258 NT_STATUS_OK
SET_FILE_INFORMATION 10337 1004 NT_STATUS_OK
WriteX 10337 0 42652 42652 NT_STATUS_OK
Close 10337 NT_STATUS_OK
Close 10336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 10339 NT_STATUS_OK
Close 10339 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 10341 NT_STATUS_OK
ReadX 10341 0 4096 4096 NT_STATUS_OK
ReadX 10341 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10343 NT_STATUS_OK
Close 10343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 10346 NT_STATUS_OK
WriteX 10346 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10346 258 NT_STATUS_OK
WriteX 10346 0 65536 65536 NT_STATUS_OK
WriteX 10346 65536 49 49 NT_STATUS_OK
Close 10346 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10347 NT_STATUS_OK
ReadX 10347 0 61440 61440 NT_STATUS_OK
ReadX 10347 61440 4096 4096 NT_STATUS_OK
ReadX 10347 65536 61440 61440 NT_STATUS_OK
ReadX 10347 126976 4096 4096 NT_STATUS_OK
ReadX 10347 131072 61440 61440 NT_STATUS_OK
ReadX 10347 192512 4096 4096 NT_STATUS_OK
ReadX 10347 196608 61440 61440 NT_STATUS_OK
ReadX 10347 258048 4096 4096 NT_STATUS_OK
ReadX 10347 262144 61440 61440 NT_STATUS_OK
ReadX 10347 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10348 NT_STATUS_OK
ReadX 10348 0 61440 61440 NT_STATUS_OK
ReadX 10348 61440 4096 4096 NT_STATUS_OK
ReadX 10348 65536 61440 61440 NT_STATUS_OK
ReadX 10348 126976 4096 4096 NT_STATUS_OK
ReadX 10348 131072 61440 61440 NT_STATUS_OK
ReadX 10348 192512 4096 4096 NT_STATUS_OK
ReadX 10348 196608 61440 61440 NT_STATUS_OK
ReadX 10348 258048 4096 4096 NT_STATUS_OK
ReadX 10348 262144 61440 61440 NT_STATUS_OK
ReadX 10348 323584 4096 4096 NT_STATUS_OK
ReadX 10348 327680 61440 61440 NT_STATUS_OK
ReadX 10348 389120 4096 4096 NT_STATUS_OK
ReadX 10348 393216 61440 61440 NT_STATUS_OK
ReadX 10348 454656 4096 4096 NT_STATUS_OK
ReadX 10348 458752 61440 61440 NT_STATUS_OK
ReadX 10348 520192 4096 4096 NT_STATUS_OK
ReadX 10348 524288 61440 61440 NT_STATUS_OK
ReadX 10348 585728 4096 4096 NT_STATUS_OK
ReadX 10348 589824 61440 61440 NT_STATUS_OK
ReadX 10348 651264 4096 4096 NT_STATUS_OK
ReadX 10348 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10349 NT_STATUS_OK
ReadX 10349 0 61440 61440 NT_STATUS_OK
ReadX 10349 61440 4096 4096 NT_STATUS_OK
ReadX 10349 65536 61440 61440 NT_STATUS_OK
ReadX 10349 126976 4096 4096 NT_STATUS_OK
ReadX 10349 131072 61440 61440 NT_STATUS_OK
ReadX 10349 192512 4096 4096 NT_STATUS_OK
ReadX 10349 196608 61440 61440 NT_STATUS_OK
ReadX 10349 258048 4096 4096 NT_STATUS_OK
ReadX 10349 262144 61440 61440 NT_STATUS_OK
ReadX 10349 323584 4096 4096 NT_STATUS_OK
ReadX 10349 327680 61440 61440 NT_STATUS_OK
ReadX 10349 389120 4096 4096 NT_STATUS_OK
ReadX 10349 393216 61440 61440 NT_STATUS_OK
ReadX 10349 454656 4096 4096 NT_STATUS_OK
ReadX 10349 458752 61440 61440 NT_STATUS_OK
ReadX 10349 520192 4096 4096 NT_STATUS_OK
ReadX 10349 524288 61440 61440 NT_STATUS_OK
ReadX 10349 585728 4096 4096 NT_STATUS_OK
ReadX 10349 589824 61440 61440 NT_STATUS_OK
ReadX 10349 651264 4096 4096 NT_STATUS_OK
ReadX 10349 655360 61440 61440 NT_STATUS_OK
ReadX 10349 716800 4096 4096 NT_STATUS_OK
ReadX 10349 720896 61440 61440 NT_STATUS_OK
ReadX 10349 782336 4096 4096 NT_STATUS_OK
ReadX 10349 786432 61440 61440 NT_STATUS_OK
ReadX 10349 847872 4096 4096 NT_STATUS_OK
ReadX 10349 851968 61440 61440 NT_STATUS_OK
ReadX 10349 913408 4096 4096 NT_STATUS_OK
ReadX 10349 917504 61440 61440 NT_STATUS_OK
ReadX 10349 978944 4096 4096 NT_STATUS_OK
ReadX 10349 983040 61440 61440 NT_STATUS_OK
ReadX 10349 1044480 4096 4096 NT_STATUS_OK
ReadX 10349 1048576 61440 61440 NT_STATUS_OK
ReadX 10349 1110016 4096 4096 NT_STATUS_OK
ReadX 10349 1114112 61440 61440 NT_STATUS_OK
ReadX 10349 1175552 4096 4096 NT_STATUS_OK
ReadX 10349 1179648 61440 61440 NT_STATUS_OK
ReadX 10349 1241088 4096 4096 NT_STATUS_OK
ReadX 10349 1245184 61440 61440 NT_STATUS_OK
ReadX 10349 1306624 4096 4096 NT_STATUS_OK
ReadX 10349 1310720 61440 61440 NT_STATUS_OK
ReadX 10349 1372160 4096 4096 NT_STATUS_OK
ReadX 10349 1376256 61440 61440 NT_STATUS_OK
ReadX 10349 1437696 4096 4096 NT_STATUS_OK
ReadX 10349 1441792 61440 61440 NT_STATUS_OK
ReadX 10349 1503232 4096 4096 NT_STATUS_OK
ReadX 10349 1507328 61440 61440 NT_STATUS_OK
ReadX 10349 1568768 4096 4096 NT_STATUS_OK
ReadX 10349 1572864 61440 61440 NT_STATUS_OK
ReadX 10349 1634304 4096 4096 NT_STATUS_OK
ReadX 10349 1638400 61440 61440 NT_STATUS_OK
ReadX 10349 1699840 4096 4096 NT_STATUS_OK
ReadX 10349 1703936 61440 61440 NT_STATUS_OK
ReadX 10349 1765376 4096 4096 NT_STATUS_OK
ReadX 10349 1769472 61440 61440 NT_STATUS_OK
ReadX 10349 1830912 4096 4096 NT_STATUS_OK
ReadX 10349 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 10351 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10351 1005 NT_STATUS_OK
ReadX 10351 2156 24 24 NT_STATUS_OK
ReadX 10351 2139 276 276 NT_STATUS_OK
ReadX 10351 2136 14 14 NT_STATUS_OK
ReadX 10351 2136 7 7 NT_STATUS_OK
ReadX 10351 2138 12 12 NT_STATUS_OK
ReadX 10351 2137 8 8 NT_STATUS_OK
ReadX 10351 2135 15 15 NT_STATUS_OK
ReadX 10351 0 16 16 NT_STATUS_OK
ReadX 10351 16 2048 2048 NT_STATUS_OK
ReadX 10351 2064 2048 2048 NT_STATUS_OK
ReadX 10351 257 2048 2048 NT_STATUS_OK
ReadX 10351 385 2048 2048 NT_STATUS_OK
ReadX 10351 513 2048 2048 NT_STATUS_OK
ReadX 10351 641 2048 2048 NT_STATUS_OK
ReadX 10351 769 2048 2048 NT_STATUS_OK
ReadX 10351 897 2048 2048 NT_STATUS_OK
ReadX 10351 1025 2048 2048 NT_STATUS_OK
ReadX 10351 1153 2048 2048 NT_STATUS_OK
ReadX 10351 1281 2048 2048 NT_STATUS_OK
ReadX 10351 1409 2048 2048 NT_STATUS_OK
ReadX 10351 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 10353 NT_STATUS_OK
Close 10353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 10347 NT_STATUS_OK
Close 10348 NT_STATUS_OK
Close 10349 NT_STATUS_OK
Close 10341 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10356 NT_STATUS_OK
WriteX 10356 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10356 258 NT_STATUS_OK
WriteX 10356 0 10575 10575 NT_STATUS_OK
Flush 10356 NT_STATUS_OK
Close 10356 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10357 NT_STATUS_OK
Close 10357 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10359 NT_STATUS_OK
ReadX 10359 0 4096 4096 NT_STATUS_OK
Close 10351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10361 NT_STATUS_OK
LockX 10361 2147483538 1 NT_STATUS_OK
UnlockX 10361 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 1005 NT_STATUS_OK
ReadX 10361 0 512 512 NT_STATUS_OK
ReadX 10361 512 512 512 NT_STATUS_OK
ReadX 10361 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10361 1004 NT_STATUS_OK
Close 10361 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10362 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1005 NT_STATUS_OK
ReadX 10362 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 10363 NT_STATUS_OK
LockX 10363 2147483538 1 NT_STATUS_OK
UnlockX 10363 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10363 1005 NT_STATUS_OK
ReadX 10363 0 512 512 NT_STATUS_OK
ReadX 10363 512 512 512 NT_STATUS_OK
ReadX 10363 1024 512 512 NT_STATUS_OK
ReadX 10363 288 20 20 NT_STATUS_OK
ReadX 10363 308 2084 2084 NT_STATUS_OK
ReadX 10363 388 2084 2084 NT_STATUS_OK
ReadX 10363 388 2084 2084 NT_STATUS_OK
ReadX 10350 2157 1386 1386 NT_STATUS_OK
ReadX 10363 2472 399 399 NT_STATUS_OK
ReadX 10363 3072 1536 1536 NT_STATUS_OK
ReadX 10363 544 149 149 NT_STATUS_OK
ReadX 10363 693 485 485 NT_STATUS_OK
Close 10363 NT_STATUS_OK
ReadX 10350 2157 4096 4096 NT_STATUS_OK
ReadX 10350 6253 4096 4096 NT_STATUS_OK
ReadX 10350 10349 4096 4096 NT_STATUS_OK
ReadX 10350 14445 4096 4096 NT_STATUS_OK
ReadX 10350 18541 4096 4096 NT_STATUS_OK
ReadX 10350 22637 256 256 NT_STATUS_OK
ReadX 10350 22893 4096 4096 NT_STATUS_OK
ReadX 10350 26989 4096 4096 NT_STATUS_OK
ReadX 10350 31085 4096 4096 NT_STATUS_OK
ReadX 10350 35181 4096 4096 NT_STATUS_OK
ReadX 10350 39277 4096 4096 NT_STATUS_OK
ReadX 10350 43373 4096 4096 NT_STATUS_OK
ReadX 10350 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10350 2157 1024 1024 NT_STATUS_OK
ReadX 10350 1667 4688 4688 NT_STATUS_OK
ReadX 10350 6355 3516 3516 NT_STATUS_OK
ReadX 10350 9871 16384 16384 NT_STATUS_OK
ReadX 10350 26255 3771 3771 NT_STATUS_OK
ReadX 10350 30026 2048 2048 NT_STATUS_OK
ReadX 10350 32074 1024 1024 NT_STATUS_OK
ReadX 10350 33098 6652 6652 NT_STATUS_OK
ReadX 10350 39750 16384 16384 NT_STATUS_OK
ReadX 10350 56134 10496 10496 NT_STATUS_OK
ReadX 10350 66630 1784 1784 NT_STATUS_OK
ReadX 10350 68414 90 90 NT_STATUS_OK
ReadX 10350 68504 273 273 NT_STATUS_OK
ReadX 10350 68777 1600 1600 NT_STATUS_OK
ReadX 10350 70377 640 640 NT_STATUS_OK
ReadX 10350 71017 1280 1280 NT_STATUS_OK
ReadX 10350 72297 8464 8464 NT_STATUS_OK
ReadX 10350 80761 158 158 NT_STATUS_OK
ReadX 10350 80919 912 912 NT_STATUS_OK
ReadX 10350 81831 1980 1980 NT_STATUS_OK
ReadX 10350 83811 2256 2256 NT_STATUS_OK
ReadX 10350 86067 400 400 NT_STATUS_OK
ReadX 10350 86467 252 252 NT_STATUS_OK
ReadX 10350 86719 42 42 NT_STATUS_OK
ReadX 10350 86761 725 725 NT_STATUS_OK
ReadX 10350 2009 512 512 NT_STATUS_OK
ReadX 10350 3895 9 9 NT_STATUS_OK
ReadX 10350 3781 46 46 NT_STATUS_OK
ReadX 10350 4059 92 92 NT_STATUS_OK
ReadX 10350 3781 92 92 NT_STATUS_OK
ReadX 10350 3986 184 184 NT_STATUS_OK
ReadX 10350 3987 16384 16384 NT_STATUS_OK
ReadX 10350 3902 16384 16384 NT_STATUS_OK
ReadX 10350 3781 10240 10240 NT_STATUS_OK
ReadX 10350 3821 16384 16384 NT_STATUS_OK
ReadX 10350 3891 935 935 NT_STATUS_OK
ReadX 10350 4060 10240 10240 NT_STATUS_OK
ReadX 10350 4059 184 184 NT_STATUS_OK
ReadX 10350 256 184 184 NT_STATUS_OK
ReadX 10350 256 1026 1026 NT_STATUS_OK
ReadX 10350 3901 326 326 NT_STATUS_OK
ReadX 10350 3899 652 652 NT_STATUS_OK
ReadX 10350 256 2 2 NT_STATUS_OK
ReadX 10350 258 4948 4948 NT_STATUS_OK
Close 10350 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10365 NT_STATUS_OK
Close 10365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 10368 NT_STATUS_OK
WriteX 10368 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10368 258 NT_STATUS_OK
WriteX 10368 0 65536 65536 NT_STATUS_OK
WriteX 10368 65536 65536 65536 NT_STATUS_OK
WriteX 10368 131072 65536 65536 NT_STATUS_OK
WriteX 10368 196608 65536 65536 NT_STATUS_OK
WriteX 10368 262144 65536 65536 NT_STATUS_OK
WriteX 10368 327680 65536 65536 NT_STATUS_OK
WriteX 10368 393216 65536 65536 NT_STATUS_OK
WriteX 10368 458752 65536 65536 NT_STATUS_OK
WriteX 10368 524288 65536 65536 NT_STATUS_OK
WriteX 10368 589824 35257 35257 NT_STATUS_OK
Close 10368 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10370 NT_STATUS_OK
Close 10370 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 10373 NT_STATUS_OK
WriteX 10373 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10373 258 NT_STATUS_OK
WriteX 10373 0 65536 65536 NT_STATUS_OK
WriteX 10373 65536 65536 65536 NT_STATUS_OK
WriteX 10373 131072 65536 65536 NT_STATUS_OK
WriteX 10373 196608 65536 65536 NT_STATUS_OK
WriteX 10373 262144 65536 65536 NT_STATUS_OK
WriteX 10373 327680 65536 65536 NT_STATUS_OK
WriteX 10373 393216 65536 65536 NT_STATUS_OK
WriteX 10373 458752 65536 65536 NT_STATUS_OK
WriteX 10373 524288 65536 65536 NT_STATUS_OK
WriteX 10373 589824 57598 57598 NT_STATUS_OK
Close 10373 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10375 NT_STATUS_OK
WriteX 10375 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10375 258 NT_STATUS_OK
WriteX 10375 0 12543 12543 NT_STATUS_OK
Flush 10375 NT_STATUS_OK
Close 10375 NT_STATUS_OK
Close 10359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10377 NT_STATUS_OK
Close 10377 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 10379 NT_STATUS_OK
ReadX 10379 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10380 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 10381 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 10381 1005 NT_STATUS_OK
ReadX 10381 1938 24 24 NT_STATUS_OK
ReadX 10381 1920 276 276 NT_STATUS_OK
ReadX 10381 1918 14 14 NT_STATUS_OK
ReadX 10381 1918 7 7 NT_STATUS_OK
ReadX 10381 1919 12 12 NT_STATUS_OK
ReadX 10381 1919 8 8 NT_STATUS_OK
ReadX 10381 1917 15 15 NT_STATUS_OK
ReadX 10381 0 16 16 NT_STATUS_OK
ReadX 10381 16 2048 2048 NT_STATUS_OK
ReadX 10381 2064 2048 2048 NT_STATUS_OK
ReadX 10381 257 2048 2048 NT_STATUS_OK
ReadX 10381 385 2048 2048 NT_STATUS_OK
ReadX 10381 513 2048 2048 NT_STATUS_OK
ReadX 10381 641 2048 2048 NT_STATUS_OK
ReadX 10381 769 2048 2048 NT_STATUS_OK
ReadX 10381 897 2048 2048 NT_STATUS_OK
ReadX 10381 1025 2048 2048 NT_STATUS_OK
ReadX 10381 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 10383 NT_STATUS_OK
Close 10383 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10386 NT_STATUS_OK
WriteX 10386 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10386 258 NT_STATUS_OK
WriteX 10386 0 11588 11588 NT_STATUS_OK
Flush 10386 NT_STATUS_OK
Close 10386 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10387 NT_STATUS_OK
Close 10387 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10389 NT_STATUS_OK
ReadX 10389 0 4096 4096 NT_STATUS_OK
Close 10381 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10391 NT_STATUS_OK
WriteX 10391 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10391 258 NT_STATUS_OK
WriteX 10391 0 11615 11615 NT_STATUS_OK
Flush 10391 NT_STATUS_OK
Close 10391 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10389 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10393 NT_STATUS_OK
Close 10393 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10395 NT_STATUS_OK
ReadX 10395 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10397 NT_STATUS_OK
Close 10397 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 10400 NT_STATUS_OK
WriteX 10400 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10400 258 NT_STATUS_OK
WriteX 10400 0 65536 65536 NT_STATUS_OK
WriteX 10400 65536 16050 16050 NT_STATUS_OK
Close 10400 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10380 1939 64 64 NT_STATUS_OK
ReadX 10380 128 248 248 NT_STATUS_OK
ReadX 10380 128 568 568 NT_STATUS_OK
ReadX 10380 3872 1536 1536 NT_STATUS_OK
ReadX 10380 3456 2560 2560 NT_STATUS_OK
ReadX 10380 3136 512 512 NT_STATUS_OK
ReadX 10380 2880 4096 4096 NT_STATUS_OK
ReadX 10380 3264 3072 3072 NT_STATUS_OK
ReadX 10380 320 4096 4096 NT_STATUS_OK
ReadX 10380 1024 4096 4096 NT_STATUS_OK
ReadX 10380 3616 4096 4096 NT_STATUS_OK
ReadX 10380 1939 64 64 NT_STATUS_OK
ReadX 10380 128 248 248 NT_STATUS_OK
ReadX 10380 128 608 608 NT_STATUS_OK
ReadX 10380 2858 1024 1024 NT_STATUS_OK
ReadX 10380 2810 4096 4096 NT_STATUS_OK
ReadX 10380 2826 4096 4096 NT_STATUS_OK
ReadX 10380 2580 2048 2048 NT_STATUS_OK
ReadX 10380 2800 2560 2560 NT_STATUS_OK
ReadX 10380 2100 4096 4096 NT_STATUS_OK
ReadX 10380 2084 4096 4096 NT_STATUS_OK
ReadX 10380 868 4096 4096 NT_STATUS_OK
ReadX 10380 2324 4096 4096 NT_STATUS_OK
ReadX 10380 884 4096 4096 NT_STATUS_OK
ReadX 10380 2604 1024 1024 NT_STATUS_OK
ReadX 10380 580 4096 4096 NT_STATUS_OK
ReadX 10380 596 4096 4096 NT_STATUS_OK
ReadX 10380 2752 4096 4096 NT_STATUS_OK
ReadX 10380 2842 1024 1024 NT_STATUS_OK
ReadX 10380 660 4096 4096 NT_STATUS_OK
ReadX 10380 2720 4096 4096 NT_STATUS_OK
ReadX 10380 2736 4096 4096 NT_STATUS_OK
ReadX 10380 628 4096 4096 NT_STATUS_OK
ReadX 10380 2704 4096 4096 NT_STATUS_OK
ReadX 10380 1556 4096 4096 NT_STATUS_OK
ReadX 10380 576 4096 4096 NT_STATUS_OK
ReadX 10380 3168 1536 1536 NT_STATUS_OK
ReadX 10380 832 4096 4096 NT_STATUS_OK
ReadX 10380 1088 4096 4096 NT_STATUS_OK
ReadX 10380 1344 4096 4096 NT_STATUS_OK
ReadX 10380 1600 4096 4096 NT_STATUS_OK
ReadX 10380 1856 4096 4096 NT_STATUS_OK
ReadX 10380 2112 4096 4096 NT_STATUS_OK
ReadX 10380 1892 4096 4096 NT_STATUS_OK
ReadX 10380 820 4096 4096 NT_STATUS_OK
ReadX 10380 788 4096 4096 NT_STATUS_OK
ReadX 10380 1604 4096 4096 NT_STATUS_OK
ReadX 10380 3648 4096 4096 NT_STATUS_OK
ReadX 10380 2608 4096 4096 NT_STATUS_OK
ReadX 10380 548 4096 4096 NT_STATUS_OK
ReadX 10380 740 4096 4096 NT_STATUS_OK
ReadX 10380 1344 4096 4096 NT_STATUS_OK
ReadX 10380 3392 4096 4096 NT_STATUS_OK
ReadX 10380 3904 4096 4096 NT_STATUS_OK
ReadX 10380 644 4096 4096 NT_STATUS_OK
ReadX 10380 676 4096 4096 NT_STATUS_OK
ReadX 10380 2688 4096 4096 NT_STATUS_OK
ReadX 10380 320 4096 4096 NT_STATUS_OK
ReadX 10380 900 4096 4096 NT_STATUS_OK
ReadX 10380 1908 4096 4096 NT_STATUS_OK
ReadX 10380 852 4096 4096 NT_STATUS_OK
ReadX 10380 724 4096 4096 NT_STATUS_OK
ReadX 10380 2292 4096 4096 NT_STATUS_OK
ReadX 10380 612 4096 4096 NT_STATUS_OK
ReadX 10380 388 4096 4096 NT_STATUS_OK
ReadX 10380 2368 4096 4096 NT_STATUS_OK
ReadX 10380 2624 4096 4096 NT_STATUS_OK
ReadX 10380 500 4096 4096 NT_STATUS_OK
ReadX 10380 356 4096 4096 NT_STATUS_OK
ReadX 10380 1024 4096 4096 NT_STATUS_OK
ReadX 10380 576 4096 4096 NT_STATUS_OK
ReadX 10380 340 4096 4096 NT_STATUS_OK
ReadX 10380 420 4096 4096 NT_STATUS_OK
ReadX 10380 1600 4096 4096 NT_STATUS_OK
ReadX 10380 404 4096 4096 NT_STATUS_OK
ReadX 10380 1428 4096 4096 NT_STATUS_OK
ReadX 10380 2656 4096 4096 NT_STATUS_OK
ReadX 10380 2624 4096 4096 NT_STATUS_OK
ReadX 10380 452 4096 4096 NT_STATUS_OK
ReadX 10380 692 4096 4096 NT_STATUS_OK
ReadX 10380 564 4096 4096 NT_STATUS_OK
ReadX 10380 372 4096 4096 NT_STATUS_OK
ReadX 10380 468 4096 4096 NT_STATUS_OK
ReadX 10380 484 4096 4096 NT_STATUS_OK
ReadX 10380 1088 4096 4096 NT_STATUS_OK
ReadX 10380 1924 4096 4096 NT_STATUS_OK
ReadX 10380 2768 4096 4096 NT_STATUS_OK
ReadX 10380 832 4096 4096 NT_STATUS_OK
ReadX 10380 836 4096 4096 NT_STATUS_OK
ReadX 10380 1856 4096 4096 NT_STATUS_OK
ReadX 10380 2640 4096 4096 NT_STATUS_OK
ReadX 10380 436 4096 4096 NT_STATUS_OK
ReadX 10380 1828 4096 4096 NT_STATUS_OK
ReadX 10380 804 4096 4096 NT_STATUS_OK
ReadX 10380 1860 4096 4096 NT_STATUS_OK
ReadX 10380 1812 4096 4096 NT_STATUS_OK
ReadX 10380 756 4096 4096 NT_STATUS_OK
ReadX 10380 1636 4096 4096 NT_STATUS_OK
ReadX 10380 772 4096 4096 NT_STATUS_OK
ReadX 10380 2036 4096 4096 NT_STATUS_OK
ReadX 10380 1220 4096 4096 NT_STATUS_OK
ReadX 10380 1652 4096 4096 NT_STATUS_OK
ReadX 10380 2588 4096 4096 NT_STATUS_OK
ReadX 10380 916 4096 4096 NT_STATUS_OK
ReadX 10380 260 4096 4096 NT_STATUS_OK
ReadX 10380 932 4096 4096 NT_STATUS_OK
ReadX 10380 2624 4096 4096 NT_STATUS_OK
ReadX 10380 308 4096 4096 NT_STATUS_OK
ReadX 10380 292 4096 4096 NT_STATUS_OK
ReadX 10380 1140 4096 4096 NT_STATUS_OK
ReadX 10380 276 4096 4096 NT_STATUS_OK
ReadX 10380 2020 4096 4096 NT_STATUS_OK
ReadX 10380 2880 4096 4096 NT_STATUS_OK
ReadX 10380 516 4096 4096 NT_STATUS_OK
ReadX 10380 1844 4096 4096 NT_STATUS_OK
ReadX 10380 1124 4096 4096 NT_STATUS_OK
ReadX 10380 3136 4096 4096 NT_STATUS_OK
ReadX 10380 324 4096 4096 NT_STATUS_OK
ReadX 10380 1156 4096 4096 NT_STATUS_OK
ReadX 10380 1172 4096 4096 NT_STATUS_OK
ReadX 10380 2112 4096 4096 NT_STATUS_OK
ReadX 10380 2368 4096 4096 NT_STATUS_OK
ReadX 10380 964 4096 4096 NT_STATUS_OK
ReadX 10380 980 4096 4096 NT_STATUS_OK
ReadX 10380 1012 4096 4096 NT_STATUS_OK
ReadX 10380 532 4096 4096 NT_STATUS_OK
ReadX 10380 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10380 1620 4096 4096 NT_STATUS_OK
ReadX 10380 1604 4096 4096 NT_STATUS_OK
ReadX 10380 2116 4096 4096 NT_STATUS_OK
ReadX 10380 2132 4096 4096 NT_STATUS_OK
ReadX 10380 2148 4096 4096 NT_STATUS_OK
ReadX 10380 2276 4096 4096 NT_STATUS_OK
ReadX 10380 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10402 NT_STATUS_OK
Close 10402 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 10405 NT_STATUS_OK
QUERY_FILE_INFORMATION 10360 1004 NT_STATUS_OK
Close 10360 NT_STATUS_OK
WriteX 10405 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10405 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 10362 1004 NT_STATUS_OK
Close 10362 NT_STATUS_OK
WriteX 10405 0 65536 65536 NT_STATUS_OK
WriteX 10405 65536 64850 64850 NT_STATUS_OK
Close 10405 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 10407 NT_STATUS_OK
WriteX 10407 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10407 258 NT_STATUS_OK
ReadX 10380 2068 4096 4096 NT_STATUS_OK
ReadX 10380 1588 4096 4096 NT_STATUS_OK
ReadX 10380 1572 4096 4096 NT_STATUS_OK
WriteX 10407 0 18630 18630 NT_STATUS_OK
Flush 10407 NT_STATUS_OK
Close 10407 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 10395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 10409 NT_STATUS_OK
Close 10409 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 10411 NT_STATUS_OK
ReadX 10411 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10380 612 4096 4096 NT_STATUS_OK
ReadX 10380 564 4096 4096 NT_STATUS_OK
ReadX 10380 1876 4096 4096 NT_STATUS_OK
ReadX 10380 628 4096 4096 NT_STATUS_OK
ReadX 10380 740 4096 4096 NT_STATUS_OK
ReadX 10380 724 4096 4096 NT_STATUS_OK
ReadX 10380 644 4096 4096 NT_STATUS_OK
ReadX 10380 2324 4096 4096 NT_STATUS_OK
ReadX 10380 660 4096 4096 NT_STATUS_OK
ReadX 10380 852 4096 4096 NT_STATUS_OK
ReadX 10380 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10380 2368 4096 4096 NT_STATUS_OK
ReadX 10380 1024 4096 4096 NT_STATUS_OK
ReadX 10380 320 4096 4096 NT_STATUS_OK
ReadX 10380 580 4096 4096 NT_STATUS_OK
ReadX 10380 3136 512 512 NT_STATUS_OK
ReadX 10380 2880 4096 4096 NT_STATUS_OK
Close 10380 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10412 NT_STATUS_OK
ReadX 10412 61440 4096 4096 NT_STATUS_OK
ReadX 10412 126976 4096 4096 NT_STATUS_OK
WriteX 10412 0 65536 65536 NT_STATUS_OK
WriteX 10412 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10413 NT_STATUS_OK
ReadX 10413 61440 4096 4096 NT_STATUS_OK
ReadX 10413 126976 4096 4096 NT_STATUS_OK
ReadX 10413 192512 4096 4096 NT_STATUS_OK
ReadX 10413 258048 4096 4096 NT_STATUS_OK
WriteX 10413 0 65536 65536 NT_STATUS_OK
WriteX 10413 65536 65536 65536 NT_STATUS_OK
WriteX 10413 131072 65536 65536 NT_STATUS_OK
WriteX 10413 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10414 NT_STATUS_OK
ReadX 10414 61440 4096 4096 NT_STATUS_OK
ReadX 10414 126976 4096 4096 NT_STATUS_OK
ReadX 10414 192512 4096 4096 NT_STATUS_OK
ReadX 10414 258048 4096 4096 NT_STATUS_OK
ReadX 10414 323584 4096 4096 NT_STATUS_OK
ReadX 10414 389120 4096 4096 NT_STATUS_OK
ReadX 10414 454656 4096 4096 NT_STATUS_OK
ReadX 10414 520192 4096 4096 NT_STATUS_OK
WriteX 10414 0 65536 65536 NT_STATUS_OK
WriteX 10414 65536 65536 65536 NT_STATUS_OK
WriteX 10414 131072 65536 65536 NT_STATUS_OK
WriteX 10414 196608 65536 65536 NT_STATUS_OK
WriteX 10414 262144 65536 65536 NT_STATUS_OK
WriteX 10414 327680 65536 65536 NT_STATUS_OK
WriteX 10414 393216 65536 65536 NT_STATUS_OK
WriteX 10414 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 10415 NT_STATUS_OK
ReadX 10415 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 10416 NT_STATUS_OK
Close 10416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 10417 NT_STATUS_OK
WriteX 10417 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10417 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10415 0 8192 8192 NT_STATUS_OK
Flush 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10415 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10415 0 8192 8192 NT_STATUS_OK
Flush 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10415 0 8192 8192 NT_STATUS_OK
Flush 10415 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 10415 0 8192 8192 NT_STATUS_OK
Flush 10415 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10419 NT_STATUS_OK
Close 10419 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 10411 NT_STATUS_OK
Close 10379 NT_STATUS_OK
Close 10412 NT_STATUS_OK
Close 10413 NT_STATUS_OK
Close 10414 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 10422 NT_STATUS_OK
WriteX 10422 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10422 258 NT_STATUS_OK
WriteX 10422 0 62591 62591 NT_STATUS_OK
Close 10422 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10424 NT_STATUS_OK
Close 10424 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 10427 NT_STATUS_OK
WriteX 10427 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10427 258 NT_STATUS_OK
WriteX 10427 0 10845 10845 NT_STATUS_OK
Close 10427 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10429 NT_STATUS_OK
Close 10429 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 10432 NT_STATUS_OK
WriteX 10432 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10432 258 NT_STATUS_OK
WriteX 10432 0 30118 30118 NT_STATUS_OK
Close 10432 NT_STATUS_OK
WriteX 10415 0 4096 4096 NT_STATUS_OK
WriteX 10417 0 64 64 NT_STATUS_OK
Close 10417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 10415 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10434 NT_STATUS_OK
ReadX 10434 0 61440 61440 NT_STATUS_OK
ReadX 10434 61440 4096 4096 NT_STATUS_OK
ReadX 10434 65536 61440 61440 NT_STATUS_OK
ReadX 10434 126976 4096 4096 NT_STATUS_OK
ReadX 10434 131072 61440 61440 NT_STATUS_OK
ReadX 10434 192512 4096 4096 NT_STATUS_OK
ReadX 10434 196608 61440 61440 NT_STATUS_OK
ReadX 10434 258048 4096 4096 NT_STATUS_OK
ReadX 10434 262144 61440 61440 NT_STATUS_OK
ReadX 10434 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10435 NT_STATUS_OK
ReadX 10435 0 61440 61440 NT_STATUS_OK
ReadX 10435 61440 4096 4096 NT_STATUS_OK
ReadX 10435 65536 61440 61440 NT_STATUS_OK
ReadX 10435 126976 4096 4096 NT_STATUS_OK
ReadX 10435 131072 61440 61440 NT_STATUS_OK
ReadX 10435 192512 4096 4096 NT_STATUS_OK
ReadX 10435 196608 61440 61440 NT_STATUS_OK
ReadX 10435 258048 4096 4096 NT_STATUS_OK
ReadX 10435 262144 61440 61440 NT_STATUS_OK
ReadX 10435 323584 4096 4096 NT_STATUS_OK
ReadX 10435 327680 61440 61440 NT_STATUS_OK
ReadX 10435 389120 4096 4096 NT_STATUS_OK
ReadX 10435 393216 61440 61440 NT_STATUS_OK
ReadX 10435 454656 4096 4096 NT_STATUS_OK
ReadX 10435 458752 61440 61440 NT_STATUS_OK
ReadX 10435 520192 4096 4096 NT_STATUS_OK
ReadX 10435 524288 61440 61440 NT_STATUS_OK
ReadX 10435 585728 4096 4096 NT_STATUS_OK
ReadX 10435 589824 61440 61440 NT_STATUS_OK
ReadX 10435 651264 4096 4096 NT_STATUS_OK
ReadX 10435 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10436 NT_STATUS_OK
ReadX 10436 0 61440 61440 NT_STATUS_OK
ReadX 10436 61440 4096 4096 NT_STATUS_OK
ReadX 10436 65536 61440 61440 NT_STATUS_OK
ReadX 10436 126976 4096 4096 NT_STATUS_OK
ReadX 10436 131072 61440 61440 NT_STATUS_OK
ReadX 10436 192512 4096 4096 NT_STATUS_OK
ReadX 10436 196608 61440 61440 NT_STATUS_OK
ReadX 10436 258048 4096 4096 NT_STATUS_OK
ReadX 10436 262144 61440 61440 NT_STATUS_OK
ReadX 10436 323584 4096 4096 NT_STATUS_OK
ReadX 10436 327680 61440 61440 NT_STATUS_OK
ReadX 10436 389120 4096 4096 NT_STATUS_OK
ReadX 10436 393216 61440 61440 NT_STATUS_OK
ReadX 10436 454656 4096 4096 NT_STATUS_OK
ReadX 10436 458752 61440 61440 NT_STATUS_OK
ReadX 10436 520192 4096 4096 NT_STATUS_OK
ReadX 10436 524288 61440 61440 NT_STATUS_OK
ReadX 10436 585728 4096 4096 NT_STATUS_OK
ReadX 10436 589824 61440 61440 NT_STATUS_OK
ReadX 10436 651264 4096 4096 NT_STATUS_OK
ReadX 10436 655360 61440 61440 NT_STATUS_OK
ReadX 10436 716800 4096 4096 NT_STATUS_OK
ReadX 10436 720896 61440 61440 NT_STATUS_OK
ReadX 10436 782336 4096 4096 NT_STATUS_OK
ReadX 10436 786432 61440 61440 NT_STATUS_OK
ReadX 10436 847872 4096 4096 NT_STATUS_OK
ReadX 10436 851968 61440 61440 NT_STATUS_OK
ReadX 10436 913408 4096 4096 NT_STATUS_OK
ReadX 10436 917504 61440 61440 NT_STATUS_OK
ReadX 10436 978944 4096 4096 NT_STATUS_OK
ReadX 10436 983040 61440 61440 NT_STATUS_OK
ReadX 10436 1044480 4096 4096 NT_STATUS_OK
ReadX 10436 1048576 61440 61440 NT_STATUS_OK
ReadX 10436 1110016 4096 4096 NT_STATUS_OK
ReadX 10436 1114112 61440 61440 NT_STATUS_OK
ReadX 10436 1175552 4096 4096 NT_STATUS_OK
ReadX 10436 1179648 61440 61440 NT_STATUS_OK
ReadX 10436 1241088 4096 4096 NT_STATUS_OK
ReadX 10436 1245184 61440 61440 NT_STATUS_OK
ReadX 10436 1306624 4096 4096 NT_STATUS_OK
ReadX 10436 1310720 61440 61440 NT_STATUS_OK
ReadX 10436 1372160 4096 4096 NT_STATUS_OK
ReadX 10436 1376256 61440 61440 NT_STATUS_OK
ReadX 10436 1437696 4096 4096 NT_STATUS_OK
ReadX 10436 1441792 61440 61440 NT_STATUS_OK
ReadX 10436 1503232 4096 4096 NT_STATUS_OK
ReadX 10436 1507328 61440 61440 NT_STATUS_OK
ReadX 10436 1568768 4096 4096 NT_STATUS_OK
ReadX 10436 1572864 61440 61440 NT_STATUS_OK
ReadX 10436 1634304 4096 4096 NT_STATUS_OK
ReadX 10436 1638400 61440 61440 NT_STATUS_OK
ReadX 10436 1699840 4096 4096 NT_STATUS_OK
ReadX 10436 1703936 61440 61440 NT_STATUS_OK
ReadX 10436 1765376 4096 4096 NT_STATUS_OK
ReadX 10436 1769472 61440 61440 NT_STATUS_OK
ReadX 10436 1830912 4096 4096 NT_STATUS_OK
ReadX 10436 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10437 NT_STATUS_OK
Close 10437 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10434 NT_STATUS_OK
Close 10435 NT_STATUS_OK
Close 10436 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10439 NT_STATUS_OK
ReadX 10439 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10440 NT_STATUS_OK
ReadX 10440 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 10441 NT_STATUS_OK
ReadX 10441 0 4096 4096 NT_STATUS_OK
ReadX 10441 4096 4096 4096 NT_STATUS_OK
ReadX 10441 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10442 NT_STATUS_OK
Close 10442 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10439 NT_STATUS_OK
Close 10440 NT_STATUS_OK
Close 10441 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10444 NT_STATUS_OK
ReadX 10444 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10445 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10445 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10446 NT_STATUS_OK
Close 10446 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10444 NT_STATUS_OK
Close 10445 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10448 NT_STATUS_OK
ReadX 10448 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 10449 NT_STATUS_OK
ReadX 10449 0 8192 8192 NT_STATUS_OK
ReadX 10449 8192 8192 8192 NT_STATUS_OK
ReadX 10449 16384 8192 8192 NT_STATUS_OK
ReadX 10449 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10451 NT_STATUS_OK
Close 10451 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10449 NT_STATUS_OK
Close 10448 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10454 NT_STATUS_OK
WriteX 10454 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10454 258 NT_STATUS_OK
WriteX 10454 0 10438 10438 NT_STATUS_OK
Close 10454 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10455 NT_STATUS_OK
Close 10455 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 10456 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10457 NT_STATUS_OK
Close 10457 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 10458 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10459 NT_STATUS_OK
Close 10459 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 10460 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10461 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10462 NT_STATUS_OK
Close 10462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 10463 NT_STATUS_OK
ReadX 10463 0 4096 4096 NT_STATUS_OK
ReadX 10463 4096 4096 4096 NT_STATUS_OK
ReadX 10463 8192 4096 4096 NT_STATUS_OK
ReadX 10463 12288 8192 8192 NT_STATUS_OK
ReadX 10463 20480 8192 8192 NT_STATUS_OK
ReadX 10463 28672 8192 8192 NT_STATUS_OK
ReadX 10463 36864 8192 8192 NT_STATUS_OK
ReadX 10463 45056 8192 8192 NT_STATUS_OK
ReadX 10463 53248 8192 8192 NT_STATUS_OK
ReadX 10463 61440 8192 8192 NT_STATUS_OK
ReadX 10463 69632 8192 8192 NT_STATUS_OK
ReadX 10463 77824 8192 8192 NT_STATUS_OK
ReadX 10463 86016 8192 8192 NT_STATUS_OK
ReadX 10463 94208 8192 8192 NT_STATUS_OK
ReadX 10463 102400 8192 8192 NT_STATUS_OK
ReadX 10463 110592 8192 8192 NT_STATUS_OK
ReadX 10463 118784 8192 8192 NT_STATUS_OK
ReadX 10463 126976 8192 8192 NT_STATUS_OK
ReadX 10463 135168 8192 8192 NT_STATUS_OK
ReadX 10463 143360 8192 8192 NT_STATUS_OK
ReadX 10463 151552 8192 8192 NT_STATUS_OK
ReadX 10463 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10464 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 10463 NT_STATUS_OK
Close 10456 NT_STATUS_OK
Close 10458 NT_STATUS_OK
Close 10460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 10465 NT_STATUS_OK
Close 10465 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 10468 NT_STATUS_OK
WriteX 10468 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10468 258 NT_STATUS_OK
WriteX 10468 0 28489 28489 NT_STATUS_OK
Close 10468 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10469 NT_STATUS_OK
Close 10469 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10471 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10471 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10472 NT_STATUS_OK
Close 10472 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 10471 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 10474 NT_STATUS_OK
ReadX 10474 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 10475 NT_STATUS_OK
ReadX 10475 0 8192 8192 NT_STATUS_OK
ReadX 10475 8192 8192 8192 NT_STATUS_OK
ReadX 10475 16384 8192 8192 NT_STATUS_OK
ReadX 10475 24576 8192 8192 NT_STATUS_OK
ReadX 10475 32768 16384 16384 NT_STATUS_OK
ReadX 10475 49152 8192 8192 NT_STATUS_OK
ReadX 10475 57344 8192 8192 NT_STATUS_OK
ReadX 10475 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10477 NT_STATUS_OK
Close 10477 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10475 NT_STATUS_OK
Close 10474 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10480 NT_STATUS_OK
WriteX 10480 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10480 258 NT_STATUS_OK
WriteX 10480 0 29253 29253 NT_STATUS_OK
Close 10480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10481 NT_STATUS_OK
Close 10481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 10482 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 10483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10483 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 10482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 10484 NT_STATUS_OK
Close 10484 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 10487 NT_STATUS_OK
WriteX 10487 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10487 258 NT_STATUS_OK
WriteX 10487 0 30183 30183 NT_STATUS_OK
Close 10487 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 10488 NT_STATUS_OK
Close 10488 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 10490 NT_STATUS_OK
WriteX 10490 0 510 510 NT_STATUS_OK
WriteX 10490 510 512 512 NT_STATUS_OK
WriteX 10490 1022 510 510 NT_STATUS_OK
WriteX 10490 1532 510 510 NT_STATUS_OK
WriteX 10490 2042 168 168 NT_STATUS_OK
Close 10490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 10491 NT_STATUS_OK
Close 10491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 10493 NT_STATUS_OK
ReadX 10493 0 4096 4096 NT_STATUS_OK
WriteX 10493 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10494 NT_STATUS_OK
ReadX 10494 61440 4096 4096 NT_STATUS_OK
ReadX 10494 126976 4096 4096 NT_STATUS_OK
WriteX 10494 0 65536 65536 NT_STATUS_OK
WriteX 10494 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10495 NT_STATUS_OK
ReadX 10495 61440 4096 4096 NT_STATUS_OK
ReadX 10495 126976 4096 4096 NT_STATUS_OK
ReadX 10495 192512 4096 4096 NT_STATUS_OK
ReadX 10495 258048 4096 4096 NT_STATUS_OK
WriteX 10495 0 65536 65536 NT_STATUS_OK
WriteX 10495 65536 65536 65536 NT_STATUS_OK
WriteX 10495 131072 65536 65536 NT_STATUS_OK
WriteX 10495 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10496 NT_STATUS_OK
ReadX 10496 61440 4096 4096 NT_STATUS_OK
ReadX 10496 126976 4096 4096 NT_STATUS_OK
ReadX 10496 192512 4096 4096 NT_STATUS_OK
ReadX 10496 258048 4096 4096 NT_STATUS_OK
ReadX 10496 323584 4096 4096 NT_STATUS_OK
ReadX 10496 389120 4096 4096 NT_STATUS_OK
ReadX 10496 454656 4096 4096 NT_STATUS_OK
ReadX 10496 520192 4096 4096 NT_STATUS_OK
WriteX 10496 0 65536 65536 NT_STATUS_OK
WriteX 10496 65536 65536 65536 NT_STATUS_OK
WriteX 10496 131072 65536 65536 NT_STATUS_OK
WriteX 10496 196608 65536 65536 NT_STATUS_OK
WriteX 10496 262144 65536 65536 NT_STATUS_OK
WriteX 10496 327680 65536 65536 NT_STATUS_OK
WriteX 10496 393216 65536 65536 NT_STATUS_OK
WriteX 10496 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10497 NT_STATUS_OK
Close 10497 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 10493 NT_STATUS_OK
Close 10494 NT_STATUS_OK
Close 10495 NT_STATUS_OK
Close 10496 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 10499 NT_STATUS_OK
Close 10499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 10503 NT_STATUS_OK
Close 10503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 10506 NT_STATUS_OK
Close 10506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 10508 NT_STATUS_OK
Close 10508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10512 NT_STATUS_OK
Close 10512 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10515 NT_STATUS_OK
Close 10515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 10517 NT_STATUS_OK
Close 10517 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10521 NT_STATUS_OK
Close 10521 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10526 NT_STATUS_OK
Close 10526 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10531 NT_STATUS_OK
Close 10531 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 10536 NT_STATUS_OK
Close 10536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10541 NT_STATUS_OK
Close 10541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10546 NT_STATUS_OK
Close 10546 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 10551 NT_STATUS_OK
Close 10551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 10556 NT_STATUS_OK
Close 10556 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 10559 NT_STATUS_OK
Close 10559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10562 NT_STATUS_OK
Close 10562 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 10565 NT_STATUS_OK
WriteX 10565 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10565 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 10565 0 65536 65536 NT_STATUS_OK
WriteX 10565 65536 65536 65536 NT_STATUS_OK
WriteX 10565 131072 65536 65536 NT_STATUS_OK
WriteX 10565 196608 65536 65536 NT_STATUS_OK
WriteX 10565 262144 26634 26634 NT_STATUS_OK
Close 10565 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10570 NT_STATUS_OK
Close 10570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10571 NT_STATUS_OK
Close 10571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10572 NT_STATUS_OK
ReadX 10572 0 4096 4096 NT_STATUS_OK
Close 10572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 10573 NT_STATUS_OK
ReadX 10573 0 4096 4096 NT_STATUS_OK
ReadX 10573 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10574 NT_STATUS_OK
Close 10574 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 10573 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10578 NT_STATUS_OK
Close 10578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10581 NT_STATUS_OK
Close 10581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 10583 NT_STATUS_OK
Close 10583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10587 NT_STATUS_OK
Close 10587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 10590 NT_STATUS_OK
Close 10590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10592 NT_STATUS_OK
Close 10592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10596 NT_STATUS_OK
Close 10596 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10601 NT_STATUS_OK
Close 10601 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10606 NT_STATUS_OK
Close 10606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 10611 NT_STATUS_OK
Close 10611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10616 NT_STATUS_OK
Close 10616 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 10621 NT_STATUS_OK
Close 10621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10625 NT_STATUS_OK
Close 10625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10630 NT_STATUS_OK
Close 10630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 10635 NT_STATUS_OK
Close 10635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 10638 NT_STATUS_OK
Close 10638 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 10640 NT_STATUS_OK
Close 10640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10650 NT_STATUS_OK
Close 10650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10651 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10652 NT_STATUS_OK
ReadX 10652 0 4096 4096 NT_STATUS_OK
Close 10652 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10653 NT_STATUS_OK
ReadX 10653 0 4096 4096 NT_STATUS_OK
Close 10653 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 10654 NT_STATUS_OK
ReadX 10654 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10664 NT_STATUS_OK
Close 10664 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10665 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10665 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10666 NT_STATUS_OK
ReadX 10666 0 4096 4096 NT_STATUS_OK
Close 10666 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10667 NT_STATUS_OK
ReadX 10667 0 4096 4096 NT_STATUS_OK
Close 10667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 10668 NT_STATUS_OK
ReadX 10668 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10654 NT_STATUS_OK
Close 10668 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10697 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10697 0 4096 4096 NT_STATUS_OK
Close 10697 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10698 NT_STATUS_OK
ReadX 10698 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10698 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10699 NT_STATUS_OK
ReadX 10699 0 4096 4096 NT_STATUS_OK
ReadX 10699 4096 4096 4096 NT_STATUS_OK
ReadX 10699 8192 4096 4096 NT_STATUS_OK
ReadX 10699 12288 4096 4096 NT_STATUS_OK
ReadX 10699 16384 4096 4096 NT_STATUS_OK
ReadX 10699 20480 4096 4096 NT_STATUS_OK
ReadX 10699 24576 4096 4096 NT_STATUS_OK
ReadX 10699 28672 4096 4096 NT_STATUS_OK
ReadX 10699 32768 4096 4096 NT_STATUS_OK
ReadX 10699 36864 4096 4096 NT_STATUS_OK
ReadX 10699 40960 4096 4096 NT_STATUS_OK
ReadX 10699 45056 4096 4096 NT_STATUS_OK
ReadX 10699 49152 4096 4096 NT_STATUS_OK
ReadX 10699 53248 4096 4096 NT_STATUS_OK
ReadX 10699 57344 4096 4096 NT_STATUS_OK
ReadX 10699 61440 4096 4096 NT_STATUS_OK
ReadX 10699 65536 4096 4096 NT_STATUS_OK
ReadX 10699 69632 4096 4096 NT_STATUS_OK
ReadX 10699 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10699 1004 NT_STATUS_OK
WriteX 10699 0 4096 4096 NT_STATUS_OK
Close 10699 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10700 NT_STATUS_OK
SET_FILE_INFORMATION 10700 1004 NT_STATUS_OK
Close 10700 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 10701 NT_STATUS_OK
ReadX 10701 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10702 NT_STATUS_OK
Close 10702 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10705 NT_STATUS_OK
WriteX 10705 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10705 258 NT_STATUS_OK
WriteX 10705 0 65536 65536 NT_STATUS_OK
WriteX 10705 65536 19979 19979 NT_STATUS_OK
Close 10705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10706 NT_STATUS_OK
ReadX 10706 0 4096 4096 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
QUERY_FILE_INFORMATION 10706 1004 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
SET_FILE_INFORMATION 10706 1004 NT_STATUS_OK
WriteX 10706 0 4096 4096 NT_STATUS_OK
Flush 10706 NT_STATUS_OK
Close 10706 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10707 NT_STATUS_OK
ReadX 10707 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 10708 NT_STATUS_OK
ReadX 10708 0 4096 4096 NT_STATUS_OK
Close 10707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10709 NT_STATUS_OK
ReadX 10709 0 4096 4096 NT_STATUS_OK
Close 10709 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10710 NT_STATUS_OK
ReadX 10710 0 4096 4096 NT_STATUS_OK
Close 10710 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10711 NT_STATUS_OK
ReadX 10711 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10711 1004 NT_STATUS_OK
WriteX 10711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 10712 NT_STATUS_OK
Close 10712 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 10708 NT_STATUS_OK
Close 10711 NT_STATUS_OK
Close 10701 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10714 NT_STATUS_OK
Close 10714 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10717 NT_STATUS_OK
WriteX 10717 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10717 258 NT_STATUS_OK
WriteX 10717 0 65536 65536 NT_STATUS_OK
WriteX 10717 65536 17654 17654 NT_STATUS_OK
Close 10717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10718 NT_STATUS_OK
ReadX 10718 0 4096 4096 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
QUERY_FILE_INFORMATION 10718 1004 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
SET_FILE_INFORMATION 10718 1004 NT_STATUS_OK
WriteX 10718 0 4096 4096 NT_STATUS_OK
Flush 10718 NT_STATUS_OK
Close 10718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10719 NT_STATUS_OK
SET_FILE_INFORMATION 10719 1004 NT_STATUS_OK
Close 10719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10720 NT_STATUS_OK
ReadX 10720 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 10721 NT_STATUS_OK
Close 10721 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 10723 NT_STATUS_OK
ReadX 10723 0 4096 4096 NT_STATUS_OK
ReadX 10723 4096 4096 4096 NT_STATUS_OK
ReadX 10723 8192 4096 4096 NT_STATUS_OK
ReadX 10723 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 10723 16384 4096 4096 NT_STATUS_OK
ReadX 10723 20480 4096 4096 NT_STATUS_OK
ReadX 10723 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10724 NT_STATUS_OK
ReadX 10724 0 4096 4096 NT_STATUS_OK
Close 10724 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10725 NT_STATUS_OK
ReadX 10725 0 4096 4096 NT_STATUS_OK
Close 10725 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10726 NT_STATUS_OK
ReadX 10726 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10726 1004 NT_STATUS_OK
WriteX 10726 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 10727 NT_STATUS_OK
Close 10727 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 10726 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 10729 NT_STATUS_OK
Close 10729 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 10732 NT_STATUS_OK
WriteX 10732 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10732 258 NT_STATUS_OK
WriteX 10732 0 65536 65536 NT_STATUS_OK
WriteX 10732 65536 19490 19490 NT_STATUS_OK
Close 10732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10733 NT_STATUS_OK
ReadX 10733 0 4096 4096 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
QUERY_FILE_INFORMATION 10733 1004 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
SET_FILE_INFORMATION 10733 1004 NT_STATUS_OK
WriteX 10733 0 4096 4096 NT_STATUS_OK
Flush 10733 NT_STATUS_OK
Close 10733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10734 NT_STATUS_OK
SET_FILE_INFORMATION 10734 1004 NT_STATUS_OK
Close 10734 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 10735 NT_STATUS_OK
ReadX 10735 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 10736 NT_STATUS_OK
Close 10736 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10738 0 4096 4096 NT_STATUS_OK
Close 10738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10739 NT_STATUS_OK
ReadX 10739 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10740 NT_STATUS_OK
ReadX 10740 0 4096 4096 NT_STATUS_OK
ReadX 10740 4096 4096 4096 NT_STATUS_OK
ReadX 10740 8192 4096 4096 NT_STATUS_OK
ReadX 10740 12288 4096 4096 NT_STATUS_OK
ReadX 10740 16384 4096 4096 NT_STATUS_OK
ReadX 10740 20480 4096 4096 NT_STATUS_OK
ReadX 10740 24576 4096 4096 NT_STATUS_OK
ReadX 10740 28672 4096 4096 NT_STATUS_OK
ReadX 10740 32768 4096 4096 NT_STATUS_OK
ReadX 10740 36864 4096 4096 NT_STATUS_OK
ReadX 10740 40960 4096 4096 NT_STATUS_OK
ReadX 10740 45056 4096 4096 NT_STATUS_OK
ReadX 10740 49152 4096 4096 NT_STATUS_OK
ReadX 10740 53248 4096 4096 NT_STATUS_OK
ReadX 10740 57344 4096 4096 NT_STATUS_OK
ReadX 10740 61440 4096 4096 NT_STATUS_OK
ReadX 10740 65536 4096 4096 NT_STATUS_OK
ReadX 10740 69632 4096 4096 NT_STATUS_OK
ReadX 10740 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10740 1004 NT_STATUS_OK
WriteX 10740 0 4096 4096 NT_STATUS_OK
Close 10740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10741 NT_STATUS_OK
SET_FILE_INFORMATION 10741 1004 NT_STATUS_OK
Close 10741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 10742 NT_STATUS_OK
ReadX 10742 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10743 NT_STATUS_OK
Close 10743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 10735 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10746 NT_STATUS_OK
WriteX 10746 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10746 258 NT_STATUS_OK
WriteX 10746 0 65536 65536 NT_STATUS_OK
WriteX 10746 65536 8866 8866 NT_STATUS_OK
Close 10746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10747 NT_STATUS_OK
ReadX 10747 0 4096 4096 NT_STATUS_OK
WriteX 10747 0 4096 4096 NT_STATUS_OK
Flush 10747 NT_STATUS_OK
SET_FILE_INFORMATION 10747 1004 NT_STATUS_OK
WriteX 10747 0 4096 4096 NT_STATUS_OK
Flush 10747 NT_STATUS_OK
Close 10747 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10748 NT_STATUS_OK
ReadX 10748 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 10748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10749 NT_STATUS_OK
ReadX 10749 0 4096 4096 NT_STATUS_OK
Close 10749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10750 NT_STATUS_OK
ReadX 10750 0 4096 4096 NT_STATUS_OK
Close 10750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10751 NT_STATUS_OK
ReadX 10751 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10751 1004 NT_STATUS_OK
WriteX 10751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 10752 NT_STATUS_OK
Close 10752 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 10751 NT_STATUS_OK
Close 10742 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10754 NT_STATUS_OK
Close 10754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10757 NT_STATUS_OK
WriteX 10757 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10757 258 NT_STATUS_OK
WriteX 10757 0 65536 65536 NT_STATUS_OK
WriteX 10757 65536 9298 9298 NT_STATUS_OK
Close 10757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10758 NT_STATUS_OK
ReadX 10758 0 4096 4096 NT_STATUS_OK
WriteX 10758 0 4096 4096 NT_STATUS_OK
Flush 10758 NT_STATUS_OK
SET_FILE_INFORMATION 10758 1004 NT_STATUS_OK
WriteX 10758 0 4096 4096 NT_STATUS_OK
Flush 10758 NT_STATUS_OK
Close 10758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10759 NT_STATUS_OK
SET_FILE_INFORMATION 10759 1004 NT_STATUS_OK
Close 10759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10760 NT_STATUS_OK
ReadX 10760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 10761 NT_STATUS_OK
Close 10761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10764 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10764 0 4096 4096 NT_STATUS_OK
Close 10764 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 10765 NT_STATUS_OK
ReadX 10765 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 10765 4096 4096 4096 NT_STATUS_OK
ReadX 10765 8192 4096 4096 NT_STATUS_OK
ReadX 10765 12288 4096 4096 NT_STATUS_OK
ReadX 10765 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 10760 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10766 NT_STATUS_OK
ReadX 10766 0 4096 4096 NT_STATUS_OK
Close 10766 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10767 NT_STATUS_OK
ReadX 10767 0 4096 4096 NT_STATUS_OK
Close 10767 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10768 NT_STATUS_OK
ReadX 10768 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10768 1004 NT_STATUS_OK
WriteX 10768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 10769 NT_STATUS_OK
Close 10769 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 10765 NT_STATUS_OK
Close 10768 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 10771 NT_STATUS_OK
Close 10771 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 10774 NT_STATUS_OK
WriteX 10774 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10774 258 NT_STATUS_OK
WriteX 10774 0 65536 65536 NT_STATUS_OK
WriteX 10774 65536 11540 11540 NT_STATUS_OK
Close 10774 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10775 NT_STATUS_OK
ReadX 10775 0 4096 4096 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
SET_FILE_INFORMATION 10775 1004 NT_STATUS_OK
WriteX 10775 0 4096 4096 NT_STATUS_OK
Flush 10775 NT_STATUS_OK
Close 10775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10776 NT_STATUS_OK
SET_FILE_INFORMATION 10776 1004 NT_STATUS_OK
Close 10776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 10777 NT_STATUS_OK
ReadX 10777 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 10778 NT_STATUS_OK
Close 10778 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10780 NT_STATUS_OK
ReadX 10780 61440 4096 4096 NT_STATUS_OK
ReadX 10780 126976 4096 4096 NT_STATUS_OK
WriteX 10780 0 65536 65536 NT_STATUS_OK
WriteX 10780 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10781 NT_STATUS_OK
ReadX 10781 61440 4096 4096 NT_STATUS_OK
ReadX 10781 126976 4096 4096 NT_STATUS_OK
ReadX 10781 192512 4096 4096 NT_STATUS_OK
ReadX 10781 258048 4096 4096 NT_STATUS_OK
WriteX 10781 0 65536 65536 NT_STATUS_OK
WriteX 10781 65536 65536 65536 NT_STATUS_OK
WriteX 10781 131072 65536 65536 NT_STATUS_OK
WriteX 10781 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10782 NT_STATUS_OK
ReadX 10782 61440 4096 4096 NT_STATUS_OK
ReadX 10782 126976 4096 4096 NT_STATUS_OK
ReadX 10782 192512 4096 4096 NT_STATUS_OK
ReadX 10782 258048 4096 4096 NT_STATUS_OK
ReadX 10782 323584 4096 4096 NT_STATUS_OK
ReadX 10782 389120 4096 4096 NT_STATUS_OK
ReadX 10782 454656 4096 4096 NT_STATUS_OK
ReadX 10782 520192 4096 4096 NT_STATUS_OK
WriteX 10782 0 65536 65536 NT_STATUS_OK
WriteX 10782 65536 65536 65536 NT_STATUS_OK
WriteX 10782 131072 65536 65536 NT_STATUS_OK
WriteX 10782 196608 65536 65536 NT_STATUS_OK
WriteX 10782 262144 65536 65536 NT_STATUS_OK
WriteX 10782 327680 65536 65536 NT_STATUS_OK
WriteX 10782 393216 65536 65536 NT_STATUS_OK
WriteX 10782 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 10783 NT_STATUS_OK
ReadX 10783 0 4096 4096 NT_STATUS_OK
ReadX 10783 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 10784 NT_STATUS_OK
WriteX 10784 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10784 258 NT_STATUS_OK
WriteX 10784 0 53 53 NT_STATUS_OK
Close 10784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 10785 NT_STATUS_OK
Close 10785 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10777 NT_STATUS_OK
Close 10723 NT_STATUS_OK
Close 10780 NT_STATUS_OK
Close 10781 NT_STATUS_OK
Close 10782 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10783 8192 4096 4096 NT_STATUS_OK
ReadX 10783 12288 4096 4096 NT_STATUS_OK
WriteX 10787 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10787 258 NT_STATUS_OK
ReadX 10783 16384 4096 4096 NT_STATUS_OK
ReadX 10783 20480 4096 4096 NT_STATUS_OK
WriteX 10787 0 15360 15360 NT_STATUS_OK
Close 10787 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 10788 NT_STATUS_OK
ReadX 10788 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10788 1004 NT_STATUS_OK
WriteX 10788 0 4096 4096 NT_STATUS_OK
Close 10788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 10789 NT_STATUS_OK
Close 10789 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10791 NT_STATUS_OK
ReadX 10791 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 10792 NT_STATUS_OK
Close 10792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 10791 4096 4096 4096 NT_STATUS_OK
ReadX 10791 8192 4096 4096 NT_STATUS_OK
ReadX 10791 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10794 NT_STATUS_OK
ReadX 10794 0 4096 4096 NT_STATUS_OK
ReadX 10794 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 10795 NT_STATUS_OK
ReadX 10795 0 4096 4096 NT_STATUS_OK
ReadX 10795 4096 4096 4096 NT_STATUS_OK
ReadX 10795 8192 4096 4096 NT_STATUS_OK
Close 10794 NT_STATUS_OK
Close 10795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 10796 NT_STATUS_OK
WriteX 10796 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10796 258 NT_STATUS_OK
WriteX 10796 0 15360 15360 NT_STATUS_OK
Close 10796 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 10797 NT_STATUS_OK
ReadX 10797 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10797 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10797 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10791 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 10783 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 10798 NT_STATUS_OK
Close 10798 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10800 NT_STATUS_OK
ReadX 10800 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 10801 NT_STATUS_OK
SET_FILE_INFORMATION 10801 1004 NT_STATUS_OK
Close 10801 NT_STATUS_OK
WriteX 10797 0 4096 4096 NT_STATUS_OK
Close 10797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 10802 NT_STATUS_OK
Close 10802 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 10804 NT_STATUS_OK
ReadX 10804 0 4096 4096 NT_STATUS_OK
ReadX 10804 4096 4096 4096 NT_STATUS_OK
ReadX 10804 8192 4096 4096 NT_STATUS_OK
ReadX 10804 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 10804 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10804 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 10805 NT_STATUS_OK
ReadX 10805 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 10806 NT_STATUS_OK
WriteX 10806 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10806 258 NT_STATUS_OK
WriteX 10806 0 53 53 NT_STATUS_OK
Close 10806 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 10807 NT_STATUS_OK
Close 10807 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10805 4096 4096 4096 NT_STATUS_OK
ReadX 10805 8192 4096 4096 NT_STATUS_OK
ReadX 10805 12288 4096 4096 NT_STATUS_OK
WriteX 10809 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10809 258 NT_STATUS_OK
WriteX 10809 0 12006 12006 NT_STATUS_OK
Close 10809 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 10810 NT_STATUS_OK
ReadX 10810 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10810 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10810 1004 NT_STATUS_OK
WriteX 10810 0 4096 4096 NT_STATUS_OK
Close 10810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 10811 NT_STATUS_OK
Close 10811 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10813 NT_STATUS_OK
ReadX 10813 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 10814 NT_STATUS_OK
Close 10814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 10813 4096 4096 4096 NT_STATUS_OK
ReadX 10813 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 10816 NT_STATUS_OK
WriteX 10816 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10816 258 NT_STATUS_OK
WriteX 10816 0 11991 11991 NT_STATUS_OK
Close 10816 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 10817 NT_STATUS_OK
ReadX 10817 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10817 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10817 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 10805 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 10818 NT_STATUS_OK
Close 10818 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10820 NT_STATUS_OK
ReadX 10820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 10821 NT_STATUS_OK
SET_FILE_INFORMATION 10821 1004 NT_STATUS_OK
Close 10821 NT_STATUS_OK
WriteX 10817 0 4096 4096 NT_STATUS_OK
Close 10817 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 10822 NT_STATUS_OK
Close 10822 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 10824 NT_STATUS_OK
ReadX 10824 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 10825 NT_STATUS_OK
Close 10825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 10824 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 10824 1004 NT_STATUS_OK
ReadX 10824 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 10824 1004 NT_STATUS_OK
WriteX 10824 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10824 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10824 1004 NT_STATUS_OK
SET_FILE_INFORMATION 10824 1004 NT_STATUS_OK
Close 10800 NT_STATUS_OK
WriteX 10804 0 19054 19054 NT_STATUS_OK
WriteX 10824 0 12288 12288 NT_STATUS_OK
Close 10820 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 10827 NT_STATUS_OK
Close 10827 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 10804 NT_STATUS_OK
Close 10824 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 10829 NT_STATUS_OK
Close 10829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 10831 NT_STATUS_OK
ReadX 10831 0 61440 61440 NT_STATUS_OK
ReadX 10831 61440 4096 4096 NT_STATUS_OK
ReadX 10831 65536 61440 61440 NT_STATUS_OK
ReadX 10831 126976 4096 4096 NT_STATUS_OK
ReadX 10831 131072 61440 61440 NT_STATUS_OK
ReadX 10831 192512 4096 4096 NT_STATUS_OK
ReadX 10831 196608 61440 61440 NT_STATUS_OK
ReadX 10831 258048 4096 4096 NT_STATUS_OK
ReadX 10831 262144 61440 61440 NT_STATUS_OK
ReadX 10831 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 10832 NT_STATUS_OK
ReadX 10832 0 61440 61440 NT_STATUS_OK
ReadX 10832 61440 4096 4096 NT_STATUS_OK
ReadX 10832 65536 61440 61440 NT_STATUS_OK
ReadX 10832 126976 4096 4096 NT_STATUS_OK
ReadX 10832 131072 61440 61440 NT_STATUS_OK
ReadX 10832 192512 4096 4096 NT_STATUS_OK
ReadX 10832 196608 61440 61440 NT_STATUS_OK
ReadX 10832 258048 4096 4096 NT_STATUS_OK
ReadX 10832 262144 61440 61440 NT_STATUS_OK
ReadX 10832 323584 4096 4096 NT_STATUS_OK
ReadX 10832 327680 61440 61440 NT_STATUS_OK
ReadX 10832 389120 4096 4096 NT_STATUS_OK
ReadX 10832 393216 61440 61440 NT_STATUS_OK
ReadX 10832 454656 4096 4096 NT_STATUS_OK
ReadX 10832 458752 61440 61440 NT_STATUS_OK
ReadX 10832 520192 4096 4096 NT_STATUS_OK
ReadX 10832 524288 61440 61440 NT_STATUS_OK
ReadX 10832 585728 4096 4096 NT_STATUS_OK
ReadX 10832 589824 61440 61440 NT_STATUS_OK
ReadX 10832 651264 4096 4096 NT_STATUS_OK
ReadX 10832 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 10833 NT_STATUS_OK
ReadX 10833 0 61440 61440 NT_STATUS_OK
ReadX 10833 61440 4096 4096 NT_STATUS_OK
ReadX 10833 65536 61440 61440 NT_STATUS_OK
ReadX 10833 126976 4096 4096 NT_STATUS_OK
ReadX 10833 131072 61440 61440 NT_STATUS_OK
ReadX 10833 192512 4096 4096 NT_STATUS_OK
ReadX 10833 196608 61440 61440 NT_STATUS_OK
ReadX 10833 258048 4096 4096 NT_STATUS_OK
ReadX 10833 262144 61440 61440 NT_STATUS_OK
ReadX 10833 323584 4096 4096 NT_STATUS_OK
ReadX 10833 327680 61440 61440 NT_STATUS_OK
ReadX 10833 389120 4096 4096 NT_STATUS_OK
ReadX 10833 393216 61440 61440 NT_STATUS_OK
ReadX 10833 454656 4096 4096 NT_STATUS_OK
ReadX 10833 458752 61440 61440 NT_STATUS_OK
ReadX 10833 520192 4096 4096 NT_STATUS_OK
ReadX 10833 524288 61440 61440 NT_STATUS_OK
ReadX 10833 585728 4096 4096 NT_STATUS_OK
ReadX 10833 589824 61440 61440 NT_STATUS_OK
ReadX 10833 651264 4096 4096 NT_STATUS_OK
ReadX 10833 655360 61440 61440 NT_STATUS_OK
ReadX 10833 716800 4096 4096 NT_STATUS_OK
ReadX 10833 720896 61440 61440 NT_STATUS_OK
ReadX 10833 782336 4096 4096 NT_STATUS_OK
ReadX 10833 786432 61440 61440 NT_STATUS_OK
ReadX 10833 847872 4096 4096 NT_STATUS_OK
ReadX 10833 851968 61440 61440 NT_STATUS_OK
ReadX 10833 913408 4096 4096 NT_STATUS_OK
ReadX 10833 917504 61440 61440 NT_STATUS_OK
ReadX 10833 978944 4096 4096 NT_STATUS_OK
ReadX 10833 983040 61440 61440 NT_STATUS_OK
ReadX 10833 1044480 4096 4096 NT_STATUS_OK
ReadX 10833 1048576 61440 61440 NT_STATUS_OK
ReadX 10833 1110016 4096 4096 NT_STATUS_OK
ReadX 10833 1114112 61440 61440 NT_STATUS_OK
ReadX 10833 1175552 4096 4096 NT_STATUS_OK
ReadX 10833 1179648 61440 61440 NT_STATUS_OK
ReadX 10833 1241088 4096 4096 NT_STATUS_OK
ReadX 10833 1245184 61440 61440 NT_STATUS_OK
ReadX 10833 1306624 4096 4096 NT_STATUS_OK
ReadX 10833 1310720 61440 61440 NT_STATUS_OK
ReadX 10833 1372160 4096 4096 NT_STATUS_OK
ReadX 10833 1376256 61440 61440 NT_STATUS_OK
ReadX 10833 1437696 4096 4096 NT_STATUS_OK
ReadX 10833 1441792 61440 61440 NT_STATUS_OK
ReadX 10833 1503232 4096 4096 NT_STATUS_OK
ReadX 10833 1507328 61440 61440 NT_STATUS_OK
ReadX 10833 1568768 4096 4096 NT_STATUS_OK
ReadX 10833 1572864 61440 61440 NT_STATUS_OK
ReadX 10833 1634304 4096 4096 NT_STATUS_OK
ReadX 10833 1638400 61440 61440 NT_STATUS_OK
ReadX 10833 1699840 4096 4096 NT_STATUS_OK
ReadX 10833 1703936 61440 61440 NT_STATUS_OK
ReadX 10833 1765376 4096 4096 NT_STATUS_OK
ReadX 10833 1769472 61440 61440 NT_STATUS_OK
ReadX 10833 1830912 4096 4096 NT_STATUS_OK
ReadX 10833 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10834 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10834 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10835 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10835 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10836 NT_STATUS_OK
ReadX 10836 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10837 NT_STATUS_OK
ReadX 10837 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10838 NT_STATUS_OK
ReadX 10838 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 10839 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10839 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 10840 NT_STATUS_OK
QUERY_FILE_INFORMATION 10840 1004 NT_STATUS_OK
WriteX 10840 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10840 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 10841 NT_STATUS_OK
Close 10841 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10842 NT_STATUS_OK
WriteX 10842 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10842 258 NT_STATUS_OK
WriteX 10842 0 491 491 NT_STATUS_OK
Close 10842 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 10843 NT_STATUS_OK
ReadX 10843 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 10840 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 10845 NT_STATUS_OK
Close 10845 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10846 NT_STATUS_OK
WriteX 10846 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10846 258 NT_STATUS_OK
WriteX 10846 0 543 543 NT_STATUS_OK
Close 10846 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10847 NT_STATUS_OK
ReadX 10847 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10843 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 10831 NT_STATUS_OK
Close 10832 NT_STATUS_OK
Close 10833 NT_STATUS_OK
Close 10847 NT_STATUS_OK
Close 10835 NT_STATUS_OK
Close 10836 NT_STATUS_OK
Close 10837 NT_STATUS_OK
Close 10838 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 10840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10850 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10850 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10851 NT_STATUS_OK
ReadX 10851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10852 NT_STATUS_OK
ReadX 10852 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10853 NT_STATUS_OK
ReadX 10853 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10854 NT_STATUS_OK
ReadX 10854 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10855 NT_STATUS_OK
ReadX 10855 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 10859 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10860 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 1004 NT_STATUS_OK
WriteX 10860 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10860 258 NT_STATUS_OK
WriteX 10860 0 2048 2048 NT_STATUS_OK
Close 10860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10861 NT_STATUS_OK
ReadX 10861 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10861 0 4096 4096 NT_STATUS_OK
Flush 10861 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 10861 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 10865 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10865 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10866 NT_STATUS_OK
WriteX 10866 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10866 258 NT_STATUS_OK
WriteX 10866 0 2048 2048 NT_STATUS_OK
Close 10866 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 10867 NT_STATUS_OK
ReadX 10867 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 10871 NT_STATUS_OK
Close 10871 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10872 NT_STATUS_OK
WriteX 10872 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10872 258 NT_STATUS_OK
WriteX 10872 0 2048 2048 NT_STATUS_OK
Close 10872 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 10873 NT_STATUS_OK
ReadX 10873 0 2048 2048 NT_STATUS_OK
ReadX 10851 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10873 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 10855 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 10867 0 4096 4096 NT_STATUS_OK
WriteX 10851 0 8192 8192 NT_STATUS_OK
WriteX 10852 0 4096 4096 NT_STATUS_OK
WriteX 10853 0 4096 4096 NT_STATUS_OK
ReadX 10867 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10851 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10876 NT_STATUS_OK
ReadX 10876 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 10877 NT_STATUS_OK
QUERY_FILE_INFORMATION 10877 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 10877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 10876 NT_STATUS_OK
Close 10852 NT_STATUS_OK
Close 10853 NT_STATUS_OK
Close 10854 NT_STATUS_OK
Close 10867 NT_STATUS_OK
Close 10851 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10879 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10879 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10880 NT_STATUS_OK
ReadX 10880 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10881 NT_STATUS_OK
ReadX 10881 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10882 NT_STATUS_OK
ReadX 10882 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10883 NT_STATUS_OK
ReadX 10883 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10884 NT_STATUS_OK
ReadX 10884 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10885 NT_STATUS_OK
ReadX 10885 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10886 NT_STATUS_OK
ReadX 10886 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10887 NT_STATUS_OK
ReadX 10887 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10888 NT_STATUS_OK
ReadX 10888 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10889 NT_STATUS_OK
ReadX 10889 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10890 NT_STATUS_OK
ReadX 10890 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10891 NT_STATUS_OK
ReadX 10891 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10892 NT_STATUS_OK
ReadX 10892 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 10896 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10896 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10897 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 1004 NT_STATUS_OK
WriteX 10897 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10897 258 NT_STATUS_OK
WriteX 10897 0 2048 2048 NT_STATUS_OK
Close 10897 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10898 NT_STATUS_OK
ReadX 10898 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10888 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10899 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10900 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10900 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 10904 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10904 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10905 NT_STATUS_OK
QUERY_FILE_INFORMATION 10905 1004 NT_STATUS_OK
WriteX 10905 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10905 258 NT_STATUS_OK
WriteX 10905 0 2048 2048 NT_STATUS_OK
Close 10905 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10906 NT_STATUS_OK
ReadX 10906 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
Flush 10898 NT_STATUS_OK
WriteX 10906 0 4096 4096 NT_STATUS_OK
Flush 10906 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 10898 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 10906 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10900 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 10907 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10907 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10908 NT_STATUS_OK
WriteX 10908 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10908 258 NT_STATUS_OK
WriteX 10908 0 4096 4096 NT_STATUS_OK
Close 10908 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 10909 NT_STATUS_OK
ReadX 10909 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 10910 NT_STATUS_OK
Close 10910 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10911 NT_STATUS_OK
WriteX 10911 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10911 258 NT_STATUS_OK
WriteX 10911 0 4096 4096 NT_STATUS_OK
Close 10911 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 10912 NT_STATUS_OK
ReadX 10912 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 10912 0 4096 4096 NT_STATUS_OK
Close 10909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 10892 NT_STATUS_OK
Close 10886 NT_STATUS_OK
Close 10900 NT_STATUS_OK
Close 10889 NT_STATUS_OK
Close 10890 NT_STATUS_OK
Close 10891 NT_STATUS_OK
Close 10887 NT_STATUS_OK
Close 10880 NT_STATUS_OK
Close 10881 NT_STATUS_OK
Close 10884 NT_STATUS_OK
Close 10885 NT_STATUS_OK
Close 10882 NT_STATUS_OK
Close 10883 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 10912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 10915 NT_STATUS_OK
Close 10915 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 10917 NT_STATUS_OK
ReadX 10917 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 10918 NT_STATUS_OK
Close 10918 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10919 NT_STATUS_OK
WriteX 10919 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10919 258 NT_STATUS_OK
WriteX 10919 0 2048 2048 NT_STATUS_OK
Close 10919 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10920 NT_STATUS_OK
ReadX 10920 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10921 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10921 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10922 NT_STATUS_OK
ReadX 10922 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10923 NT_STATUS_OK
ReadX 10923 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10924 NT_STATUS_OK
ReadX 10924 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10925 NT_STATUS_OK
ReadX 10925 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10926 NT_STATUS_OK
ReadX 10926 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10927 NT_STATUS_OK
ReadX 10927 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10928 NT_STATUS_OK
ReadX 10928 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10929 NT_STATUS_OK
ReadX 10929 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10930 NT_STATUS_OK
ReadX 10930 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10931 NT_STATUS_OK
ReadX 10931 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10932 NT_STATUS_OK
ReadX 10932 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10933 NT_STATUS_OK
ReadX 10933 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10898 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 10934 NT_STATUS_OK
QUERY_FILE_INFORMATION 10934 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 10934 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 10917 NT_STATUS_OK
Close 10920 NT_STATUS_OK
Close 10932 NT_STATUS_OK
Close 10927 NT_STATUS_OK
Close 10928 NT_STATUS_OK
Close 10929 NT_STATUS_OK
Close 10930 NT_STATUS_OK
Close 10931 NT_STATUS_OK
Close 10933 NT_STATUS_OK
Close 10921 NT_STATUS_OK
Close 10922 NT_STATUS_OK
Close 10925 NT_STATUS_OK
Close 10926 NT_STATUS_OK
Close 10923 NT_STATUS_OK
Close 10924 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 10936 NT_STATUS_OK
QUERY_FILE_INFORMATION 10936 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 10936 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10938 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10938 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 10939 NT_STATUS_OK
ReadX 10939 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 10940 NT_STATUS_OK
ReadX 10940 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 10941 NT_STATUS_OK
ReadX 10941 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 10942 NT_STATUS_OK
ReadX 10942 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 10943 NT_STATUS_OK
ReadX 10943 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10944 NT_STATUS_OK
ReadX 10944 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10945 NT_STATUS_OK
ReadX 10945 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10946 NT_STATUS_OK
ReadX 10946 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10947 NT_STATUS_OK
ReadX 10947 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10948 NT_STATUS_OK
ReadX 10948 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10949 NT_STATUS_OK
ReadX 10949 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 10950 NT_STATUS_OK
ReadX 10950 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10951 NT_STATUS_OK
ReadX 10951 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 10955 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10956 NT_STATUS_OK
QUERY_FILE_INFORMATION 10956 1004 NT_STATUS_OK
WriteX 10956 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10956 258 NT_STATUS_OK
WriteX 10956 0 2048 2048 NT_STATUS_OK
Close 10956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10957 NT_STATUS_OK
ReadX 10957 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10958 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10958 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10959 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10959 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10960 NT_STATUS_OK
ReadX 10960 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10961 NT_STATUS_OK
ReadX 10961 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10962 NT_STATUS_OK
ReadX 10962 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10963 NT_STATUS_OK
ReadX 10963 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 10967 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10967 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10968 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 1004 NT_STATUS_OK
WriteX 10968 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10968 258 NT_STATUS_OK
WriteX 10968 0 2048 2048 NT_STATUS_OK
Close 10968 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10969 NT_STATUS_OK
ReadX 10969 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10944 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10970 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10970 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10971 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 10975 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10975 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10976 NT_STATUS_OK
QUERY_FILE_INFORMATION 10976 1004 NT_STATUS_OK
WriteX 10976 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 10976 258 NT_STATUS_OK
WriteX 10976 0 2048 2048 NT_STATUS_OK
Close 10976 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10977 NT_STATUS_OK
ReadX 10977 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
Flush 10957 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
Flush 10969 NT_STATUS_OK
WriteX 10977 0 4096 4096 NT_STATUS_OK
Flush 10977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 10957 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 10969 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 10977 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 10959 4096 16384 16384 NT_STATUS_OK
ReadX 10939 4096 16384 16384 NT_STATUS_OK
ReadX 10971 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10978 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 10978 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 10979 NT_STATUS_OK
ReadX 10979 0 2048 2048 NT_STATUS_OK
WriteX 10979 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10957 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 10980 NT_STATUS_OK
QUERY_FILE_INFORMATION 10980 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 10980 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 10979 NT_STATUS_OK
Close 10963 NT_STATUS_OK
Close 10951 NT_STATUS_OK
Close 10943 NT_STATUS_OK
Close 10959 NT_STATUS_OK
Close 10960 NT_STATUS_OK
Close 10961 NT_STATUS_OK
Close 10962 NT_STATUS_OK
Close 10950 NT_STATUS_OK
Close 10971 NT_STATUS_OK
Close 10945 NT_STATUS_OK
Close 10948 NT_STATUS_OK
Close 10949 NT_STATUS_OK
Close 10946 NT_STATUS_OK
Close 10947 NT_STATUS_OK
Close 10939 NT_STATUS_OK
Close 10940 NT_STATUS_OK
Close 10941 NT_STATUS_OK
Close 10942 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10969 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 10982 NT_STATUS_OK
QUERY_FILE_INFORMATION 10982 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 10982 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10977 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 10984 NT_STATUS_OK
QUERY_FILE_INFORMATION 10984 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 10984 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 10987 NT_STATUS_OK
ReadX 10987 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 10988 NT_STATUS_OK
ReadX 10988 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 10989 NT_STATUS_OK
ReadX 10989 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 10990 NT_STATUS_OK
ReadX 10990 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 10991 NT_STATUS_OK
ReadX 10991 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 10987 4096 16384 16384 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10989 0 4096 4096 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10992 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 10992 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 10993 NT_STATUS_OK
ReadX 10993 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 10994 NT_STATUS_OK
ReadX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 10995 NT_STATUS_OK
ReadX 10995 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 10996 NT_STATUS_OK
ReadX 10996 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 10997 NT_STATUS_OK
ReadX 10997 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 10998 NT_STATUS_OK
ReadX 10998 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 10999 NT_STATUS_OK
ReadX 10999 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11000 NT_STATUS_OK
ReadX 11000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11001 NT_STATUS_OK
ReadX 11001 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11002 NT_STATUS_OK
ReadX 11002 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11003 NT_STATUS_OK
ReadX 11003 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11004 NT_STATUS_OK
ReadX 11004 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11005 NT_STATUS_OK
ReadX 11005 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11006 NT_STATUS_OK
ReadX 11006 0 8192 8192 NT_STATUS_OK
ReadX 10993 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11007 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11007 0 4096 4096 NT_STATUS_OK
ReadX 11007 4096 4096 4096 NT_STATUS_OK
ReadX 11007 8192 4096 4096 NT_STATUS_OK
WriteX 10993 0 4096 4096 NT_STATUS_OK
WriteX 10994 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11008 0 4096 4096 NT_STATUS_OK
ReadX 11008 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 10987 0 4096 4096 NT_STATUS_OK
WriteX 10988 0 4096 4096 NT_STATUS_OK
WriteX 10989 0 4096 4096 NT_STATUS_OK
WriteX 10990 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11012 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11012 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11013 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 1004 NT_STATUS_OK
WriteX 11013 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11013 258 NT_STATUS_OK
WriteX 11013 0 2048 2048 NT_STATUS_OK
Close 11013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11014 NT_STATUS_OK
ReadX 11014 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11015 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11015 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11016 NT_STATUS_OK
ReadX 11016 0 4096 4096 NT_STATUS_OK
ReadX 11016 4096 4096 4096 NT_STATUS_OK
WriteX 11016 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11014 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11016 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11017 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11017 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11018 NT_STATUS_OK
ReadX 11018 0 4096 4096 NT_STATUS_OK
ReadX 11018 4096 4096 4096 NT_STATUS_OK
WriteX 11018 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11019 NT_STATUS_OK
QUERY_FILE_INFORMATION 11019 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11019 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11006 NT_STATUS_OK
Close 10991 NT_STATUS_OK
Close 10987 NT_STATUS_OK
Close 10988 NT_STATUS_OK
Close 10989 NT_STATUS_OK
Close 10990 NT_STATUS_OK
Close 10999 NT_STATUS_OK
Close 11004 NT_STATUS_OK
Close 11000 NT_STATUS_OK
Close 11001 NT_STATUS_OK
Close 11002 NT_STATUS_OK
Close 11003 NT_STATUS_OK
Close 11005 NT_STATUS_OK
Close 10993 NT_STATUS_OK
Close 10994 NT_STATUS_OK
Close 10997 NT_STATUS_OK
Close 10998 NT_STATUS_OK
Close 10995 NT_STATUS_OK
Close 10996 NT_STATUS_OK
Close 11018 NT_STATUS_OK
Close 11007 NT_STATUS_OK
Close 11008 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11021 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11021 0 4096 4096 NT_STATUS_OK
ReadX 11021 4096 4096 4096 NT_STATUS_OK
ReadX 11021 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11022 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11022 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11023 NT_STATUS_OK
ReadX 11023 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11024 NT_STATUS_OK
ReadX 11024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11025 NT_STATUS_OK
ReadX 11025 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11026 NT_STATUS_OK
ReadX 11026 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11027 NT_STATUS_OK
ReadX 11027 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11028 NT_STATUS_OK
ReadX 11028 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11029 NT_STATUS_OK
ReadX 11029 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11030 NT_STATUS_OK
ReadX 11030 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11031 NT_STATUS_OK
ReadX 11031 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11032 NT_STATUS_OK
ReadX 11032 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11033 NT_STATUS_OK
ReadX 11033 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11034 NT_STATUS_OK
ReadX 11034 0 4096 4096 NT_STATUS_OK
ReadX 11022 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11038 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11039 NT_STATUS_OK
QUERY_FILE_INFORMATION 11039 1004 NT_STATUS_OK
WriteX 11039 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11039 258 NT_STATUS_OK
WriteX 11039 0 2048 2048 NT_STATUS_OK
Close 11039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11040 NT_STATUS_OK
ReadX 11040 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11040 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11044 NT_STATUS_OK
Close 11044 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11045 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 1004 NT_STATUS_OK
WriteX 11045 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11045 258 NT_STATUS_OK
WriteX 11045 0 2048 2048 NT_STATUS_OK
Close 11045 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11046 NT_STATUS_OK
ReadX 11046 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11046 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11029 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11040 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11047 NT_STATUS_OK
QUERY_FILE_INFORMATION 11047 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11033 NT_STATUS_OK
Close 11028 NT_STATUS_OK
Close 11034 NT_STATUS_OK
Close 11022 NT_STATUS_OK
Close 11023 NT_STATUS_OK
Close 11026 NT_STATUS_OK
Close 11027 NT_STATUS_OK
Close 11024 NT_STATUS_OK
Close 11025 NT_STATUS_OK
Close 11029 NT_STATUS_OK
Close 11030 NT_STATUS_OK
Close 11031 NT_STATUS_OK
Close 11032 NT_STATUS_OK
Close 11021 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11049 NT_STATUS_OK
QUERY_FILE_INFORMATION 11049 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11049 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11051 NT_STATUS_OK
ReadX 11051 61440 4096 4096 NT_STATUS_OK
ReadX 11051 126976 4096 4096 NT_STATUS_OK
WriteX 11051 0 65536 65536 NT_STATUS_OK
WriteX 11051 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11052 NT_STATUS_OK
ReadX 11052 61440 4096 4096 NT_STATUS_OK
ReadX 11052 126976 4096 4096 NT_STATUS_OK
ReadX 11052 192512 4096 4096 NT_STATUS_OK
ReadX 11052 258048 4096 4096 NT_STATUS_OK
WriteX 11052 0 65536 65536 NT_STATUS_OK
WriteX 11052 65536 65536 65536 NT_STATUS_OK
WriteX 11052 131072 65536 65536 NT_STATUS_OK
WriteX 11052 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11053 NT_STATUS_OK
ReadX 11053 61440 4096 4096 NT_STATUS_OK
ReadX 11053 126976 4096 4096 NT_STATUS_OK
ReadX 11053 192512 4096 4096 NT_STATUS_OK
ReadX 11053 258048 4096 4096 NT_STATUS_OK
ReadX 11053 323584 4096 4096 NT_STATUS_OK
ReadX 11053 389120 4096 4096 NT_STATUS_OK
ReadX 11053 454656 4096 4096 NT_STATUS_OK
ReadX 11053 520192 4096 4096 NT_STATUS_OK
WriteX 11053 0 65536 65536 NT_STATUS_OK
WriteX 11053 65536 65536 65536 NT_STATUS_OK
WriteX 11053 131072 65536 65536 NT_STATUS_OK
WriteX 11053 196608 65536 65536 NT_STATUS_OK
WriteX 11053 262144 65536 65536 NT_STATUS_OK
WriteX 11053 327680 65536 65536 NT_STATUS_OK
WriteX 11053 393216 65536 65536 NT_STATUS_OK
WriteX 11053 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11054 NT_STATUS_OK
ReadX 11054 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11054 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11054 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11054 8192 4096 4096 NT_STATUS_OK
ReadX 11054 12288 4096 4096 NT_STATUS_OK
ReadX 11054 16384 4096 4096 NT_STATUS_OK
ReadX 11054 20480 4096 4096 NT_STATUS_OK
ReadX 11054 24576 4096 4096 NT_STATUS_OK
ReadX 11054 28672 4096 4096 NT_STATUS_OK
ReadX 11054 32768 4096 4096 NT_STATUS_OK
ReadX 11054 36864 4096 4096 NT_STATUS_OK
ReadX 11054 40960 4096 4096 NT_STATUS_OK
ReadX 11054 45056 4096 4096 NT_STATUS_OK
ReadX 11054 49152 4096 4096 NT_STATUS_OK
ReadX 11054 53248 4096 4096 NT_STATUS_OK
ReadX 11054 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11054 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11055 NT_STATUS_OK
Close 11055 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11051 NT_STATUS_OK
Close 11052 NT_STATUS_OK
Close 11053 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11057 NT_STATUS_OK
WriteX 11057 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11057 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11057 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11057 1004 NT_STATUS_OK
WriteX 11057 0 57088 57088 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
Flush 11057 NT_STATUS_OK
Close 11054 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11058 NT_STATUS_OK
SET_FILE_INFORMATION 11058 1004 NT_STATUS_OK
Close 11058 NT_STATUS_OK
SET_FILE_INFORMATION 11057 1004 NT_STATUS_OK
WriteX 11057 0 4096 4096 NT_STATUS_OK
Close 11057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11059 NT_STATUS_OK
Close 11059 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11061 NT_STATUS_OK
ReadX 11061 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11061 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11062 NT_STATUS_OK
WriteX 11062 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11062 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11062 1004 NT_STATUS_OK
WriteX 11062 0 51456 51456 NT_STATUS_OK
WriteX 11062 0 4096 4096 NT_STATUS_OK
Flush 11062 NT_STATUS_OK
SET_FILE_INFORMATION 11062 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11062 1004 NT_STATUS_OK
WriteX 11062 0 4096 4096 NT_STATUS_OK
Close 11062 NT_STATUS_OK
Close 11061 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11064 NT_STATUS_OK
Close 11064 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11066 NT_STATUS_OK
ReadX 11066 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11066 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11068 NT_STATUS_OK
Close 11068 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11071 NT_STATUS_OK
WriteX 11071 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11071 258 NT_STATUS_OK
WriteX 11071 0 53077 53077 NT_STATUS_OK
Close 11071 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11072 NT_STATUS_OK
WriteX 11072 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11072 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11072 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11072 1004 NT_STATUS_OK
WriteX 11072 0 65536 65536 NT_STATUS_OK
WriteX 11072 65536 1856 1856 NT_STATUS_OK
WriteX 11072 0 4096 4096 NT_STATUS_OK
Flush 11072 NT_STATUS_OK
SET_FILE_INFORMATION 11072 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11072 1004 NT_STATUS_OK
WriteX 11072 0 4096 4096 NT_STATUS_OK
Close 11072 NT_STATUS_OK
Close 11066 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11074 NT_STATUS_OK
Close 11074 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11076 NT_STATUS_OK
ReadX 11076 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11078 NT_STATUS_OK
Close 11078 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11081 NT_STATUS_OK
WriteX 11081 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11081 258 NT_STATUS_OK
WriteX 11081 0 7983 7983 NT_STATUS_OK
Close 11081 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11083 NT_STATUS_OK
Close 11083 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11086 NT_STATUS_OK
WriteX 11086 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11086 258 NT_STATUS_OK
WriteX 11086 0 65536 65536 NT_STATUS_OK
WriteX 11086 65536 65536 65536 NT_STATUS_OK
WriteX 11086 131072 65536 65536 NT_STATUS_OK
WriteX 11086 196608 65536 65536 NT_STATUS_OK
WriteX 11086 262144 65536 65536 NT_STATUS_OK
WriteX 11086 327680 65536 65536 NT_STATUS_OK
WriteX 11086 393216 65536 65536 NT_STATUS_OK
WriteX 11086 458752 46731 46731 NT_STATUS_OK
Close 11086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11087 NT_STATUS_OK
WriteX 11087 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 258 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11076 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11087 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11087 1004 NT_STATUS_OK
WriteX 11087 0 65536 65536 NT_STATUS_OK
WriteX 11087 65536 22848 22848 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Flush 11087 NT_STATUS_OK
SET_FILE_INFORMATION 11087 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11087 1004 NT_STATUS_OK
WriteX 11087 0 4096 4096 NT_STATUS_OK
Close 11087 NT_STATUS_OK
Close 11076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11089 NT_STATUS_OK
Close 11089 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11091 NT_STATUS_OK
ReadX 11091 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11091 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11092 NT_STATUS_OK
ReadX 11092 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11092 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11092 1004 NT_STATUS_OK
ReadX 11092 8192 4096 4096 NT_STATUS_OK
ReadX 11092 12288 4096 4096 NT_STATUS_OK
ReadX 11092 16384 4096 4096 NT_STATUS_OK
ReadX 11092 20480 4096 4096 NT_STATUS_OK
ReadX 11092 24576 4096 4096 NT_STATUS_OK
ReadX 11092 28672 4096 4096 NT_STATUS_OK
ReadX 11092 32768 4096 4096 NT_STATUS_OK
ReadX 11092 36864 4096 4096 NT_STATUS_OK
ReadX 11092 40960 4096 4096 NT_STATUS_OK
ReadX 11092 45056 4096 4096 NT_STATUS_OK
ReadX 11092 49152 4096 4096 NT_STATUS_OK
ReadX 11092 53248 4096 4096 NT_STATUS_OK
ReadX 11092 57344 4096 4096 NT_STATUS_OK
ReadX 11092 61440 4096 4096 NT_STATUS_OK
ReadX 11092 65536 4096 4096 NT_STATUS_OK
ReadX 11092 69632 4096 4096 NT_STATUS_OK
ReadX 11092 73728 4096 4096 NT_STATUS_OK
ReadX 11092 77824 4096 4096 NT_STATUS_OK
ReadX 11092 81920 4096 4096 NT_STATUS_OK
ReadX 11092 86016 4096 4096 NT_STATUS_OK
ReadX 11092 90112 4096 4096 NT_STATUS_OK
ReadX 11092 94208 4096 4096 NT_STATUS_OK
ReadX 11092 98304 4096 4096 NT_STATUS_OK
ReadX 11092 102400 4096 4096 NT_STATUS_OK
ReadX 11092 106496 4096 4096 NT_STATUS_OK
ReadX 11092 110592 4096 4096 NT_STATUS_OK
ReadX 11092 114688 4096 4096 NT_STATUS_OK
ReadX 11092 118784 4096 4096 NT_STATUS_OK
ReadX 11092 122880 4096 4096 NT_STATUS_OK
ReadX 11092 126976 4096 4096 NT_STATUS_OK
ReadX 11092 131072 4096 4096 NT_STATUS_OK
ReadX 11092 135168 4096 4096 NT_STATUS_OK
ReadX 11092 139264 4096 4096 NT_STATUS_OK
ReadX 11092 143360 4096 4096 NT_STATUS_OK
ReadX 11092 147456 4096 4096 NT_STATUS_OK
ReadX 11092 151552 4096 4096 NT_STATUS_OK
ReadX 11092 155648 4096 4096 NT_STATUS_OK
ReadX 11092 159744 4096 4096 NT_STATUS_OK
ReadX 11092 163840 4096 4096 NT_STATUS_OK
ReadX 11092 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11092 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11093 NT_STATUS_OK
Close 11093 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11091 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11095 NT_STATUS_OK
WriteX 11095 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11095 258 NT_STATUS_OK
Close 11092 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11096 NT_STATUS_OK
SET_FILE_INFORMATION 11096 1004 NT_STATUS_OK
Close 11096 NT_STATUS_OK
WriteX 11095 0 42388 42388 NT_STATUS_OK
Close 11095 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11097 NT_STATUS_OK
Close 11097 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11099 NT_STATUS_OK
ReadX 11099 0 4096 4096 NT_STATUS_OK
ReadX 11099 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11100 NT_STATUS_OK
WriteX 11100 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11100 258 NT_STATUS_OK
SET_FILE_INFORMATION 11100 1004 NT_STATUS_OK
WriteX 11100 0 42652 42652 NT_STATUS_OK
Close 11100 NT_STATUS_OK
Close 11099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11102 NT_STATUS_OK
Close 11102 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11104 NT_STATUS_OK
ReadX 11104 0 4096 4096 NT_STATUS_OK
ReadX 11104 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11106 NT_STATUS_OK
Close 11106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11109 NT_STATUS_OK
WriteX 11109 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11109 258 NT_STATUS_OK
WriteX 11109 0 65536 65536 NT_STATUS_OK
WriteX 11109 65536 49 49 NT_STATUS_OK
Close 11109 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11110 NT_STATUS_OK
ReadX 11110 0 61440 61440 NT_STATUS_OK
ReadX 11110 61440 4096 4096 NT_STATUS_OK
ReadX 11110 65536 61440 61440 NT_STATUS_OK
ReadX 11110 126976 4096 4096 NT_STATUS_OK
ReadX 11110 131072 61440 61440 NT_STATUS_OK
ReadX 11110 192512 4096 4096 NT_STATUS_OK
ReadX 11110 196608 61440 61440 NT_STATUS_OK
ReadX 11110 258048 4096 4096 NT_STATUS_OK
ReadX 11110 262144 61440 61440 NT_STATUS_OK
ReadX 11110 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11111 NT_STATUS_OK
ReadX 11111 0 61440 61440 NT_STATUS_OK
ReadX 11111 61440 4096 4096 NT_STATUS_OK
ReadX 11111 65536 61440 61440 NT_STATUS_OK
ReadX 11111 126976 4096 4096 NT_STATUS_OK
ReadX 11111 131072 61440 61440 NT_STATUS_OK
ReadX 11111 192512 4096 4096 NT_STATUS_OK
ReadX 11111 196608 61440 61440 NT_STATUS_OK
ReadX 11111 258048 4096 4096 NT_STATUS_OK
ReadX 11111 262144 61440 61440 NT_STATUS_OK
ReadX 11111 323584 4096 4096 NT_STATUS_OK
ReadX 11111 327680 61440 61440 NT_STATUS_OK
ReadX 11111 389120 4096 4096 NT_STATUS_OK
ReadX 11111 393216 61440 61440 NT_STATUS_OK
ReadX 11111 454656 4096 4096 NT_STATUS_OK
ReadX 11111 458752 61440 61440 NT_STATUS_OK
ReadX 11111 520192 4096 4096 NT_STATUS_OK
ReadX 11111 524288 61440 61440 NT_STATUS_OK
ReadX 11111 585728 4096 4096 NT_STATUS_OK
ReadX 11111 589824 61440 61440 NT_STATUS_OK
ReadX 11111 651264 4096 4096 NT_STATUS_OK
ReadX 11111 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11112 NT_STATUS_OK
ReadX 11112 0 61440 61440 NT_STATUS_OK
ReadX 11112 61440 4096 4096 NT_STATUS_OK
ReadX 11112 65536 61440 61440 NT_STATUS_OK
ReadX 11112 126976 4096 4096 NT_STATUS_OK
ReadX 11112 131072 61440 61440 NT_STATUS_OK
ReadX 11112 192512 4096 4096 NT_STATUS_OK
ReadX 11112 196608 61440 61440 NT_STATUS_OK
ReadX 11112 258048 4096 4096 NT_STATUS_OK
ReadX 11112 262144 61440 61440 NT_STATUS_OK
ReadX 11112 323584 4096 4096 NT_STATUS_OK
ReadX 11112 327680 61440 61440 NT_STATUS_OK
ReadX 11112 389120 4096 4096 NT_STATUS_OK
ReadX 11112 393216 61440 61440 NT_STATUS_OK
ReadX 11112 454656 4096 4096 NT_STATUS_OK
ReadX 11112 458752 61440 61440 NT_STATUS_OK
ReadX 11112 520192 4096 4096 NT_STATUS_OK
ReadX 11112 524288 61440 61440 NT_STATUS_OK
ReadX 11112 585728 4096 4096 NT_STATUS_OK
ReadX 11112 589824 61440 61440 NT_STATUS_OK
ReadX 11112 651264 4096 4096 NT_STATUS_OK
ReadX 11112 655360 61440 61440 NT_STATUS_OK
ReadX 11112 716800 4096 4096 NT_STATUS_OK
ReadX 11112 720896 61440 61440 NT_STATUS_OK
ReadX 11112 782336 4096 4096 NT_STATUS_OK
ReadX 11112 786432 61440 61440 NT_STATUS_OK
ReadX 11112 847872 4096 4096 NT_STATUS_OK
ReadX 11112 851968 61440 61440 NT_STATUS_OK
ReadX 11112 913408 4096 4096 NT_STATUS_OK
ReadX 11112 917504 61440 61440 NT_STATUS_OK
ReadX 11112 978944 4096 4096 NT_STATUS_OK
ReadX 11112 983040 61440 61440 NT_STATUS_OK
ReadX 11112 1044480 4096 4096 NT_STATUS_OK
ReadX 11112 1048576 61440 61440 NT_STATUS_OK
ReadX 11112 1110016 4096 4096 NT_STATUS_OK
ReadX 11112 1114112 61440 61440 NT_STATUS_OK
ReadX 11112 1175552 4096 4096 NT_STATUS_OK
ReadX 11112 1179648 61440 61440 NT_STATUS_OK
ReadX 11112 1241088 4096 4096 NT_STATUS_OK
ReadX 11112 1245184 61440 61440 NT_STATUS_OK
ReadX 11112 1306624 4096 4096 NT_STATUS_OK
ReadX 11112 1310720 61440 61440 NT_STATUS_OK
ReadX 11112 1372160 4096 4096 NT_STATUS_OK
ReadX 11112 1376256 61440 61440 NT_STATUS_OK
ReadX 11112 1437696 4096 4096 NT_STATUS_OK
ReadX 11112 1441792 61440 61440 NT_STATUS_OK
ReadX 11112 1503232 4096 4096 NT_STATUS_OK
ReadX 11112 1507328 61440 61440 NT_STATUS_OK
ReadX 11112 1568768 4096 4096 NT_STATUS_OK
ReadX 11112 1572864 61440 61440 NT_STATUS_OK
ReadX 11112 1634304 4096 4096 NT_STATUS_OK
ReadX 11112 1638400 61440 61440 NT_STATUS_OK
ReadX 11112 1699840 4096 4096 NT_STATUS_OK
ReadX 11112 1703936 61440 61440 NT_STATUS_OK
ReadX 11112 1765376 4096 4096 NT_STATUS_OK
ReadX 11112 1769472 61440 61440 NT_STATUS_OK
ReadX 11112 1830912 4096 4096 NT_STATUS_OK
ReadX 11112 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11114 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11114 1005 NT_STATUS_OK
ReadX 11114 2156 24 24 NT_STATUS_OK
ReadX 11114 2139 276 276 NT_STATUS_OK
ReadX 11114 2136 14 14 NT_STATUS_OK
ReadX 11114 2136 7 7 NT_STATUS_OK
ReadX 11114 2138 12 12 NT_STATUS_OK
ReadX 11114 2137 8 8 NT_STATUS_OK
ReadX 11114 2135 15 15 NT_STATUS_OK
ReadX 11114 0 16 16 NT_STATUS_OK
ReadX 11114 16 2048 2048 NT_STATUS_OK
ReadX 11114 2064 2048 2048 NT_STATUS_OK
ReadX 11114 257 2048 2048 NT_STATUS_OK
ReadX 11114 385 2048 2048 NT_STATUS_OK
ReadX 11114 513 2048 2048 NT_STATUS_OK
ReadX 11114 641 2048 2048 NT_STATUS_OK
ReadX 11114 769 2048 2048 NT_STATUS_OK
ReadX 11114 897 2048 2048 NT_STATUS_OK
ReadX 11114 1025 2048 2048 NT_STATUS_OK
ReadX 11114 1153 2048 2048 NT_STATUS_OK
ReadX 11114 1281 2048 2048 NT_STATUS_OK
ReadX 11114 1409 2048 2048 NT_STATUS_OK
ReadX 11114 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11116 NT_STATUS_OK
Close 11116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11110 NT_STATUS_OK
Close 11111 NT_STATUS_OK
Close 11112 NT_STATUS_OK
Close 11104 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11119 NT_STATUS_OK
WriteX 11119 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11119 258 NT_STATUS_OK
WriteX 11119 0 10575 10575 NT_STATUS_OK
Flush 11119 NT_STATUS_OK
Close 11119 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11120 NT_STATUS_OK
Close 11120 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11122 NT_STATUS_OK
ReadX 11122 0 4096 4096 NT_STATUS_OK
Close 11114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11124 NT_STATUS_OK
LockX 11124 2147483538 1 NT_STATUS_OK
UnlockX 11124 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 1005 NT_STATUS_OK
ReadX 11124 0 512 512 NT_STATUS_OK
ReadX 11124 512 512 512 NT_STATUS_OK
ReadX 11124 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11124 1004 NT_STATUS_OK
Close 11124 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11125 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1005 NT_STATUS_OK
ReadX 11125 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11126 NT_STATUS_OK
LockX 11126 2147483538 1 NT_STATUS_OK
UnlockX 11126 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11126 1005 NT_STATUS_OK
ReadX 11126 0 512 512 NT_STATUS_OK
ReadX 11126 512 512 512 NT_STATUS_OK
ReadX 11126 1024 512 512 NT_STATUS_OK
ReadX 11126 288 20 20 NT_STATUS_OK
ReadX 11126 308 2084 2084 NT_STATUS_OK
ReadX 11126 388 2084 2084 NT_STATUS_OK
ReadX 11126 388 2084 2084 NT_STATUS_OK
ReadX 11113 2157 1386 1386 NT_STATUS_OK
ReadX 11126 2472 399 399 NT_STATUS_OK
ReadX 11126 3072 1536 1536 NT_STATUS_OK
ReadX 11126 544 149 149 NT_STATUS_OK
ReadX 11126 693 485 485 NT_STATUS_OK
Close 11126 NT_STATUS_OK
ReadX 11113 2157 4096 4096 NT_STATUS_OK
ReadX 11113 6253 4096 4096 NT_STATUS_OK
ReadX 11113 10349 4096 4096 NT_STATUS_OK
ReadX 11113 14445 4096 4096 NT_STATUS_OK
ReadX 11113 18541 4096 4096 NT_STATUS_OK
ReadX 11113 22637 256 256 NT_STATUS_OK
ReadX 11113 22893 4096 4096 NT_STATUS_OK
ReadX 11113 26989 4096 4096 NT_STATUS_OK
ReadX 11113 31085 4096 4096 NT_STATUS_OK
ReadX 11113 35181 4096 4096 NT_STATUS_OK
ReadX 11113 39277 4096 4096 NT_STATUS_OK
ReadX 11113 43373 4096 4096 NT_STATUS_OK
ReadX 11113 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11113 2157 1024 1024 NT_STATUS_OK
ReadX 11113 1667 4688 4688 NT_STATUS_OK
ReadX 11113 6355 3516 3516 NT_STATUS_OK
ReadX 11113 9871 16384 16384 NT_STATUS_OK
ReadX 11113 26255 3771 3771 NT_STATUS_OK
ReadX 11113 30026 2048 2048 NT_STATUS_OK
ReadX 11113 32074 1024 1024 NT_STATUS_OK
ReadX 11113 33098 6652 6652 NT_STATUS_OK
ReadX 11113 39750 16384 16384 NT_STATUS_OK
ReadX 11113 56134 10496 10496 NT_STATUS_OK
ReadX 11113 66630 1784 1784 NT_STATUS_OK
ReadX 11113 68414 90 90 NT_STATUS_OK
ReadX 11113 68504 273 273 NT_STATUS_OK
ReadX 11113 68777 1600 1600 NT_STATUS_OK
ReadX 11113 70377 640 640 NT_STATUS_OK
ReadX 11113 71017 1280 1280 NT_STATUS_OK
ReadX 11113 72297 8464 8464 NT_STATUS_OK
ReadX 11113 80761 158 158 NT_STATUS_OK
ReadX 11113 80919 912 912 NT_STATUS_OK
ReadX 11113 81831 1980 1980 NT_STATUS_OK
ReadX 11113 83811 2256 2256 NT_STATUS_OK
ReadX 11113 86067 400 400 NT_STATUS_OK
ReadX 11113 86467 252 252 NT_STATUS_OK
ReadX 11113 86719 42 42 NT_STATUS_OK
ReadX 11113 86761 725 725 NT_STATUS_OK
ReadX 11113 2009 512 512 NT_STATUS_OK
ReadX 11113 3895 9 9 NT_STATUS_OK
ReadX 11113 3781 46 46 NT_STATUS_OK
ReadX 11113 4059 92 92 NT_STATUS_OK
ReadX 11113 3781 92 92 NT_STATUS_OK
ReadX 11113 3986 184 184 NT_STATUS_OK
ReadX 11113 3987 16384 16384 NT_STATUS_OK
ReadX 11113 3902 16384 16384 NT_STATUS_OK
ReadX 11113 3781 10240 10240 NT_STATUS_OK
ReadX 11113 3821 16384 16384 NT_STATUS_OK
ReadX 11113 3891 935 935 NT_STATUS_OK
ReadX 11113 4060 10240 10240 NT_STATUS_OK
ReadX 11113 4059 184 184 NT_STATUS_OK
ReadX 11113 256 184 184 NT_STATUS_OK
ReadX 11113 256 1026 1026 NT_STATUS_OK
ReadX 11113 3901 326 326 NT_STATUS_OK
ReadX 11113 3899 652 652 NT_STATUS_OK
ReadX 11113 256 2 2 NT_STATUS_OK
ReadX 11113 258 4948 4948 NT_STATUS_OK
Close 11113 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11128 NT_STATUS_OK
Close 11128 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11131 NT_STATUS_OK
WriteX 11131 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11131 258 NT_STATUS_OK
WriteX 11131 0 65536 65536 NT_STATUS_OK
WriteX 11131 65536 65536 65536 NT_STATUS_OK
WriteX 11131 131072 65536 65536 NT_STATUS_OK
WriteX 11131 196608 65536 65536 NT_STATUS_OK
WriteX 11131 262144 65536 65536 NT_STATUS_OK
WriteX 11131 327680 65536 65536 NT_STATUS_OK
WriteX 11131 393216 65536 65536 NT_STATUS_OK
WriteX 11131 458752 65536 65536 NT_STATUS_OK
WriteX 11131 524288 65536 65536 NT_STATUS_OK
WriteX 11131 589824 35257 35257 NT_STATUS_OK
Close 11131 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11133 NT_STATUS_OK
Close 11133 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11136 NT_STATUS_OK
WriteX 11136 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11136 258 NT_STATUS_OK
WriteX 11136 0 65536 65536 NT_STATUS_OK
WriteX 11136 65536 65536 65536 NT_STATUS_OK
WriteX 11136 131072 65536 65536 NT_STATUS_OK
WriteX 11136 196608 65536 65536 NT_STATUS_OK
WriteX 11136 262144 65536 65536 NT_STATUS_OK
WriteX 11136 327680 65536 65536 NT_STATUS_OK
WriteX 11136 393216 65536 65536 NT_STATUS_OK
WriteX 11136 458752 65536 65536 NT_STATUS_OK
WriteX 11136 524288 65536 65536 NT_STATUS_OK
WriteX 11136 589824 57598 57598 NT_STATUS_OK
Close 11136 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11138 NT_STATUS_OK
WriteX 11138 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11138 258 NT_STATUS_OK
WriteX 11138 0 12543 12543 NT_STATUS_OK
Flush 11138 NT_STATUS_OK
Close 11138 NT_STATUS_OK
Close 11122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11140 NT_STATUS_OK
Close 11140 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11142 NT_STATUS_OK
ReadX 11142 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11143 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11144 NT_STATUS_OK
QUERY_FILE_INFORMATION 11144 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11144 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11144 1005 NT_STATUS_OK
ReadX 11144 1938 24 24 NT_STATUS_OK
ReadX 11144 1920 276 276 NT_STATUS_OK
ReadX 11144 1918 14 14 NT_STATUS_OK
ReadX 11144 1918 7 7 NT_STATUS_OK
ReadX 11144 1919 12 12 NT_STATUS_OK
ReadX 11144 1919 8 8 NT_STATUS_OK
ReadX 11144 1917 15 15 NT_STATUS_OK
ReadX 11144 0 16 16 NT_STATUS_OK
ReadX 11144 16 2048 2048 NT_STATUS_OK
ReadX 11144 2064 2048 2048 NT_STATUS_OK
ReadX 11144 257 2048 2048 NT_STATUS_OK
ReadX 11144 385 2048 2048 NT_STATUS_OK
ReadX 11144 513 2048 2048 NT_STATUS_OK
ReadX 11144 641 2048 2048 NT_STATUS_OK
ReadX 11144 769 2048 2048 NT_STATUS_OK
ReadX 11144 897 2048 2048 NT_STATUS_OK
ReadX 11144 1025 2048 2048 NT_STATUS_OK
ReadX 11144 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11146 NT_STATUS_OK
Close 11146 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11149 NT_STATUS_OK
WriteX 11149 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11149 258 NT_STATUS_OK
WriteX 11149 0 11588 11588 NT_STATUS_OK
Flush 11149 NT_STATUS_OK
Close 11149 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11150 NT_STATUS_OK
Close 11150 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11152 NT_STATUS_OK
ReadX 11152 0 4096 4096 NT_STATUS_OK
Close 11144 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11154 NT_STATUS_OK
WriteX 11154 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11154 258 NT_STATUS_OK
WriteX 11154 0 11615 11615 NT_STATUS_OK
Flush 11154 NT_STATUS_OK
Close 11154 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11152 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11156 NT_STATUS_OK
Close 11156 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11158 NT_STATUS_OK
ReadX 11158 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11160 NT_STATUS_OK
Close 11160 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11163 NT_STATUS_OK
WriteX 11163 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11163 258 NT_STATUS_OK
WriteX 11163 0 65536 65536 NT_STATUS_OK
WriteX 11163 65536 16050 16050 NT_STATUS_OK
Close 11163 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11143 1939 64 64 NT_STATUS_OK
ReadX 11143 128 248 248 NT_STATUS_OK
ReadX 11143 128 568 568 NT_STATUS_OK
ReadX 11143 3872 1536 1536 NT_STATUS_OK
ReadX 11143 3456 2560 2560 NT_STATUS_OK
ReadX 11143 3136 512 512 NT_STATUS_OK
ReadX 11143 2880 4096 4096 NT_STATUS_OK
ReadX 11143 3264 3072 3072 NT_STATUS_OK
ReadX 11143 320 4096 4096 NT_STATUS_OK
ReadX 11143 1024 4096 4096 NT_STATUS_OK
ReadX 11143 3616 4096 4096 NT_STATUS_OK
ReadX 11143 1939 64 64 NT_STATUS_OK
ReadX 11143 128 248 248 NT_STATUS_OK
ReadX 11143 128 608 608 NT_STATUS_OK
ReadX 11143 2858 1024 1024 NT_STATUS_OK
ReadX 11143 2810 4096 4096 NT_STATUS_OK
ReadX 11143 2826 4096 4096 NT_STATUS_OK
ReadX 11143 2580 2048 2048 NT_STATUS_OK
ReadX 11143 2800 2560 2560 NT_STATUS_OK
ReadX 11143 2100 4096 4096 NT_STATUS_OK
ReadX 11143 2084 4096 4096 NT_STATUS_OK
ReadX 11143 868 4096 4096 NT_STATUS_OK
ReadX 11143 2324 4096 4096 NT_STATUS_OK
ReadX 11143 884 4096 4096 NT_STATUS_OK
ReadX 11143 2604 1024 1024 NT_STATUS_OK
ReadX 11143 580 4096 4096 NT_STATUS_OK
ReadX 11143 596 4096 4096 NT_STATUS_OK
ReadX 11143 2752 4096 4096 NT_STATUS_OK
ReadX 11143 2842 1024 1024 NT_STATUS_OK
ReadX 11143 660 4096 4096 NT_STATUS_OK
ReadX 11143 2720 4096 4096 NT_STATUS_OK
ReadX 11143 2736 4096 4096 NT_STATUS_OK
ReadX 11143 628 4096 4096 NT_STATUS_OK
ReadX 11143 2704 4096 4096 NT_STATUS_OK
ReadX 11143 1556 4096 4096 NT_STATUS_OK
ReadX 11143 576 4096 4096 NT_STATUS_OK
ReadX 11143 3168 1536 1536 NT_STATUS_OK
ReadX 11143 832 4096 4096 NT_STATUS_OK
ReadX 11143 1088 4096 4096 NT_STATUS_OK
ReadX 11143 1344 4096 4096 NT_STATUS_OK
ReadX 11143 1600 4096 4096 NT_STATUS_OK
ReadX 11143 1856 4096 4096 NT_STATUS_OK
ReadX 11143 2112 4096 4096 NT_STATUS_OK
ReadX 11143 1892 4096 4096 NT_STATUS_OK
ReadX 11143 820 4096 4096 NT_STATUS_OK
ReadX 11143 788 4096 4096 NT_STATUS_OK
ReadX 11143 1604 4096 4096 NT_STATUS_OK
ReadX 11143 3648 4096 4096 NT_STATUS_OK
ReadX 11143 2608 4096 4096 NT_STATUS_OK
ReadX 11143 548 4096 4096 NT_STATUS_OK
ReadX 11143 740 4096 4096 NT_STATUS_OK
ReadX 11143 1344 4096 4096 NT_STATUS_OK
ReadX 11143 3392 4096 4096 NT_STATUS_OK
ReadX 11143 3904 4096 4096 NT_STATUS_OK
ReadX 11143 644 4096 4096 NT_STATUS_OK
ReadX 11143 676 4096 4096 NT_STATUS_OK
ReadX 11143 2688 4096 4096 NT_STATUS_OK
ReadX 11143 320 4096 4096 NT_STATUS_OK
ReadX 11143 900 4096 4096 NT_STATUS_OK
ReadX 11143 1908 4096 4096 NT_STATUS_OK
ReadX 11143 852 4096 4096 NT_STATUS_OK
ReadX 11143 724 4096 4096 NT_STATUS_OK
ReadX 11143 2292 4096 4096 NT_STATUS_OK
ReadX 11143 612 4096 4096 NT_STATUS_OK
ReadX 11143 388 4096 4096 NT_STATUS_OK
ReadX 11143 2368 4096 4096 NT_STATUS_OK
ReadX 11143 2624 4096 4096 NT_STATUS_OK
ReadX 11143 500 4096 4096 NT_STATUS_OK
ReadX 11143 356 4096 4096 NT_STATUS_OK
ReadX 11143 1024 4096 4096 NT_STATUS_OK
ReadX 11143 576 4096 4096 NT_STATUS_OK
ReadX 11143 340 4096 4096 NT_STATUS_OK
ReadX 11143 420 4096 4096 NT_STATUS_OK
ReadX 11143 1600 4096 4096 NT_STATUS_OK
ReadX 11143 404 4096 4096 NT_STATUS_OK
ReadX 11143 1428 4096 4096 NT_STATUS_OK
ReadX 11143 2656 4096 4096 NT_STATUS_OK
ReadX 11143 2624 4096 4096 NT_STATUS_OK
ReadX 11143 452 4096 4096 NT_STATUS_OK
ReadX 11143 692 4096 4096 NT_STATUS_OK
ReadX 11143 564 4096 4096 NT_STATUS_OK
ReadX 11143 372 4096 4096 NT_STATUS_OK
ReadX 11143 468 4096 4096 NT_STATUS_OK
ReadX 11143 484 4096 4096 NT_STATUS_OK
ReadX 11143 1088 4096 4096 NT_STATUS_OK
ReadX 11143 1924 4096 4096 NT_STATUS_OK
ReadX 11143 2768 4096 4096 NT_STATUS_OK
ReadX 11143 832 4096 4096 NT_STATUS_OK
ReadX 11143 836 4096 4096 NT_STATUS_OK
ReadX 11143 1856 4096 4096 NT_STATUS_OK
ReadX 11143 2640 4096 4096 NT_STATUS_OK
ReadX 11143 436 4096 4096 NT_STATUS_OK
ReadX 11143 1828 4096 4096 NT_STATUS_OK
ReadX 11143 804 4096 4096 NT_STATUS_OK
ReadX 11143 1860 4096 4096 NT_STATUS_OK
ReadX 11143 1812 4096 4096 NT_STATUS_OK
ReadX 11143 756 4096 4096 NT_STATUS_OK
ReadX 11143 1636 4096 4096 NT_STATUS_OK
ReadX 11143 772 4096 4096 NT_STATUS_OK
ReadX 11143 2036 4096 4096 NT_STATUS_OK
ReadX 11143 1220 4096 4096 NT_STATUS_OK
ReadX 11143 1652 4096 4096 NT_STATUS_OK
ReadX 11143 2588 4096 4096 NT_STATUS_OK
ReadX 11143 916 4096 4096 NT_STATUS_OK
ReadX 11143 260 4096 4096 NT_STATUS_OK
ReadX 11143 932 4096 4096 NT_STATUS_OK
ReadX 11143 2624 4096 4096 NT_STATUS_OK
ReadX 11143 308 4096 4096 NT_STATUS_OK
ReadX 11143 292 4096 4096 NT_STATUS_OK
ReadX 11143 1140 4096 4096 NT_STATUS_OK
ReadX 11143 276 4096 4096 NT_STATUS_OK
ReadX 11143 2020 4096 4096 NT_STATUS_OK
ReadX 11143 2880 4096 4096 NT_STATUS_OK
ReadX 11143 516 4096 4096 NT_STATUS_OK
ReadX 11143 1844 4096 4096 NT_STATUS_OK
ReadX 11143 1124 4096 4096 NT_STATUS_OK
ReadX 11143 3136 4096 4096 NT_STATUS_OK
ReadX 11143 324 4096 4096 NT_STATUS_OK
ReadX 11143 1156 4096 4096 NT_STATUS_OK
ReadX 11143 1172 4096 4096 NT_STATUS_OK
ReadX 11143 2112 4096 4096 NT_STATUS_OK
ReadX 11143 2368 4096 4096 NT_STATUS_OK
ReadX 11143 964 4096 4096 NT_STATUS_OK
ReadX 11143 980 4096 4096 NT_STATUS_OK
ReadX 11143 1012 4096 4096 NT_STATUS_OK
ReadX 11143 532 4096 4096 NT_STATUS_OK
ReadX 11143 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11143 1620 4096 4096 NT_STATUS_OK
ReadX 11143 1604 4096 4096 NT_STATUS_OK
ReadX 11143 2116 4096 4096 NT_STATUS_OK
ReadX 11143 2132 4096 4096 NT_STATUS_OK
ReadX 11143 2148 4096 4096 NT_STATUS_OK
ReadX 11143 2276 4096 4096 NT_STATUS_OK
ReadX 11143 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11165 NT_STATUS_OK
Close 11165 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11168 NT_STATUS_OK
QUERY_FILE_INFORMATION 11123 1004 NT_STATUS_OK
Close 11123 NT_STATUS_OK
WriteX 11168 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11168 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11125 1004 NT_STATUS_OK
Close 11125 NT_STATUS_OK
WriteX 11168 0 65536 65536 NT_STATUS_OK
WriteX 11168 65536 64850 64850 NT_STATUS_OK
Close 11168 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11170 NT_STATUS_OK
WriteX 11170 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11170 258 NT_STATUS_OK
ReadX 11143 2068 4096 4096 NT_STATUS_OK
ReadX 11143 1588 4096 4096 NT_STATUS_OK
ReadX 11143 1572 4096 4096 NT_STATUS_OK
WriteX 11170 0 18630 18630 NT_STATUS_OK
Flush 11170 NT_STATUS_OK
Close 11170 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11158 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11172 NT_STATUS_OK
Close 11172 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11174 NT_STATUS_OK
ReadX 11174 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11143 612 4096 4096 NT_STATUS_OK
ReadX 11143 564 4096 4096 NT_STATUS_OK
ReadX 11143 1876 4096 4096 NT_STATUS_OK
ReadX 11143 628 4096 4096 NT_STATUS_OK
ReadX 11143 740 4096 4096 NT_STATUS_OK
ReadX 11143 724 4096 4096 NT_STATUS_OK
ReadX 11143 644 4096 4096 NT_STATUS_OK
ReadX 11143 2324 4096 4096 NT_STATUS_OK
ReadX 11143 660 4096 4096 NT_STATUS_OK
ReadX 11143 852 4096 4096 NT_STATUS_OK
ReadX 11143 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11143 2368 4096 4096 NT_STATUS_OK
ReadX 11143 1024 4096 4096 NT_STATUS_OK
ReadX 11143 320 4096 4096 NT_STATUS_OK
ReadX 11143 580 4096 4096 NT_STATUS_OK
ReadX 11143 3136 512 512 NT_STATUS_OK
ReadX 11143 2880 4096 4096 NT_STATUS_OK
Close 11143 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11175 NT_STATUS_OK
ReadX 11175 61440 4096 4096 NT_STATUS_OK
ReadX 11175 126976 4096 4096 NT_STATUS_OK
WriteX 11175 0 65536 65536 NT_STATUS_OK
WriteX 11175 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11176 NT_STATUS_OK
ReadX 11176 61440 4096 4096 NT_STATUS_OK
ReadX 11176 126976 4096 4096 NT_STATUS_OK
ReadX 11176 192512 4096 4096 NT_STATUS_OK
ReadX 11176 258048 4096 4096 NT_STATUS_OK
WriteX 11176 0 65536 65536 NT_STATUS_OK
WriteX 11176 65536 65536 65536 NT_STATUS_OK
WriteX 11176 131072 65536 65536 NT_STATUS_OK
WriteX 11176 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11177 NT_STATUS_OK
ReadX 11177 61440 4096 4096 NT_STATUS_OK
ReadX 11177 126976 4096 4096 NT_STATUS_OK
ReadX 11177 192512 4096 4096 NT_STATUS_OK
ReadX 11177 258048 4096 4096 NT_STATUS_OK
ReadX 11177 323584 4096 4096 NT_STATUS_OK
ReadX 11177 389120 4096 4096 NT_STATUS_OK
ReadX 11177 454656 4096 4096 NT_STATUS_OK
ReadX 11177 520192 4096 4096 NT_STATUS_OK
WriteX 11177 0 65536 65536 NT_STATUS_OK
WriteX 11177 65536 65536 65536 NT_STATUS_OK
WriteX 11177 131072 65536 65536 NT_STATUS_OK
WriteX 11177 196608 65536 65536 NT_STATUS_OK
WriteX 11177 262144 65536 65536 NT_STATUS_OK
WriteX 11177 327680 65536 65536 NT_STATUS_OK
WriteX 11177 393216 65536 65536 NT_STATUS_OK
WriteX 11177 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11178 NT_STATUS_OK
ReadX 11178 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11179 NT_STATUS_OK
Close 11179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11180 NT_STATUS_OK
WriteX 11180 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11180 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11178 0 8192 8192 NT_STATUS_OK
Flush 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11178 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11178 0 8192 8192 NT_STATUS_OK
Flush 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11178 0 8192 8192 NT_STATUS_OK
Flush 11178 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11178 0 8192 8192 NT_STATUS_OK
Flush 11178 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11182 NT_STATUS_OK
Close 11182 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11174 NT_STATUS_OK
Close 11142 NT_STATUS_OK
Close 11175 NT_STATUS_OK
Close 11176 NT_STATUS_OK
Close 11177 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11185 NT_STATUS_OK
WriteX 11185 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11185 258 NT_STATUS_OK
WriteX 11185 0 62591 62591 NT_STATUS_OK
Close 11185 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11187 NT_STATUS_OK
Close 11187 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11190 NT_STATUS_OK
WriteX 11190 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11190 258 NT_STATUS_OK
WriteX 11190 0 10845 10845 NT_STATUS_OK
Close 11190 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11192 NT_STATUS_OK
Close 11192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11195 NT_STATUS_OK
WriteX 11195 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11195 258 NT_STATUS_OK
WriteX 11195 0 30118 30118 NT_STATUS_OK
Close 11195 NT_STATUS_OK
WriteX 11178 0 4096 4096 NT_STATUS_OK
WriteX 11180 0 64 64 NT_STATUS_OK
Close 11180 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11178 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11197 NT_STATUS_OK
ReadX 11197 0 61440 61440 NT_STATUS_OK
ReadX 11197 61440 4096 4096 NT_STATUS_OK
ReadX 11197 65536 61440 61440 NT_STATUS_OK
ReadX 11197 126976 4096 4096 NT_STATUS_OK
ReadX 11197 131072 61440 61440 NT_STATUS_OK
ReadX 11197 192512 4096 4096 NT_STATUS_OK
ReadX 11197 196608 61440 61440 NT_STATUS_OK
ReadX 11197 258048 4096 4096 NT_STATUS_OK
ReadX 11197 262144 61440 61440 NT_STATUS_OK
ReadX 11197 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11198 NT_STATUS_OK
ReadX 11198 0 61440 61440 NT_STATUS_OK
ReadX 11198 61440 4096 4096 NT_STATUS_OK
ReadX 11198 65536 61440 61440 NT_STATUS_OK
ReadX 11198 126976 4096 4096 NT_STATUS_OK
ReadX 11198 131072 61440 61440 NT_STATUS_OK
ReadX 11198 192512 4096 4096 NT_STATUS_OK
ReadX 11198 196608 61440 61440 NT_STATUS_OK
ReadX 11198 258048 4096 4096 NT_STATUS_OK
ReadX 11198 262144 61440 61440 NT_STATUS_OK
ReadX 11198 323584 4096 4096 NT_STATUS_OK
ReadX 11198 327680 61440 61440 NT_STATUS_OK
ReadX 11198 389120 4096 4096 NT_STATUS_OK
ReadX 11198 393216 61440 61440 NT_STATUS_OK
ReadX 11198 454656 4096 4096 NT_STATUS_OK
ReadX 11198 458752 61440 61440 NT_STATUS_OK
ReadX 11198 520192 4096 4096 NT_STATUS_OK
ReadX 11198 524288 61440 61440 NT_STATUS_OK
ReadX 11198 585728 4096 4096 NT_STATUS_OK
ReadX 11198 589824 61440 61440 NT_STATUS_OK
ReadX 11198 651264 4096 4096 NT_STATUS_OK
ReadX 11198 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11199 NT_STATUS_OK
ReadX 11199 0 61440 61440 NT_STATUS_OK
ReadX 11199 61440 4096 4096 NT_STATUS_OK
ReadX 11199 65536 61440 61440 NT_STATUS_OK
ReadX 11199 126976 4096 4096 NT_STATUS_OK
ReadX 11199 131072 61440 61440 NT_STATUS_OK
ReadX 11199 192512 4096 4096 NT_STATUS_OK
ReadX 11199 196608 61440 61440 NT_STATUS_OK
ReadX 11199 258048 4096 4096 NT_STATUS_OK
ReadX 11199 262144 61440 61440 NT_STATUS_OK
ReadX 11199 323584 4096 4096 NT_STATUS_OK
ReadX 11199 327680 61440 61440 NT_STATUS_OK
ReadX 11199 389120 4096 4096 NT_STATUS_OK
ReadX 11199 393216 61440 61440 NT_STATUS_OK
ReadX 11199 454656 4096 4096 NT_STATUS_OK
ReadX 11199 458752 61440 61440 NT_STATUS_OK
ReadX 11199 520192 4096 4096 NT_STATUS_OK
ReadX 11199 524288 61440 61440 NT_STATUS_OK
ReadX 11199 585728 4096 4096 NT_STATUS_OK
ReadX 11199 589824 61440 61440 NT_STATUS_OK
ReadX 11199 651264 4096 4096 NT_STATUS_OK
ReadX 11199 655360 61440 61440 NT_STATUS_OK
ReadX 11199 716800 4096 4096 NT_STATUS_OK
ReadX 11199 720896 61440 61440 NT_STATUS_OK
ReadX 11199 782336 4096 4096 NT_STATUS_OK
ReadX 11199 786432 61440 61440 NT_STATUS_OK
ReadX 11199 847872 4096 4096 NT_STATUS_OK
ReadX 11199 851968 61440 61440 NT_STATUS_OK
ReadX 11199 913408 4096 4096 NT_STATUS_OK
ReadX 11199 917504 61440 61440 NT_STATUS_OK
ReadX 11199 978944 4096 4096 NT_STATUS_OK
ReadX 11199 983040 61440 61440 NT_STATUS_OK
ReadX 11199 1044480 4096 4096 NT_STATUS_OK
ReadX 11199 1048576 61440 61440 NT_STATUS_OK
ReadX 11199 1110016 4096 4096 NT_STATUS_OK
ReadX 11199 1114112 61440 61440 NT_STATUS_OK
Close 11197 NT_STATUS_OK
ReadX 11199 1175552 4096 4096 NT_STATUS_OK
Close 11198 NT_STATUS_OK
ReadX 11199 1179648 61440 61440 NT_STATUS_OK
ReadX 11199 1241088 4096 4096 NT_STATUS_OK
ReadX 11199 1245184 61440 61440 NT_STATUS_OK
ReadX 11199 1306624 4096 4096 NT_STATUS_OK
ReadX 11199 1310720 61440 61440 NT_STATUS_OK
ReadX 11199 1372160 4096 4096 NT_STATUS_OK
ReadX 11199 1376256 61440 61440 NT_STATUS_OK
ReadX 11199 1437696 4096 4096 NT_STATUS_OK
ReadX 11199 1441792 61440 61440 NT_STATUS_OK
ReadX 11199 1503232 4096 4096 NT_STATUS_OK
ReadX 11199 1507328 61440 61440 NT_STATUS_OK
ReadX 11199 1568768 4096 4096 NT_STATUS_OK
ReadX 11199 1572864 61440 61440 NT_STATUS_OK
ReadX 11199 1634304 4096 4096 NT_STATUS_OK
ReadX 11199 1638400 61440 61440 NT_STATUS_OK
ReadX 11199 1699840 4096 4096 NT_STATUS_OK
ReadX 11199 1703936 61440 61440 NT_STATUS_OK
ReadX 11199 1765376 4096 4096 NT_STATUS_OK
ReadX 11199 1769472 61440 61440 NT_STATUS_OK
ReadX 11199 1830912 4096 4096 NT_STATUS_OK
ReadX 11199 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11200 NT_STATUS_OK
Close 11200 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11199 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11202 NT_STATUS_OK
ReadX 11202 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11203 NT_STATUS_OK
ReadX 11203 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11204 NT_STATUS_OK
ReadX 11204 0 4096 4096 NT_STATUS_OK
ReadX 11204 4096 4096 4096 NT_STATUS_OK
ReadX 11204 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11205 NT_STATUS_OK
Close 11205 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11202 NT_STATUS_OK
Close 11203 NT_STATUS_OK
Close 11204 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11207 NT_STATUS_OK
ReadX 11207 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11208 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11208 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11209 NT_STATUS_OK
Close 11209 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11207 NT_STATUS_OK
Close 11208 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11211 NT_STATUS_OK
ReadX 11211 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11212 NT_STATUS_OK
ReadX 11212 0 8192 8192 NT_STATUS_OK
ReadX 11212 8192 8192 8192 NT_STATUS_OK
ReadX 11212 16384 8192 8192 NT_STATUS_OK
ReadX 11212 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11214 NT_STATUS_OK
Close 11214 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11212 NT_STATUS_OK
Close 11211 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11217 NT_STATUS_OK
WriteX 11217 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11217 258 NT_STATUS_OK
WriteX 11217 0 10438 10438 NT_STATUS_OK
Close 11217 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11218 NT_STATUS_OK
Close 11218 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11219 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11220 NT_STATUS_OK
Close 11220 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11221 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11222 NT_STATUS_OK
Close 11222 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11223 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11224 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11225 NT_STATUS_OK
Close 11225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11226 NT_STATUS_OK
ReadX 11226 0 4096 4096 NT_STATUS_OK
ReadX 11226 4096 4096 4096 NT_STATUS_OK
ReadX 11226 8192 4096 4096 NT_STATUS_OK
ReadX 11226 12288 8192 8192 NT_STATUS_OK
ReadX 11226 20480 8192 8192 NT_STATUS_OK
ReadX 11226 28672 8192 8192 NT_STATUS_OK
ReadX 11226 36864 8192 8192 NT_STATUS_OK
ReadX 11226 45056 8192 8192 NT_STATUS_OK
ReadX 11226 53248 8192 8192 NT_STATUS_OK
ReadX 11226 61440 8192 8192 NT_STATUS_OK
ReadX 11226 69632 8192 8192 NT_STATUS_OK
ReadX 11226 77824 8192 8192 NT_STATUS_OK
ReadX 11226 86016 8192 8192 NT_STATUS_OK
ReadX 11226 94208 8192 8192 NT_STATUS_OK
ReadX 11226 102400 8192 8192 NT_STATUS_OK
ReadX 11226 110592 8192 8192 NT_STATUS_OK
ReadX 11226 118784 8192 8192 NT_STATUS_OK
ReadX 11226 126976 8192 8192 NT_STATUS_OK
ReadX 11226 135168 8192 8192 NT_STATUS_OK
ReadX 11226 143360 8192 8192 NT_STATUS_OK
ReadX 11226 151552 8192 8192 NT_STATUS_OK
ReadX 11226 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11227 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11226 NT_STATUS_OK
Close 11219 NT_STATUS_OK
Close 11221 NT_STATUS_OK
Close 11223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11228 NT_STATUS_OK
Close 11228 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11231 NT_STATUS_OK
WriteX 11231 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11231 258 NT_STATUS_OK
WriteX 11231 0 28489 28489 NT_STATUS_OK
Close 11231 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11232 NT_STATUS_OK
Close 11232 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11234 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11234 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11235 NT_STATUS_OK
Close 11235 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11234 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11237 NT_STATUS_OK
ReadX 11237 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11238 NT_STATUS_OK
ReadX 11238 0 8192 8192 NT_STATUS_OK
ReadX 11238 8192 8192 8192 NT_STATUS_OK
ReadX 11238 16384 8192 8192 NT_STATUS_OK
ReadX 11238 24576 8192 8192 NT_STATUS_OK
ReadX 11238 32768 16384 16384 NT_STATUS_OK
ReadX 11238 49152 8192 8192 NT_STATUS_OK
ReadX 11238 57344 8192 8192 NT_STATUS_OK
ReadX 11238 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11240 NT_STATUS_OK
Close 11240 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11238 NT_STATUS_OK
Close 11237 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11243 NT_STATUS_OK
WriteX 11243 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11243 258 NT_STATUS_OK
WriteX 11243 0 29253 29253 NT_STATUS_OK
Close 11243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11244 NT_STATUS_OK
Close 11244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 11245 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11246 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 11245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 11247 NT_STATUS_OK
Close 11247 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 11250 NT_STATUS_OK
WriteX 11250 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11250 258 NT_STATUS_OK
WriteX 11250 0 30183 30183 NT_STATUS_OK
Close 11250 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11251 NT_STATUS_OK
Close 11251 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11253 NT_STATUS_OK
WriteX 11253 0 510 510 NT_STATUS_OK
WriteX 11253 510 512 512 NT_STATUS_OK
WriteX 11253 1022 510 510 NT_STATUS_OK
WriteX 11253 1532 510 510 NT_STATUS_OK
WriteX 11253 2042 168 168 NT_STATUS_OK
Close 11253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11254 NT_STATUS_OK
Close 11254 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11256 NT_STATUS_OK
ReadX 11256 0 4096 4096 NT_STATUS_OK
WriteX 11256 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11257 NT_STATUS_OK
ReadX 11257 61440 4096 4096 NT_STATUS_OK
ReadX 11257 126976 4096 4096 NT_STATUS_OK
WriteX 11257 0 65536 65536 NT_STATUS_OK
WriteX 11257 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11258 NT_STATUS_OK
ReadX 11258 61440 4096 4096 NT_STATUS_OK
ReadX 11258 126976 4096 4096 NT_STATUS_OK
ReadX 11258 192512 4096 4096 NT_STATUS_OK
ReadX 11258 258048 4096 4096 NT_STATUS_OK
WriteX 11258 0 65536 65536 NT_STATUS_OK
WriteX 11258 65536 65536 65536 NT_STATUS_OK
WriteX 11258 131072 65536 65536 NT_STATUS_OK
WriteX 11258 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11259 NT_STATUS_OK
ReadX 11259 61440 4096 4096 NT_STATUS_OK
ReadX 11259 126976 4096 4096 NT_STATUS_OK
ReadX 11259 192512 4096 4096 NT_STATUS_OK
ReadX 11259 258048 4096 4096 NT_STATUS_OK
ReadX 11259 323584 4096 4096 NT_STATUS_OK
ReadX 11259 389120 4096 4096 NT_STATUS_OK
ReadX 11259 454656 4096 4096 NT_STATUS_OK
ReadX 11259 520192 4096 4096 NT_STATUS_OK
WriteX 11259 0 65536 65536 NT_STATUS_OK
WriteX 11259 65536 65536 65536 NT_STATUS_OK
WriteX 11259 131072 65536 65536 NT_STATUS_OK
WriteX 11259 196608 65536 65536 NT_STATUS_OK
WriteX 11259 262144 65536 65536 NT_STATUS_OK
WriteX 11259 327680 65536 65536 NT_STATUS_OK
WriteX 11259 393216 65536 65536 NT_STATUS_OK
WriteX 11259 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11260 NT_STATUS_OK
Close 11260 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 11256 NT_STATUS_OK
Close 11257 NT_STATUS_OK
Close 11258 NT_STATUS_OK
Close 11259 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 11262 NT_STATUS_OK
Close 11262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 11266 NT_STATUS_OK
Close 11266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 11269 NT_STATUS_OK
Close 11269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 11271 NT_STATUS_OK
Close 11271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11275 NT_STATUS_OK
Close 11275 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11278 NT_STATUS_OK
Close 11278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 11280 NT_STATUS_OK
Close 11280 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11284 NT_STATUS_OK
Close 11284 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11289 NT_STATUS_OK
Close 11289 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11294 NT_STATUS_OK
Close 11294 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 11299 NT_STATUS_OK
Close 11299 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11304 NT_STATUS_OK
Close 11304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11309 NT_STATUS_OK
Close 11309 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 11314 NT_STATUS_OK
Close 11314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 11319 NT_STATUS_OK
Close 11319 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 11322 NT_STATUS_OK
Close 11322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11325 NT_STATUS_OK
Close 11325 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 11328 NT_STATUS_OK
WriteX 11328 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11328 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 11328 0 65536 65536 NT_STATUS_OK
WriteX 11328 65536 65536 65536 NT_STATUS_OK
WriteX 11328 131072 65536 65536 NT_STATUS_OK
WriteX 11328 196608 65536 65536 NT_STATUS_OK
WriteX 11328 262144 26634 26634 NT_STATUS_OK
Close 11328 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11333 NT_STATUS_OK
Close 11333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11334 NT_STATUS_OK
Close 11334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11335 NT_STATUS_OK
ReadX 11335 0 4096 4096 NT_STATUS_OK
Close 11335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 11336 NT_STATUS_OK
ReadX 11336 0 4096 4096 NT_STATUS_OK
ReadX 11336 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11337 NT_STATUS_OK
Close 11337 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 11336 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11341 NT_STATUS_OK
Close 11341 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11344 NT_STATUS_OK
Close 11344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 11346 NT_STATUS_OK
Close 11346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11350 NT_STATUS_OK
Close 11350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 11353 NT_STATUS_OK
Close 11353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11355 NT_STATUS_OK
Close 11355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11359 NT_STATUS_OK
Close 11359 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11364 NT_STATUS_OK
Close 11364 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11369 NT_STATUS_OK
Close 11369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 11374 NT_STATUS_OK
Close 11374 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11379 NT_STATUS_OK
Close 11379 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 11384 NT_STATUS_OK
Close 11384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11388 NT_STATUS_OK
Close 11388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11393 NT_STATUS_OK
Close 11393 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 11398 NT_STATUS_OK
Close 11398 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 11401 NT_STATUS_OK
Close 11401 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 11403 NT_STATUS_OK
Close 11403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11413 NT_STATUS_OK
Close 11413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11414 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11415 NT_STATUS_OK
ReadX 11415 0 4096 4096 NT_STATUS_OK
Close 11415 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11416 NT_STATUS_OK
ReadX 11416 0 4096 4096 NT_STATUS_OK
Close 11416 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 11417 NT_STATUS_OK
ReadX 11417 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11427 NT_STATUS_OK
Close 11427 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11428 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11428 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11429 NT_STATUS_OK
ReadX 11429 0 4096 4096 NT_STATUS_OK
Close 11429 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11430 NT_STATUS_OK
ReadX 11430 0 4096 4096 NT_STATUS_OK
Close 11430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 11431 NT_STATUS_OK
ReadX 11431 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11417 NT_STATUS_OK
Close 11431 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11460 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11460 0 4096 4096 NT_STATUS_OK
Close 11460 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11461 NT_STATUS_OK
ReadX 11461 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11461 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11462 NT_STATUS_OK
ReadX 11462 0 4096 4096 NT_STATUS_OK
ReadX 11462 4096 4096 4096 NT_STATUS_OK
ReadX 11462 8192 4096 4096 NT_STATUS_OK
ReadX 11462 12288 4096 4096 NT_STATUS_OK
ReadX 11462 16384 4096 4096 NT_STATUS_OK
ReadX 11462 20480 4096 4096 NT_STATUS_OK
ReadX 11462 24576 4096 4096 NT_STATUS_OK
ReadX 11462 28672 4096 4096 NT_STATUS_OK
ReadX 11462 32768 4096 4096 NT_STATUS_OK
ReadX 11462 36864 4096 4096 NT_STATUS_OK
ReadX 11462 40960 4096 4096 NT_STATUS_OK
ReadX 11462 45056 4096 4096 NT_STATUS_OK
ReadX 11462 49152 4096 4096 NT_STATUS_OK
ReadX 11462 53248 4096 4096 NT_STATUS_OK
ReadX 11462 57344 4096 4096 NT_STATUS_OK
ReadX 11462 61440 4096 4096 NT_STATUS_OK
ReadX 11462 65536 4096 4096 NT_STATUS_OK
ReadX 11462 69632 4096 4096 NT_STATUS_OK
ReadX 11462 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11462 1004 NT_STATUS_OK
WriteX 11462 0 4096 4096 NT_STATUS_OK
Close 11462 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11463 NT_STATUS_OK
SET_FILE_INFORMATION 11463 1004 NT_STATUS_OK
Close 11463 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 11464 NT_STATUS_OK
ReadX 11464 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11465 NT_STATUS_OK
Close 11465 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11468 NT_STATUS_OK
WriteX 11468 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11468 258 NT_STATUS_OK
WriteX 11468 0 65536 65536 NT_STATUS_OK
WriteX 11468 65536 19979 19979 NT_STATUS_OK
Close 11468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11469 NT_STATUS_OK
ReadX 11469 0 4096 4096 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
QUERY_FILE_INFORMATION 11469 1004 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
SET_FILE_INFORMATION 11469 1004 NT_STATUS_OK
WriteX 11469 0 4096 4096 NT_STATUS_OK
Flush 11469 NT_STATUS_OK
Close 11469 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11470 NT_STATUS_OK
ReadX 11470 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 11471 NT_STATUS_OK
ReadX 11471 0 4096 4096 NT_STATUS_OK
Close 11470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11472 NT_STATUS_OK
ReadX 11472 0 4096 4096 NT_STATUS_OK
Close 11472 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11473 NT_STATUS_OK
ReadX 11473 0 4096 4096 NT_STATUS_OK
Close 11473 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11474 NT_STATUS_OK
ReadX 11474 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11474 1004 NT_STATUS_OK
WriteX 11474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 11475 NT_STATUS_OK
Close 11475 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 11471 NT_STATUS_OK
Close 11474 NT_STATUS_OK
Close 11464 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11477 NT_STATUS_OK
Close 11477 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11480 NT_STATUS_OK
WriteX 11480 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11480 258 NT_STATUS_OK
WriteX 11480 0 65536 65536 NT_STATUS_OK
WriteX 11480 65536 17654 17654 NT_STATUS_OK
Close 11480 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11481 NT_STATUS_OK
ReadX 11481 0 4096 4096 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
QUERY_FILE_INFORMATION 11481 1004 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
SET_FILE_INFORMATION 11481 1004 NT_STATUS_OK
WriteX 11481 0 4096 4096 NT_STATUS_OK
Flush 11481 NT_STATUS_OK
Close 11481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11482 NT_STATUS_OK
SET_FILE_INFORMATION 11482 1004 NT_STATUS_OK
Close 11482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11483 NT_STATUS_OK
ReadX 11483 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 11484 NT_STATUS_OK
Close 11484 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 11486 NT_STATUS_OK
ReadX 11486 0 4096 4096 NT_STATUS_OK
ReadX 11486 4096 4096 4096 NT_STATUS_OK
ReadX 11486 8192 4096 4096 NT_STATUS_OK
ReadX 11486 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11486 16384 4096 4096 NT_STATUS_OK
ReadX 11486 20480 4096 4096 NT_STATUS_OK
ReadX 11486 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11487 NT_STATUS_OK
ReadX 11487 0 4096 4096 NT_STATUS_OK
Close 11487 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11488 NT_STATUS_OK
ReadX 11488 0 4096 4096 NT_STATUS_OK
Close 11488 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11489 NT_STATUS_OK
ReadX 11489 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11489 1004 NT_STATUS_OK
WriteX 11489 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 11490 NT_STATUS_OK
Close 11490 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 11489 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 11492 NT_STATUS_OK
Close 11492 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 11495 NT_STATUS_OK
WriteX 11495 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11495 258 NT_STATUS_OK
WriteX 11495 0 65536 65536 NT_STATUS_OK
WriteX 11495 65536 19490 19490 NT_STATUS_OK
Close 11495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11496 NT_STATUS_OK
ReadX 11496 0 4096 4096 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
QUERY_FILE_INFORMATION 11496 1004 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
SET_FILE_INFORMATION 11496 1004 NT_STATUS_OK
WriteX 11496 0 4096 4096 NT_STATUS_OK
Flush 11496 NT_STATUS_OK
Close 11496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11497 NT_STATUS_OK
SET_FILE_INFORMATION 11497 1004 NT_STATUS_OK
Close 11497 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 11498 NT_STATUS_OK
ReadX 11498 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 11499 NT_STATUS_OK
Close 11499 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11501 0 4096 4096 NT_STATUS_OK
Close 11501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11502 NT_STATUS_OK
ReadX 11502 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11503 NT_STATUS_OK
ReadX 11503 0 4096 4096 NT_STATUS_OK
ReadX 11503 4096 4096 4096 NT_STATUS_OK
ReadX 11503 8192 4096 4096 NT_STATUS_OK
ReadX 11503 12288 4096 4096 NT_STATUS_OK
ReadX 11503 16384 4096 4096 NT_STATUS_OK
ReadX 11503 20480 4096 4096 NT_STATUS_OK
ReadX 11503 24576 4096 4096 NT_STATUS_OK
ReadX 11503 28672 4096 4096 NT_STATUS_OK
ReadX 11503 32768 4096 4096 NT_STATUS_OK
ReadX 11503 36864 4096 4096 NT_STATUS_OK
ReadX 11503 40960 4096 4096 NT_STATUS_OK
ReadX 11503 45056 4096 4096 NT_STATUS_OK
ReadX 11503 49152 4096 4096 NT_STATUS_OK
ReadX 11503 53248 4096 4096 NT_STATUS_OK
ReadX 11503 57344 4096 4096 NT_STATUS_OK
ReadX 11503 61440 4096 4096 NT_STATUS_OK
ReadX 11503 65536 4096 4096 NT_STATUS_OK
ReadX 11503 69632 4096 4096 NT_STATUS_OK
ReadX 11503 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11503 1004 NT_STATUS_OK
WriteX 11503 0 4096 4096 NT_STATUS_OK
Close 11503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11504 NT_STATUS_OK
SET_FILE_INFORMATION 11504 1004 NT_STATUS_OK
Close 11504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 11505 NT_STATUS_OK
ReadX 11505 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11506 NT_STATUS_OK
Close 11506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 11498 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11509 NT_STATUS_OK
WriteX 11509 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11509 258 NT_STATUS_OK
WriteX 11509 0 65536 65536 NT_STATUS_OK
WriteX 11509 65536 8866 8866 NT_STATUS_OK
Close 11509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11510 NT_STATUS_OK
ReadX 11510 0 4096 4096 NT_STATUS_OK
WriteX 11510 0 4096 4096 NT_STATUS_OK
Flush 11510 NT_STATUS_OK
SET_FILE_INFORMATION 11510 1004 NT_STATUS_OK
WriteX 11510 0 4096 4096 NT_STATUS_OK
Flush 11510 NT_STATUS_OK
Close 11510 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11511 NT_STATUS_OK
ReadX 11511 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 11511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11512 NT_STATUS_OK
ReadX 11512 0 4096 4096 NT_STATUS_OK
Close 11512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11513 NT_STATUS_OK
ReadX 11513 0 4096 4096 NT_STATUS_OK
Close 11513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11514 NT_STATUS_OK
ReadX 11514 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11514 1004 NT_STATUS_OK
WriteX 11514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 11515 NT_STATUS_OK
Close 11515 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 11514 NT_STATUS_OK
Close 11505 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11517 NT_STATUS_OK
Close 11517 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11520 NT_STATUS_OK
WriteX 11520 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11520 258 NT_STATUS_OK
WriteX 11520 0 65536 65536 NT_STATUS_OK
WriteX 11520 65536 9298 9298 NT_STATUS_OK
Close 11520 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11521 NT_STATUS_OK
ReadX 11521 0 4096 4096 NT_STATUS_OK
WriteX 11521 0 4096 4096 NT_STATUS_OK
Flush 11521 NT_STATUS_OK
SET_FILE_INFORMATION 11521 1004 NT_STATUS_OK
WriteX 11521 0 4096 4096 NT_STATUS_OK
Flush 11521 NT_STATUS_OK
Close 11521 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11522 NT_STATUS_OK
SET_FILE_INFORMATION 11522 1004 NT_STATUS_OK
Close 11522 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11523 NT_STATUS_OK
ReadX 11523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 11524 NT_STATUS_OK
Close 11524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11527 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11527 0 4096 4096 NT_STATUS_OK
Close 11527 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 11528 NT_STATUS_OK
ReadX 11528 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11528 4096 4096 4096 NT_STATUS_OK
ReadX 11528 8192 4096 4096 NT_STATUS_OK
ReadX 11528 12288 4096 4096 NT_STATUS_OK
ReadX 11528 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 11523 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11529 NT_STATUS_OK
ReadX 11529 0 4096 4096 NT_STATUS_OK
Close 11529 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11530 NT_STATUS_OK
ReadX 11530 0 4096 4096 NT_STATUS_OK
Close 11530 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11531 NT_STATUS_OK
ReadX 11531 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11531 1004 NT_STATUS_OK
WriteX 11531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 11532 NT_STATUS_OK
Close 11532 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 11528 NT_STATUS_OK
Close 11531 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 11534 NT_STATUS_OK
Close 11534 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 11537 NT_STATUS_OK
WriteX 11537 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11537 258 NT_STATUS_OK
WriteX 11537 0 65536 65536 NT_STATUS_OK
WriteX 11537 65536 11540 11540 NT_STATUS_OK
Close 11537 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11538 NT_STATUS_OK
ReadX 11538 0 4096 4096 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
SET_FILE_INFORMATION 11538 1004 NT_STATUS_OK
WriteX 11538 0 4096 4096 NT_STATUS_OK
Flush 11538 NT_STATUS_OK
Close 11538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11539 NT_STATUS_OK
SET_FILE_INFORMATION 11539 1004 NT_STATUS_OK
Close 11539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 11540 NT_STATUS_OK
ReadX 11540 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 11541 NT_STATUS_OK
Close 11541 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11543 NT_STATUS_OK
ReadX 11543 61440 4096 4096 NT_STATUS_OK
ReadX 11543 126976 4096 4096 NT_STATUS_OK
WriteX 11543 0 65536 65536 NT_STATUS_OK
WriteX 11543 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11544 NT_STATUS_OK
ReadX 11544 61440 4096 4096 NT_STATUS_OK
ReadX 11544 126976 4096 4096 NT_STATUS_OK
ReadX 11544 192512 4096 4096 NT_STATUS_OK
ReadX 11544 258048 4096 4096 NT_STATUS_OK
WriteX 11544 0 65536 65536 NT_STATUS_OK
WriteX 11544 65536 65536 65536 NT_STATUS_OK
WriteX 11544 131072 65536 65536 NT_STATUS_OK
WriteX 11544 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11545 NT_STATUS_OK
ReadX 11545 61440 4096 4096 NT_STATUS_OK
ReadX 11545 126976 4096 4096 NT_STATUS_OK
ReadX 11545 192512 4096 4096 NT_STATUS_OK
ReadX 11545 258048 4096 4096 NT_STATUS_OK
ReadX 11545 323584 4096 4096 NT_STATUS_OK
ReadX 11545 389120 4096 4096 NT_STATUS_OK
ReadX 11545 454656 4096 4096 NT_STATUS_OK
ReadX 11545 520192 4096 4096 NT_STATUS_OK
WriteX 11545 0 65536 65536 NT_STATUS_OK
WriteX 11545 65536 65536 65536 NT_STATUS_OK
WriteX 11545 131072 65536 65536 NT_STATUS_OK
WriteX 11545 196608 65536 65536 NT_STATUS_OK
WriteX 11545 262144 65536 65536 NT_STATUS_OK
WriteX 11545 327680 65536 65536 NT_STATUS_OK
WriteX 11545 393216 65536 65536 NT_STATUS_OK
WriteX 11545 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 11546 NT_STATUS_OK
ReadX 11546 0 4096 4096 NT_STATUS_OK
ReadX 11546 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 11547 NT_STATUS_OK
WriteX 11547 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11547 258 NT_STATUS_OK
WriteX 11547 0 53 53 NT_STATUS_OK
Close 11547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 11548 NT_STATUS_OK
Close 11548 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11540 NT_STATUS_OK
Close 11486 NT_STATUS_OK
Close 11543 NT_STATUS_OK
Close 11544 NT_STATUS_OK
Close 11545 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11546 8192 4096 4096 NT_STATUS_OK
ReadX 11546 12288 4096 4096 NT_STATUS_OK
WriteX 11550 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11550 258 NT_STATUS_OK
ReadX 11546 16384 4096 4096 NT_STATUS_OK
ReadX 11546 20480 4096 4096 NT_STATUS_OK
WriteX 11550 0 15360 15360 NT_STATUS_OK
Close 11550 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 11551 NT_STATUS_OK
ReadX 11551 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11551 1004 NT_STATUS_OK
WriteX 11551 0 4096 4096 NT_STATUS_OK
Close 11551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 11552 NT_STATUS_OK
Close 11552 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11554 NT_STATUS_OK
ReadX 11554 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 11555 NT_STATUS_OK
Close 11555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 11554 4096 4096 4096 NT_STATUS_OK
ReadX 11554 8192 4096 4096 NT_STATUS_OK
ReadX 11554 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11557 NT_STATUS_OK
ReadX 11557 0 4096 4096 NT_STATUS_OK
ReadX 11557 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 11558 NT_STATUS_OK
ReadX 11558 0 4096 4096 NT_STATUS_OK
ReadX 11558 4096 4096 4096 NT_STATUS_OK
ReadX 11558 8192 4096 4096 NT_STATUS_OK
Close 11557 NT_STATUS_OK
Close 11558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 11559 NT_STATUS_OK
WriteX 11559 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11559 258 NT_STATUS_OK
WriteX 11559 0 15360 15360 NT_STATUS_OK
Close 11559 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 11560 NT_STATUS_OK
ReadX 11560 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11560 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11560 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11554 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 11546 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 11561 NT_STATUS_OK
Close 11561 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11563 NT_STATUS_OK
ReadX 11563 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 11564 NT_STATUS_OK
SET_FILE_INFORMATION 11564 1004 NT_STATUS_OK
Close 11564 NT_STATUS_OK
WriteX 11560 0 4096 4096 NT_STATUS_OK
Close 11560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 11565 NT_STATUS_OK
Close 11565 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 11567 NT_STATUS_OK
ReadX 11567 0 4096 4096 NT_STATUS_OK
ReadX 11567 4096 4096 4096 NT_STATUS_OK
ReadX 11567 8192 4096 4096 NT_STATUS_OK
ReadX 11567 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 11567 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11567 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 11568 NT_STATUS_OK
ReadX 11568 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 11569 NT_STATUS_OK
WriteX 11569 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11569 258 NT_STATUS_OK
WriteX 11569 0 53 53 NT_STATUS_OK
Close 11569 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 11570 NT_STATUS_OK
Close 11570 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11568 4096 4096 4096 NT_STATUS_OK
ReadX 11568 8192 4096 4096 NT_STATUS_OK
ReadX 11568 12288 4096 4096 NT_STATUS_OK
WriteX 11572 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11572 258 NT_STATUS_OK
WriteX 11572 0 12006 12006 NT_STATUS_OK
Close 11572 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 11573 NT_STATUS_OK
ReadX 11573 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11573 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11573 1004 NT_STATUS_OK
WriteX 11573 0 4096 4096 NT_STATUS_OK
Close 11573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 11574 NT_STATUS_OK
Close 11574 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11576 NT_STATUS_OK
ReadX 11576 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 11577 NT_STATUS_OK
Close 11577 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 11576 4096 4096 4096 NT_STATUS_OK
ReadX 11576 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 11579 NT_STATUS_OK
WriteX 11579 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11579 258 NT_STATUS_OK
WriteX 11579 0 11991 11991 NT_STATUS_OK
Close 11579 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 11580 NT_STATUS_OK
ReadX 11580 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11580 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11580 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11576 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 11568 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 11581 NT_STATUS_OK
Close 11581 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11583 NT_STATUS_OK
ReadX 11583 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 11584 NT_STATUS_OK
SET_FILE_INFORMATION 11584 1004 NT_STATUS_OK
Close 11584 NT_STATUS_OK
WriteX 11580 0 4096 4096 NT_STATUS_OK
Close 11580 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 11585 NT_STATUS_OK
Close 11585 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 11587 NT_STATUS_OK
ReadX 11587 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 11588 NT_STATUS_OK
Close 11588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 11587 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11587 1004 NT_STATUS_OK
ReadX 11587 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 11587 1004 NT_STATUS_OK
WriteX 11587 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 11587 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11587 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11587 1004 NT_STATUS_OK
Close 11563 NT_STATUS_OK
WriteX 11567 0 19054 19054 NT_STATUS_OK
WriteX 11587 0 12288 12288 NT_STATUS_OK
Close 11583 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 11590 NT_STATUS_OK
Close 11590 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 11567 NT_STATUS_OK
Close 11587 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 11592 NT_STATUS_OK
Close 11592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11594 NT_STATUS_OK
ReadX 11594 0 61440 61440 NT_STATUS_OK
ReadX 11594 61440 4096 4096 NT_STATUS_OK
ReadX 11594 65536 61440 61440 NT_STATUS_OK
ReadX 11594 126976 4096 4096 NT_STATUS_OK
ReadX 11594 131072 61440 61440 NT_STATUS_OK
ReadX 11594 192512 4096 4096 NT_STATUS_OK
ReadX 11594 196608 61440 61440 NT_STATUS_OK
ReadX 11594 258048 4096 4096 NT_STATUS_OK
ReadX 11594 262144 61440 61440 NT_STATUS_OK
ReadX 11594 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11595 NT_STATUS_OK
ReadX 11595 0 61440 61440 NT_STATUS_OK
ReadX 11595 61440 4096 4096 NT_STATUS_OK
ReadX 11595 65536 61440 61440 NT_STATUS_OK
ReadX 11595 126976 4096 4096 NT_STATUS_OK
ReadX 11595 131072 61440 61440 NT_STATUS_OK
ReadX 11595 192512 4096 4096 NT_STATUS_OK
ReadX 11595 196608 61440 61440 NT_STATUS_OK
ReadX 11595 258048 4096 4096 NT_STATUS_OK
ReadX 11595 262144 61440 61440 NT_STATUS_OK
ReadX 11595 323584 4096 4096 NT_STATUS_OK
ReadX 11595 327680 61440 61440 NT_STATUS_OK
ReadX 11595 389120 4096 4096 NT_STATUS_OK
ReadX 11595 393216 61440 61440 NT_STATUS_OK
ReadX 11595 454656 4096 4096 NT_STATUS_OK
ReadX 11595 458752 61440 61440 NT_STATUS_OK
ReadX 11595 520192 4096 4096 NT_STATUS_OK
ReadX 11595 524288 61440 61440 NT_STATUS_OK
ReadX 11595 585728 4096 4096 NT_STATUS_OK
ReadX 11595 589824 61440 61440 NT_STATUS_OK
ReadX 11595 651264 4096 4096 NT_STATUS_OK
ReadX 11595 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11596 NT_STATUS_OK
ReadX 11596 0 61440 61440 NT_STATUS_OK
ReadX 11596 61440 4096 4096 NT_STATUS_OK
ReadX 11596 65536 61440 61440 NT_STATUS_OK
ReadX 11596 126976 4096 4096 NT_STATUS_OK
ReadX 11596 131072 61440 61440 NT_STATUS_OK
ReadX 11596 192512 4096 4096 NT_STATUS_OK
ReadX 11596 196608 61440 61440 NT_STATUS_OK
ReadX 11596 258048 4096 4096 NT_STATUS_OK
ReadX 11596 262144 61440 61440 NT_STATUS_OK
ReadX 11596 323584 4096 4096 NT_STATUS_OK
ReadX 11596 327680 61440 61440 NT_STATUS_OK
ReadX 11596 389120 4096 4096 NT_STATUS_OK
ReadX 11596 393216 61440 61440 NT_STATUS_OK
ReadX 11596 454656 4096 4096 NT_STATUS_OK
ReadX 11596 458752 61440 61440 NT_STATUS_OK
ReadX 11596 520192 4096 4096 NT_STATUS_OK
ReadX 11596 524288 61440 61440 NT_STATUS_OK
ReadX 11596 585728 4096 4096 NT_STATUS_OK
ReadX 11596 589824 61440 61440 NT_STATUS_OK
ReadX 11596 651264 4096 4096 NT_STATUS_OK
ReadX 11596 655360 61440 61440 NT_STATUS_OK
ReadX 11596 716800 4096 4096 NT_STATUS_OK
ReadX 11596 720896 61440 61440 NT_STATUS_OK
ReadX 11596 782336 4096 4096 NT_STATUS_OK
ReadX 11596 786432 61440 61440 NT_STATUS_OK
ReadX 11596 847872 4096 4096 NT_STATUS_OK
ReadX 11596 851968 61440 61440 NT_STATUS_OK
ReadX 11596 913408 4096 4096 NT_STATUS_OK
ReadX 11596 917504 61440 61440 NT_STATUS_OK
ReadX 11596 978944 4096 4096 NT_STATUS_OK
ReadX 11596 983040 61440 61440 NT_STATUS_OK
ReadX 11596 1044480 4096 4096 NT_STATUS_OK
ReadX 11596 1048576 61440 61440 NT_STATUS_OK
ReadX 11596 1110016 4096 4096 NT_STATUS_OK
ReadX 11596 1114112 61440 61440 NT_STATUS_OK
ReadX 11596 1175552 4096 4096 NT_STATUS_OK
ReadX 11596 1179648 61440 61440 NT_STATUS_OK
ReadX 11596 1241088 4096 4096 NT_STATUS_OK
ReadX 11596 1245184 61440 61440 NT_STATUS_OK
ReadX 11596 1306624 4096 4096 NT_STATUS_OK
ReadX 11596 1310720 61440 61440 NT_STATUS_OK
ReadX 11596 1372160 4096 4096 NT_STATUS_OK
ReadX 11596 1376256 61440 61440 NT_STATUS_OK
ReadX 11596 1437696 4096 4096 NT_STATUS_OK
ReadX 11596 1441792 61440 61440 NT_STATUS_OK
ReadX 11596 1503232 4096 4096 NT_STATUS_OK
ReadX 11596 1507328 61440 61440 NT_STATUS_OK
ReadX 11596 1568768 4096 4096 NT_STATUS_OK
ReadX 11596 1572864 61440 61440 NT_STATUS_OK
ReadX 11596 1634304 4096 4096 NT_STATUS_OK
ReadX 11596 1638400 61440 61440 NT_STATUS_OK
ReadX 11596 1699840 4096 4096 NT_STATUS_OK
ReadX 11596 1703936 61440 61440 NT_STATUS_OK
ReadX 11596 1765376 4096 4096 NT_STATUS_OK
ReadX 11596 1769472 61440 61440 NT_STATUS_OK
ReadX 11596 1830912 4096 4096 NT_STATUS_OK
ReadX 11596 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11597 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11597 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11598 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11598 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11599 NT_STATUS_OK
ReadX 11599 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11600 NT_STATUS_OK
ReadX 11600 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11601 NT_STATUS_OK
ReadX 11601 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 11602 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11602 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 11603 NT_STATUS_OK
QUERY_FILE_INFORMATION 11603 1004 NT_STATUS_OK
WriteX 11603 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11603 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 11604 NT_STATUS_OK
Close 11604 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11605 NT_STATUS_OK
WriteX 11605 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11605 258 NT_STATUS_OK
WriteX 11605 0 491 491 NT_STATUS_OK
Close 11605 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 11606 NT_STATUS_OK
ReadX 11606 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 11603 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 11608 NT_STATUS_OK
Close 11608 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11609 NT_STATUS_OK
WriteX 11609 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11609 258 NT_STATUS_OK
WriteX 11609 0 543 543 NT_STATUS_OK
Close 11609 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11610 NT_STATUS_OK
ReadX 11610 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11606 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 11594 NT_STATUS_OK
Close 11595 NT_STATUS_OK
Close 11596 NT_STATUS_OK
Close 11610 NT_STATUS_OK
Close 11598 NT_STATUS_OK
Close 11599 NT_STATUS_OK
Close 11600 NT_STATUS_OK
Close 11601 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 11603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11613 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11613 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11614 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11615 NT_STATUS_OK
ReadX 11615 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11616 NT_STATUS_OK
ReadX 11616 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11617 NT_STATUS_OK
ReadX 11617 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11618 NT_STATUS_OK
ReadX 11618 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 11622 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11623 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 1004 NT_STATUS_OK
WriteX 11623 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11623 258 NT_STATUS_OK
WriteX 11623 0 2048 2048 NT_STATUS_OK
Close 11623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11624 NT_STATUS_OK
ReadX 11624 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11624 0 4096 4096 NT_STATUS_OK
Flush 11624 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 11624 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 11628 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11628 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11629 NT_STATUS_OK
WriteX 11629 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11629 258 NT_STATUS_OK
WriteX 11629 0 2048 2048 NT_STATUS_OK
Close 11629 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 11630 NT_STATUS_OK
ReadX 11630 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 11634 NT_STATUS_OK
Close 11634 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11635 NT_STATUS_OK
WriteX 11635 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11635 258 NT_STATUS_OK
WriteX 11635 0 2048 2048 NT_STATUS_OK
Close 11635 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 11636 NT_STATUS_OK
ReadX 11636 0 2048 2048 NT_STATUS_OK
ReadX 11614 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11636 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 11618 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 11630 0 4096 4096 NT_STATUS_OK
WriteX 11614 0 8192 8192 NT_STATUS_OK
WriteX 11615 0 4096 4096 NT_STATUS_OK
WriteX 11616 0 4096 4096 NT_STATUS_OK
ReadX 11630 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11614 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11639 NT_STATUS_OK
ReadX 11639 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 11640 NT_STATUS_OK
QUERY_FILE_INFORMATION 11640 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 11640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 11639 NT_STATUS_OK
Close 11615 NT_STATUS_OK
Close 11616 NT_STATUS_OK
Close 11617 NT_STATUS_OK
Close 11630 NT_STATUS_OK
Close 11614 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11642 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11642 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11643 NT_STATUS_OK
ReadX 11643 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11644 NT_STATUS_OK
ReadX 11644 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11645 NT_STATUS_OK
ReadX 11645 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11646 NT_STATUS_OK
ReadX 11646 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11647 NT_STATUS_OK
ReadX 11647 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11648 NT_STATUS_OK
ReadX 11648 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11649 NT_STATUS_OK
ReadX 11649 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11650 NT_STATUS_OK
ReadX 11650 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11651 NT_STATUS_OK
ReadX 11651 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11652 NT_STATUS_OK
ReadX 11652 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11653 NT_STATUS_OK
ReadX 11653 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11654 NT_STATUS_OK
ReadX 11654 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11655 NT_STATUS_OK
ReadX 11655 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 11659 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11659 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11660 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 1004 NT_STATUS_OK
WriteX 11660 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11660 258 NT_STATUS_OK
WriteX 11660 0 2048 2048 NT_STATUS_OK
Close 11660 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11661 NT_STATUS_OK
ReadX 11661 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11651 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11662 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11663 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11663 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 11667 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11667 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11668 NT_STATUS_OK
QUERY_FILE_INFORMATION 11668 1004 NT_STATUS_OK
WriteX 11668 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11668 258 NT_STATUS_OK
WriteX 11668 0 2048 2048 NT_STATUS_OK
Close 11668 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11669 NT_STATUS_OK
ReadX 11669 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
Flush 11661 NT_STATUS_OK
WriteX 11669 0 4096 4096 NT_STATUS_OK
Flush 11669 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 11661 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 11669 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11663 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 11670 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11670 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11671 NT_STATUS_OK
WriteX 11671 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11671 258 NT_STATUS_OK
WriteX 11671 0 4096 4096 NT_STATUS_OK
Close 11671 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 11672 NT_STATUS_OK
ReadX 11672 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 11673 NT_STATUS_OK
Close 11673 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11674 NT_STATUS_OK
WriteX 11674 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11674 258 NT_STATUS_OK
WriteX 11674 0 4096 4096 NT_STATUS_OK
Close 11674 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 11675 NT_STATUS_OK
ReadX 11675 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 11675 0 4096 4096 NT_STATUS_OK
Close 11672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 11655 NT_STATUS_OK
Close 11649 NT_STATUS_OK
Close 11663 NT_STATUS_OK
Close 11652 NT_STATUS_OK
Close 11653 NT_STATUS_OK
Close 11654 NT_STATUS_OK
Close 11650 NT_STATUS_OK
Close 11643 NT_STATUS_OK
Close 11644 NT_STATUS_OK
Close 11647 NT_STATUS_OK
Close 11648 NT_STATUS_OK
Close 11645 NT_STATUS_OK
Close 11646 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 11675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 11678 NT_STATUS_OK
Close 11678 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 11680 NT_STATUS_OK
ReadX 11680 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 11681 NT_STATUS_OK
Close 11681 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11682 NT_STATUS_OK
WriteX 11682 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11682 258 NT_STATUS_OK
WriteX 11682 0 2048 2048 NT_STATUS_OK
Close 11682 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11683 NT_STATUS_OK
ReadX 11683 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11684 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11684 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11685 NT_STATUS_OK
ReadX 11685 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11686 NT_STATUS_OK
ReadX 11686 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11687 NT_STATUS_OK
ReadX 11687 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11688 NT_STATUS_OK
ReadX 11688 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11689 NT_STATUS_OK
ReadX 11689 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11690 NT_STATUS_OK
ReadX 11690 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11691 NT_STATUS_OK
ReadX 11691 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11692 NT_STATUS_OK
ReadX 11692 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11693 NT_STATUS_OK
ReadX 11693 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11694 NT_STATUS_OK
ReadX 11694 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11695 NT_STATUS_OK
ReadX 11695 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11696 NT_STATUS_OK
ReadX 11696 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11661 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 11697 NT_STATUS_OK
QUERY_FILE_INFORMATION 11697 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 11697 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 11680 NT_STATUS_OK
Close 11683 NT_STATUS_OK
Close 11695 NT_STATUS_OK
Close 11690 NT_STATUS_OK
Close 11691 NT_STATUS_OK
Close 11692 NT_STATUS_OK
Close 11693 NT_STATUS_OK
Close 11694 NT_STATUS_OK
Close 11696 NT_STATUS_OK
Close 11684 NT_STATUS_OK
Close 11685 NT_STATUS_OK
Close 11688 NT_STATUS_OK
Close 11689 NT_STATUS_OK
Close 11686 NT_STATUS_OK
Close 11687 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 11699 NT_STATUS_OK
QUERY_FILE_INFORMATION 11699 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 11699 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11701 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11701 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11702 NT_STATUS_OK
ReadX 11702 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11703 NT_STATUS_OK
ReadX 11703 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11704 NT_STATUS_OK
ReadX 11704 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11705 NT_STATUS_OK
ReadX 11705 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11706 NT_STATUS_OK
ReadX 11706 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11707 NT_STATUS_OK
ReadX 11707 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11708 NT_STATUS_OK
ReadX 11708 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11709 NT_STATUS_OK
ReadX 11709 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11710 NT_STATUS_OK
ReadX 11710 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11711 NT_STATUS_OK
ReadX 11711 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11712 NT_STATUS_OK
ReadX 11712 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11713 NT_STATUS_OK
ReadX 11713 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11714 NT_STATUS_OK
ReadX 11714 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 11718 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11719 NT_STATUS_OK
QUERY_FILE_INFORMATION 11719 1004 NT_STATUS_OK
WriteX 11719 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11719 258 NT_STATUS_OK
WriteX 11719 0 2048 2048 NT_STATUS_OK
Close 11719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11720 NT_STATUS_OK
ReadX 11720 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11721 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11721 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11722 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11722 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11723 NT_STATUS_OK
ReadX 11723 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11724 NT_STATUS_OK
ReadX 11724 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11725 NT_STATUS_OK
ReadX 11725 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11726 NT_STATUS_OK
ReadX 11726 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 11730 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11730 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11731 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 1004 NT_STATUS_OK
WriteX 11731 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11731 258 NT_STATUS_OK
WriteX 11731 0 2048 2048 NT_STATUS_OK
Close 11731 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11732 NT_STATUS_OK
ReadX 11732 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11707 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11733 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11733 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11734 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 11738 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11738 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11739 NT_STATUS_OK
QUERY_FILE_INFORMATION 11739 1004 NT_STATUS_OK
WriteX 11739 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11739 258 NT_STATUS_OK
WriteX 11739 0 2048 2048 NT_STATUS_OK
Close 11739 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11740 NT_STATUS_OK
ReadX 11740 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11720 0 4096 4096 NT_STATUS_OK
Flush 11720 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
Flush 11732 NT_STATUS_OK
WriteX 11740 0 4096 4096 NT_STATUS_OK
Flush 11740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 11720 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 11732 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 11740 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11722 4096 16384 16384 NT_STATUS_OK
ReadX 11702 4096 16384 16384 NT_STATUS_OK
ReadX 11734 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11741 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11741 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11742 NT_STATUS_OK
ReadX 11742 0 2048 2048 NT_STATUS_OK
WriteX 11742 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11720 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 11743 NT_STATUS_OK
QUERY_FILE_INFORMATION 11743 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 11743 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 11742 NT_STATUS_OK
Close 11726 NT_STATUS_OK
Close 11714 NT_STATUS_OK
Close 11706 NT_STATUS_OK
Close 11722 NT_STATUS_OK
Close 11723 NT_STATUS_OK
Close 11724 NT_STATUS_OK
Close 11725 NT_STATUS_OK
Close 11713 NT_STATUS_OK
Close 11734 NT_STATUS_OK
Close 11708 NT_STATUS_OK
Close 11711 NT_STATUS_OK
Close 11712 NT_STATUS_OK
Close 11709 NT_STATUS_OK
Close 11710 NT_STATUS_OK
Close 11702 NT_STATUS_OK
Close 11703 NT_STATUS_OK
Close 11704 NT_STATUS_OK
Close 11705 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11732 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 11745 NT_STATUS_OK
QUERY_FILE_INFORMATION 11745 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 11745 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11740 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 11747 NT_STATUS_OK
QUERY_FILE_INFORMATION 11747 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 11747 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11749 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 11750 NT_STATUS_OK
ReadX 11750 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 11751 NT_STATUS_OK
ReadX 11751 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 11752 NT_STATUS_OK
ReadX 11752 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 11753 NT_STATUS_OK
ReadX 11753 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 11754 NT_STATUS_OK
ReadX 11754 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11750 4096 16384 16384 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11752 0 4096 4096 NT_STATUS_OK
WriteX 11753 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11755 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11755 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11756 NT_STATUS_OK
ReadX 11756 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11757 NT_STATUS_OK
ReadX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11758 NT_STATUS_OK
ReadX 11758 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11759 NT_STATUS_OK
ReadX 11759 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11760 NT_STATUS_OK
ReadX 11760 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11761 NT_STATUS_OK
ReadX 11761 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11762 NT_STATUS_OK
ReadX 11762 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11763 NT_STATUS_OK
ReadX 11763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11764 NT_STATUS_OK
ReadX 11764 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11765 NT_STATUS_OK
ReadX 11765 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11766 NT_STATUS_OK
ReadX 11766 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11767 NT_STATUS_OK
ReadX 11767 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11768 NT_STATUS_OK
ReadX 11768 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 11769 NT_STATUS_OK
ReadX 11769 0 8192 8192 NT_STATUS_OK
ReadX 11756 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11770 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11770 0 4096 4096 NT_STATUS_OK
ReadX 11770 4096 4096 4096 NT_STATUS_OK
ReadX 11770 8192 4096 4096 NT_STATUS_OK
WriteX 11756 0 4096 4096 NT_STATUS_OK
WriteX 11757 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 11771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11771 0 4096 4096 NT_STATUS_OK
ReadX 11771 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 11750 0 4096 4096 NT_STATUS_OK
WriteX 11751 0 4096 4096 NT_STATUS_OK
WriteX 11752 0 4096 4096 NT_STATUS_OK
WriteX 11753 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 11775 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11775 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11776 NT_STATUS_OK
QUERY_FILE_INFORMATION 11776 1004 NT_STATUS_OK
WriteX 11776 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11776 258 NT_STATUS_OK
WriteX 11776 0 2048 2048 NT_STATUS_OK
Close 11776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11777 NT_STATUS_OK
ReadX 11777 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11778 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11778 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11779 NT_STATUS_OK
ReadX 11779 0 4096 4096 NT_STATUS_OK
ReadX 11779 4096 4096 4096 NT_STATUS_OK
WriteX 11779 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 11777 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11779 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11780 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11780 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 11781 NT_STATUS_OK
ReadX 11781 0 4096 4096 NT_STATUS_OK
ReadX 11781 4096 4096 4096 NT_STATUS_OK
WriteX 11781 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 11782 NT_STATUS_OK
QUERY_FILE_INFORMATION 11782 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 11782 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 11769 NT_STATUS_OK
Close 11754 NT_STATUS_OK
Close 11750 NT_STATUS_OK
Close 11751 NT_STATUS_OK
Close 11752 NT_STATUS_OK
Close 11753 NT_STATUS_OK
Close 11762 NT_STATUS_OK
Close 11767 NT_STATUS_OK
Close 11763 NT_STATUS_OK
Close 11764 NT_STATUS_OK
Close 11765 NT_STATUS_OK
Close 11766 NT_STATUS_OK
Close 11768 NT_STATUS_OK
Close 11756 NT_STATUS_OK
Close 11757 NT_STATUS_OK
Close 11760 NT_STATUS_OK
Close 11761 NT_STATUS_OK
Close 11758 NT_STATUS_OK
Close 11759 NT_STATUS_OK
Close 11781 NT_STATUS_OK
Close 11770 NT_STATUS_OK
Close 11771 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 11784 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11784 0 4096 4096 NT_STATUS_OK
ReadX 11784 4096 4096 4096 NT_STATUS_OK
ReadX 11784 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 11785 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11785 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 11786 NT_STATUS_OK
ReadX 11786 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 11787 NT_STATUS_OK
ReadX 11787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 11788 NT_STATUS_OK
ReadX 11788 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 11789 NT_STATUS_OK
ReadX 11789 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 11790 NT_STATUS_OK
ReadX 11790 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 11791 NT_STATUS_OK
ReadX 11791 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 11792 NT_STATUS_OK
ReadX 11792 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 11793 NT_STATUS_OK
ReadX 11793 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 11794 NT_STATUS_OK
ReadX 11794 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 11795 NT_STATUS_OK
ReadX 11795 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 11796 NT_STATUS_OK
ReadX 11796 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 11797 NT_STATUS_OK
ReadX 11797 0 4096 4096 NT_STATUS_OK
ReadX 11785 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 11801 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11802 NT_STATUS_OK
QUERY_FILE_INFORMATION 11802 1004 NT_STATUS_OK
WriteX 11802 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11802 258 NT_STATUS_OK
WriteX 11802 0 2048 2048 NT_STATUS_OK
Close 11802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11803 NT_STATUS_OK
ReadX 11803 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 11803 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 11807 NT_STATUS_OK
Close 11807 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11808 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 1004 NT_STATUS_OK
WriteX 11808 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11808 258 NT_STATUS_OK
WriteX 11808 0 2048 2048 NT_STATUS_OK
Close 11808 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11809 NT_STATUS_OK
ReadX 11809 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 11809 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11792 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11803 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 11810 NT_STATUS_OK
QUERY_FILE_INFORMATION 11810 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 11810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 11796 NT_STATUS_OK
Close 11791 NT_STATUS_OK
Close 11797 NT_STATUS_OK
Close 11785 NT_STATUS_OK
Close 11786 NT_STATUS_OK
Close 11789 NT_STATUS_OK
Close 11790 NT_STATUS_OK
Close 11787 NT_STATUS_OK
Close 11788 NT_STATUS_OK
Close 11792 NT_STATUS_OK
Close 11793 NT_STATUS_OK
Close 11794 NT_STATUS_OK
Close 11795 NT_STATUS_OK
Close 11784 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 11812 NT_STATUS_OK
QUERY_FILE_INFORMATION 11812 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 11812 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11814 NT_STATUS_OK
ReadX 11814 61440 4096 4096 NT_STATUS_OK
ReadX 11814 126976 4096 4096 NT_STATUS_OK
WriteX 11814 0 65536 65536 NT_STATUS_OK
WriteX 11814 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11815 NT_STATUS_OK
ReadX 11815 61440 4096 4096 NT_STATUS_OK
ReadX 11815 126976 4096 4096 NT_STATUS_OK
ReadX 11815 192512 4096 4096 NT_STATUS_OK
ReadX 11815 258048 4096 4096 NT_STATUS_OK
WriteX 11815 0 65536 65536 NT_STATUS_OK
WriteX 11815 65536 65536 65536 NT_STATUS_OK
WriteX 11815 131072 65536 65536 NT_STATUS_OK
WriteX 11815 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11816 NT_STATUS_OK
ReadX 11816 61440 4096 4096 NT_STATUS_OK
ReadX 11816 126976 4096 4096 NT_STATUS_OK
ReadX 11816 192512 4096 4096 NT_STATUS_OK
ReadX 11816 258048 4096 4096 NT_STATUS_OK
ReadX 11816 323584 4096 4096 NT_STATUS_OK
ReadX 11816 389120 4096 4096 NT_STATUS_OK
ReadX 11816 454656 4096 4096 NT_STATUS_OK
ReadX 11816 520192 4096 4096 NT_STATUS_OK
WriteX 11816 0 65536 65536 NT_STATUS_OK
WriteX 11816 65536 65536 65536 NT_STATUS_OK
WriteX 11816 131072 65536 65536 NT_STATUS_OK
WriteX 11816 196608 65536 65536 NT_STATUS_OK
WriteX 11816 262144 65536 65536 NT_STATUS_OK
WriteX 11816 327680 65536 65536 NT_STATUS_OK
WriteX 11816 393216 65536 65536 NT_STATUS_OK
WriteX 11816 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11817 NT_STATUS_OK
ReadX 11817 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11817 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11817 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11817 8192 4096 4096 NT_STATUS_OK
ReadX 11817 12288 4096 4096 NT_STATUS_OK
ReadX 11817 16384 4096 4096 NT_STATUS_OK
ReadX 11817 20480 4096 4096 NT_STATUS_OK
ReadX 11817 24576 4096 4096 NT_STATUS_OK
ReadX 11817 28672 4096 4096 NT_STATUS_OK
ReadX 11817 32768 4096 4096 NT_STATUS_OK
ReadX 11817 36864 4096 4096 NT_STATUS_OK
ReadX 11817 40960 4096 4096 NT_STATUS_OK
ReadX 11817 45056 4096 4096 NT_STATUS_OK
ReadX 11817 49152 4096 4096 NT_STATUS_OK
ReadX 11817 53248 4096 4096 NT_STATUS_OK
ReadX 11817 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11817 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 11818 NT_STATUS_OK
Close 11818 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 11814 NT_STATUS_OK
Close 11815 NT_STATUS_OK
Close 11816 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 11820 NT_STATUS_OK
WriteX 11820 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11820 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11820 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11820 1004 NT_STATUS_OK
WriteX 11820 0 57088 57088 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
Flush 11820 NT_STATUS_OK
Close 11817 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 11821 NT_STATUS_OK
SET_FILE_INFORMATION 11821 1004 NT_STATUS_OK
Close 11821 NT_STATUS_OK
SET_FILE_INFORMATION 11820 1004 NT_STATUS_OK
WriteX 11820 0 4096 4096 NT_STATUS_OK
Close 11820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 11822 NT_STATUS_OK
Close 11822 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11824 NT_STATUS_OK
ReadX 11824 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11824 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 11825 NT_STATUS_OK
WriteX 11825 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11825 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11825 1004 NT_STATUS_OK
WriteX 11825 0 51456 51456 NT_STATUS_OK
WriteX 11825 0 4096 4096 NT_STATUS_OK
Flush 11825 NT_STATUS_OK
SET_FILE_INFORMATION 11825 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11825 1004 NT_STATUS_OK
WriteX 11825 0 4096 4096 NT_STATUS_OK
Close 11825 NT_STATUS_OK
Close 11824 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 11827 NT_STATUS_OK
Close 11827 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11829 NT_STATUS_OK
ReadX 11829 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11829 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11831 NT_STATUS_OK
Close 11831 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 11834 NT_STATUS_OK
WriteX 11834 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11834 258 NT_STATUS_OK
WriteX 11834 0 53077 53077 NT_STATUS_OK
Close 11834 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 11835 NT_STATUS_OK
WriteX 11835 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11835 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 11835 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11835 1004 NT_STATUS_OK
WriteX 11835 0 65536 65536 NT_STATUS_OK
WriteX 11835 65536 1856 1856 NT_STATUS_OK
WriteX 11835 0 4096 4096 NT_STATUS_OK
Flush 11835 NT_STATUS_OK
SET_FILE_INFORMATION 11835 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11835 1004 NT_STATUS_OK
WriteX 11835 0 4096 4096 NT_STATUS_OK
Close 11835 NT_STATUS_OK
Close 11829 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 11837 NT_STATUS_OK
Close 11837 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11839 NT_STATUS_OK
ReadX 11839 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11841 NT_STATUS_OK
Close 11841 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 11844 NT_STATUS_OK
WriteX 11844 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11844 258 NT_STATUS_OK
WriteX 11844 0 7983 7983 NT_STATUS_OK
Close 11844 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11846 NT_STATUS_OK
Close 11846 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 11849 NT_STATUS_OK
WriteX 11849 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11849 258 NT_STATUS_OK
WriteX 11849 0 65536 65536 NT_STATUS_OK
WriteX 11849 65536 65536 65536 NT_STATUS_OK
WriteX 11849 131072 65536 65536 NT_STATUS_OK
WriteX 11849 196608 65536 65536 NT_STATUS_OK
WriteX 11849 262144 65536 65536 NT_STATUS_OK
WriteX 11849 327680 65536 65536 NT_STATUS_OK
WriteX 11849 393216 65536 65536 NT_STATUS_OK
WriteX 11849 458752 46731 46731 NT_STATUS_OK
Close 11849 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 11850 NT_STATUS_OK
WriteX 11850 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11839 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 11850 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11850 1004 NT_STATUS_OK
WriteX 11850 0 65536 65536 NT_STATUS_OK
WriteX 11850 65536 22848 22848 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Flush 11850 NT_STATUS_OK
SET_FILE_INFORMATION 11850 1004 NT_STATUS_OK
SET_FILE_INFORMATION 11850 1004 NT_STATUS_OK
WriteX 11850 0 4096 4096 NT_STATUS_OK
Close 11850 NT_STATUS_OK
Close 11839 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 11852 NT_STATUS_OK
Close 11852 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 11854 NT_STATUS_OK
ReadX 11854 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11854 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11855 NT_STATUS_OK
ReadX 11855 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11855 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 11855 1004 NT_STATUS_OK
ReadX 11855 8192 4096 4096 NT_STATUS_OK
ReadX 11855 12288 4096 4096 NT_STATUS_OK
ReadX 11855 16384 4096 4096 NT_STATUS_OK
ReadX 11855 20480 4096 4096 NT_STATUS_OK
ReadX 11855 24576 4096 4096 NT_STATUS_OK
ReadX 11855 28672 4096 4096 NT_STATUS_OK
ReadX 11855 32768 4096 4096 NT_STATUS_OK
ReadX 11855 36864 4096 4096 NT_STATUS_OK
ReadX 11855 40960 4096 4096 NT_STATUS_OK
ReadX 11855 45056 4096 4096 NT_STATUS_OK
ReadX 11855 49152 4096 4096 NT_STATUS_OK
ReadX 11855 53248 4096 4096 NT_STATUS_OK
ReadX 11855 57344 4096 4096 NT_STATUS_OK
ReadX 11855 61440 4096 4096 NT_STATUS_OK
ReadX 11855 65536 4096 4096 NT_STATUS_OK
ReadX 11855 69632 4096 4096 NT_STATUS_OK
ReadX 11855 73728 4096 4096 NT_STATUS_OK
ReadX 11855 77824 4096 4096 NT_STATUS_OK
ReadX 11855 81920 4096 4096 NT_STATUS_OK
ReadX 11855 86016 4096 4096 NT_STATUS_OK
ReadX 11855 90112 4096 4096 NT_STATUS_OK
ReadX 11855 94208 4096 4096 NT_STATUS_OK
ReadX 11855 98304 4096 4096 NT_STATUS_OK
ReadX 11855 102400 4096 4096 NT_STATUS_OK
ReadX 11855 106496 4096 4096 NT_STATUS_OK
ReadX 11855 110592 4096 4096 NT_STATUS_OK
ReadX 11855 114688 4096 4096 NT_STATUS_OK
ReadX 11855 118784 4096 4096 NT_STATUS_OK
ReadX 11855 122880 4096 4096 NT_STATUS_OK
ReadX 11855 126976 4096 4096 NT_STATUS_OK
ReadX 11855 131072 4096 4096 NT_STATUS_OK
ReadX 11855 135168 4096 4096 NT_STATUS_OK
ReadX 11855 139264 4096 4096 NT_STATUS_OK
ReadX 11855 143360 4096 4096 NT_STATUS_OK
ReadX 11855 147456 4096 4096 NT_STATUS_OK
ReadX 11855 151552 4096 4096 NT_STATUS_OK
ReadX 11855 155648 4096 4096 NT_STATUS_OK
ReadX 11855 159744 4096 4096 NT_STATUS_OK
ReadX 11855 163840 4096 4096 NT_STATUS_OK
ReadX 11855 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11855 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 11856 NT_STATUS_OK
Close 11856 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 11854 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 11858 NT_STATUS_OK
WriteX 11858 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11858 258 NT_STATUS_OK
Close 11855 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 11859 NT_STATUS_OK
SET_FILE_INFORMATION 11859 1004 NT_STATUS_OK
Close 11859 NT_STATUS_OK
WriteX 11858 0 42388 42388 NT_STATUS_OK
Close 11858 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 11860 NT_STATUS_OK
Close 11860 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11862 NT_STATUS_OK
ReadX 11862 0 4096 4096 NT_STATUS_OK
ReadX 11862 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 11863 NT_STATUS_OK
WriteX 11863 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11863 258 NT_STATUS_OK
SET_FILE_INFORMATION 11863 1004 NT_STATUS_OK
WriteX 11863 0 42652 42652 NT_STATUS_OK
Close 11863 NT_STATUS_OK
Close 11862 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 11865 NT_STATUS_OK
Close 11865 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 11867 NT_STATUS_OK
ReadX 11867 0 4096 4096 NT_STATUS_OK
ReadX 11867 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11869 NT_STATUS_OK
Close 11869 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 11872 NT_STATUS_OK
WriteX 11872 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11872 258 NT_STATUS_OK
WriteX 11872 0 65536 65536 NT_STATUS_OK
WriteX 11872 65536 49 49 NT_STATUS_OK
Close 11872 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11873 NT_STATUS_OK
ReadX 11873 0 61440 61440 NT_STATUS_OK
ReadX 11873 61440 4096 4096 NT_STATUS_OK
ReadX 11873 65536 61440 61440 NT_STATUS_OK
ReadX 11873 126976 4096 4096 NT_STATUS_OK
ReadX 11873 131072 61440 61440 NT_STATUS_OK
ReadX 11873 192512 4096 4096 NT_STATUS_OK
ReadX 11873 196608 61440 61440 NT_STATUS_OK
ReadX 11873 258048 4096 4096 NT_STATUS_OK
ReadX 11873 262144 61440 61440 NT_STATUS_OK
ReadX 11873 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11874 NT_STATUS_OK
ReadX 11874 0 61440 61440 NT_STATUS_OK
ReadX 11874 61440 4096 4096 NT_STATUS_OK
ReadX 11874 65536 61440 61440 NT_STATUS_OK
ReadX 11874 126976 4096 4096 NT_STATUS_OK
ReadX 11874 131072 61440 61440 NT_STATUS_OK
ReadX 11874 192512 4096 4096 NT_STATUS_OK
ReadX 11874 196608 61440 61440 NT_STATUS_OK
ReadX 11874 258048 4096 4096 NT_STATUS_OK
ReadX 11874 262144 61440 61440 NT_STATUS_OK
ReadX 11874 323584 4096 4096 NT_STATUS_OK
ReadX 11874 327680 61440 61440 NT_STATUS_OK
ReadX 11874 389120 4096 4096 NT_STATUS_OK
ReadX 11874 393216 61440 61440 NT_STATUS_OK
ReadX 11874 454656 4096 4096 NT_STATUS_OK
ReadX 11874 458752 61440 61440 NT_STATUS_OK
ReadX 11874 520192 4096 4096 NT_STATUS_OK
ReadX 11874 524288 61440 61440 NT_STATUS_OK
ReadX 11874 585728 4096 4096 NT_STATUS_OK
ReadX 11874 589824 61440 61440 NT_STATUS_OK
ReadX 11874 651264 4096 4096 NT_STATUS_OK
ReadX 11874 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11875 NT_STATUS_OK
ReadX 11875 0 61440 61440 NT_STATUS_OK
ReadX 11875 61440 4096 4096 NT_STATUS_OK
ReadX 11875 65536 61440 61440 NT_STATUS_OK
ReadX 11875 126976 4096 4096 NT_STATUS_OK
ReadX 11875 131072 61440 61440 NT_STATUS_OK
ReadX 11875 192512 4096 4096 NT_STATUS_OK
ReadX 11875 196608 61440 61440 NT_STATUS_OK
ReadX 11875 258048 4096 4096 NT_STATUS_OK
ReadX 11875 262144 61440 61440 NT_STATUS_OK
ReadX 11875 323584 4096 4096 NT_STATUS_OK
ReadX 11875 327680 61440 61440 NT_STATUS_OK
ReadX 11875 389120 4096 4096 NT_STATUS_OK
ReadX 11875 393216 61440 61440 NT_STATUS_OK
ReadX 11875 454656 4096 4096 NT_STATUS_OK
ReadX 11875 458752 61440 61440 NT_STATUS_OK
ReadX 11875 520192 4096 4096 NT_STATUS_OK
ReadX 11875 524288 61440 61440 NT_STATUS_OK
ReadX 11875 585728 4096 4096 NT_STATUS_OK
ReadX 11875 589824 61440 61440 NT_STATUS_OK
ReadX 11875 651264 4096 4096 NT_STATUS_OK
ReadX 11875 655360 61440 61440 NT_STATUS_OK
ReadX 11875 716800 4096 4096 NT_STATUS_OK
ReadX 11875 720896 61440 61440 NT_STATUS_OK
ReadX 11875 782336 4096 4096 NT_STATUS_OK
ReadX 11875 786432 61440 61440 NT_STATUS_OK
ReadX 11875 847872 4096 4096 NT_STATUS_OK
ReadX 11875 851968 61440 61440 NT_STATUS_OK
ReadX 11875 913408 4096 4096 NT_STATUS_OK
ReadX 11875 917504 61440 61440 NT_STATUS_OK
ReadX 11875 978944 4096 4096 NT_STATUS_OK
ReadX 11875 983040 61440 61440 NT_STATUS_OK
ReadX 11875 1044480 4096 4096 NT_STATUS_OK
ReadX 11875 1048576 61440 61440 NT_STATUS_OK
ReadX 11875 1110016 4096 4096 NT_STATUS_OK
ReadX 11875 1114112 61440 61440 NT_STATUS_OK
ReadX 11875 1175552 4096 4096 NT_STATUS_OK
ReadX 11875 1179648 61440 61440 NT_STATUS_OK
ReadX 11875 1241088 4096 4096 NT_STATUS_OK
ReadX 11875 1245184 61440 61440 NT_STATUS_OK
ReadX 11875 1306624 4096 4096 NT_STATUS_OK
ReadX 11875 1310720 61440 61440 NT_STATUS_OK
ReadX 11875 1372160 4096 4096 NT_STATUS_OK
ReadX 11875 1376256 61440 61440 NT_STATUS_OK
ReadX 11875 1437696 4096 4096 NT_STATUS_OK
ReadX 11875 1441792 61440 61440 NT_STATUS_OK
ReadX 11875 1503232 4096 4096 NT_STATUS_OK
ReadX 11875 1507328 61440 61440 NT_STATUS_OK
ReadX 11875 1568768 4096 4096 NT_STATUS_OK
ReadX 11875 1572864 61440 61440 NT_STATUS_OK
ReadX 11875 1634304 4096 4096 NT_STATUS_OK
ReadX 11875 1638400 61440 61440 NT_STATUS_OK
ReadX 11875 1699840 4096 4096 NT_STATUS_OK
ReadX 11875 1703936 61440 61440 NT_STATUS_OK
ReadX 11875 1765376 4096 4096 NT_STATUS_OK
ReadX 11875 1769472 61440 61440 NT_STATUS_OK
ReadX 11875 1830912 4096 4096 NT_STATUS_OK
ReadX 11875 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 11877 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11877 1005 NT_STATUS_OK
ReadX 11877 2156 24 24 NT_STATUS_OK
ReadX 11877 2139 276 276 NT_STATUS_OK
ReadX 11877 2136 14 14 NT_STATUS_OK
ReadX 11877 2136 7 7 NT_STATUS_OK
ReadX 11877 2138 12 12 NT_STATUS_OK
ReadX 11877 2137 8 8 NT_STATUS_OK
ReadX 11877 2135 15 15 NT_STATUS_OK
ReadX 11877 0 16 16 NT_STATUS_OK
ReadX 11877 16 2048 2048 NT_STATUS_OK
ReadX 11877 2064 2048 2048 NT_STATUS_OK
ReadX 11877 257 2048 2048 NT_STATUS_OK
ReadX 11877 385 2048 2048 NT_STATUS_OK
ReadX 11877 513 2048 2048 NT_STATUS_OK
ReadX 11877 641 2048 2048 NT_STATUS_OK
ReadX 11877 769 2048 2048 NT_STATUS_OK
ReadX 11877 897 2048 2048 NT_STATUS_OK
ReadX 11877 1025 2048 2048 NT_STATUS_OK
ReadX 11877 1153 2048 2048 NT_STATUS_OK
ReadX 11877 1281 2048 2048 NT_STATUS_OK
ReadX 11877 1409 2048 2048 NT_STATUS_OK
ReadX 11877 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 11879 NT_STATUS_OK
Close 11879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 11873 NT_STATUS_OK
Close 11874 NT_STATUS_OK
Close 11875 NT_STATUS_OK
Close 11867 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11882 NT_STATUS_OK
WriteX 11882 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11882 258 NT_STATUS_OK
WriteX 11882 0 10575 10575 NT_STATUS_OK
Flush 11882 NT_STATUS_OK
Close 11882 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11883 NT_STATUS_OK
Close 11883 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11885 NT_STATUS_OK
ReadX 11885 0 4096 4096 NT_STATUS_OK
Close 11877 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11886 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11887 NT_STATUS_OK
LockX 11887 2147483538 1 NT_STATUS_OK
UnlockX 11887 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 1005 NT_STATUS_OK
ReadX 11887 0 512 512 NT_STATUS_OK
ReadX 11887 512 512 512 NT_STATUS_OK
ReadX 11887 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11887 1004 NT_STATUS_OK
Close 11887 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11888 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1005 NT_STATUS_OK
ReadX 11888 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 11889 NT_STATUS_OK
LockX 11889 2147483538 1 NT_STATUS_OK
UnlockX 11889 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11889 1005 NT_STATUS_OK
ReadX 11889 0 512 512 NT_STATUS_OK
ReadX 11889 512 512 512 NT_STATUS_OK
ReadX 11889 1024 512 512 NT_STATUS_OK
ReadX 11889 288 20 20 NT_STATUS_OK
ReadX 11889 308 2084 2084 NT_STATUS_OK
ReadX 11889 388 2084 2084 NT_STATUS_OK
ReadX 11889 388 2084 2084 NT_STATUS_OK
ReadX 11876 2157 1386 1386 NT_STATUS_OK
ReadX 11889 2472 399 399 NT_STATUS_OK
ReadX 11889 3072 1536 1536 NT_STATUS_OK
ReadX 11889 544 149 149 NT_STATUS_OK
ReadX 11889 693 485 485 NT_STATUS_OK
Close 11889 NT_STATUS_OK
ReadX 11876 2157 4096 4096 NT_STATUS_OK
ReadX 11876 6253 4096 4096 NT_STATUS_OK
ReadX 11876 10349 4096 4096 NT_STATUS_OK
ReadX 11876 14445 4096 4096 NT_STATUS_OK
ReadX 11876 18541 4096 4096 NT_STATUS_OK
ReadX 11876 22637 256 256 NT_STATUS_OK
ReadX 11876 22893 4096 4096 NT_STATUS_OK
ReadX 11876 26989 4096 4096 NT_STATUS_OK
ReadX 11876 31085 4096 4096 NT_STATUS_OK
ReadX 11876 35181 4096 4096 NT_STATUS_OK
ReadX 11876 39277 4096 4096 NT_STATUS_OK
ReadX 11876 43373 4096 4096 NT_STATUS_OK
ReadX 11876 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11876 2157 1024 1024 NT_STATUS_OK
ReadX 11876 1667 4688 4688 NT_STATUS_OK
ReadX 11876 6355 3516 3516 NT_STATUS_OK
ReadX 11876 9871 16384 16384 NT_STATUS_OK
ReadX 11876 26255 3771 3771 NT_STATUS_OK
ReadX 11876 30026 2048 2048 NT_STATUS_OK
ReadX 11876 32074 1024 1024 NT_STATUS_OK
ReadX 11876 33098 6652 6652 NT_STATUS_OK
ReadX 11876 39750 16384 16384 NT_STATUS_OK
ReadX 11876 56134 10496 10496 NT_STATUS_OK
ReadX 11876 66630 1784 1784 NT_STATUS_OK
ReadX 11876 68414 90 90 NT_STATUS_OK
ReadX 11876 68504 273 273 NT_STATUS_OK
ReadX 11876 68777 1600 1600 NT_STATUS_OK
ReadX 11876 70377 640 640 NT_STATUS_OK
ReadX 11876 71017 1280 1280 NT_STATUS_OK
ReadX 11876 72297 8464 8464 NT_STATUS_OK
ReadX 11876 80761 158 158 NT_STATUS_OK
ReadX 11876 80919 912 912 NT_STATUS_OK
ReadX 11876 81831 1980 1980 NT_STATUS_OK
ReadX 11876 83811 2256 2256 NT_STATUS_OK
ReadX 11876 86067 400 400 NT_STATUS_OK
ReadX 11876 86467 252 252 NT_STATUS_OK
ReadX 11876 86719 42 42 NT_STATUS_OK
ReadX 11876 86761 725 725 NT_STATUS_OK
ReadX 11876 2009 512 512 NT_STATUS_OK
ReadX 11876 3895 9 9 NT_STATUS_OK
ReadX 11876 3781 46 46 NT_STATUS_OK
ReadX 11876 4059 92 92 NT_STATUS_OK
ReadX 11876 3781 92 92 NT_STATUS_OK
ReadX 11876 3986 184 184 NT_STATUS_OK
ReadX 11876 3987 16384 16384 NT_STATUS_OK
ReadX 11876 3902 16384 16384 NT_STATUS_OK
ReadX 11876 3781 10240 10240 NT_STATUS_OK
ReadX 11876 3821 16384 16384 NT_STATUS_OK
ReadX 11876 3891 935 935 NT_STATUS_OK
ReadX 11876 4060 10240 10240 NT_STATUS_OK
ReadX 11876 4059 184 184 NT_STATUS_OK
ReadX 11876 256 184 184 NT_STATUS_OK
ReadX 11876 256 1026 1026 NT_STATUS_OK
ReadX 11876 3901 326 326 NT_STATUS_OK
ReadX 11876 3899 652 652 NT_STATUS_OK
ReadX 11876 256 2 2 NT_STATUS_OK
ReadX 11876 258 4948 4948 NT_STATUS_OK
Close 11876 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11891 NT_STATUS_OK
Close 11891 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 11894 NT_STATUS_OK
WriteX 11894 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11894 258 NT_STATUS_OK
WriteX 11894 0 65536 65536 NT_STATUS_OK
WriteX 11894 65536 65536 65536 NT_STATUS_OK
WriteX 11894 131072 65536 65536 NT_STATUS_OK
WriteX 11894 196608 65536 65536 NT_STATUS_OK
WriteX 11894 262144 65536 65536 NT_STATUS_OK
WriteX 11894 327680 65536 65536 NT_STATUS_OK
WriteX 11894 393216 65536 65536 NT_STATUS_OK
WriteX 11894 458752 65536 65536 NT_STATUS_OK
WriteX 11894 524288 65536 65536 NT_STATUS_OK
WriteX 11894 589824 35257 35257 NT_STATUS_OK
Close 11894 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11896 NT_STATUS_OK
Close 11896 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 11899 NT_STATUS_OK
WriteX 11899 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11899 258 NT_STATUS_OK
WriteX 11899 0 65536 65536 NT_STATUS_OK
WriteX 11899 65536 65536 65536 NT_STATUS_OK
WriteX 11899 131072 65536 65536 NT_STATUS_OK
WriteX 11899 196608 65536 65536 NT_STATUS_OK
WriteX 11899 262144 65536 65536 NT_STATUS_OK
WriteX 11899 327680 65536 65536 NT_STATUS_OK
WriteX 11899 393216 65536 65536 NT_STATUS_OK
WriteX 11899 458752 65536 65536 NT_STATUS_OK
WriteX 11899 524288 65536 65536 NT_STATUS_OK
WriteX 11899 589824 57598 57598 NT_STATUS_OK
Close 11899 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11901 NT_STATUS_OK
WriteX 11901 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11901 258 NT_STATUS_OK
WriteX 11901 0 12543 12543 NT_STATUS_OK
Flush 11901 NT_STATUS_OK
Close 11901 NT_STATUS_OK
Close 11885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11903 NT_STATUS_OK
Close 11903 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 11905 NT_STATUS_OK
ReadX 11905 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11906 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 11907 NT_STATUS_OK
QUERY_FILE_INFORMATION 11907 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11907 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 11907 1005 NT_STATUS_OK
ReadX 11907 1938 24 24 NT_STATUS_OK
ReadX 11907 1920 276 276 NT_STATUS_OK
ReadX 11907 1918 14 14 NT_STATUS_OK
ReadX 11907 1918 7 7 NT_STATUS_OK
ReadX 11907 1919 12 12 NT_STATUS_OK
ReadX 11907 1919 8 8 NT_STATUS_OK
ReadX 11907 1917 15 15 NT_STATUS_OK
ReadX 11907 0 16 16 NT_STATUS_OK
ReadX 11907 16 2048 2048 NT_STATUS_OK
ReadX 11907 2064 2048 2048 NT_STATUS_OK
ReadX 11907 257 2048 2048 NT_STATUS_OK
ReadX 11907 385 2048 2048 NT_STATUS_OK
ReadX 11907 513 2048 2048 NT_STATUS_OK
ReadX 11907 641 2048 2048 NT_STATUS_OK
ReadX 11907 769 2048 2048 NT_STATUS_OK
ReadX 11907 897 2048 2048 NT_STATUS_OK
ReadX 11907 1025 2048 2048 NT_STATUS_OK
ReadX 11907 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 11909 NT_STATUS_OK
Close 11909 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11912 NT_STATUS_OK
WriteX 11912 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11912 258 NT_STATUS_OK
WriteX 11912 0 11588 11588 NT_STATUS_OK
Flush 11912 NT_STATUS_OK
Close 11912 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11913 NT_STATUS_OK
Close 11913 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11915 NT_STATUS_OK
ReadX 11915 0 4096 4096 NT_STATUS_OK
Close 11907 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11917 NT_STATUS_OK
WriteX 11917 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11917 258 NT_STATUS_OK
WriteX 11917 0 11615 11615 NT_STATUS_OK
Flush 11917 NT_STATUS_OK
Close 11917 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11915 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11919 NT_STATUS_OK
Close 11919 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11921 NT_STATUS_OK
ReadX 11921 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11923 NT_STATUS_OK
Close 11923 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 11926 NT_STATUS_OK
WriteX 11926 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11926 258 NT_STATUS_OK
WriteX 11926 0 65536 65536 NT_STATUS_OK
WriteX 11926 65536 16050 16050 NT_STATUS_OK
Close 11926 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11906 1939 64 64 NT_STATUS_OK
ReadX 11906 128 248 248 NT_STATUS_OK
ReadX 11906 128 568 568 NT_STATUS_OK
ReadX 11906 3872 1536 1536 NT_STATUS_OK
ReadX 11906 3456 2560 2560 NT_STATUS_OK
ReadX 11906 3136 512 512 NT_STATUS_OK
ReadX 11906 2880 4096 4096 NT_STATUS_OK
ReadX 11906 3264 3072 3072 NT_STATUS_OK
ReadX 11906 320 4096 4096 NT_STATUS_OK
ReadX 11906 1024 4096 4096 NT_STATUS_OK
ReadX 11906 3616 4096 4096 NT_STATUS_OK
ReadX 11906 1939 64 64 NT_STATUS_OK
ReadX 11906 128 248 248 NT_STATUS_OK
ReadX 11906 128 608 608 NT_STATUS_OK
ReadX 11906 2858 1024 1024 NT_STATUS_OK
ReadX 11906 2810 4096 4096 NT_STATUS_OK
ReadX 11906 2826 4096 4096 NT_STATUS_OK
ReadX 11906 2580 2048 2048 NT_STATUS_OK
ReadX 11906 2800 2560 2560 NT_STATUS_OK
ReadX 11906 2100 4096 4096 NT_STATUS_OK
ReadX 11906 2084 4096 4096 NT_STATUS_OK
ReadX 11906 868 4096 4096 NT_STATUS_OK
ReadX 11906 2324 4096 4096 NT_STATUS_OK
ReadX 11906 884 4096 4096 NT_STATUS_OK
ReadX 11906 2604 1024 1024 NT_STATUS_OK
ReadX 11906 580 4096 4096 NT_STATUS_OK
ReadX 11906 596 4096 4096 NT_STATUS_OK
ReadX 11906 2752 4096 4096 NT_STATUS_OK
ReadX 11906 2842 1024 1024 NT_STATUS_OK
ReadX 11906 660 4096 4096 NT_STATUS_OK
ReadX 11906 2720 4096 4096 NT_STATUS_OK
ReadX 11906 2736 4096 4096 NT_STATUS_OK
ReadX 11906 628 4096 4096 NT_STATUS_OK
ReadX 11906 2704 4096 4096 NT_STATUS_OK
ReadX 11906 1556 4096 4096 NT_STATUS_OK
ReadX 11906 576 4096 4096 NT_STATUS_OK
ReadX 11906 3168 1536 1536 NT_STATUS_OK
ReadX 11906 832 4096 4096 NT_STATUS_OK
ReadX 11906 1088 4096 4096 NT_STATUS_OK
ReadX 11906 1344 4096 4096 NT_STATUS_OK
ReadX 11906 1600 4096 4096 NT_STATUS_OK
ReadX 11906 1856 4096 4096 NT_STATUS_OK
ReadX 11906 2112 4096 4096 NT_STATUS_OK
ReadX 11906 1892 4096 4096 NT_STATUS_OK
ReadX 11906 820 4096 4096 NT_STATUS_OK
ReadX 11906 788 4096 4096 NT_STATUS_OK
ReadX 11906 1604 4096 4096 NT_STATUS_OK
ReadX 11906 3648 4096 4096 NT_STATUS_OK
ReadX 11906 2608 4096 4096 NT_STATUS_OK
ReadX 11906 548 4096 4096 NT_STATUS_OK
ReadX 11906 740 4096 4096 NT_STATUS_OK
ReadX 11906 1344 4096 4096 NT_STATUS_OK
ReadX 11906 3392 4096 4096 NT_STATUS_OK
ReadX 11906 3904 4096 4096 NT_STATUS_OK
ReadX 11906 644 4096 4096 NT_STATUS_OK
ReadX 11906 676 4096 4096 NT_STATUS_OK
ReadX 11906 2688 4096 4096 NT_STATUS_OK
ReadX 11906 320 4096 4096 NT_STATUS_OK
ReadX 11906 900 4096 4096 NT_STATUS_OK
ReadX 11906 1908 4096 4096 NT_STATUS_OK
ReadX 11906 852 4096 4096 NT_STATUS_OK
ReadX 11906 724 4096 4096 NT_STATUS_OK
ReadX 11906 2292 4096 4096 NT_STATUS_OK
ReadX 11906 612 4096 4096 NT_STATUS_OK
ReadX 11906 388 4096 4096 NT_STATUS_OK
ReadX 11906 2368 4096 4096 NT_STATUS_OK
ReadX 11906 2624 4096 4096 NT_STATUS_OK
ReadX 11906 500 4096 4096 NT_STATUS_OK
ReadX 11906 356 4096 4096 NT_STATUS_OK
ReadX 11906 1024 4096 4096 NT_STATUS_OK
ReadX 11906 576 4096 4096 NT_STATUS_OK
ReadX 11906 340 4096 4096 NT_STATUS_OK
ReadX 11906 420 4096 4096 NT_STATUS_OK
ReadX 11906 1600 4096 4096 NT_STATUS_OK
ReadX 11906 404 4096 4096 NT_STATUS_OK
ReadX 11906 1428 4096 4096 NT_STATUS_OK
ReadX 11906 2656 4096 4096 NT_STATUS_OK
ReadX 11906 2624 4096 4096 NT_STATUS_OK
ReadX 11906 452 4096 4096 NT_STATUS_OK
ReadX 11906 692 4096 4096 NT_STATUS_OK
ReadX 11906 564 4096 4096 NT_STATUS_OK
ReadX 11906 372 4096 4096 NT_STATUS_OK
ReadX 11906 468 4096 4096 NT_STATUS_OK
ReadX 11906 484 4096 4096 NT_STATUS_OK
ReadX 11906 1088 4096 4096 NT_STATUS_OK
ReadX 11906 1924 4096 4096 NT_STATUS_OK
ReadX 11906 2768 4096 4096 NT_STATUS_OK
ReadX 11906 832 4096 4096 NT_STATUS_OK
ReadX 11906 836 4096 4096 NT_STATUS_OK
ReadX 11906 1856 4096 4096 NT_STATUS_OK
ReadX 11906 2640 4096 4096 NT_STATUS_OK
ReadX 11906 436 4096 4096 NT_STATUS_OK
ReadX 11906 1828 4096 4096 NT_STATUS_OK
ReadX 11906 804 4096 4096 NT_STATUS_OK
ReadX 11906 1860 4096 4096 NT_STATUS_OK
ReadX 11906 1812 4096 4096 NT_STATUS_OK
ReadX 11906 756 4096 4096 NT_STATUS_OK
ReadX 11906 1636 4096 4096 NT_STATUS_OK
ReadX 11906 772 4096 4096 NT_STATUS_OK
ReadX 11906 2036 4096 4096 NT_STATUS_OK
ReadX 11906 1220 4096 4096 NT_STATUS_OK
ReadX 11906 1652 4096 4096 NT_STATUS_OK
ReadX 11906 2588 4096 4096 NT_STATUS_OK
ReadX 11906 916 4096 4096 NT_STATUS_OK
ReadX 11906 260 4096 4096 NT_STATUS_OK
ReadX 11906 932 4096 4096 NT_STATUS_OK
ReadX 11906 2624 4096 4096 NT_STATUS_OK
ReadX 11906 308 4096 4096 NT_STATUS_OK
ReadX 11906 292 4096 4096 NT_STATUS_OK
ReadX 11906 1140 4096 4096 NT_STATUS_OK
ReadX 11906 276 4096 4096 NT_STATUS_OK
ReadX 11906 2020 4096 4096 NT_STATUS_OK
ReadX 11906 2880 4096 4096 NT_STATUS_OK
ReadX 11906 516 4096 4096 NT_STATUS_OK
ReadX 11906 1844 4096 4096 NT_STATUS_OK
ReadX 11906 1124 4096 4096 NT_STATUS_OK
ReadX 11906 3136 4096 4096 NT_STATUS_OK
ReadX 11906 324 4096 4096 NT_STATUS_OK
ReadX 11906 1156 4096 4096 NT_STATUS_OK
ReadX 11906 1172 4096 4096 NT_STATUS_OK
ReadX 11906 2112 4096 4096 NT_STATUS_OK
ReadX 11906 2368 4096 4096 NT_STATUS_OK
ReadX 11906 964 4096 4096 NT_STATUS_OK
ReadX 11906 980 4096 4096 NT_STATUS_OK
ReadX 11906 1012 4096 4096 NT_STATUS_OK
ReadX 11906 532 4096 4096 NT_STATUS_OK
ReadX 11906 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 11906 1620 4096 4096 NT_STATUS_OK
ReadX 11906 1604 4096 4096 NT_STATUS_OK
ReadX 11906 2116 4096 4096 NT_STATUS_OK
ReadX 11906 2132 4096 4096 NT_STATUS_OK
ReadX 11906 2148 4096 4096 NT_STATUS_OK
ReadX 11906 2276 4096 4096 NT_STATUS_OK
ReadX 11906 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11928 NT_STATUS_OK
Close 11928 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 11931 NT_STATUS_OK
QUERY_FILE_INFORMATION 11886 1004 NT_STATUS_OK
Close 11886 NT_STATUS_OK
WriteX 11931 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11931 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 11888 1004 NT_STATUS_OK
Close 11888 NT_STATUS_OK
WriteX 11931 0 65536 65536 NT_STATUS_OK
WriteX 11931 65536 64850 64850 NT_STATUS_OK
Close 11931 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 11933 NT_STATUS_OK
WriteX 11933 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11933 258 NT_STATUS_OK
ReadX 11906 2068 4096 4096 NT_STATUS_OK
ReadX 11906 1588 4096 4096 NT_STATUS_OK
ReadX 11906 1572 4096 4096 NT_STATUS_OK
WriteX 11933 0 18630 18630 NT_STATUS_OK
Flush 11933 NT_STATUS_OK
Close 11933 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 11921 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 11935 NT_STATUS_OK
Close 11935 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 11937 NT_STATUS_OK
ReadX 11937 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11906 612 4096 4096 NT_STATUS_OK
ReadX 11906 564 4096 4096 NT_STATUS_OK
ReadX 11906 1876 4096 4096 NT_STATUS_OK
ReadX 11906 628 4096 4096 NT_STATUS_OK
ReadX 11906 740 4096 4096 NT_STATUS_OK
ReadX 11906 724 4096 4096 NT_STATUS_OK
ReadX 11906 644 4096 4096 NT_STATUS_OK
ReadX 11906 2324 4096 4096 NT_STATUS_OK
ReadX 11906 660 4096 4096 NT_STATUS_OK
ReadX 11906 852 4096 4096 NT_STATUS_OK
ReadX 11906 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 11906 2368 4096 4096 NT_STATUS_OK
ReadX 11906 1024 4096 4096 NT_STATUS_OK
ReadX 11906 320 4096 4096 NT_STATUS_OK
ReadX 11906 580 4096 4096 NT_STATUS_OK
ReadX 11906 3136 512 512 NT_STATUS_OK
ReadX 11906 2880 4096 4096 NT_STATUS_OK
Close 11906 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11938 NT_STATUS_OK
ReadX 11938 61440 4096 4096 NT_STATUS_OK
ReadX 11938 126976 4096 4096 NT_STATUS_OK
WriteX 11938 0 65536 65536 NT_STATUS_OK
WriteX 11938 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11939 NT_STATUS_OK
ReadX 11939 61440 4096 4096 NT_STATUS_OK
ReadX 11939 126976 4096 4096 NT_STATUS_OK
ReadX 11939 192512 4096 4096 NT_STATUS_OK
ReadX 11939 258048 4096 4096 NT_STATUS_OK
WriteX 11939 0 65536 65536 NT_STATUS_OK
WriteX 11939 65536 65536 65536 NT_STATUS_OK
WriteX 11939 131072 65536 65536 NT_STATUS_OK
WriteX 11939 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11940 NT_STATUS_OK
ReadX 11940 61440 4096 4096 NT_STATUS_OK
ReadX 11940 126976 4096 4096 NT_STATUS_OK
ReadX 11940 192512 4096 4096 NT_STATUS_OK
ReadX 11940 258048 4096 4096 NT_STATUS_OK
ReadX 11940 323584 4096 4096 NT_STATUS_OK
ReadX 11940 389120 4096 4096 NT_STATUS_OK
ReadX 11940 454656 4096 4096 NT_STATUS_OK
ReadX 11940 520192 4096 4096 NT_STATUS_OK
WriteX 11940 0 65536 65536 NT_STATUS_OK
WriteX 11940 65536 65536 65536 NT_STATUS_OK
WriteX 11940 131072 65536 65536 NT_STATUS_OK
WriteX 11940 196608 65536 65536 NT_STATUS_OK
WriteX 11940 262144 65536 65536 NT_STATUS_OK
WriteX 11940 327680 65536 65536 NT_STATUS_OK
WriteX 11940 393216 65536 65536 NT_STATUS_OK
WriteX 11940 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 11941 NT_STATUS_OK
ReadX 11941 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 11942 NT_STATUS_OK
Close 11942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 11943 NT_STATUS_OK
WriteX 11943 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11943 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11941 0 8192 8192 NT_STATUS_OK
Flush 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 11941 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11941 0 8192 8192 NT_STATUS_OK
Flush 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11941 0 8192 8192 NT_STATUS_OK
Flush 11941 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 11941 0 8192 8192 NT_STATUS_OK
Flush 11941 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11945 NT_STATUS_OK
Close 11945 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 11937 NT_STATUS_OK
Close 11905 NT_STATUS_OK
Close 11938 NT_STATUS_OK
Close 11939 NT_STATUS_OK
Close 11940 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 11948 NT_STATUS_OK
WriteX 11948 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11948 258 NT_STATUS_OK
WriteX 11948 0 62591 62591 NT_STATUS_OK
Close 11948 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11950 NT_STATUS_OK
Close 11950 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 11953 NT_STATUS_OK
WriteX 11953 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11953 258 NT_STATUS_OK
WriteX 11953 0 10845 10845 NT_STATUS_OK
Close 11953 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11955 NT_STATUS_OK
Close 11955 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 11958 NT_STATUS_OK
WriteX 11958 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11958 258 NT_STATUS_OK
WriteX 11958 0 30118 30118 NT_STATUS_OK
Close 11958 NT_STATUS_OK
WriteX 11941 0 4096 4096 NT_STATUS_OK
WriteX 11943 0 64 64 NT_STATUS_OK
Close 11943 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 11941 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 11960 NT_STATUS_OK
ReadX 11960 0 61440 61440 NT_STATUS_OK
ReadX 11960 61440 4096 4096 NT_STATUS_OK
ReadX 11960 65536 61440 61440 NT_STATUS_OK
ReadX 11960 126976 4096 4096 NT_STATUS_OK
ReadX 11960 131072 61440 61440 NT_STATUS_OK
ReadX 11960 192512 4096 4096 NT_STATUS_OK
ReadX 11960 196608 61440 61440 NT_STATUS_OK
ReadX 11960 258048 4096 4096 NT_STATUS_OK
ReadX 11960 262144 61440 61440 NT_STATUS_OK
ReadX 11960 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 11961 NT_STATUS_OK
ReadX 11961 0 61440 61440 NT_STATUS_OK
ReadX 11961 61440 4096 4096 NT_STATUS_OK
ReadX 11961 65536 61440 61440 NT_STATUS_OK
ReadX 11961 126976 4096 4096 NT_STATUS_OK
ReadX 11961 131072 61440 61440 NT_STATUS_OK
ReadX 11961 192512 4096 4096 NT_STATUS_OK
ReadX 11961 196608 61440 61440 NT_STATUS_OK
ReadX 11961 258048 4096 4096 NT_STATUS_OK
ReadX 11961 262144 61440 61440 NT_STATUS_OK
ReadX 11961 323584 4096 4096 NT_STATUS_OK
ReadX 11961 327680 61440 61440 NT_STATUS_OK
ReadX 11961 389120 4096 4096 NT_STATUS_OK
ReadX 11961 393216 61440 61440 NT_STATUS_OK
ReadX 11961 454656 4096 4096 NT_STATUS_OK
ReadX 11961 458752 61440 61440 NT_STATUS_OK
ReadX 11961 520192 4096 4096 NT_STATUS_OK
ReadX 11961 524288 61440 61440 NT_STATUS_OK
ReadX 11961 585728 4096 4096 NT_STATUS_OK
ReadX 11961 589824 61440 61440 NT_STATUS_OK
ReadX 11961 651264 4096 4096 NT_STATUS_OK
ReadX 11961 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 11962 NT_STATUS_OK
ReadX 11962 0 61440 61440 NT_STATUS_OK
ReadX 11962 61440 4096 4096 NT_STATUS_OK
ReadX 11962 65536 61440 61440 NT_STATUS_OK
ReadX 11962 126976 4096 4096 NT_STATUS_OK
ReadX 11962 131072 61440 61440 NT_STATUS_OK
ReadX 11962 192512 4096 4096 NT_STATUS_OK
ReadX 11962 196608 61440 61440 NT_STATUS_OK
ReadX 11962 258048 4096 4096 NT_STATUS_OK
ReadX 11962 262144 61440 61440 NT_STATUS_OK
ReadX 11962 323584 4096 4096 NT_STATUS_OK
ReadX 11962 327680 61440 61440 NT_STATUS_OK
ReadX 11962 389120 4096 4096 NT_STATUS_OK
ReadX 11962 393216 61440 61440 NT_STATUS_OK
ReadX 11962 454656 4096 4096 NT_STATUS_OK
ReadX 11962 458752 61440 61440 NT_STATUS_OK
ReadX 11962 520192 4096 4096 NT_STATUS_OK
ReadX 11962 524288 61440 61440 NT_STATUS_OK
ReadX 11962 585728 4096 4096 NT_STATUS_OK
ReadX 11962 589824 61440 61440 NT_STATUS_OK
ReadX 11962 651264 4096 4096 NT_STATUS_OK
ReadX 11962 655360 61440 61440 NT_STATUS_OK
ReadX 11962 716800 4096 4096 NT_STATUS_OK
ReadX 11962 720896 61440 61440 NT_STATUS_OK
ReadX 11962 782336 4096 4096 NT_STATUS_OK
ReadX 11962 786432 61440 61440 NT_STATUS_OK
ReadX 11962 847872 4096 4096 NT_STATUS_OK
ReadX 11962 851968 61440 61440 NT_STATUS_OK
ReadX 11962 913408 4096 4096 NT_STATUS_OK
ReadX 11962 917504 61440 61440 NT_STATUS_OK
ReadX 11962 978944 4096 4096 NT_STATUS_OK
ReadX 11962 983040 61440 61440 NT_STATUS_OK
ReadX 11962 1044480 4096 4096 NT_STATUS_OK
ReadX 11962 1048576 61440 61440 NT_STATUS_OK
ReadX 11962 1110016 4096 4096 NT_STATUS_OK
ReadX 11962 1114112 61440 61440 NT_STATUS_OK
ReadX 11962 1175552 4096 4096 NT_STATUS_OK
ReadX 11962 1179648 61440 61440 NT_STATUS_OK
ReadX 11962 1241088 4096 4096 NT_STATUS_OK
ReadX 11962 1245184 61440 61440 NT_STATUS_OK
ReadX 11962 1306624 4096 4096 NT_STATUS_OK
ReadX 11962 1310720 61440 61440 NT_STATUS_OK
ReadX 11962 1372160 4096 4096 NT_STATUS_OK
ReadX 11962 1376256 61440 61440 NT_STATUS_OK
ReadX 11962 1437696 4096 4096 NT_STATUS_OK
ReadX 11962 1441792 61440 61440 NT_STATUS_OK
ReadX 11962 1503232 4096 4096 NT_STATUS_OK
ReadX 11962 1507328 61440 61440 NT_STATUS_OK
ReadX 11962 1568768 4096 4096 NT_STATUS_OK
ReadX 11962 1572864 61440 61440 NT_STATUS_OK
ReadX 11962 1634304 4096 4096 NT_STATUS_OK
ReadX 11962 1638400 61440 61440 NT_STATUS_OK
ReadX 11962 1699840 4096 4096 NT_STATUS_OK
ReadX 11962 1703936 61440 61440 NT_STATUS_OK
ReadX 11962 1765376 4096 4096 NT_STATUS_OK
ReadX 11962 1769472 61440 61440 NT_STATUS_OK
ReadX 11962 1830912 4096 4096 NT_STATUS_OK
ReadX 11962 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11963 NT_STATUS_OK
Close 11963 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11960 NT_STATUS_OK
Close 11961 NT_STATUS_OK
Close 11962 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 11965 NT_STATUS_OK
ReadX 11965 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 11966 NT_STATUS_OK
ReadX 11966 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 11967 NT_STATUS_OK
ReadX 11967 0 4096 4096 NT_STATUS_OK
ReadX 11967 4096 4096 4096 NT_STATUS_OK
ReadX 11967 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11968 NT_STATUS_OK
Close 11968 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11965 NT_STATUS_OK
Close 11966 NT_STATUS_OK
Close 11967 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11970 NT_STATUS_OK
ReadX 11970 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11971 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11971 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11972 NT_STATUS_OK
Close 11972 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11970 NT_STATUS_OK
Close 11971 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 11974 NT_STATUS_OK
ReadX 11974 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 11975 NT_STATUS_OK
ReadX 11975 0 8192 8192 NT_STATUS_OK
ReadX 11975 8192 8192 8192 NT_STATUS_OK
ReadX 11975 16384 8192 8192 NT_STATUS_OK
ReadX 11975 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11977 NT_STATUS_OK
Close 11977 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11975 NT_STATUS_OK
Close 11974 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11980 NT_STATUS_OK
WriteX 11980 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11980 258 NT_STATUS_OK
WriteX 11980 0 10438 10438 NT_STATUS_OK
Close 11980 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11981 NT_STATUS_OK
Close 11981 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 11982 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11983 NT_STATUS_OK
Close 11983 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 11984 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11985 NT_STATUS_OK
Close 11985 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 11986 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11987 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 11987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11988 NT_STATUS_OK
Close 11988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 11989 NT_STATUS_OK
ReadX 11989 0 4096 4096 NT_STATUS_OK
ReadX 11989 4096 4096 4096 NT_STATUS_OK
ReadX 11989 8192 4096 4096 NT_STATUS_OK
ReadX 11989 12288 8192 8192 NT_STATUS_OK
ReadX 11989 20480 8192 8192 NT_STATUS_OK
ReadX 11989 28672 8192 8192 NT_STATUS_OK
ReadX 11989 36864 8192 8192 NT_STATUS_OK
ReadX 11989 45056 8192 8192 NT_STATUS_OK
ReadX 11989 53248 8192 8192 NT_STATUS_OK
ReadX 11989 61440 8192 8192 NT_STATUS_OK
ReadX 11989 69632 8192 8192 NT_STATUS_OK
ReadX 11989 77824 8192 8192 NT_STATUS_OK
ReadX 11989 86016 8192 8192 NT_STATUS_OK
ReadX 11989 94208 8192 8192 NT_STATUS_OK
ReadX 11989 102400 8192 8192 NT_STATUS_OK
ReadX 11989 110592 8192 8192 NT_STATUS_OK
ReadX 11989 118784 8192 8192 NT_STATUS_OK
ReadX 11989 126976 8192 8192 NT_STATUS_OK
ReadX 11989 135168 8192 8192 NT_STATUS_OK
ReadX 11989 143360 8192 8192 NT_STATUS_OK
ReadX 11989 151552 8192 8192 NT_STATUS_OK
ReadX 11989 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 11990 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 11989 NT_STATUS_OK
Close 11982 NT_STATUS_OK
Close 11984 NT_STATUS_OK
Close 11986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 11991 NT_STATUS_OK
Close 11991 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 11994 NT_STATUS_OK
WriteX 11994 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 11994 258 NT_STATUS_OK
WriteX 11994 0 28489 28489 NT_STATUS_OK
Close 11994 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 11995 NT_STATUS_OK
Close 11995 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 11997 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 11997 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 11998 NT_STATUS_OK
Close 11998 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 11997 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12000 NT_STATUS_OK
ReadX 12000 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12001 NT_STATUS_OK
ReadX 12001 0 8192 8192 NT_STATUS_OK
ReadX 12001 8192 8192 8192 NT_STATUS_OK
ReadX 12001 16384 8192 8192 NT_STATUS_OK
ReadX 12001 24576 8192 8192 NT_STATUS_OK
ReadX 12001 32768 16384 16384 NT_STATUS_OK
ReadX 12001 49152 8192 8192 NT_STATUS_OK
ReadX 12001 57344 8192 8192 NT_STATUS_OK
ReadX 12001 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12003 NT_STATUS_OK
Close 12003 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12001 NT_STATUS_OK
Close 12000 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12006 NT_STATUS_OK
WriteX 12006 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12006 258 NT_STATUS_OK
WriteX 12006 0 29253 29253 NT_STATUS_OK
Close 12006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12007 NT_STATUS_OK
Close 12007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12008 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12009 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12010 NT_STATUS_OK
Close 12010 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12013 NT_STATUS_OK
WriteX 12013 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12013 258 NT_STATUS_OK
WriteX 12013 0 30183 30183 NT_STATUS_OK
Close 12013 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12014 NT_STATUS_OK
Close 12014 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12016 NT_STATUS_OK
WriteX 12016 0 510 510 NT_STATUS_OK
WriteX 12016 510 512 512 NT_STATUS_OK
WriteX 12016 1022 510 510 NT_STATUS_OK
WriteX 12016 1532 510 510 NT_STATUS_OK
WriteX 12016 2042 168 168 NT_STATUS_OK
Close 12016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12017 NT_STATUS_OK
Close 12017 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12019 NT_STATUS_OK
ReadX 12019 0 4096 4096 NT_STATUS_OK
WriteX 12019 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12020 NT_STATUS_OK
ReadX 12020 61440 4096 4096 NT_STATUS_OK
ReadX 12020 126976 4096 4096 NT_STATUS_OK
WriteX 12020 0 65536 65536 NT_STATUS_OK
WriteX 12020 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12021 NT_STATUS_OK
ReadX 12021 61440 4096 4096 NT_STATUS_OK
ReadX 12021 126976 4096 4096 NT_STATUS_OK
ReadX 12021 192512 4096 4096 NT_STATUS_OK
ReadX 12021 258048 4096 4096 NT_STATUS_OK
WriteX 12021 0 65536 65536 NT_STATUS_OK
WriteX 12021 65536 65536 65536 NT_STATUS_OK
WriteX 12021 131072 65536 65536 NT_STATUS_OK
WriteX 12021 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12022 NT_STATUS_OK
ReadX 12022 61440 4096 4096 NT_STATUS_OK
ReadX 12022 126976 4096 4096 NT_STATUS_OK
ReadX 12022 192512 4096 4096 NT_STATUS_OK
ReadX 12022 258048 4096 4096 NT_STATUS_OK
ReadX 12022 323584 4096 4096 NT_STATUS_OK
ReadX 12022 389120 4096 4096 NT_STATUS_OK
ReadX 12022 454656 4096 4096 NT_STATUS_OK
ReadX 12022 520192 4096 4096 NT_STATUS_OK
WriteX 12022 0 65536 65536 NT_STATUS_OK
WriteX 12022 65536 65536 65536 NT_STATUS_OK
WriteX 12022 131072 65536 65536 NT_STATUS_OK
WriteX 12022 196608 65536 65536 NT_STATUS_OK
WriteX 12022 262144 65536 65536 NT_STATUS_OK
WriteX 12022 327680 65536 65536 NT_STATUS_OK
WriteX 12022 393216 65536 65536 NT_STATUS_OK
WriteX 12022 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12023 NT_STATUS_OK
Close 12023 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12019 NT_STATUS_OK
Close 12020 NT_STATUS_OK
Close 12021 NT_STATUS_OK
Close 12022 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12025 NT_STATUS_OK
Close 12025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12029 NT_STATUS_OK
Close 12029 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12032 NT_STATUS_OK
Close 12032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12034 NT_STATUS_OK
Close 12034 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12038 NT_STATUS_OK
Close 12038 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12041 NT_STATUS_OK
Close 12041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12043 NT_STATUS_OK
Close 12043 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12047 NT_STATUS_OK
Close 12047 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12052 NT_STATUS_OK
Close 12052 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12057 NT_STATUS_OK
Close 12057 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12062 NT_STATUS_OK
Close 12062 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12067 NT_STATUS_OK
Close 12067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12072 NT_STATUS_OK
Close 12072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12077 NT_STATUS_OK
Close 12077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12082 NT_STATUS_OK
Close 12082 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12085 NT_STATUS_OK
Close 12085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12088 NT_STATUS_OK
Close 12088 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12091 NT_STATUS_OK
WriteX 12091 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12091 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12091 0 65536 65536 NT_STATUS_OK
WriteX 12091 65536 65536 65536 NT_STATUS_OK
WriteX 12091 131072 65536 65536 NT_STATUS_OK
WriteX 12091 196608 65536 65536 NT_STATUS_OK
WriteX 12091 262144 26634 26634 NT_STATUS_OK
Close 12091 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12096 NT_STATUS_OK
Close 12096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12097 NT_STATUS_OK
Close 12097 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12098 NT_STATUS_OK
ReadX 12098 0 4096 4096 NT_STATUS_OK
Close 12098 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12099 NT_STATUS_OK
ReadX 12099 0 4096 4096 NT_STATUS_OK
ReadX 12099 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12100 NT_STATUS_OK
Close 12100 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12099 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12104 NT_STATUS_OK
Close 12104 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12107 NT_STATUS_OK
Close 12107 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12109 NT_STATUS_OK
Close 12109 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12113 NT_STATUS_OK
Close 12113 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12116 NT_STATUS_OK
Close 12116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12118 NT_STATUS_OK
Close 12118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12122 NT_STATUS_OK
Close 12122 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12127 NT_STATUS_OK
Close 12127 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12132 NT_STATUS_OK
Close 12132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12137 NT_STATUS_OK
Close 12137 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12142 NT_STATUS_OK
Close 12142 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12147 NT_STATUS_OK
Close 12147 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12151 NT_STATUS_OK
Close 12151 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12156 NT_STATUS_OK
Close 12156 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12161 NT_STATUS_OK
Close 12161 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12164 NT_STATUS_OK
Close 12164 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12166 NT_STATUS_OK
Close 12166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12176 NT_STATUS_OK
Close 12176 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12177 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12178 NT_STATUS_OK
ReadX 12178 0 4096 4096 NT_STATUS_OK
Close 12178 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12179 NT_STATUS_OK
ReadX 12179 0 4096 4096 NT_STATUS_OK
Close 12179 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12180 NT_STATUS_OK
ReadX 12180 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12190 NT_STATUS_OK
Close 12190 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12191 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12191 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12192 NT_STATUS_OK
ReadX 12192 0 4096 4096 NT_STATUS_OK
Close 12192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12193 NT_STATUS_OK
ReadX 12193 0 4096 4096 NT_STATUS_OK
Close 12193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12194 NT_STATUS_OK
ReadX 12194 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12180 NT_STATUS_OK
Close 12194 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12223 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12223 0 4096 4096 NT_STATUS_OK
Close 12223 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12224 NT_STATUS_OK
ReadX 12224 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12224 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12225 NT_STATUS_OK
ReadX 12225 0 4096 4096 NT_STATUS_OK
ReadX 12225 4096 4096 4096 NT_STATUS_OK
ReadX 12225 8192 4096 4096 NT_STATUS_OK
ReadX 12225 12288 4096 4096 NT_STATUS_OK
ReadX 12225 16384 4096 4096 NT_STATUS_OK
ReadX 12225 20480 4096 4096 NT_STATUS_OK
ReadX 12225 24576 4096 4096 NT_STATUS_OK
ReadX 12225 28672 4096 4096 NT_STATUS_OK
ReadX 12225 32768 4096 4096 NT_STATUS_OK
ReadX 12225 36864 4096 4096 NT_STATUS_OK
ReadX 12225 40960 4096 4096 NT_STATUS_OK
ReadX 12225 45056 4096 4096 NT_STATUS_OK
ReadX 12225 49152 4096 4096 NT_STATUS_OK
ReadX 12225 53248 4096 4096 NT_STATUS_OK
ReadX 12225 57344 4096 4096 NT_STATUS_OK
ReadX 12225 61440 4096 4096 NT_STATUS_OK
ReadX 12225 65536 4096 4096 NT_STATUS_OK
ReadX 12225 69632 4096 4096 NT_STATUS_OK
ReadX 12225 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12225 1004 NT_STATUS_OK
WriteX 12225 0 4096 4096 NT_STATUS_OK
Close 12225 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12226 NT_STATUS_OK
SET_FILE_INFORMATION 12226 1004 NT_STATUS_OK
Close 12226 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12227 NT_STATUS_OK
ReadX 12227 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12228 NT_STATUS_OK
Close 12228 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12231 NT_STATUS_OK
WriteX 12231 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12231 258 NT_STATUS_OK
WriteX 12231 0 65536 65536 NT_STATUS_OK
WriteX 12231 65536 19979 19979 NT_STATUS_OK
Close 12231 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12232 NT_STATUS_OK
ReadX 12232 0 4096 4096 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
QUERY_FILE_INFORMATION 12232 1004 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
SET_FILE_INFORMATION 12232 1004 NT_STATUS_OK
WriteX 12232 0 4096 4096 NT_STATUS_OK
Flush 12232 NT_STATUS_OK
Close 12232 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12233 NT_STATUS_OK
ReadX 12233 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12234 NT_STATUS_OK
ReadX 12234 0 4096 4096 NT_STATUS_OK
Close 12233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12235 NT_STATUS_OK
ReadX 12235 0 4096 4096 NT_STATUS_OK
Close 12235 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12236 NT_STATUS_OK
ReadX 12236 0 4096 4096 NT_STATUS_OK
Close 12236 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12237 NT_STATUS_OK
ReadX 12237 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12237 1004 NT_STATUS_OK
WriteX 12237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 12238 NT_STATUS_OK
Close 12238 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12234 NT_STATUS_OK
Close 12237 NT_STATUS_OK
Close 12227 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12240 NT_STATUS_OK
Close 12240 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12243 NT_STATUS_OK
WriteX 12243 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12243 258 NT_STATUS_OK
WriteX 12243 0 65536 65536 NT_STATUS_OK
WriteX 12243 65536 17654 17654 NT_STATUS_OK
Close 12243 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12244 NT_STATUS_OK
ReadX 12244 0 4096 4096 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
QUERY_FILE_INFORMATION 12244 1004 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
SET_FILE_INFORMATION 12244 1004 NT_STATUS_OK
WriteX 12244 0 4096 4096 NT_STATUS_OK
Flush 12244 NT_STATUS_OK
Close 12244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12245 NT_STATUS_OK
SET_FILE_INFORMATION 12245 1004 NT_STATUS_OK
Close 12245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12246 NT_STATUS_OK
ReadX 12246 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 12247 NT_STATUS_OK
Close 12247 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 12249 NT_STATUS_OK
ReadX 12249 0 4096 4096 NT_STATUS_OK
ReadX 12249 4096 4096 4096 NT_STATUS_OK
ReadX 12249 8192 4096 4096 NT_STATUS_OK
ReadX 12249 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12249 16384 4096 4096 NT_STATUS_OK
ReadX 12249 20480 4096 4096 NT_STATUS_OK
ReadX 12249 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12250 NT_STATUS_OK
ReadX 12250 0 4096 4096 NT_STATUS_OK
Close 12250 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12251 NT_STATUS_OK
ReadX 12251 0 4096 4096 NT_STATUS_OK
Close 12251 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12252 NT_STATUS_OK
ReadX 12252 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12252 1004 NT_STATUS_OK
WriteX 12252 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 12253 NT_STATUS_OK
Close 12253 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 12252 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 12255 NT_STATUS_OK
Close 12255 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12258 NT_STATUS_OK
WriteX 12258 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12258 258 NT_STATUS_OK
WriteX 12258 0 65536 65536 NT_STATUS_OK
WriteX 12258 65536 19490 19490 NT_STATUS_OK
Close 12258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12259 NT_STATUS_OK
ReadX 12259 0 4096 4096 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
QUERY_FILE_INFORMATION 12259 1004 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
SET_FILE_INFORMATION 12259 1004 NT_STATUS_OK
WriteX 12259 0 4096 4096 NT_STATUS_OK
Flush 12259 NT_STATUS_OK
Close 12259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12260 NT_STATUS_OK
SET_FILE_INFORMATION 12260 1004 NT_STATUS_OK
Close 12260 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12261 NT_STATUS_OK
ReadX 12261 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 12262 NT_STATUS_OK
Close 12262 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12264 0 4096 4096 NT_STATUS_OK
Close 12264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12265 NT_STATUS_OK
ReadX 12265 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12266 NT_STATUS_OK
ReadX 12266 0 4096 4096 NT_STATUS_OK
ReadX 12266 4096 4096 4096 NT_STATUS_OK
ReadX 12266 8192 4096 4096 NT_STATUS_OK
ReadX 12266 12288 4096 4096 NT_STATUS_OK
ReadX 12266 16384 4096 4096 NT_STATUS_OK
ReadX 12266 20480 4096 4096 NT_STATUS_OK
ReadX 12266 24576 4096 4096 NT_STATUS_OK
ReadX 12266 28672 4096 4096 NT_STATUS_OK
ReadX 12266 32768 4096 4096 NT_STATUS_OK
ReadX 12266 36864 4096 4096 NT_STATUS_OK
ReadX 12266 40960 4096 4096 NT_STATUS_OK
ReadX 12266 45056 4096 4096 NT_STATUS_OK
ReadX 12266 49152 4096 4096 NT_STATUS_OK
ReadX 12266 53248 4096 4096 NT_STATUS_OK
ReadX 12266 57344 4096 4096 NT_STATUS_OK
ReadX 12266 61440 4096 4096 NT_STATUS_OK
ReadX 12266 65536 4096 4096 NT_STATUS_OK
ReadX 12266 69632 4096 4096 NT_STATUS_OK
ReadX 12266 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12266 1004 NT_STATUS_OK
WriteX 12266 0 4096 4096 NT_STATUS_OK
Close 12266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12267 NT_STATUS_OK
SET_FILE_INFORMATION 12267 1004 NT_STATUS_OK
Close 12267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 12268 NT_STATUS_OK
ReadX 12268 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12269 NT_STATUS_OK
Close 12269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 12261 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12272 NT_STATUS_OK
WriteX 12272 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12272 258 NT_STATUS_OK
WriteX 12272 0 65536 65536 NT_STATUS_OK
WriteX 12272 65536 8866 8866 NT_STATUS_OK
Close 12272 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12273 NT_STATUS_OK
ReadX 12273 0 4096 4096 NT_STATUS_OK
WriteX 12273 0 4096 4096 NT_STATUS_OK
Flush 12273 NT_STATUS_OK
SET_FILE_INFORMATION 12273 1004 NT_STATUS_OK
WriteX 12273 0 4096 4096 NT_STATUS_OK
Flush 12273 NT_STATUS_OK
Close 12273 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12274 NT_STATUS_OK
ReadX 12274 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12274 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12275 NT_STATUS_OK
ReadX 12275 0 4096 4096 NT_STATUS_OK
Close 12275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12276 NT_STATUS_OK
ReadX 12276 0 4096 4096 NT_STATUS_OK
Close 12276 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12277 NT_STATUS_OK
ReadX 12277 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12277 1004 NT_STATUS_OK
WriteX 12277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 12278 NT_STATUS_OK
Close 12278 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 12277 NT_STATUS_OK
Close 12268 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12280 NT_STATUS_OK
Close 12280 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12283 NT_STATUS_OK
WriteX 12283 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12283 258 NT_STATUS_OK
WriteX 12283 0 65536 65536 NT_STATUS_OK
WriteX 12283 65536 9298 9298 NT_STATUS_OK
Close 12283 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12284 NT_STATUS_OK
ReadX 12284 0 4096 4096 NT_STATUS_OK
WriteX 12284 0 4096 4096 NT_STATUS_OK
Flush 12284 NT_STATUS_OK
SET_FILE_INFORMATION 12284 1004 NT_STATUS_OK
WriteX 12284 0 4096 4096 NT_STATUS_OK
Flush 12284 NT_STATUS_OK
Close 12284 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12285 NT_STATUS_OK
SET_FILE_INFORMATION 12285 1004 NT_STATUS_OK
Close 12285 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12286 NT_STATUS_OK
ReadX 12286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 12287 NT_STATUS_OK
Close 12287 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12290 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12290 0 4096 4096 NT_STATUS_OK
Close 12290 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 12291 NT_STATUS_OK
ReadX 12291 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12291 4096 4096 4096 NT_STATUS_OK
ReadX 12291 8192 4096 4096 NT_STATUS_OK
ReadX 12291 12288 4096 4096 NT_STATUS_OK
ReadX 12291 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 12286 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12292 NT_STATUS_OK
ReadX 12292 0 4096 4096 NT_STATUS_OK
Close 12292 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12293 NT_STATUS_OK
ReadX 12293 0 4096 4096 NT_STATUS_OK
Close 12293 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12294 NT_STATUS_OK
ReadX 12294 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12294 1004 NT_STATUS_OK
WriteX 12294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 12295 NT_STATUS_OK
Close 12295 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 12291 NT_STATUS_OK
Close 12294 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 12297 NT_STATUS_OK
Close 12297 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 12300 NT_STATUS_OK
WriteX 12300 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12300 258 NT_STATUS_OK
WriteX 12300 0 65536 65536 NT_STATUS_OK
WriteX 12300 65536 11540 11540 NT_STATUS_OK
Close 12300 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12301 NT_STATUS_OK
ReadX 12301 0 4096 4096 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
SET_FILE_INFORMATION 12301 1004 NT_STATUS_OK
WriteX 12301 0 4096 4096 NT_STATUS_OK
Flush 12301 NT_STATUS_OK
Close 12301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12302 NT_STATUS_OK
SET_FILE_INFORMATION 12302 1004 NT_STATUS_OK
Close 12302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 12303 NT_STATUS_OK
ReadX 12303 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 12304 NT_STATUS_OK
Close 12304 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12306 NT_STATUS_OK
ReadX 12306 61440 4096 4096 NT_STATUS_OK
ReadX 12306 126976 4096 4096 NT_STATUS_OK
WriteX 12306 0 65536 65536 NT_STATUS_OK
WriteX 12306 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12307 NT_STATUS_OK
ReadX 12307 61440 4096 4096 NT_STATUS_OK
ReadX 12307 126976 4096 4096 NT_STATUS_OK
ReadX 12307 192512 4096 4096 NT_STATUS_OK
ReadX 12307 258048 4096 4096 NT_STATUS_OK
WriteX 12307 0 65536 65536 NT_STATUS_OK
WriteX 12307 65536 65536 65536 NT_STATUS_OK
WriteX 12307 131072 65536 65536 NT_STATUS_OK
WriteX 12307 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12308 NT_STATUS_OK
ReadX 12308 61440 4096 4096 NT_STATUS_OK
ReadX 12308 126976 4096 4096 NT_STATUS_OK
ReadX 12308 192512 4096 4096 NT_STATUS_OK
ReadX 12308 258048 4096 4096 NT_STATUS_OK
ReadX 12308 323584 4096 4096 NT_STATUS_OK
ReadX 12308 389120 4096 4096 NT_STATUS_OK
ReadX 12308 454656 4096 4096 NT_STATUS_OK
ReadX 12308 520192 4096 4096 NT_STATUS_OK
WriteX 12308 0 65536 65536 NT_STATUS_OK
WriteX 12308 65536 65536 65536 NT_STATUS_OK
WriteX 12308 131072 65536 65536 NT_STATUS_OK
WriteX 12308 196608 65536 65536 NT_STATUS_OK
WriteX 12308 262144 65536 65536 NT_STATUS_OK
WriteX 12308 327680 65536 65536 NT_STATUS_OK
WriteX 12308 393216 65536 65536 NT_STATUS_OK
WriteX 12308 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 12309 NT_STATUS_OK
ReadX 12309 0 4096 4096 NT_STATUS_OK
ReadX 12309 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 12310 NT_STATUS_OK
WriteX 12310 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12310 258 NT_STATUS_OK
WriteX 12310 0 53 53 NT_STATUS_OK
Close 12310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 12311 NT_STATUS_OK
Close 12311 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12303 NT_STATUS_OK
Close 12249 NT_STATUS_OK
Close 12306 NT_STATUS_OK
Close 12307 NT_STATUS_OK
Close 12308 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12309 8192 4096 4096 NT_STATUS_OK
ReadX 12309 12288 4096 4096 NT_STATUS_OK
WriteX 12313 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12313 258 NT_STATUS_OK
ReadX 12309 16384 4096 4096 NT_STATUS_OK
ReadX 12309 20480 4096 4096 NT_STATUS_OK
WriteX 12313 0 15360 15360 NT_STATUS_OK
Close 12313 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 12314 NT_STATUS_OK
ReadX 12314 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12314 1004 NT_STATUS_OK
WriteX 12314 0 4096 4096 NT_STATUS_OK
Close 12314 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 12315 NT_STATUS_OK
Close 12315 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12317 NT_STATUS_OK
ReadX 12317 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 12318 NT_STATUS_OK
Close 12318 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 12317 4096 4096 4096 NT_STATUS_OK
ReadX 12317 8192 4096 4096 NT_STATUS_OK
ReadX 12317 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12320 NT_STATUS_OK
ReadX 12320 0 4096 4096 NT_STATUS_OK
ReadX 12320 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 12321 NT_STATUS_OK
ReadX 12321 0 4096 4096 NT_STATUS_OK
ReadX 12321 4096 4096 4096 NT_STATUS_OK
ReadX 12321 8192 4096 4096 NT_STATUS_OK
Close 12320 NT_STATUS_OK
Close 12321 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 12322 NT_STATUS_OK
WriteX 12322 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12322 258 NT_STATUS_OK
WriteX 12322 0 15360 15360 NT_STATUS_OK
Close 12322 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 12323 NT_STATUS_OK
ReadX 12323 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12323 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12323 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12317 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12309 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 12324 NT_STATUS_OK
Close 12324 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12326 NT_STATUS_OK
ReadX 12326 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 12327 NT_STATUS_OK
SET_FILE_INFORMATION 12327 1004 NT_STATUS_OK
Close 12327 NT_STATUS_OK
WriteX 12323 0 4096 4096 NT_STATUS_OK
Close 12323 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 12328 NT_STATUS_OK
Close 12328 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 12330 NT_STATUS_OK
ReadX 12330 0 4096 4096 NT_STATUS_OK
ReadX 12330 4096 4096 4096 NT_STATUS_OK
ReadX 12330 8192 4096 4096 NT_STATUS_OK
ReadX 12330 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 12330 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12330 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 12331 NT_STATUS_OK
ReadX 12331 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 12332 NT_STATUS_OK
WriteX 12332 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12332 258 NT_STATUS_OK
WriteX 12332 0 53 53 NT_STATUS_OK
Close 12332 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 12333 NT_STATUS_OK
Close 12333 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12331 4096 4096 4096 NT_STATUS_OK
ReadX 12331 8192 4096 4096 NT_STATUS_OK
ReadX 12331 12288 4096 4096 NT_STATUS_OK
WriteX 12335 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12335 258 NT_STATUS_OK
WriteX 12335 0 12006 12006 NT_STATUS_OK
Close 12335 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 12336 NT_STATUS_OK
ReadX 12336 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12336 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12336 1004 NT_STATUS_OK
WriteX 12336 0 4096 4096 NT_STATUS_OK
Close 12336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 12337 NT_STATUS_OK
Close 12337 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12339 NT_STATUS_OK
ReadX 12339 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 12340 NT_STATUS_OK
Close 12340 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 12339 4096 4096 4096 NT_STATUS_OK
ReadX 12339 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 12342 NT_STATUS_OK
WriteX 12342 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12342 258 NT_STATUS_OK
WriteX 12342 0 11991 11991 NT_STATUS_OK
Close 12342 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 12343 NT_STATUS_OK
ReadX 12343 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12343 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12343 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12339 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 12331 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 12344 NT_STATUS_OK
Close 12344 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12346 NT_STATUS_OK
ReadX 12346 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 12347 NT_STATUS_OK
SET_FILE_INFORMATION 12347 1004 NT_STATUS_OK
Close 12347 NT_STATUS_OK
WriteX 12343 0 4096 4096 NT_STATUS_OK
Close 12343 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 12348 NT_STATUS_OK
Close 12348 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 12350 NT_STATUS_OK
ReadX 12350 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 12351 NT_STATUS_OK
Close 12351 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 12350 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12350 1004 NT_STATUS_OK
ReadX 12350 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 12350 1004 NT_STATUS_OK
WriteX 12350 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 12350 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12350 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12350 1004 NT_STATUS_OK
Close 12326 NT_STATUS_OK
WriteX 12330 0 19054 19054 NT_STATUS_OK
WriteX 12350 0 12288 12288 NT_STATUS_OK
Close 12346 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 12353 NT_STATUS_OK
Close 12353 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 12330 NT_STATUS_OK
Close 12350 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 12355 NT_STATUS_OK
Close 12355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12357 NT_STATUS_OK
ReadX 12357 0 61440 61440 NT_STATUS_OK
ReadX 12357 61440 4096 4096 NT_STATUS_OK
ReadX 12357 65536 61440 61440 NT_STATUS_OK
ReadX 12357 126976 4096 4096 NT_STATUS_OK
ReadX 12357 131072 61440 61440 NT_STATUS_OK
ReadX 12357 192512 4096 4096 NT_STATUS_OK
ReadX 12357 196608 61440 61440 NT_STATUS_OK
ReadX 12357 258048 4096 4096 NT_STATUS_OK
ReadX 12357 262144 61440 61440 NT_STATUS_OK
ReadX 12357 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12358 NT_STATUS_OK
ReadX 12358 0 61440 61440 NT_STATUS_OK
ReadX 12358 61440 4096 4096 NT_STATUS_OK
ReadX 12358 65536 61440 61440 NT_STATUS_OK
ReadX 12358 126976 4096 4096 NT_STATUS_OK
ReadX 12358 131072 61440 61440 NT_STATUS_OK
ReadX 12358 192512 4096 4096 NT_STATUS_OK
ReadX 12358 196608 61440 61440 NT_STATUS_OK
ReadX 12358 258048 4096 4096 NT_STATUS_OK
ReadX 12358 262144 61440 61440 NT_STATUS_OK
ReadX 12358 323584 4096 4096 NT_STATUS_OK
ReadX 12358 327680 61440 61440 NT_STATUS_OK
ReadX 12358 389120 4096 4096 NT_STATUS_OK
ReadX 12358 393216 61440 61440 NT_STATUS_OK
ReadX 12358 454656 4096 4096 NT_STATUS_OK
ReadX 12358 458752 61440 61440 NT_STATUS_OK
ReadX 12358 520192 4096 4096 NT_STATUS_OK
ReadX 12358 524288 61440 61440 NT_STATUS_OK
ReadX 12358 585728 4096 4096 NT_STATUS_OK
ReadX 12358 589824 61440 61440 NT_STATUS_OK
ReadX 12358 651264 4096 4096 NT_STATUS_OK
ReadX 12358 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12359 NT_STATUS_OK
ReadX 12359 0 61440 61440 NT_STATUS_OK
ReadX 12359 61440 4096 4096 NT_STATUS_OK
ReadX 12359 65536 61440 61440 NT_STATUS_OK
ReadX 12359 126976 4096 4096 NT_STATUS_OK
ReadX 12359 131072 61440 61440 NT_STATUS_OK
ReadX 12359 192512 4096 4096 NT_STATUS_OK
ReadX 12359 196608 61440 61440 NT_STATUS_OK
ReadX 12359 258048 4096 4096 NT_STATUS_OK
ReadX 12359 262144 61440 61440 NT_STATUS_OK
ReadX 12359 323584 4096 4096 NT_STATUS_OK
ReadX 12359 327680 61440 61440 NT_STATUS_OK
ReadX 12359 389120 4096 4096 NT_STATUS_OK
ReadX 12359 393216 61440 61440 NT_STATUS_OK
ReadX 12359 454656 4096 4096 NT_STATUS_OK
ReadX 12359 458752 61440 61440 NT_STATUS_OK
ReadX 12359 520192 4096 4096 NT_STATUS_OK
ReadX 12359 524288 61440 61440 NT_STATUS_OK
ReadX 12359 585728 4096 4096 NT_STATUS_OK
ReadX 12359 589824 61440 61440 NT_STATUS_OK
ReadX 12359 651264 4096 4096 NT_STATUS_OK
ReadX 12359 655360 61440 61440 NT_STATUS_OK
ReadX 12359 716800 4096 4096 NT_STATUS_OK
ReadX 12359 720896 61440 61440 NT_STATUS_OK
ReadX 12359 782336 4096 4096 NT_STATUS_OK
ReadX 12359 786432 61440 61440 NT_STATUS_OK
ReadX 12359 847872 4096 4096 NT_STATUS_OK
ReadX 12359 851968 61440 61440 NT_STATUS_OK
ReadX 12359 913408 4096 4096 NT_STATUS_OK
ReadX 12359 917504 61440 61440 NT_STATUS_OK
ReadX 12359 978944 4096 4096 NT_STATUS_OK
ReadX 12359 983040 61440 61440 NT_STATUS_OK
ReadX 12359 1044480 4096 4096 NT_STATUS_OK
ReadX 12359 1048576 61440 61440 NT_STATUS_OK
ReadX 12359 1110016 4096 4096 NT_STATUS_OK
ReadX 12359 1114112 61440 61440 NT_STATUS_OK
ReadX 12359 1175552 4096 4096 NT_STATUS_OK
ReadX 12359 1179648 61440 61440 NT_STATUS_OK
ReadX 12359 1241088 4096 4096 NT_STATUS_OK
ReadX 12359 1245184 61440 61440 NT_STATUS_OK
ReadX 12359 1306624 4096 4096 NT_STATUS_OK
ReadX 12359 1310720 61440 61440 NT_STATUS_OK
ReadX 12359 1372160 4096 4096 NT_STATUS_OK
ReadX 12359 1376256 61440 61440 NT_STATUS_OK
ReadX 12359 1437696 4096 4096 NT_STATUS_OK
ReadX 12359 1441792 61440 61440 NT_STATUS_OK
ReadX 12359 1503232 4096 4096 NT_STATUS_OK
ReadX 12359 1507328 61440 61440 NT_STATUS_OK
ReadX 12359 1568768 4096 4096 NT_STATUS_OK
ReadX 12359 1572864 61440 61440 NT_STATUS_OK
ReadX 12359 1634304 4096 4096 NT_STATUS_OK
ReadX 12359 1638400 61440 61440 NT_STATUS_OK
ReadX 12359 1699840 4096 4096 NT_STATUS_OK
ReadX 12359 1703936 61440 61440 NT_STATUS_OK
ReadX 12359 1765376 4096 4096 NT_STATUS_OK
ReadX 12359 1769472 61440 61440 NT_STATUS_OK
ReadX 12359 1830912 4096 4096 NT_STATUS_OK
ReadX 12359 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12360 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12360 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12361 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12361 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12362 NT_STATUS_OK
ReadX 12362 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12363 NT_STATUS_OK
ReadX 12363 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12364 NT_STATUS_OK
ReadX 12364 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 12365 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12365 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 12366 NT_STATUS_OK
QUERY_FILE_INFORMATION 12366 1004 NT_STATUS_OK
WriteX 12366 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12366 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 12367 NT_STATUS_OK
Close 12367 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12368 NT_STATUS_OK
WriteX 12368 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12368 258 NT_STATUS_OK
WriteX 12368 0 491 491 NT_STATUS_OK
Close 12368 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 12369 NT_STATUS_OK
ReadX 12369 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 12366 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 12371 NT_STATUS_OK
Close 12371 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12372 NT_STATUS_OK
WriteX 12372 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12372 258 NT_STATUS_OK
WriteX 12372 0 543 543 NT_STATUS_OK
Close 12372 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12373 NT_STATUS_OK
ReadX 12373 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12369 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 12357 NT_STATUS_OK
Close 12358 NT_STATUS_OK
Close 12359 NT_STATUS_OK
Close 12373 NT_STATUS_OK
Close 12361 NT_STATUS_OK
Close 12362 NT_STATUS_OK
Close 12363 NT_STATUS_OK
Close 12364 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 12366 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12376 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12376 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12377 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12378 NT_STATUS_OK
ReadX 12378 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12379 NT_STATUS_OK
ReadX 12379 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12380 NT_STATUS_OK
ReadX 12380 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12381 NT_STATUS_OK
ReadX 12381 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 12385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12385 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12386 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 1004 NT_STATUS_OK
WriteX 12386 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12386 258 NT_STATUS_OK
WriteX 12386 0 2048 2048 NT_STATUS_OK
Close 12386 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12387 NT_STATUS_OK
ReadX 12387 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12387 0 4096 4096 NT_STATUS_OK
Flush 12387 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 12387 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 12391 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12391 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12392 NT_STATUS_OK
WriteX 12392 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12392 258 NT_STATUS_OK
WriteX 12392 0 2048 2048 NT_STATUS_OK
Close 12392 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 12393 NT_STATUS_OK
ReadX 12393 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 12397 NT_STATUS_OK
Close 12397 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12398 NT_STATUS_OK
WriteX 12398 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12398 258 NT_STATUS_OK
WriteX 12398 0 2048 2048 NT_STATUS_OK
Close 12398 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 12399 NT_STATUS_OK
ReadX 12399 0 2048 2048 NT_STATUS_OK
ReadX 12377 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12399 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 12381 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 12393 0 4096 4096 NT_STATUS_OK
WriteX 12377 0 8192 8192 NT_STATUS_OK
WriteX 12378 0 4096 4096 NT_STATUS_OK
WriteX 12379 0 4096 4096 NT_STATUS_OK
ReadX 12393 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12377 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12402 NT_STATUS_OK
ReadX 12402 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12387 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 12403 NT_STATUS_OK
QUERY_FILE_INFORMATION 12403 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 12403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 12402 NT_STATUS_OK
Close 12378 NT_STATUS_OK
Close 12379 NT_STATUS_OK
Close 12380 NT_STATUS_OK
Close 12393 NT_STATUS_OK
Close 12377 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12405 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12405 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12406 NT_STATUS_OK
ReadX 12406 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12407 NT_STATUS_OK
ReadX 12407 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12408 NT_STATUS_OK
ReadX 12408 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12409 NT_STATUS_OK
ReadX 12409 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12410 NT_STATUS_OK
ReadX 12410 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12411 NT_STATUS_OK
ReadX 12411 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12412 NT_STATUS_OK
ReadX 12412 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12413 NT_STATUS_OK
ReadX 12413 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12414 NT_STATUS_OK
ReadX 12414 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12415 NT_STATUS_OK
ReadX 12415 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12416 NT_STATUS_OK
ReadX 12416 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12417 NT_STATUS_OK
ReadX 12417 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12418 NT_STATUS_OK
ReadX 12418 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 12422 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12422 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12423 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 1004 NT_STATUS_OK
WriteX 12423 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12423 258 NT_STATUS_OK
WriteX 12423 0 2048 2048 NT_STATUS_OK
Close 12423 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12424 NT_STATUS_OK
ReadX 12424 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12414 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12425 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12426 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12426 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 12430 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12430 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12431 NT_STATUS_OK
QUERY_FILE_INFORMATION 12431 1004 NT_STATUS_OK
WriteX 12431 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12431 258 NT_STATUS_OK
WriteX 12431 0 2048 2048 NT_STATUS_OK
Close 12431 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12432 NT_STATUS_OK
ReadX 12432 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
Flush 12424 NT_STATUS_OK
WriteX 12432 0 4096 4096 NT_STATUS_OK
Flush 12432 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 12424 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 12432 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12426 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 12433 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12433 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12434 NT_STATUS_OK
WriteX 12434 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12434 258 NT_STATUS_OK
WriteX 12434 0 4096 4096 NT_STATUS_OK
Close 12434 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 12435 NT_STATUS_OK
ReadX 12435 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 12436 NT_STATUS_OK
Close 12436 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12437 NT_STATUS_OK
WriteX 12437 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12437 258 NT_STATUS_OK
WriteX 12437 0 4096 4096 NT_STATUS_OK
Close 12437 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 12438 NT_STATUS_OK
ReadX 12438 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 12438 0 4096 4096 NT_STATUS_OK
Close 12435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 12418 NT_STATUS_OK
Close 12412 NT_STATUS_OK
Close 12426 NT_STATUS_OK
Close 12415 NT_STATUS_OK
Close 12416 NT_STATUS_OK
Close 12417 NT_STATUS_OK
Close 12413 NT_STATUS_OK
Close 12406 NT_STATUS_OK
Close 12407 NT_STATUS_OK
Close 12410 NT_STATUS_OK
Close 12411 NT_STATUS_OK
Close 12408 NT_STATUS_OK
Close 12409 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 12438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 12441 NT_STATUS_OK
Close 12441 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 12443 NT_STATUS_OK
ReadX 12443 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 12444 NT_STATUS_OK
Close 12444 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12445 NT_STATUS_OK
WriteX 12445 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12445 258 NT_STATUS_OK
WriteX 12445 0 2048 2048 NT_STATUS_OK
Close 12445 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12446 NT_STATUS_OK
ReadX 12446 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12447 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12447 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12448 NT_STATUS_OK
ReadX 12448 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12449 NT_STATUS_OK
ReadX 12449 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12450 NT_STATUS_OK
ReadX 12450 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12451 NT_STATUS_OK
ReadX 12451 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12452 NT_STATUS_OK
ReadX 12452 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12453 NT_STATUS_OK
ReadX 12453 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12454 NT_STATUS_OK
ReadX 12454 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12455 NT_STATUS_OK
ReadX 12455 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12456 NT_STATUS_OK
ReadX 12456 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12457 NT_STATUS_OK
ReadX 12457 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12458 NT_STATUS_OK
ReadX 12458 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12459 NT_STATUS_OK
ReadX 12459 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12424 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 12460 NT_STATUS_OK
QUERY_FILE_INFORMATION 12460 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 12460 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 12443 NT_STATUS_OK
Close 12446 NT_STATUS_OK
Close 12458 NT_STATUS_OK
Close 12453 NT_STATUS_OK
Close 12454 NT_STATUS_OK
Close 12455 NT_STATUS_OK
Close 12456 NT_STATUS_OK
Close 12457 NT_STATUS_OK
Close 12459 NT_STATUS_OK
Close 12447 NT_STATUS_OK
Close 12448 NT_STATUS_OK
Close 12451 NT_STATUS_OK
Close 12452 NT_STATUS_OK
Close 12449 NT_STATUS_OK
Close 12450 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 12462 NT_STATUS_OK
QUERY_FILE_INFORMATION 12462 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 12462 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12464 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12464 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12465 NT_STATUS_OK
ReadX 12465 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12466 NT_STATUS_OK
ReadX 12466 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12467 NT_STATUS_OK
ReadX 12467 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12468 NT_STATUS_OK
ReadX 12468 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12469 NT_STATUS_OK
ReadX 12469 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12470 NT_STATUS_OK
ReadX 12470 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12471 NT_STATUS_OK
ReadX 12471 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12472 NT_STATUS_OK
ReadX 12472 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12473 NT_STATUS_OK
ReadX 12473 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12474 NT_STATUS_OK
ReadX 12474 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12475 NT_STATUS_OK
ReadX 12475 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12476 NT_STATUS_OK
ReadX 12476 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12477 NT_STATUS_OK
ReadX 12477 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 12481 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12481 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12482 NT_STATUS_OK
QUERY_FILE_INFORMATION 12482 1004 NT_STATUS_OK
WriteX 12482 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12482 258 NT_STATUS_OK
WriteX 12482 0 2048 2048 NT_STATUS_OK
Close 12482 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12483 NT_STATUS_OK
ReadX 12483 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12484 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12484 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12485 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12485 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12486 NT_STATUS_OK
ReadX 12486 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12487 NT_STATUS_OK
ReadX 12487 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12488 NT_STATUS_OK
ReadX 12488 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12489 NT_STATUS_OK
ReadX 12489 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 12493 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12493 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12494 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 1004 NT_STATUS_OK
WriteX 12494 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12494 258 NT_STATUS_OK
WriteX 12494 0 2048 2048 NT_STATUS_OK
Close 12494 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12495 NT_STATUS_OK
ReadX 12495 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12470 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12496 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12496 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12497 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 12501 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12501 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12502 NT_STATUS_OK
QUERY_FILE_INFORMATION 12502 1004 NT_STATUS_OK
WriteX 12502 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12502 258 NT_STATUS_OK
WriteX 12502 0 2048 2048 NT_STATUS_OK
Close 12502 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12503 NT_STATUS_OK
ReadX 12503 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 12483 0 4096 4096 NT_STATUS_OK
Flush 12483 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
Flush 12495 NT_STATUS_OK
WriteX 12503 0 4096 4096 NT_STATUS_OK
Flush 12503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 12483 0 4096 4096 NT_STATUS_OK
WriteX 12495 0 4096 4096 NT_STATUS_OK
WriteX 12503 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12485 4096 16384 16384 NT_STATUS_OK
ReadX 12465 4096 16384 16384 NT_STATUS_OK
ReadX 12497 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12504 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12504 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12505 NT_STATUS_OK
ReadX 12505 0 2048 2048 NT_STATUS_OK
WriteX 12505 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12483 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 12506 NT_STATUS_OK
QUERY_FILE_INFORMATION 12506 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 12506 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 12505 NT_STATUS_OK
Close 12489 NT_STATUS_OK
Close 12477 NT_STATUS_OK
Close 12469 NT_STATUS_OK
Close 12485 NT_STATUS_OK
Close 12486 NT_STATUS_OK
Close 12487 NT_STATUS_OK
Close 12488 NT_STATUS_OK
Close 12476 NT_STATUS_OK
Close 12497 NT_STATUS_OK
Close 12471 NT_STATUS_OK
Close 12474 NT_STATUS_OK
Close 12475 NT_STATUS_OK
Close 12472 NT_STATUS_OK
Close 12473 NT_STATUS_OK
Close 12465 NT_STATUS_OK
Close 12466 NT_STATUS_OK
Close 12467 NT_STATUS_OK
Close 12468 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12495 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 12508 NT_STATUS_OK
QUERY_FILE_INFORMATION 12508 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 12508 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12503 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 12510 NT_STATUS_OK
QUERY_FILE_INFORMATION 12510 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 12510 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12512 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 12513 NT_STATUS_OK
ReadX 12513 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 12514 NT_STATUS_OK
ReadX 12514 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 12515 NT_STATUS_OK
ReadX 12515 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 12516 NT_STATUS_OK
ReadX 12516 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 12517 NT_STATUS_OK
ReadX 12517 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12513 4096 16384 16384 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12515 0 4096 4096 NT_STATUS_OK
WriteX 12516 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12518 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12518 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12519 NT_STATUS_OK
ReadX 12519 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12520 NT_STATUS_OK
ReadX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12521 NT_STATUS_OK
ReadX 12521 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12522 NT_STATUS_OK
ReadX 12522 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12523 NT_STATUS_OK
ReadX 12523 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12524 NT_STATUS_OK
ReadX 12524 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12525 NT_STATUS_OK
ReadX 12525 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12526 NT_STATUS_OK
ReadX 12526 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12527 NT_STATUS_OK
ReadX 12527 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12528 NT_STATUS_OK
ReadX 12528 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12529 NT_STATUS_OK
ReadX 12529 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12530 NT_STATUS_OK
ReadX 12530 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12531 NT_STATUS_OK
ReadX 12531 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 12532 NT_STATUS_OK
ReadX 12532 0 8192 8192 NT_STATUS_OK
ReadX 12519 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12533 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12533 0 4096 4096 NT_STATUS_OK
ReadX 12533 4096 4096 4096 NT_STATUS_OK
ReadX 12533 8192 4096 4096 NT_STATUS_OK
WriteX 12519 0 4096 4096 NT_STATUS_OK
WriteX 12520 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 12534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12534 0 4096 4096 NT_STATUS_OK
ReadX 12534 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 12513 0 4096 4096 NT_STATUS_OK
WriteX 12514 0 4096 4096 NT_STATUS_OK
WriteX 12515 0 4096 4096 NT_STATUS_OK
WriteX 12516 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 12538 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12538 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12539 NT_STATUS_OK
QUERY_FILE_INFORMATION 12539 1004 NT_STATUS_OK
WriteX 12539 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12539 258 NT_STATUS_OK
WriteX 12539 0 2048 2048 NT_STATUS_OK
Close 12539 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12540 NT_STATUS_OK
ReadX 12540 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12540 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12541 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12541 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12542 NT_STATUS_OK
ReadX 12542 0 4096 4096 NT_STATUS_OK
ReadX 12542 4096 4096 4096 NT_STATUS_OK
WriteX 12542 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 12540 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12542 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12543 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12543 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 12544 NT_STATUS_OK
ReadX 12544 0 4096 4096 NT_STATUS_OK
ReadX 12544 4096 4096 4096 NT_STATUS_OK
WriteX 12544 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12540 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 12545 NT_STATUS_OK
QUERY_FILE_INFORMATION 12545 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 12545 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 12532 NT_STATUS_OK
Close 12517 NT_STATUS_OK
Close 12513 NT_STATUS_OK
Close 12514 NT_STATUS_OK
Close 12515 NT_STATUS_OK
Close 12516 NT_STATUS_OK
Close 12525 NT_STATUS_OK
Close 12530 NT_STATUS_OK
Close 12526 NT_STATUS_OK
Close 12527 NT_STATUS_OK
Close 12528 NT_STATUS_OK
Close 12529 NT_STATUS_OK
Close 12531 NT_STATUS_OK
Close 12519 NT_STATUS_OK
Close 12520 NT_STATUS_OK
Close 12523 NT_STATUS_OK
Close 12524 NT_STATUS_OK
Close 12521 NT_STATUS_OK
Close 12522 NT_STATUS_OK
Close 12544 NT_STATUS_OK
Close 12533 NT_STATUS_OK
Close 12534 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 12547 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12547 0 4096 4096 NT_STATUS_OK
ReadX 12547 4096 4096 4096 NT_STATUS_OK
ReadX 12547 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 12548 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12548 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 12549 NT_STATUS_OK
ReadX 12549 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 12550 NT_STATUS_OK
ReadX 12550 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 12551 NT_STATUS_OK
ReadX 12551 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 12552 NT_STATUS_OK
ReadX 12552 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 12553 NT_STATUS_OK
ReadX 12553 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 12554 NT_STATUS_OK
ReadX 12554 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 12555 NT_STATUS_OK
ReadX 12555 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 12556 NT_STATUS_OK
ReadX 12556 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 12557 NT_STATUS_OK
ReadX 12557 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 12558 NT_STATUS_OK
ReadX 12558 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 12559 NT_STATUS_OK
ReadX 12559 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 12560 NT_STATUS_OK
ReadX 12560 0 4096 4096 NT_STATUS_OK
ReadX 12548 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 12564 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12564 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12565 NT_STATUS_OK
QUERY_FILE_INFORMATION 12565 1004 NT_STATUS_OK
WriteX 12565 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12565 258 NT_STATUS_OK
WriteX 12565 0 2048 2048 NT_STATUS_OK
Close 12565 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12566 NT_STATUS_OK
ReadX 12566 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 12566 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 12570 NT_STATUS_OK
Close 12570 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12571 NT_STATUS_OK
QUERY_FILE_INFORMATION 12571 1004 NT_STATUS_OK
WriteX 12571 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12571 258 NT_STATUS_OK
WriteX 12571 0 2048 2048 NT_STATUS_OK
Close 12571 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12572 NT_STATUS_OK
ReadX 12572 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 12572 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12555 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12566 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 12573 NT_STATUS_OK
QUERY_FILE_INFORMATION 12573 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 12573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 12559 NT_STATUS_OK
Close 12554 NT_STATUS_OK
Close 12560 NT_STATUS_OK
Close 12548 NT_STATUS_OK
Close 12549 NT_STATUS_OK
Close 12552 NT_STATUS_OK
Close 12553 NT_STATUS_OK
Close 12550 NT_STATUS_OK
Close 12551 NT_STATUS_OK
Close 12555 NT_STATUS_OK
Close 12556 NT_STATUS_OK
Close 12557 NT_STATUS_OK
Close 12558 NT_STATUS_OK
Close 12547 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12572 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 12575 NT_STATUS_OK
QUERY_FILE_INFORMATION 12575 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 12575 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12577 NT_STATUS_OK
ReadX 12577 61440 4096 4096 NT_STATUS_OK
ReadX 12577 126976 4096 4096 NT_STATUS_OK
WriteX 12577 0 65536 65536 NT_STATUS_OK
WriteX 12577 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12578 NT_STATUS_OK
ReadX 12578 61440 4096 4096 NT_STATUS_OK
ReadX 12578 126976 4096 4096 NT_STATUS_OK
ReadX 12578 192512 4096 4096 NT_STATUS_OK
ReadX 12578 258048 4096 4096 NT_STATUS_OK
WriteX 12578 0 65536 65536 NT_STATUS_OK
WriteX 12578 65536 65536 65536 NT_STATUS_OK
WriteX 12578 131072 65536 65536 NT_STATUS_OK
WriteX 12578 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12579 NT_STATUS_OK
ReadX 12579 61440 4096 4096 NT_STATUS_OK
ReadX 12579 126976 4096 4096 NT_STATUS_OK
ReadX 12579 192512 4096 4096 NT_STATUS_OK
ReadX 12579 258048 4096 4096 NT_STATUS_OK
ReadX 12579 323584 4096 4096 NT_STATUS_OK
ReadX 12579 389120 4096 4096 NT_STATUS_OK
ReadX 12579 454656 4096 4096 NT_STATUS_OK
ReadX 12579 520192 4096 4096 NT_STATUS_OK
WriteX 12579 0 65536 65536 NT_STATUS_OK
WriteX 12579 65536 65536 65536 NT_STATUS_OK
WriteX 12579 131072 65536 65536 NT_STATUS_OK
WriteX 12579 196608 65536 65536 NT_STATUS_OK
WriteX 12579 262144 65536 65536 NT_STATUS_OK
WriteX 12579 327680 65536 65536 NT_STATUS_OK
WriteX 12579 393216 65536 65536 NT_STATUS_OK
WriteX 12579 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12580 NT_STATUS_OK
ReadX 12580 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12580 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12580 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12580 8192 4096 4096 NT_STATUS_OK
ReadX 12580 12288 4096 4096 NT_STATUS_OK
ReadX 12580 16384 4096 4096 NT_STATUS_OK
ReadX 12580 20480 4096 4096 NT_STATUS_OK
ReadX 12580 24576 4096 4096 NT_STATUS_OK
ReadX 12580 28672 4096 4096 NT_STATUS_OK
ReadX 12580 32768 4096 4096 NT_STATUS_OK
ReadX 12580 36864 4096 4096 NT_STATUS_OK
ReadX 12580 40960 4096 4096 NT_STATUS_OK
ReadX 12580 45056 4096 4096 NT_STATUS_OK
ReadX 12580 49152 4096 4096 NT_STATUS_OK
ReadX 12580 53248 4096 4096 NT_STATUS_OK
ReadX 12580 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12580 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 12581 NT_STATUS_OK
Close 12581 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 12577 NT_STATUS_OK
Close 12578 NT_STATUS_OK
Close 12579 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 12583 NT_STATUS_OK
WriteX 12583 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12583 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12583 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12583 1004 NT_STATUS_OK
WriteX 12583 0 57088 57088 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
Flush 12583 NT_STATUS_OK
Close 12580 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 12584 NT_STATUS_OK
SET_FILE_INFORMATION 12584 1004 NT_STATUS_OK
Close 12584 NT_STATUS_OK
SET_FILE_INFORMATION 12583 1004 NT_STATUS_OK
WriteX 12583 0 4096 4096 NT_STATUS_OK
Close 12583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 12585 NT_STATUS_OK
Close 12585 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12587 NT_STATUS_OK
ReadX 12587 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12587 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 12588 NT_STATUS_OK
WriteX 12588 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12588 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12588 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12588 1004 NT_STATUS_OK
WriteX 12588 0 51456 51456 NT_STATUS_OK
WriteX 12588 0 4096 4096 NT_STATUS_OK
Flush 12588 NT_STATUS_OK
SET_FILE_INFORMATION 12588 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12588 1004 NT_STATUS_OK
WriteX 12588 0 4096 4096 NT_STATUS_OK
Close 12588 NT_STATUS_OK
Close 12587 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 12590 NT_STATUS_OK
Close 12590 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12592 NT_STATUS_OK
ReadX 12592 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12592 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12594 NT_STATUS_OK
Close 12594 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 12597 NT_STATUS_OK
WriteX 12597 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12597 258 NT_STATUS_OK
WriteX 12597 0 53077 53077 NT_STATUS_OK
Close 12597 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 12598 NT_STATUS_OK
WriteX 12598 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12598 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 12598 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12598 1004 NT_STATUS_OK
WriteX 12598 0 65536 65536 NT_STATUS_OK
WriteX 12598 65536 1856 1856 NT_STATUS_OK
WriteX 12598 0 4096 4096 NT_STATUS_OK
Flush 12598 NT_STATUS_OK
SET_FILE_INFORMATION 12598 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12598 1004 NT_STATUS_OK
WriteX 12598 0 4096 4096 NT_STATUS_OK
Close 12598 NT_STATUS_OK
Close 12592 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 12600 NT_STATUS_OK
Close 12600 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12602 NT_STATUS_OK
ReadX 12602 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12604 NT_STATUS_OK
Close 12604 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 12607 NT_STATUS_OK
WriteX 12607 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12607 258 NT_STATUS_OK
WriteX 12607 0 7983 7983 NT_STATUS_OK
Close 12607 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12609 NT_STATUS_OK
Close 12609 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 12612 NT_STATUS_OK
WriteX 12612 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12612 258 NT_STATUS_OK
WriteX 12612 0 65536 65536 NT_STATUS_OK
WriteX 12612 65536 65536 65536 NT_STATUS_OK
WriteX 12612 131072 65536 65536 NT_STATUS_OK
WriteX 12612 196608 65536 65536 NT_STATUS_OK
WriteX 12612 262144 65536 65536 NT_STATUS_OK
WriteX 12612 327680 65536 65536 NT_STATUS_OK
WriteX 12612 393216 65536 65536 NT_STATUS_OK
WriteX 12612 458752 46731 46731 NT_STATUS_OK
Close 12612 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 12613 NT_STATUS_OK
WriteX 12613 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12602 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 12613 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12613 1004 NT_STATUS_OK
WriteX 12613 0 65536 65536 NT_STATUS_OK
WriteX 12613 65536 22848 22848 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Flush 12613 NT_STATUS_OK
SET_FILE_INFORMATION 12613 1004 NT_STATUS_OK
SET_FILE_INFORMATION 12613 1004 NT_STATUS_OK
WriteX 12613 0 4096 4096 NT_STATUS_OK
Close 12613 NT_STATUS_OK
Close 12602 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 12615 NT_STATUS_OK
Close 12615 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 12617 NT_STATUS_OK
ReadX 12617 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12617 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12618 NT_STATUS_OK
ReadX 12618 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12618 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12618 1004 NT_STATUS_OK
ReadX 12618 8192 4096 4096 NT_STATUS_OK
ReadX 12618 12288 4096 4096 NT_STATUS_OK
ReadX 12618 16384 4096 4096 NT_STATUS_OK
ReadX 12618 20480 4096 4096 NT_STATUS_OK
ReadX 12618 24576 4096 4096 NT_STATUS_OK
ReadX 12618 28672 4096 4096 NT_STATUS_OK
ReadX 12618 32768 4096 4096 NT_STATUS_OK
ReadX 12618 36864 4096 4096 NT_STATUS_OK
ReadX 12618 40960 4096 4096 NT_STATUS_OK
ReadX 12618 45056 4096 4096 NT_STATUS_OK
ReadX 12618 49152 4096 4096 NT_STATUS_OK
ReadX 12618 53248 4096 4096 NT_STATUS_OK
ReadX 12618 57344 4096 4096 NT_STATUS_OK
ReadX 12618 61440 4096 4096 NT_STATUS_OK
ReadX 12618 65536 4096 4096 NT_STATUS_OK
ReadX 12618 69632 4096 4096 NT_STATUS_OK
ReadX 12618 73728 4096 4096 NT_STATUS_OK
ReadX 12618 77824 4096 4096 NT_STATUS_OK
ReadX 12618 81920 4096 4096 NT_STATUS_OK
ReadX 12618 86016 4096 4096 NT_STATUS_OK
ReadX 12618 90112 4096 4096 NT_STATUS_OK
ReadX 12618 94208 4096 4096 NT_STATUS_OK
ReadX 12618 98304 4096 4096 NT_STATUS_OK
ReadX 12618 102400 4096 4096 NT_STATUS_OK
ReadX 12618 106496 4096 4096 NT_STATUS_OK
ReadX 12618 110592 4096 4096 NT_STATUS_OK
ReadX 12618 114688 4096 4096 NT_STATUS_OK
ReadX 12618 118784 4096 4096 NT_STATUS_OK
ReadX 12618 122880 4096 4096 NT_STATUS_OK
ReadX 12618 126976 4096 4096 NT_STATUS_OK
ReadX 12618 131072 4096 4096 NT_STATUS_OK
ReadX 12618 135168 4096 4096 NT_STATUS_OK
ReadX 12618 139264 4096 4096 NT_STATUS_OK
ReadX 12618 143360 4096 4096 NT_STATUS_OK
ReadX 12618 147456 4096 4096 NT_STATUS_OK
ReadX 12618 151552 4096 4096 NT_STATUS_OK
ReadX 12618 155648 4096 4096 NT_STATUS_OK
ReadX 12618 159744 4096 4096 NT_STATUS_OK
ReadX 12618 163840 4096 4096 NT_STATUS_OK
ReadX 12618 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12618 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 12619 NT_STATUS_OK
Close 12619 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 12617 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 12621 NT_STATUS_OK
WriteX 12621 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12621 258 NT_STATUS_OK
Close 12618 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 12622 NT_STATUS_OK
SET_FILE_INFORMATION 12622 1004 NT_STATUS_OK
Close 12622 NT_STATUS_OK
WriteX 12621 0 42388 42388 NT_STATUS_OK
Close 12621 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 12623 NT_STATUS_OK
Close 12623 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12625 NT_STATUS_OK
ReadX 12625 0 4096 4096 NT_STATUS_OK
ReadX 12625 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 12626 NT_STATUS_OK
WriteX 12626 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12626 258 NT_STATUS_OK
SET_FILE_INFORMATION 12626 1004 NT_STATUS_OK
WriteX 12626 0 42652 42652 NT_STATUS_OK
Close 12626 NT_STATUS_OK
Close 12625 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 12628 NT_STATUS_OK
Close 12628 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 12630 NT_STATUS_OK
ReadX 12630 0 4096 4096 NT_STATUS_OK
ReadX 12630 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12632 NT_STATUS_OK
Close 12632 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 12635 NT_STATUS_OK
WriteX 12635 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12635 258 NT_STATUS_OK
WriteX 12635 0 65536 65536 NT_STATUS_OK
WriteX 12635 65536 49 49 NT_STATUS_OK
Close 12635 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12636 NT_STATUS_OK
ReadX 12636 0 61440 61440 NT_STATUS_OK
ReadX 12636 61440 4096 4096 NT_STATUS_OK
ReadX 12636 65536 61440 61440 NT_STATUS_OK
ReadX 12636 126976 4096 4096 NT_STATUS_OK
ReadX 12636 131072 61440 61440 NT_STATUS_OK
ReadX 12636 192512 4096 4096 NT_STATUS_OK
ReadX 12636 196608 61440 61440 NT_STATUS_OK
ReadX 12636 258048 4096 4096 NT_STATUS_OK
ReadX 12636 262144 61440 61440 NT_STATUS_OK
ReadX 12636 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12637 NT_STATUS_OK
ReadX 12637 0 61440 61440 NT_STATUS_OK
ReadX 12637 61440 4096 4096 NT_STATUS_OK
ReadX 12637 65536 61440 61440 NT_STATUS_OK
ReadX 12637 126976 4096 4096 NT_STATUS_OK
ReadX 12637 131072 61440 61440 NT_STATUS_OK
ReadX 12637 192512 4096 4096 NT_STATUS_OK
ReadX 12637 196608 61440 61440 NT_STATUS_OK
ReadX 12637 258048 4096 4096 NT_STATUS_OK
ReadX 12637 262144 61440 61440 NT_STATUS_OK
ReadX 12637 323584 4096 4096 NT_STATUS_OK
ReadX 12637 327680 61440 61440 NT_STATUS_OK
ReadX 12637 389120 4096 4096 NT_STATUS_OK
ReadX 12637 393216 61440 61440 NT_STATUS_OK
ReadX 12637 454656 4096 4096 NT_STATUS_OK
ReadX 12637 458752 61440 61440 NT_STATUS_OK
ReadX 12637 520192 4096 4096 NT_STATUS_OK
ReadX 12637 524288 61440 61440 NT_STATUS_OK
ReadX 12637 585728 4096 4096 NT_STATUS_OK
ReadX 12637 589824 61440 61440 NT_STATUS_OK
ReadX 12637 651264 4096 4096 NT_STATUS_OK
ReadX 12637 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12638 NT_STATUS_OK
ReadX 12638 0 61440 61440 NT_STATUS_OK
ReadX 12638 61440 4096 4096 NT_STATUS_OK
ReadX 12638 65536 61440 61440 NT_STATUS_OK
ReadX 12638 126976 4096 4096 NT_STATUS_OK
ReadX 12638 131072 61440 61440 NT_STATUS_OK
ReadX 12638 192512 4096 4096 NT_STATUS_OK
ReadX 12638 196608 61440 61440 NT_STATUS_OK
ReadX 12638 258048 4096 4096 NT_STATUS_OK
ReadX 12638 262144 61440 61440 NT_STATUS_OK
ReadX 12638 323584 4096 4096 NT_STATUS_OK
ReadX 12638 327680 61440 61440 NT_STATUS_OK
ReadX 12638 389120 4096 4096 NT_STATUS_OK
ReadX 12638 393216 61440 61440 NT_STATUS_OK
ReadX 12638 454656 4096 4096 NT_STATUS_OK
ReadX 12638 458752 61440 61440 NT_STATUS_OK
ReadX 12638 520192 4096 4096 NT_STATUS_OK
ReadX 12638 524288 61440 61440 NT_STATUS_OK
ReadX 12638 585728 4096 4096 NT_STATUS_OK
ReadX 12638 589824 61440 61440 NT_STATUS_OK
ReadX 12638 651264 4096 4096 NT_STATUS_OK
ReadX 12638 655360 61440 61440 NT_STATUS_OK
ReadX 12638 716800 4096 4096 NT_STATUS_OK
ReadX 12638 720896 61440 61440 NT_STATUS_OK
ReadX 12638 782336 4096 4096 NT_STATUS_OK
ReadX 12638 786432 61440 61440 NT_STATUS_OK
ReadX 12638 847872 4096 4096 NT_STATUS_OK
ReadX 12638 851968 61440 61440 NT_STATUS_OK
ReadX 12638 913408 4096 4096 NT_STATUS_OK
ReadX 12638 917504 61440 61440 NT_STATUS_OK
ReadX 12638 978944 4096 4096 NT_STATUS_OK
ReadX 12638 983040 61440 61440 NT_STATUS_OK
ReadX 12638 1044480 4096 4096 NT_STATUS_OK
ReadX 12638 1048576 61440 61440 NT_STATUS_OK
ReadX 12638 1110016 4096 4096 NT_STATUS_OK
ReadX 12638 1114112 61440 61440 NT_STATUS_OK
ReadX 12638 1175552 4096 4096 NT_STATUS_OK
ReadX 12638 1179648 61440 61440 NT_STATUS_OK
ReadX 12638 1241088 4096 4096 NT_STATUS_OK
ReadX 12638 1245184 61440 61440 NT_STATUS_OK
ReadX 12638 1306624 4096 4096 NT_STATUS_OK
ReadX 12638 1310720 61440 61440 NT_STATUS_OK
ReadX 12638 1372160 4096 4096 NT_STATUS_OK
ReadX 12638 1376256 61440 61440 NT_STATUS_OK
ReadX 12638 1437696 4096 4096 NT_STATUS_OK
ReadX 12638 1441792 61440 61440 NT_STATUS_OK
ReadX 12638 1503232 4096 4096 NT_STATUS_OK
ReadX 12638 1507328 61440 61440 NT_STATUS_OK
ReadX 12638 1568768 4096 4096 NT_STATUS_OK
ReadX 12638 1572864 61440 61440 NT_STATUS_OK
ReadX 12638 1634304 4096 4096 NT_STATUS_OK
ReadX 12638 1638400 61440 61440 NT_STATUS_OK
ReadX 12638 1699840 4096 4096 NT_STATUS_OK
ReadX 12638 1703936 61440 61440 NT_STATUS_OK
ReadX 12638 1765376 4096 4096 NT_STATUS_OK
ReadX 12638 1769472 61440 61440 NT_STATUS_OK
ReadX 12638 1830912 4096 4096 NT_STATUS_OK
ReadX 12638 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 12640 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12640 1005 NT_STATUS_OK
ReadX 12640 2156 24 24 NT_STATUS_OK
ReadX 12640 2139 276 276 NT_STATUS_OK
ReadX 12640 2136 14 14 NT_STATUS_OK
ReadX 12640 2136 7 7 NT_STATUS_OK
ReadX 12640 2138 12 12 NT_STATUS_OK
ReadX 12640 2137 8 8 NT_STATUS_OK
ReadX 12640 2135 15 15 NT_STATUS_OK
ReadX 12640 0 16 16 NT_STATUS_OK
ReadX 12640 16 2048 2048 NT_STATUS_OK
ReadX 12640 2064 2048 2048 NT_STATUS_OK
ReadX 12640 257 2048 2048 NT_STATUS_OK
ReadX 12640 385 2048 2048 NT_STATUS_OK
ReadX 12640 513 2048 2048 NT_STATUS_OK
ReadX 12640 641 2048 2048 NT_STATUS_OK
ReadX 12640 769 2048 2048 NT_STATUS_OK
ReadX 12640 897 2048 2048 NT_STATUS_OK
ReadX 12640 1025 2048 2048 NT_STATUS_OK
ReadX 12640 1153 2048 2048 NT_STATUS_OK
ReadX 12640 1281 2048 2048 NT_STATUS_OK
ReadX 12640 1409 2048 2048 NT_STATUS_OK
ReadX 12640 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 12642 NT_STATUS_OK
Close 12642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 12636 NT_STATUS_OK
Close 12637 NT_STATUS_OK
Close 12638 NT_STATUS_OK
Close 12630 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12645 NT_STATUS_OK
WriteX 12645 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12645 258 NT_STATUS_OK
WriteX 12645 0 10575 10575 NT_STATUS_OK
Flush 12645 NT_STATUS_OK
Close 12645 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12646 NT_STATUS_OK
Close 12646 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12648 NT_STATUS_OK
ReadX 12648 0 4096 4096 NT_STATUS_OK
Close 12640 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12649 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12650 NT_STATUS_OK
LockX 12650 2147483538 1 NT_STATUS_OK
UnlockX 12650 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 1005 NT_STATUS_OK
ReadX 12650 0 512 512 NT_STATUS_OK
ReadX 12650 512 512 512 NT_STATUS_OK
ReadX 12650 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12650 1004 NT_STATUS_OK
Close 12650 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12651 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1005 NT_STATUS_OK
ReadX 12651 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 12652 NT_STATUS_OK
LockX 12652 2147483538 1 NT_STATUS_OK
UnlockX 12652 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12652 1005 NT_STATUS_OK
ReadX 12652 0 512 512 NT_STATUS_OK
ReadX 12652 512 512 512 NT_STATUS_OK
ReadX 12652 1024 512 512 NT_STATUS_OK
ReadX 12652 288 20 20 NT_STATUS_OK
ReadX 12652 308 2084 2084 NT_STATUS_OK
ReadX 12652 388 2084 2084 NT_STATUS_OK
ReadX 12652 388 2084 2084 NT_STATUS_OK
ReadX 12639 2157 1386 1386 NT_STATUS_OK
ReadX 12652 2472 399 399 NT_STATUS_OK
ReadX 12652 3072 1536 1536 NT_STATUS_OK
ReadX 12652 544 149 149 NT_STATUS_OK
ReadX 12652 693 485 485 NT_STATUS_OK
Close 12652 NT_STATUS_OK
ReadX 12639 2157 4096 4096 NT_STATUS_OK
ReadX 12639 6253 4096 4096 NT_STATUS_OK
ReadX 12639 10349 4096 4096 NT_STATUS_OK
ReadX 12639 14445 4096 4096 NT_STATUS_OK
ReadX 12639 18541 4096 4096 NT_STATUS_OK
ReadX 12639 22637 256 256 NT_STATUS_OK
ReadX 12639 22893 4096 4096 NT_STATUS_OK
ReadX 12639 26989 4096 4096 NT_STATUS_OK
ReadX 12639 31085 4096 4096 NT_STATUS_OK
ReadX 12639 35181 4096 4096 NT_STATUS_OK
ReadX 12639 39277 4096 4096 NT_STATUS_OK
ReadX 12639 43373 4096 4096 NT_STATUS_OK
ReadX 12639 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12639 2157 1024 1024 NT_STATUS_OK
ReadX 12639 1667 4688 4688 NT_STATUS_OK
ReadX 12639 6355 3516 3516 NT_STATUS_OK
ReadX 12639 9871 16384 16384 NT_STATUS_OK
ReadX 12639 26255 3771 3771 NT_STATUS_OK
ReadX 12639 30026 2048 2048 NT_STATUS_OK
ReadX 12639 32074 1024 1024 NT_STATUS_OK
ReadX 12639 33098 6652 6652 NT_STATUS_OK
ReadX 12639 39750 16384 16384 NT_STATUS_OK
ReadX 12639 56134 10496 10496 NT_STATUS_OK
ReadX 12639 66630 1784 1784 NT_STATUS_OK
ReadX 12639 68414 90 90 NT_STATUS_OK
ReadX 12639 68504 273 273 NT_STATUS_OK
ReadX 12639 68777 1600 1600 NT_STATUS_OK
ReadX 12639 70377 640 640 NT_STATUS_OK
ReadX 12639 71017 1280 1280 NT_STATUS_OK
ReadX 12639 72297 8464 8464 NT_STATUS_OK
ReadX 12639 80761 158 158 NT_STATUS_OK
ReadX 12639 80919 912 912 NT_STATUS_OK
ReadX 12639 81831 1980 1980 NT_STATUS_OK
ReadX 12639 83811 2256 2256 NT_STATUS_OK
ReadX 12639 86067 400 400 NT_STATUS_OK
ReadX 12639 86467 252 252 NT_STATUS_OK
ReadX 12639 86719 42 42 NT_STATUS_OK
ReadX 12639 86761 725 725 NT_STATUS_OK
ReadX 12639 2009 512 512 NT_STATUS_OK
ReadX 12639 3895 9 9 NT_STATUS_OK
ReadX 12639 3781 46 46 NT_STATUS_OK
ReadX 12639 4059 92 92 NT_STATUS_OK
ReadX 12639 3781 92 92 NT_STATUS_OK
ReadX 12639 3986 184 184 NT_STATUS_OK
ReadX 12639 3987 16384 16384 NT_STATUS_OK
ReadX 12639 3902 16384 16384 NT_STATUS_OK
ReadX 12639 3781 10240 10240 NT_STATUS_OK
ReadX 12639 3821 16384 16384 NT_STATUS_OK
ReadX 12639 3891 935 935 NT_STATUS_OK
ReadX 12639 4060 10240 10240 NT_STATUS_OK
ReadX 12639 4059 184 184 NT_STATUS_OK
ReadX 12639 256 184 184 NT_STATUS_OK
ReadX 12639 256 1026 1026 NT_STATUS_OK
ReadX 12639 3901 326 326 NT_STATUS_OK
ReadX 12639 3899 652 652 NT_STATUS_OK
ReadX 12639 256 2 2 NT_STATUS_OK
ReadX 12639 258 4948 4948 NT_STATUS_OK
Close 12639 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12654 NT_STATUS_OK
Close 12654 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 12657 NT_STATUS_OK
WriteX 12657 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12657 258 NT_STATUS_OK
WriteX 12657 0 65536 65536 NT_STATUS_OK
WriteX 12657 65536 65536 65536 NT_STATUS_OK
WriteX 12657 131072 65536 65536 NT_STATUS_OK
WriteX 12657 196608 65536 65536 NT_STATUS_OK
WriteX 12657 262144 65536 65536 NT_STATUS_OK
WriteX 12657 327680 65536 65536 NT_STATUS_OK
WriteX 12657 393216 65536 65536 NT_STATUS_OK
WriteX 12657 458752 65536 65536 NT_STATUS_OK
WriteX 12657 524288 65536 65536 NT_STATUS_OK
WriteX 12657 589824 35257 35257 NT_STATUS_OK
Close 12657 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12659 NT_STATUS_OK
Close 12659 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 12662 NT_STATUS_OK
WriteX 12662 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12662 258 NT_STATUS_OK
WriteX 12662 0 65536 65536 NT_STATUS_OK
WriteX 12662 65536 65536 65536 NT_STATUS_OK
WriteX 12662 131072 65536 65536 NT_STATUS_OK
WriteX 12662 196608 65536 65536 NT_STATUS_OK
WriteX 12662 262144 65536 65536 NT_STATUS_OK
WriteX 12662 327680 65536 65536 NT_STATUS_OK
WriteX 12662 393216 65536 65536 NT_STATUS_OK
WriteX 12662 458752 65536 65536 NT_STATUS_OK
WriteX 12662 524288 65536 65536 NT_STATUS_OK
WriteX 12662 589824 57598 57598 NT_STATUS_OK
Close 12662 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12664 NT_STATUS_OK
WriteX 12664 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12664 258 NT_STATUS_OK
WriteX 12664 0 12543 12543 NT_STATUS_OK
Flush 12664 NT_STATUS_OK
Close 12664 NT_STATUS_OK
Close 12648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12666 NT_STATUS_OK
Close 12666 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 12668 NT_STATUS_OK
ReadX 12668 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12669 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 12670 NT_STATUS_OK
QUERY_FILE_INFORMATION 12670 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12670 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 12670 1005 NT_STATUS_OK
ReadX 12670 1938 24 24 NT_STATUS_OK
ReadX 12670 1920 276 276 NT_STATUS_OK
ReadX 12670 1918 14 14 NT_STATUS_OK
ReadX 12670 1918 7 7 NT_STATUS_OK
ReadX 12670 1919 12 12 NT_STATUS_OK
ReadX 12670 1919 8 8 NT_STATUS_OK
ReadX 12670 1917 15 15 NT_STATUS_OK
ReadX 12670 0 16 16 NT_STATUS_OK
ReadX 12670 16 2048 2048 NT_STATUS_OK
ReadX 12670 2064 2048 2048 NT_STATUS_OK
ReadX 12670 257 2048 2048 NT_STATUS_OK
ReadX 12670 385 2048 2048 NT_STATUS_OK
ReadX 12670 513 2048 2048 NT_STATUS_OK
ReadX 12670 641 2048 2048 NT_STATUS_OK
ReadX 12670 769 2048 2048 NT_STATUS_OK
ReadX 12670 897 2048 2048 NT_STATUS_OK
ReadX 12670 1025 2048 2048 NT_STATUS_OK
ReadX 12670 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 12672 NT_STATUS_OK
Close 12672 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12675 NT_STATUS_OK
WriteX 12675 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12675 258 NT_STATUS_OK
WriteX 12675 0 11588 11588 NT_STATUS_OK
Flush 12675 NT_STATUS_OK
Close 12675 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12676 NT_STATUS_OK
Close 12676 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12678 NT_STATUS_OK
ReadX 12678 0 4096 4096 NT_STATUS_OK
Close 12670 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12680 NT_STATUS_OK
WriteX 12680 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12680 258 NT_STATUS_OK
WriteX 12680 0 11615 11615 NT_STATUS_OK
Flush 12680 NT_STATUS_OK
Close 12680 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12678 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12682 NT_STATUS_OK
Close 12682 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12684 NT_STATUS_OK
ReadX 12684 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12686 NT_STATUS_OK
Close 12686 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 12689 NT_STATUS_OK
WriteX 12689 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12689 258 NT_STATUS_OK
WriteX 12689 0 65536 65536 NT_STATUS_OK
WriteX 12689 65536 16050 16050 NT_STATUS_OK
Close 12689 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12669 1939 64 64 NT_STATUS_OK
ReadX 12669 128 248 248 NT_STATUS_OK
ReadX 12669 128 568 568 NT_STATUS_OK
ReadX 12669 3872 1536 1536 NT_STATUS_OK
ReadX 12669 3456 2560 2560 NT_STATUS_OK
ReadX 12669 3136 512 512 NT_STATUS_OK
ReadX 12669 2880 4096 4096 NT_STATUS_OK
ReadX 12669 3264 3072 3072 NT_STATUS_OK
ReadX 12669 320 4096 4096 NT_STATUS_OK
ReadX 12669 1024 4096 4096 NT_STATUS_OK
ReadX 12669 3616 4096 4096 NT_STATUS_OK
ReadX 12669 1939 64 64 NT_STATUS_OK
ReadX 12669 128 248 248 NT_STATUS_OK
ReadX 12669 128 608 608 NT_STATUS_OK
ReadX 12669 2858 1024 1024 NT_STATUS_OK
ReadX 12669 2810 4096 4096 NT_STATUS_OK
ReadX 12669 2826 4096 4096 NT_STATUS_OK
ReadX 12669 2580 2048 2048 NT_STATUS_OK
ReadX 12669 2800 2560 2560 NT_STATUS_OK
ReadX 12669 2100 4096 4096 NT_STATUS_OK
ReadX 12669 2084 4096 4096 NT_STATUS_OK
ReadX 12669 868 4096 4096 NT_STATUS_OK
ReadX 12669 2324 4096 4096 NT_STATUS_OK
ReadX 12669 884 4096 4096 NT_STATUS_OK
ReadX 12669 2604 1024 1024 NT_STATUS_OK
ReadX 12669 580 4096 4096 NT_STATUS_OK
ReadX 12669 596 4096 4096 NT_STATUS_OK
ReadX 12669 2752 4096 4096 NT_STATUS_OK
ReadX 12669 2842 1024 1024 NT_STATUS_OK
ReadX 12669 660 4096 4096 NT_STATUS_OK
ReadX 12669 2720 4096 4096 NT_STATUS_OK
ReadX 12669 2736 4096 4096 NT_STATUS_OK
ReadX 12669 628 4096 4096 NT_STATUS_OK
ReadX 12669 2704 4096 4096 NT_STATUS_OK
ReadX 12669 1556 4096 4096 NT_STATUS_OK
ReadX 12669 576 4096 4096 NT_STATUS_OK
ReadX 12669 3168 1536 1536 NT_STATUS_OK
ReadX 12669 832 4096 4096 NT_STATUS_OK
ReadX 12669 1088 4096 4096 NT_STATUS_OK
ReadX 12669 1344 4096 4096 NT_STATUS_OK
ReadX 12669 1600 4096 4096 NT_STATUS_OK
ReadX 12669 1856 4096 4096 NT_STATUS_OK
ReadX 12669 2112 4096 4096 NT_STATUS_OK
ReadX 12669 1892 4096 4096 NT_STATUS_OK
ReadX 12669 820 4096 4096 NT_STATUS_OK
ReadX 12669 788 4096 4096 NT_STATUS_OK
ReadX 12669 1604 4096 4096 NT_STATUS_OK
ReadX 12669 3648 4096 4096 NT_STATUS_OK
ReadX 12669 2608 4096 4096 NT_STATUS_OK
ReadX 12669 548 4096 4096 NT_STATUS_OK
ReadX 12669 740 4096 4096 NT_STATUS_OK
ReadX 12669 1344 4096 4096 NT_STATUS_OK
ReadX 12669 3392 4096 4096 NT_STATUS_OK
ReadX 12669 3904 4096 4096 NT_STATUS_OK
ReadX 12669 644 4096 4096 NT_STATUS_OK
ReadX 12669 676 4096 4096 NT_STATUS_OK
ReadX 12669 2688 4096 4096 NT_STATUS_OK
ReadX 12669 320 4096 4096 NT_STATUS_OK
ReadX 12669 900 4096 4096 NT_STATUS_OK
ReadX 12669 1908 4096 4096 NT_STATUS_OK
ReadX 12669 852 4096 4096 NT_STATUS_OK
ReadX 12669 724 4096 4096 NT_STATUS_OK
ReadX 12669 2292 4096 4096 NT_STATUS_OK
ReadX 12669 612 4096 4096 NT_STATUS_OK
ReadX 12669 388 4096 4096 NT_STATUS_OK
ReadX 12669 2368 4096 4096 NT_STATUS_OK
ReadX 12669 2624 4096 4096 NT_STATUS_OK
ReadX 12669 500 4096 4096 NT_STATUS_OK
ReadX 12669 356 4096 4096 NT_STATUS_OK
ReadX 12669 1024 4096 4096 NT_STATUS_OK
ReadX 12669 576 4096 4096 NT_STATUS_OK
ReadX 12669 340 4096 4096 NT_STATUS_OK
ReadX 12669 420 4096 4096 NT_STATUS_OK
ReadX 12669 1600 4096 4096 NT_STATUS_OK
ReadX 12669 404 4096 4096 NT_STATUS_OK
ReadX 12669 1428 4096 4096 NT_STATUS_OK
ReadX 12669 2656 4096 4096 NT_STATUS_OK
ReadX 12669 2624 4096 4096 NT_STATUS_OK
ReadX 12669 452 4096 4096 NT_STATUS_OK
ReadX 12669 692 4096 4096 NT_STATUS_OK
ReadX 12669 564 4096 4096 NT_STATUS_OK
ReadX 12669 372 4096 4096 NT_STATUS_OK
ReadX 12669 468 4096 4096 NT_STATUS_OK
ReadX 12669 484 4096 4096 NT_STATUS_OK
ReadX 12669 1088 4096 4096 NT_STATUS_OK
ReadX 12669 1924 4096 4096 NT_STATUS_OK
ReadX 12669 2768 4096 4096 NT_STATUS_OK
ReadX 12669 832 4096 4096 NT_STATUS_OK
ReadX 12669 836 4096 4096 NT_STATUS_OK
ReadX 12669 1856 4096 4096 NT_STATUS_OK
ReadX 12669 2640 4096 4096 NT_STATUS_OK
ReadX 12669 436 4096 4096 NT_STATUS_OK
ReadX 12669 1828 4096 4096 NT_STATUS_OK
ReadX 12669 804 4096 4096 NT_STATUS_OK
ReadX 12669 1860 4096 4096 NT_STATUS_OK
ReadX 12669 1812 4096 4096 NT_STATUS_OK
ReadX 12669 756 4096 4096 NT_STATUS_OK
ReadX 12669 1636 4096 4096 NT_STATUS_OK
ReadX 12669 772 4096 4096 NT_STATUS_OK
ReadX 12669 2036 4096 4096 NT_STATUS_OK
ReadX 12669 1220 4096 4096 NT_STATUS_OK
ReadX 12669 1652 4096 4096 NT_STATUS_OK
ReadX 12669 2588 4096 4096 NT_STATUS_OK
ReadX 12669 916 4096 4096 NT_STATUS_OK
ReadX 12669 260 4096 4096 NT_STATUS_OK
ReadX 12669 932 4096 4096 NT_STATUS_OK
ReadX 12669 2624 4096 4096 NT_STATUS_OK
ReadX 12669 308 4096 4096 NT_STATUS_OK
ReadX 12669 292 4096 4096 NT_STATUS_OK
ReadX 12669 1140 4096 4096 NT_STATUS_OK
ReadX 12669 276 4096 4096 NT_STATUS_OK
ReadX 12669 2020 4096 4096 NT_STATUS_OK
ReadX 12669 2880 4096 4096 NT_STATUS_OK
ReadX 12669 516 4096 4096 NT_STATUS_OK
ReadX 12669 1844 4096 4096 NT_STATUS_OK
ReadX 12669 1124 4096 4096 NT_STATUS_OK
ReadX 12669 3136 4096 4096 NT_STATUS_OK
ReadX 12669 324 4096 4096 NT_STATUS_OK
ReadX 12669 1156 4096 4096 NT_STATUS_OK
ReadX 12669 1172 4096 4096 NT_STATUS_OK
ReadX 12669 2112 4096 4096 NT_STATUS_OK
ReadX 12669 2368 4096 4096 NT_STATUS_OK
ReadX 12669 964 4096 4096 NT_STATUS_OK
ReadX 12669 980 4096 4096 NT_STATUS_OK
ReadX 12669 1012 4096 4096 NT_STATUS_OK
ReadX 12669 532 4096 4096 NT_STATUS_OK
ReadX 12669 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 12669 1620 4096 4096 NT_STATUS_OK
ReadX 12669 1604 4096 4096 NT_STATUS_OK
ReadX 12669 2116 4096 4096 NT_STATUS_OK
ReadX 12669 2132 4096 4096 NT_STATUS_OK
ReadX 12669 2148 4096 4096 NT_STATUS_OK
ReadX 12669 2276 4096 4096 NT_STATUS_OK
ReadX 12669 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12691 NT_STATUS_OK
Close 12691 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 12694 NT_STATUS_OK
QUERY_FILE_INFORMATION 12649 1004 NT_STATUS_OK
Close 12649 NT_STATUS_OK
WriteX 12694 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12694 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 12651 1004 NT_STATUS_OK
Close 12651 NT_STATUS_OK
WriteX 12694 0 65536 65536 NT_STATUS_OK
WriteX 12694 65536 64850 64850 NT_STATUS_OK
Close 12694 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 12696 NT_STATUS_OK
WriteX 12696 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12696 258 NT_STATUS_OK
ReadX 12669 2068 4096 4096 NT_STATUS_OK
ReadX 12669 1588 4096 4096 NT_STATUS_OK
ReadX 12669 1572 4096 4096 NT_STATUS_OK
WriteX 12696 0 18630 18630 NT_STATUS_OK
Flush 12696 NT_STATUS_OK
Close 12696 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 12684 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 12698 NT_STATUS_OK
Close 12698 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 12700 NT_STATUS_OK
ReadX 12700 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12669 612 4096 4096 NT_STATUS_OK
ReadX 12669 564 4096 4096 NT_STATUS_OK
ReadX 12669 1876 4096 4096 NT_STATUS_OK
ReadX 12669 628 4096 4096 NT_STATUS_OK
ReadX 12669 740 4096 4096 NT_STATUS_OK
ReadX 12669 724 4096 4096 NT_STATUS_OK
ReadX 12669 644 4096 4096 NT_STATUS_OK
ReadX 12669 2324 4096 4096 NT_STATUS_OK
ReadX 12669 660 4096 4096 NT_STATUS_OK
ReadX 12669 852 4096 4096 NT_STATUS_OK
ReadX 12669 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 12669 2368 4096 4096 NT_STATUS_OK
ReadX 12669 1024 4096 4096 NT_STATUS_OK
ReadX 12669 320 4096 4096 NT_STATUS_OK
ReadX 12669 580 4096 4096 NT_STATUS_OK
ReadX 12669 3136 512 512 NT_STATUS_OK
ReadX 12669 2880 4096 4096 NT_STATUS_OK
Close 12669 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12701 NT_STATUS_OK
ReadX 12701 61440 4096 4096 NT_STATUS_OK
ReadX 12701 126976 4096 4096 NT_STATUS_OK
WriteX 12701 0 65536 65536 NT_STATUS_OK
WriteX 12701 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12702 NT_STATUS_OK
ReadX 12702 61440 4096 4096 NT_STATUS_OK
ReadX 12702 126976 4096 4096 NT_STATUS_OK
ReadX 12702 192512 4096 4096 NT_STATUS_OK
ReadX 12702 258048 4096 4096 NT_STATUS_OK
WriteX 12702 0 65536 65536 NT_STATUS_OK
WriteX 12702 65536 65536 65536 NT_STATUS_OK
WriteX 12702 131072 65536 65536 NT_STATUS_OK
WriteX 12702 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12703 NT_STATUS_OK
ReadX 12703 61440 4096 4096 NT_STATUS_OK
ReadX 12703 126976 4096 4096 NT_STATUS_OK
ReadX 12703 192512 4096 4096 NT_STATUS_OK
ReadX 12703 258048 4096 4096 NT_STATUS_OK
ReadX 12703 323584 4096 4096 NT_STATUS_OK
ReadX 12703 389120 4096 4096 NT_STATUS_OK
ReadX 12703 454656 4096 4096 NT_STATUS_OK
ReadX 12703 520192 4096 4096 NT_STATUS_OK
WriteX 12703 0 65536 65536 NT_STATUS_OK
WriteX 12703 65536 65536 65536 NT_STATUS_OK
WriteX 12703 131072 65536 65536 NT_STATUS_OK
WriteX 12703 196608 65536 65536 NT_STATUS_OK
WriteX 12703 262144 65536 65536 NT_STATUS_OK
WriteX 12703 327680 65536 65536 NT_STATUS_OK
WriteX 12703 393216 65536 65536 NT_STATUS_OK
WriteX 12703 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 12704 NT_STATUS_OK
ReadX 12704 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 12705 NT_STATUS_OK
Close 12705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 12706 NT_STATUS_OK
WriteX 12706 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12706 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12704 0 8192 8192 NT_STATUS_OK
Flush 12704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12704 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12704 0 8192 8192 NT_STATUS_OK
Flush 12704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12704 0 8192 8192 NT_STATUS_OK
Flush 12704 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 12704 0 8192 8192 NT_STATUS_OK
Flush 12704 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12708 NT_STATUS_OK
Close 12708 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 12700 NT_STATUS_OK
Close 12668 NT_STATUS_OK
Close 12701 NT_STATUS_OK
Close 12702 NT_STATUS_OK
Close 12703 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 12711 NT_STATUS_OK
WriteX 12711 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12711 258 NT_STATUS_OK
WriteX 12711 0 62591 62591 NT_STATUS_OK
Close 12711 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12713 NT_STATUS_OK
Close 12713 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 12716 NT_STATUS_OK
WriteX 12716 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12716 258 NT_STATUS_OK
WriteX 12716 0 10845 10845 NT_STATUS_OK
Close 12716 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12718 NT_STATUS_OK
Close 12718 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 12721 NT_STATUS_OK
WriteX 12721 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12721 258 NT_STATUS_OK
WriteX 12721 0 30118 30118 NT_STATUS_OK
Close 12721 NT_STATUS_OK
WriteX 12704 0 4096 4096 NT_STATUS_OK
WriteX 12706 0 64 64 NT_STATUS_OK
Close 12706 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 12704 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12723 NT_STATUS_OK
ReadX 12723 0 61440 61440 NT_STATUS_OK
ReadX 12723 61440 4096 4096 NT_STATUS_OK
ReadX 12723 65536 61440 61440 NT_STATUS_OK
ReadX 12723 126976 4096 4096 NT_STATUS_OK
ReadX 12723 131072 61440 61440 NT_STATUS_OK
ReadX 12723 192512 4096 4096 NT_STATUS_OK
ReadX 12723 196608 61440 61440 NT_STATUS_OK
ReadX 12723 258048 4096 4096 NT_STATUS_OK
ReadX 12723 262144 61440 61440 NT_STATUS_OK
ReadX 12723 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12724 NT_STATUS_OK
ReadX 12724 0 61440 61440 NT_STATUS_OK
ReadX 12724 61440 4096 4096 NT_STATUS_OK
ReadX 12724 65536 61440 61440 NT_STATUS_OK
ReadX 12724 126976 4096 4096 NT_STATUS_OK
ReadX 12724 131072 61440 61440 NT_STATUS_OK
ReadX 12724 192512 4096 4096 NT_STATUS_OK
ReadX 12724 196608 61440 61440 NT_STATUS_OK
ReadX 12724 258048 4096 4096 NT_STATUS_OK
ReadX 12724 262144 61440 61440 NT_STATUS_OK
ReadX 12724 323584 4096 4096 NT_STATUS_OK
ReadX 12724 327680 61440 61440 NT_STATUS_OK
ReadX 12724 389120 4096 4096 NT_STATUS_OK
ReadX 12724 393216 61440 61440 NT_STATUS_OK
ReadX 12724 454656 4096 4096 NT_STATUS_OK
ReadX 12724 458752 61440 61440 NT_STATUS_OK
ReadX 12724 520192 4096 4096 NT_STATUS_OK
ReadX 12724 524288 61440 61440 NT_STATUS_OK
ReadX 12724 585728 4096 4096 NT_STATUS_OK
ReadX 12724 589824 61440 61440 NT_STATUS_OK
ReadX 12724 651264 4096 4096 NT_STATUS_OK
ReadX 12724 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12725 NT_STATUS_OK
ReadX 12725 0 61440 61440 NT_STATUS_OK
ReadX 12725 61440 4096 4096 NT_STATUS_OK
ReadX 12725 65536 61440 61440 NT_STATUS_OK
ReadX 12725 126976 4096 4096 NT_STATUS_OK
ReadX 12725 131072 61440 61440 NT_STATUS_OK
ReadX 12725 192512 4096 4096 NT_STATUS_OK
ReadX 12725 196608 61440 61440 NT_STATUS_OK
ReadX 12725 258048 4096 4096 NT_STATUS_OK
ReadX 12725 262144 61440 61440 NT_STATUS_OK
ReadX 12725 323584 4096 4096 NT_STATUS_OK
ReadX 12725 327680 61440 61440 NT_STATUS_OK
ReadX 12725 389120 4096 4096 NT_STATUS_OK
ReadX 12725 393216 61440 61440 NT_STATUS_OK
ReadX 12725 454656 4096 4096 NT_STATUS_OK
ReadX 12725 458752 61440 61440 NT_STATUS_OK
ReadX 12725 520192 4096 4096 NT_STATUS_OK
ReadX 12725 524288 61440 61440 NT_STATUS_OK
ReadX 12725 585728 4096 4096 NT_STATUS_OK
ReadX 12725 589824 61440 61440 NT_STATUS_OK
ReadX 12725 651264 4096 4096 NT_STATUS_OK
ReadX 12725 655360 61440 61440 NT_STATUS_OK
ReadX 12725 716800 4096 4096 NT_STATUS_OK
ReadX 12725 720896 61440 61440 NT_STATUS_OK
ReadX 12725 782336 4096 4096 NT_STATUS_OK
ReadX 12725 786432 61440 61440 NT_STATUS_OK
ReadX 12725 847872 4096 4096 NT_STATUS_OK
ReadX 12725 851968 61440 61440 NT_STATUS_OK
ReadX 12725 913408 4096 4096 NT_STATUS_OK
ReadX 12725 917504 61440 61440 NT_STATUS_OK
ReadX 12725 978944 4096 4096 NT_STATUS_OK
ReadX 12725 983040 61440 61440 NT_STATUS_OK
ReadX 12725 1044480 4096 4096 NT_STATUS_OK
ReadX 12725 1048576 61440 61440 NT_STATUS_OK
ReadX 12725 1110016 4096 4096 NT_STATUS_OK
ReadX 12725 1114112 61440 61440 NT_STATUS_OK
ReadX 12725 1175552 4096 4096 NT_STATUS_OK
ReadX 12725 1179648 61440 61440 NT_STATUS_OK
ReadX 12725 1241088 4096 4096 NT_STATUS_OK
ReadX 12725 1245184 61440 61440 NT_STATUS_OK
ReadX 12725 1306624 4096 4096 NT_STATUS_OK
ReadX 12725 1310720 61440 61440 NT_STATUS_OK
ReadX 12725 1372160 4096 4096 NT_STATUS_OK
ReadX 12725 1376256 61440 61440 NT_STATUS_OK
ReadX 12725 1437696 4096 4096 NT_STATUS_OK
ReadX 12725 1441792 61440 61440 NT_STATUS_OK
ReadX 12725 1503232 4096 4096 NT_STATUS_OK
ReadX 12725 1507328 61440 61440 NT_STATUS_OK
ReadX 12725 1568768 4096 4096 NT_STATUS_OK
ReadX 12725 1572864 61440 61440 NT_STATUS_OK
ReadX 12725 1634304 4096 4096 NT_STATUS_OK
ReadX 12725 1638400 61440 61440 NT_STATUS_OK
ReadX 12725 1699840 4096 4096 NT_STATUS_OK
ReadX 12725 1703936 61440 61440 NT_STATUS_OK
ReadX 12725 1765376 4096 4096 NT_STATUS_OK
ReadX 12725 1769472 61440 61440 NT_STATUS_OK
ReadX 12725 1830912 4096 4096 NT_STATUS_OK
ReadX 12725 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12726 NT_STATUS_OK
Close 12726 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12723 NT_STATUS_OK
Close 12724 NT_STATUS_OK
Close 12725 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12728 NT_STATUS_OK
ReadX 12728 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12729 NT_STATUS_OK
ReadX 12729 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 12730 NT_STATUS_OK
ReadX 12730 0 4096 4096 NT_STATUS_OK
ReadX 12730 4096 4096 4096 NT_STATUS_OK
ReadX 12730 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12731 NT_STATUS_OK
Close 12731 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12728 NT_STATUS_OK
Close 12729 NT_STATUS_OK
Close 12730 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12733 NT_STATUS_OK
ReadX 12733 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12734 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12734 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12735 NT_STATUS_OK
Close 12735 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12733 NT_STATUS_OK
Close 12734 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12737 NT_STATUS_OK
ReadX 12737 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 12738 NT_STATUS_OK
ReadX 12738 0 8192 8192 NT_STATUS_OK
ReadX 12738 8192 8192 8192 NT_STATUS_OK
ReadX 12738 16384 8192 8192 NT_STATUS_OK
ReadX 12738 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12740 NT_STATUS_OK
Close 12740 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12738 NT_STATUS_OK
Close 12737 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12743 NT_STATUS_OK
WriteX 12743 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12743 258 NT_STATUS_OK
WriteX 12743 0 10438 10438 NT_STATUS_OK
Close 12743 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12744 NT_STATUS_OK
Close 12744 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 12745 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12746 NT_STATUS_OK
Close 12746 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 12747 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12748 NT_STATUS_OK
Close 12748 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 12749 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12750 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12751 NT_STATUS_OK
Close 12751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 12752 NT_STATUS_OK
ReadX 12752 0 4096 4096 NT_STATUS_OK
ReadX 12752 4096 4096 4096 NT_STATUS_OK
ReadX 12752 8192 4096 4096 NT_STATUS_OK
ReadX 12752 12288 8192 8192 NT_STATUS_OK
ReadX 12752 20480 8192 8192 NT_STATUS_OK
ReadX 12752 28672 8192 8192 NT_STATUS_OK
ReadX 12752 36864 8192 8192 NT_STATUS_OK
ReadX 12752 45056 8192 8192 NT_STATUS_OK
ReadX 12752 53248 8192 8192 NT_STATUS_OK
ReadX 12752 61440 8192 8192 NT_STATUS_OK
ReadX 12752 69632 8192 8192 NT_STATUS_OK
ReadX 12752 77824 8192 8192 NT_STATUS_OK
ReadX 12752 86016 8192 8192 NT_STATUS_OK
ReadX 12752 94208 8192 8192 NT_STATUS_OK
ReadX 12752 102400 8192 8192 NT_STATUS_OK
ReadX 12752 110592 8192 8192 NT_STATUS_OK
ReadX 12752 118784 8192 8192 NT_STATUS_OK
ReadX 12752 126976 8192 8192 NT_STATUS_OK
ReadX 12752 135168 8192 8192 NT_STATUS_OK
ReadX 12752 143360 8192 8192 NT_STATUS_OK
ReadX 12752 151552 8192 8192 NT_STATUS_OK
ReadX 12752 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 12753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12753 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 12752 NT_STATUS_OK
Close 12745 NT_STATUS_OK
Close 12747 NT_STATUS_OK
Close 12749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 12754 NT_STATUS_OK
Close 12754 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 12757 NT_STATUS_OK
WriteX 12757 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12757 258 NT_STATUS_OK
WriteX 12757 0 28489 28489 NT_STATUS_OK
Close 12757 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12758 NT_STATUS_OK
Close 12758 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12760 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 12760 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12761 NT_STATUS_OK
Close 12761 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 12760 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 12763 NT_STATUS_OK
ReadX 12763 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 12764 NT_STATUS_OK
ReadX 12764 0 8192 8192 NT_STATUS_OK
ReadX 12764 8192 8192 8192 NT_STATUS_OK
ReadX 12764 16384 8192 8192 NT_STATUS_OK
ReadX 12764 24576 8192 8192 NT_STATUS_OK
ReadX 12764 32768 16384 16384 NT_STATUS_OK
ReadX 12764 49152 8192 8192 NT_STATUS_OK
ReadX 12764 57344 8192 8192 NT_STATUS_OK
ReadX 12764 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12766 NT_STATUS_OK
Close 12766 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12764 NT_STATUS_OK
Close 12763 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12769 NT_STATUS_OK
WriteX 12769 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12769 258 NT_STATUS_OK
WriteX 12769 0 29253 29253 NT_STATUS_OK
Close 12769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12770 NT_STATUS_OK
Close 12770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 12771 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 12772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 12772 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 12771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 12773 NT_STATUS_OK
Close 12773 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 12776 NT_STATUS_OK
WriteX 12776 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12776 258 NT_STATUS_OK
WriteX 12776 0 30183 30183 NT_STATUS_OK
Close 12776 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 12777 NT_STATUS_OK
Close 12777 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 12779 NT_STATUS_OK
WriteX 12779 0 510 510 NT_STATUS_OK
WriteX 12779 510 512 512 NT_STATUS_OK
WriteX 12779 1022 510 510 NT_STATUS_OK
WriteX 12779 1532 510 510 NT_STATUS_OK
WriteX 12779 2042 168 168 NT_STATUS_OK
Close 12779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 12780 NT_STATUS_OK
Close 12780 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 12782 NT_STATUS_OK
ReadX 12782 0 4096 4096 NT_STATUS_OK
WriteX 12782 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 12783 NT_STATUS_OK
ReadX 12783 61440 4096 4096 NT_STATUS_OK
ReadX 12783 126976 4096 4096 NT_STATUS_OK
WriteX 12783 0 65536 65536 NT_STATUS_OK
WriteX 12783 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 12784 NT_STATUS_OK
ReadX 12784 61440 4096 4096 NT_STATUS_OK
ReadX 12784 126976 4096 4096 NT_STATUS_OK
ReadX 12784 192512 4096 4096 NT_STATUS_OK
ReadX 12784 258048 4096 4096 NT_STATUS_OK
WriteX 12784 0 65536 65536 NT_STATUS_OK
WriteX 12784 65536 65536 65536 NT_STATUS_OK
WriteX 12784 131072 65536 65536 NT_STATUS_OK
WriteX 12784 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 12785 NT_STATUS_OK
ReadX 12785 61440 4096 4096 NT_STATUS_OK
ReadX 12785 126976 4096 4096 NT_STATUS_OK
ReadX 12785 192512 4096 4096 NT_STATUS_OK
ReadX 12785 258048 4096 4096 NT_STATUS_OK
ReadX 12785 323584 4096 4096 NT_STATUS_OK
ReadX 12785 389120 4096 4096 NT_STATUS_OK
ReadX 12785 454656 4096 4096 NT_STATUS_OK
ReadX 12785 520192 4096 4096 NT_STATUS_OK
WriteX 12785 0 65536 65536 NT_STATUS_OK
WriteX 12785 65536 65536 65536 NT_STATUS_OK
WriteX 12785 131072 65536 65536 NT_STATUS_OK
WriteX 12785 196608 65536 65536 NT_STATUS_OK
WriteX 12785 262144 65536 65536 NT_STATUS_OK
WriteX 12785 327680 65536 65536 NT_STATUS_OK
WriteX 12785 393216 65536 65536 NT_STATUS_OK
WriteX 12785 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12786 NT_STATUS_OK
Close 12786 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 12782 NT_STATUS_OK
Close 12783 NT_STATUS_OK
Close 12784 NT_STATUS_OK
Close 12785 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 12788 NT_STATUS_OK
Close 12788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 12792 NT_STATUS_OK
Close 12792 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 12795 NT_STATUS_OK
Close 12795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 12797 NT_STATUS_OK
Close 12797 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12801 NT_STATUS_OK
Close 12801 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12804 NT_STATUS_OK
Close 12804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 12806 NT_STATUS_OK
Close 12806 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12810 NT_STATUS_OK
Close 12810 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12815 NT_STATUS_OK
Close 12815 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12820 NT_STATUS_OK
Close 12820 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 12825 NT_STATUS_OK
Close 12825 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12830 NT_STATUS_OK
Close 12830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12835 NT_STATUS_OK
Close 12835 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 12840 NT_STATUS_OK
Close 12840 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 12845 NT_STATUS_OK
Close 12845 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 12848 NT_STATUS_OK
Close 12848 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12851 NT_STATUS_OK
Close 12851 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 12854 NT_STATUS_OK
WriteX 12854 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12854 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 12854 0 65536 65536 NT_STATUS_OK
WriteX 12854 65536 65536 65536 NT_STATUS_OK
WriteX 12854 131072 65536 65536 NT_STATUS_OK
WriteX 12854 196608 65536 65536 NT_STATUS_OK
WriteX 12854 262144 26634 26634 NT_STATUS_OK
Close 12854 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12859 NT_STATUS_OK
Close 12859 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12860 NT_STATUS_OK
Close 12860 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12861 NT_STATUS_OK
ReadX 12861 0 4096 4096 NT_STATUS_OK
Close 12861 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 12862 NT_STATUS_OK
ReadX 12862 0 4096 4096 NT_STATUS_OK
ReadX 12862 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12863 NT_STATUS_OK
Close 12863 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 12862 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12867 NT_STATUS_OK
Close 12867 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12870 NT_STATUS_OK
Close 12870 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 12872 NT_STATUS_OK
Close 12872 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12876 NT_STATUS_OK
Close 12876 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 12879 NT_STATUS_OK
Close 12879 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12881 NT_STATUS_OK
Close 12881 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12885 NT_STATUS_OK
Close 12885 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12890 NT_STATUS_OK
Close 12890 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12895 NT_STATUS_OK
Close 12895 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 12900 NT_STATUS_OK
Close 12900 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12905 NT_STATUS_OK
Close 12905 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 12910 NT_STATUS_OK
Close 12910 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12914 NT_STATUS_OK
Close 12914 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12919 NT_STATUS_OK
Close 12919 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 12924 NT_STATUS_OK
Close 12924 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 12927 NT_STATUS_OK
Close 12927 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 12929 NT_STATUS_OK
Close 12929 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12939 NT_STATUS_OK
Close 12939 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12940 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12940 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12941 NT_STATUS_OK
ReadX 12941 0 4096 4096 NT_STATUS_OK
Close 12941 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12942 NT_STATUS_OK
ReadX 12942 0 4096 4096 NT_STATUS_OK
Close 12942 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 12943 NT_STATUS_OK
ReadX 12943 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12953 NT_STATUS_OK
Close 12953 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12954 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 12954 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12955 NT_STATUS_OK
ReadX 12955 0 4096 4096 NT_STATUS_OK
Close 12955 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12956 NT_STATUS_OK
ReadX 12956 0 4096 4096 NT_STATUS_OK
Close 12956 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 12957 NT_STATUS_OK
ReadX 12957 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 12943 NT_STATUS_OK
Close 12957 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12986 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 12986 0 4096 4096 NT_STATUS_OK
Close 12986 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12987 NT_STATUS_OK
ReadX 12987 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 12987 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12988 NT_STATUS_OK
ReadX 12988 0 4096 4096 NT_STATUS_OK
ReadX 12988 4096 4096 4096 NT_STATUS_OK
ReadX 12988 8192 4096 4096 NT_STATUS_OK
ReadX 12988 12288 4096 4096 NT_STATUS_OK
ReadX 12988 16384 4096 4096 NT_STATUS_OK
ReadX 12988 20480 4096 4096 NT_STATUS_OK
ReadX 12988 24576 4096 4096 NT_STATUS_OK
ReadX 12988 28672 4096 4096 NT_STATUS_OK
ReadX 12988 32768 4096 4096 NT_STATUS_OK
ReadX 12988 36864 4096 4096 NT_STATUS_OK
ReadX 12988 40960 4096 4096 NT_STATUS_OK
ReadX 12988 45056 4096 4096 NT_STATUS_OK
ReadX 12988 49152 4096 4096 NT_STATUS_OK
ReadX 12988 53248 4096 4096 NT_STATUS_OK
ReadX 12988 57344 4096 4096 NT_STATUS_OK
ReadX 12988 61440 4096 4096 NT_STATUS_OK
ReadX 12988 65536 4096 4096 NT_STATUS_OK
ReadX 12988 69632 4096 4096 NT_STATUS_OK
ReadX 12988 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 12988 1004 NT_STATUS_OK
WriteX 12988 0 4096 4096 NT_STATUS_OK
Close 12988 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12989 NT_STATUS_OK
SET_FILE_INFORMATION 12989 1004 NT_STATUS_OK
Close 12989 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 12990 NT_STATUS_OK
ReadX 12990 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12991 NT_STATUS_OK
Close 12991 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 12994 NT_STATUS_OK
WriteX 12994 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 12994 258 NT_STATUS_OK
WriteX 12994 0 65536 65536 NT_STATUS_OK
WriteX 12994 65536 19979 19979 NT_STATUS_OK
Close 12994 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12995 NT_STATUS_OK
ReadX 12995 0 4096 4096 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
QUERY_FILE_INFORMATION 12995 1004 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
SET_FILE_INFORMATION 12995 1004 NT_STATUS_OK
WriteX 12995 0 4096 4096 NT_STATUS_OK
Flush 12995 NT_STATUS_OK
Close 12995 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12996 NT_STATUS_OK
ReadX 12996 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 12997 NT_STATUS_OK
ReadX 12997 0 4096 4096 NT_STATUS_OK
Close 12996 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12998 NT_STATUS_OK
ReadX 12998 0 4096 4096 NT_STATUS_OK
Close 12998 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 12999 NT_STATUS_OK
ReadX 12999 0 4096 4096 NT_STATUS_OK
Close 12999 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13000 NT_STATUS_OK
ReadX 13000 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13000 1004 NT_STATUS_OK
WriteX 13000 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13001 NT_STATUS_OK
Close 13001 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 12997 NT_STATUS_OK
Close 13000 NT_STATUS_OK
Close 12990 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13003 NT_STATUS_OK
Close 13003 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13006 NT_STATUS_OK
WriteX 13006 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13006 258 NT_STATUS_OK
WriteX 13006 0 65536 65536 NT_STATUS_OK
WriteX 13006 65536 17654 17654 NT_STATUS_OK
Close 13006 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13007 NT_STATUS_OK
ReadX 13007 0 4096 4096 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
QUERY_FILE_INFORMATION 13007 1004 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
SET_FILE_INFORMATION 13007 1004 NT_STATUS_OK
WriteX 13007 0 4096 4096 NT_STATUS_OK
Flush 13007 NT_STATUS_OK
Close 13007 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13008 NT_STATUS_OK
SET_FILE_INFORMATION 13008 1004 NT_STATUS_OK
Close 13008 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13009 NT_STATUS_OK
ReadX 13009 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13010 NT_STATUS_OK
Close 13010 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13012 NT_STATUS_OK
ReadX 13012 0 4096 4096 NT_STATUS_OK
ReadX 13012 4096 4096 4096 NT_STATUS_OK
ReadX 13012 8192 4096 4096 NT_STATUS_OK
ReadX 13012 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13012 16384 4096 4096 NT_STATUS_OK
ReadX 13012 20480 4096 4096 NT_STATUS_OK
ReadX 13012 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13009 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13013 NT_STATUS_OK
ReadX 13013 0 4096 4096 NT_STATUS_OK
Close 13013 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13014 NT_STATUS_OK
ReadX 13014 0 4096 4096 NT_STATUS_OK
Close 13014 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13015 NT_STATUS_OK
ReadX 13015 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13015 1004 NT_STATUS_OK
WriteX 13015 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13016 NT_STATUS_OK
Close 13016 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13015 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13018 NT_STATUS_OK
Close 13018 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13021 NT_STATUS_OK
WriteX 13021 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13021 258 NT_STATUS_OK
WriteX 13021 0 65536 65536 NT_STATUS_OK
WriteX 13021 65536 19490 19490 NT_STATUS_OK
Close 13021 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13022 NT_STATUS_OK
ReadX 13022 0 4096 4096 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
QUERY_FILE_INFORMATION 13022 1004 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
SET_FILE_INFORMATION 13022 1004 NT_STATUS_OK
WriteX 13022 0 4096 4096 NT_STATUS_OK
Flush 13022 NT_STATUS_OK
Close 13022 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13023 NT_STATUS_OK
SET_FILE_INFORMATION 13023 1004 NT_STATUS_OK
Close 13023 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13024 NT_STATUS_OK
ReadX 13024 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13025 NT_STATUS_OK
Close 13025 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13027 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13027 0 4096 4096 NT_STATUS_OK
Close 13027 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13028 NT_STATUS_OK
ReadX 13028 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13028 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13029 NT_STATUS_OK
ReadX 13029 0 4096 4096 NT_STATUS_OK
ReadX 13029 4096 4096 4096 NT_STATUS_OK
ReadX 13029 8192 4096 4096 NT_STATUS_OK
ReadX 13029 12288 4096 4096 NT_STATUS_OK
ReadX 13029 16384 4096 4096 NT_STATUS_OK
ReadX 13029 20480 4096 4096 NT_STATUS_OK
ReadX 13029 24576 4096 4096 NT_STATUS_OK
ReadX 13029 28672 4096 4096 NT_STATUS_OK
ReadX 13029 32768 4096 4096 NT_STATUS_OK
ReadX 13029 36864 4096 4096 NT_STATUS_OK
ReadX 13029 40960 4096 4096 NT_STATUS_OK
ReadX 13029 45056 4096 4096 NT_STATUS_OK
ReadX 13029 49152 4096 4096 NT_STATUS_OK
ReadX 13029 53248 4096 4096 NT_STATUS_OK
ReadX 13029 57344 4096 4096 NT_STATUS_OK
ReadX 13029 61440 4096 4096 NT_STATUS_OK
ReadX 13029 65536 4096 4096 NT_STATUS_OK
ReadX 13029 69632 4096 4096 NT_STATUS_OK
ReadX 13029 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13029 1004 NT_STATUS_OK
WriteX 13029 0 4096 4096 NT_STATUS_OK
Close 13029 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13030 NT_STATUS_OK
SET_FILE_INFORMATION 13030 1004 NT_STATUS_OK
Close 13030 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13031 NT_STATUS_OK
ReadX 13031 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13032 NT_STATUS_OK
Close 13032 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13024 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13035 NT_STATUS_OK
WriteX 13035 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13035 258 NT_STATUS_OK
WriteX 13035 0 65536 65536 NT_STATUS_OK
WriteX 13035 65536 8866 8866 NT_STATUS_OK
Close 13035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13036 NT_STATUS_OK
ReadX 13036 0 4096 4096 NT_STATUS_OK
WriteX 13036 0 4096 4096 NT_STATUS_OK
Flush 13036 NT_STATUS_OK
SET_FILE_INFORMATION 13036 1004 NT_STATUS_OK
WriteX 13036 0 4096 4096 NT_STATUS_OK
Flush 13036 NT_STATUS_OK
Close 13036 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13037 NT_STATUS_OK
ReadX 13037 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13037 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13038 NT_STATUS_OK
ReadX 13038 0 4096 4096 NT_STATUS_OK
Close 13038 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13039 NT_STATUS_OK
ReadX 13039 0 4096 4096 NT_STATUS_OK
Close 13039 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13040 NT_STATUS_OK
ReadX 13040 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13040 1004 NT_STATUS_OK
WriteX 13040 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13041 NT_STATUS_OK
Close 13041 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13040 NT_STATUS_OK
Close 13031 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13043 NT_STATUS_OK
Close 13043 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13046 NT_STATUS_OK
WriteX 13046 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13046 258 NT_STATUS_OK
WriteX 13046 0 65536 65536 NT_STATUS_OK
WriteX 13046 65536 9298 9298 NT_STATUS_OK
Close 13046 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13047 NT_STATUS_OK
ReadX 13047 0 4096 4096 NT_STATUS_OK
WriteX 13047 0 4096 4096 NT_STATUS_OK
Flush 13047 NT_STATUS_OK
SET_FILE_INFORMATION 13047 1004 NT_STATUS_OK
WriteX 13047 0 4096 4096 NT_STATUS_OK
Flush 13047 NT_STATUS_OK
Close 13047 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13048 NT_STATUS_OK
SET_FILE_INFORMATION 13048 1004 NT_STATUS_OK
Close 13048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13049 NT_STATUS_OK
ReadX 13049 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13050 NT_STATUS_OK
Close 13050 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13053 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13053 0 4096 4096 NT_STATUS_OK
Close 13053 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13054 NT_STATUS_OK
ReadX 13054 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13054 4096 4096 4096 NT_STATUS_OK
ReadX 13054 8192 4096 4096 NT_STATUS_OK
ReadX 13054 12288 4096 4096 NT_STATUS_OK
ReadX 13054 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13049 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13055 NT_STATUS_OK
ReadX 13055 0 4096 4096 NT_STATUS_OK
Close 13055 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13056 NT_STATUS_OK
ReadX 13056 0 4096 4096 NT_STATUS_OK
Close 13056 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13057 NT_STATUS_OK
ReadX 13057 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13057 1004 NT_STATUS_OK
WriteX 13057 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13058 NT_STATUS_OK
Close 13058 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13054 NT_STATUS_OK
Close 13057 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13060 NT_STATUS_OK
Close 13060 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13063 NT_STATUS_OK
WriteX 13063 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13063 258 NT_STATUS_OK
WriteX 13063 0 65536 65536 NT_STATUS_OK
WriteX 13063 65536 11540 11540 NT_STATUS_OK
Close 13063 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13064 NT_STATUS_OK
ReadX 13064 0 4096 4096 NT_STATUS_OK
WriteX 13064 0 4096 4096 NT_STATUS_OK
Flush 13064 NT_STATUS_OK
SET_FILE_INFORMATION 13064 1004 NT_STATUS_OK
WriteX 13064 0 4096 4096 NT_STATUS_OK
Flush 13064 NT_STATUS_OK
Close 13064 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13065 NT_STATUS_OK
SET_FILE_INFORMATION 13065 1004 NT_STATUS_OK
Close 13065 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13066 NT_STATUS_OK
ReadX 13066 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13067 NT_STATUS_OK
Close 13067 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13069 NT_STATUS_OK
ReadX 13069 61440 4096 4096 NT_STATUS_OK
ReadX 13069 126976 4096 4096 NT_STATUS_OK
WriteX 13069 0 65536 65536 NT_STATUS_OK
WriteX 13069 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13070 NT_STATUS_OK
ReadX 13070 61440 4096 4096 NT_STATUS_OK
ReadX 13070 126976 4096 4096 NT_STATUS_OK
ReadX 13070 192512 4096 4096 NT_STATUS_OK
ReadX 13070 258048 4096 4096 NT_STATUS_OK
WriteX 13070 0 65536 65536 NT_STATUS_OK
WriteX 13070 65536 65536 65536 NT_STATUS_OK
WriteX 13070 131072 65536 65536 NT_STATUS_OK
WriteX 13070 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13071 NT_STATUS_OK
ReadX 13071 61440 4096 4096 NT_STATUS_OK
ReadX 13071 126976 4096 4096 NT_STATUS_OK
ReadX 13071 192512 4096 4096 NT_STATUS_OK
ReadX 13071 258048 4096 4096 NT_STATUS_OK
ReadX 13071 323584 4096 4096 NT_STATUS_OK
ReadX 13071 389120 4096 4096 NT_STATUS_OK
ReadX 13071 454656 4096 4096 NT_STATUS_OK
ReadX 13071 520192 4096 4096 NT_STATUS_OK
WriteX 13071 0 65536 65536 NT_STATUS_OK
WriteX 13071 65536 65536 65536 NT_STATUS_OK
WriteX 13071 131072 65536 65536 NT_STATUS_OK
WriteX 13071 196608 65536 65536 NT_STATUS_OK
WriteX 13071 262144 65536 65536 NT_STATUS_OK
WriteX 13071 327680 65536 65536 NT_STATUS_OK
WriteX 13071 393216 65536 65536 NT_STATUS_OK
WriteX 13071 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13072 NT_STATUS_OK
ReadX 13072 0 4096 4096 NT_STATUS_OK
ReadX 13072 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13073 NT_STATUS_OK
WriteX 13073 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13073 258 NT_STATUS_OK
WriteX 13073 0 53 53 NT_STATUS_OK
Close 13073 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x2 13074 NT_STATUS_OK
Close 13074 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13066 NT_STATUS_OK
Close 13012 NT_STATUS_OK
Close 13069 NT_STATUS_OK
Close 13070 NT_STATUS_OK
Close 13071 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x2 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13072 8192 4096 4096 NT_STATUS_OK
ReadX 13072 12288 4096 4096 NT_STATUS_OK
WriteX 13076 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13076 258 NT_STATUS_OK
ReadX 13072 16384 4096 4096 NT_STATUS_OK
ReadX 13072 20480 4096 4096 NT_STATUS_OK
WriteX 13076 0 15360 15360 NT_STATUS_OK
Close 13076 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x40 0x1 13077 NT_STATUS_OK
ReadX 13077 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13077 1004 NT_STATUS_OK
WriteX 13077 0 4096 4096 NT_STATUS_OK
Close 13077 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" 0x0 0x1 13078 NT_STATUS_OK
Close 13078 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0000.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13080 NT_STATUS_OK
ReadX 13080 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x1 13081 NT_STATUS_OK
Close 13081 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x6 NT_STATUS_OK
ReadX 13080 4096 4096 4096 NT_STATUS_OK
ReadX 13080 8192 4096 4096 NT_STATUS_OK
ReadX 13080 12288 3072 3072 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13083 NT_STATUS_OK
ReadX 13083 0 4096 4096 NT_STATUS_OK
ReadX 13083 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\BASEMACH.DOC" 0x40 0x1 13084 NT_STATUS_OK
ReadX 13084 0 4096 4096 NT_STATUS_OK
ReadX 13084 4096 4096 4096 NT_STATUS_OK
ReadX 13084 8192 4096 4096 NT_STATUS_OK
Close 13083 NT_STATUS_OK
Close 13084 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x2 13085 NT_STATUS_OK
WriteX 13085 15359 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13085 258 NT_STATUS_OK
WriteX 13085 0 15360 15360 NT_STATUS_OK
Close 13085 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x40 0x1 13086 NT_STATUS_OK
ReadX 13086 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13086 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13086 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13080 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13072 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x0 0x1 13087 NT_STATUS_OK
Close 13087 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13089 NT_STATUS_OK
ReadX 13089 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x0 0x1 13090 NT_STATUS_OK
SET_FILE_INFORMATION 13090 1004 NT_STATUS_OK
Close 13090 NT_STATUS_OK
WriteX 13086 0 4096 4096 NT_STATUS_OK
Close 13086 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" 0x0 0x1 13091 NT_STATUS_OK
Close 13091 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD0003.TMP" "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x40 0x1 13093 NT_STATUS_OK
ReadX 13093 0 4096 4096 NT_STATUS_OK
ReadX 13093 4096 4096 4096 NT_STATUS_OK
ReadX 13093 8192 4096 4096 NT_STATUS_OK
ReadX 13093 12288 3072 3072 NT_STATUS_OK
SET_FILE_INFORMATION 13093 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13093 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FACTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FACTS.DOC" 0x40 0x1 13094 NT_STATUS_OK
ReadX 13094 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x2 13095 NT_STATUS_OK
WriteX 13095 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13095 258 NT_STATUS_OK
WriteX 13095 0 53 53 NT_STATUS_OK
Close 13095 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x2 13096 NT_STATUS_OK
Close 13096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x2 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13094 4096 4096 4096 NT_STATUS_OK
ReadX 13094 8192 4096 4096 NT_STATUS_OK
ReadX 13094 12288 4096 4096 NT_STATUS_OK
WriteX 13098 12005 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13098 258 NT_STATUS_OK
WriteX 13098 0 12006 12006 NT_STATUS_OK
Close 13098 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x40 0x1 13099 NT_STATUS_OK
ReadX 13099 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13099 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13099 1004 NT_STATUS_OK
WriteX 13099 0 4096 4096 NT_STATUS_OK
Close 13099 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" 0x0 0x1 13100 NT_STATUS_OK
Close 13100 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD3497.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13102 NT_STATUS_OK
ReadX 13102 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x40 0x1 13103 NT_STATUS_OK
Close 13103 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~$FACTS.DOC" 0x6 NT_STATUS_OK
ReadX 13102 4096 4096 4096 NT_STATUS_OK
ReadX 13102 8192 3814 3814 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x2 13105 NT_STATUS_OK
WriteX 13105 11990 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13105 258 NT_STATUS_OK
WriteX 13105 0 11991 11991 NT_STATUS_OK
Close 13105 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x40 0x1 13106 NT_STATUS_OK
ReadX 13106 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13106 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13106 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13102 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Close 13094 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x0 0x1 13107 NT_STATUS_OK
Close 13107 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\TIPS.DOC" "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13109 NT_STATUS_OK
ReadX 13109 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x0 0x1 13110 NT_STATUS_OK
SET_FILE_INFORMATION 13110 1004 NT_STATUS_OK
Close 13110 NT_STATUS_OK
WriteX 13106 0 4096 4096 NT_STATUS_OK
Close 13106 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" 0x0 0x1 13111 NT_STATUS_OK
Close 13111 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORD\~WRD1119.TMP" "\clients\client1\~dmtmp\WORD\TIPS.DOC" NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x40 0x1 13113 NT_STATUS_OK
ReadX 13113 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x40 0x2 13114 NT_STATUS_OK
Close 13114 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\FSA4230.TMP" 0x6 NT_STATUS_OK
ReadX 13113 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13113 1004 NT_STATUS_OK
ReadX 13113 8192 3799 3799 NT_STATUS_OK
SET_FILE_INFORMATION 13113 1004 NT_STATUS_OK
WriteX 13113 0 14984 14984 NT_STATUS_OK
QUERY_FILE_INFORMATION 13113 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13113 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13113 1004 NT_STATUS_OK
Close 13089 NT_STATUS_OK
WriteX 13093 0 19054 19054 NT_STATUS_OK
WriteX 13113 0 12288 12288 NT_STATUS_OK
Close 13109 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x40 0x1 13116 NT_STATUS_OK
Close 13116 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 1035 NT_STATUS_OK
Close 13093 NT_STATUS_OK
Close 13113 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL0004.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x40 0x1 13118 NT_STATUS_OK
Close 13118 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\~WRL1146.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13120 NT_STATUS_OK
ReadX 13120 0 61440 61440 NT_STATUS_OK
ReadX 13120 61440 4096 4096 NT_STATUS_OK
ReadX 13120 65536 61440 61440 NT_STATUS_OK
ReadX 13120 126976 4096 4096 NT_STATUS_OK
ReadX 13120 131072 61440 61440 NT_STATUS_OK
ReadX 13120 192512 4096 4096 NT_STATUS_OK
ReadX 13120 196608 61440 61440 NT_STATUS_OK
ReadX 13120 258048 4096 4096 NT_STATUS_OK
ReadX 13120 262144 61440 61440 NT_STATUS_OK
ReadX 13120 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13121 NT_STATUS_OK
ReadX 13121 0 61440 61440 NT_STATUS_OK
ReadX 13121 61440 4096 4096 NT_STATUS_OK
ReadX 13121 65536 61440 61440 NT_STATUS_OK
ReadX 13121 126976 4096 4096 NT_STATUS_OK
ReadX 13121 131072 61440 61440 NT_STATUS_OK
ReadX 13121 192512 4096 4096 NT_STATUS_OK
ReadX 13121 196608 61440 61440 NT_STATUS_OK
ReadX 13121 258048 4096 4096 NT_STATUS_OK
ReadX 13121 262144 61440 61440 NT_STATUS_OK
ReadX 13121 323584 4096 4096 NT_STATUS_OK
ReadX 13121 327680 61440 61440 NT_STATUS_OK
ReadX 13121 389120 4096 4096 NT_STATUS_OK
ReadX 13121 393216 61440 61440 NT_STATUS_OK
ReadX 13121 454656 4096 4096 NT_STATUS_OK
ReadX 13121 458752 61440 61440 NT_STATUS_OK
ReadX 13121 520192 4096 4096 NT_STATUS_OK
ReadX 13121 524288 61440 61440 NT_STATUS_OK
ReadX 13121 585728 4096 4096 NT_STATUS_OK
ReadX 13121 589824 61440 61440 NT_STATUS_OK
ReadX 13121 651264 4096 4096 NT_STATUS_OK
ReadX 13121 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13122 NT_STATUS_OK
ReadX 13122 0 61440 61440 NT_STATUS_OK
ReadX 13122 61440 4096 4096 NT_STATUS_OK
ReadX 13122 65536 61440 61440 NT_STATUS_OK
ReadX 13122 126976 4096 4096 NT_STATUS_OK
ReadX 13122 131072 61440 61440 NT_STATUS_OK
ReadX 13122 192512 4096 4096 NT_STATUS_OK
ReadX 13122 196608 61440 61440 NT_STATUS_OK
ReadX 13122 258048 4096 4096 NT_STATUS_OK
ReadX 13122 262144 61440 61440 NT_STATUS_OK
ReadX 13122 323584 4096 4096 NT_STATUS_OK
ReadX 13122 327680 61440 61440 NT_STATUS_OK
ReadX 13122 389120 4096 4096 NT_STATUS_OK
ReadX 13122 393216 61440 61440 NT_STATUS_OK
ReadX 13122 454656 4096 4096 NT_STATUS_OK
ReadX 13122 458752 61440 61440 NT_STATUS_OK
ReadX 13122 520192 4096 4096 NT_STATUS_OK
ReadX 13122 524288 61440 61440 NT_STATUS_OK
ReadX 13122 585728 4096 4096 NT_STATUS_OK
ReadX 13122 589824 61440 61440 NT_STATUS_OK
ReadX 13122 651264 4096 4096 NT_STATUS_OK
ReadX 13122 655360 61440 61440 NT_STATUS_OK
ReadX 13122 716800 4096 4096 NT_STATUS_OK
ReadX 13122 720896 61440 61440 NT_STATUS_OK
ReadX 13122 782336 4096 4096 NT_STATUS_OK
ReadX 13122 786432 61440 61440 NT_STATUS_OK
ReadX 13122 847872 4096 4096 NT_STATUS_OK
ReadX 13122 851968 61440 61440 NT_STATUS_OK
ReadX 13122 913408 4096 4096 NT_STATUS_OK
ReadX 13122 917504 61440 61440 NT_STATUS_OK
ReadX 13122 978944 4096 4096 NT_STATUS_OK
ReadX 13122 983040 61440 61440 NT_STATUS_OK
ReadX 13122 1044480 4096 4096 NT_STATUS_OK
ReadX 13122 1048576 61440 61440 NT_STATUS_OK
ReadX 13122 1110016 4096 4096 NT_STATUS_OK
ReadX 13122 1114112 61440 61440 NT_STATUS_OK
ReadX 13122 1175552 4096 4096 NT_STATUS_OK
ReadX 13122 1179648 61440 61440 NT_STATUS_OK
ReadX 13122 1241088 4096 4096 NT_STATUS_OK
ReadX 13122 1245184 61440 61440 NT_STATUS_OK
ReadX 13122 1306624 4096 4096 NT_STATUS_OK
ReadX 13122 1310720 61440 61440 NT_STATUS_OK
ReadX 13122 1372160 4096 4096 NT_STATUS_OK
ReadX 13122 1376256 61440 61440 NT_STATUS_OK
ReadX 13122 1437696 4096 4096 NT_STATUS_OK
ReadX 13122 1441792 61440 61440 NT_STATUS_OK
ReadX 13122 1503232 4096 4096 NT_STATUS_OK
ReadX 13122 1507328 61440 61440 NT_STATUS_OK
ReadX 13122 1568768 4096 4096 NT_STATUS_OK
ReadX 13122 1572864 61440 61440 NT_STATUS_OK
ReadX 13122 1634304 4096 4096 NT_STATUS_OK
ReadX 13122 1638400 61440 61440 NT_STATUS_OK
ReadX 13122 1699840 4096 4096 NT_STATUS_OK
ReadX 13122 1703936 61440 61440 NT_STATUS_OK
ReadX 13122 1765376 4096 4096 NT_STATUS_OK
ReadX 13122 1769472 61440 61440 NT_STATUS_OK
ReadX 13122 1830912 4096 4096 NT_STATUS_OK
ReadX 13122 1835008 32768 32768 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13123 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13123 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13124 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13124 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13125 NT_STATUS_OK
ReadX 13125 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13126 NT_STATUS_OK
ReadX 13126 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13127 NT_STATUS_OK
ReadX 13127 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S3CF99.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x2 13128 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13128 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x40 0x1 13129 NT_STATUS_OK
QUERY_FILE_INFORMATION 13129 1004 NT_STATUS_OK
WriteX 13129 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13129 258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x2 13130 NT_STATUS_OK
Close 13130 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13131 NT_STATUS_OK
WriteX 13131 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13131 258 NT_STATUS_OK
WriteX 13131 0 491 491 NT_STATUS_OK
Close 13131 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x40 0x1 13132 NT_STATUS_OK
ReadX 13132 0 491 491 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
WriteX 13129 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x2 13134 NT_STATUS_OK
Close 13134 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13135 NT_STATUS_OK
WriteX 13135 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13135 258 NT_STATUS_OK
WriteX 13135 0 543 543 NT_STATUS_OK
Close 13135 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13136 NT_STATUS_OK
ReadX 13136 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13132 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 1035 NT_STATUS_OK
Close 13120 NT_STATUS_OK
Close 13121 NT_STATUS_OK
Close 13122 NT_STATUS_OK
Close 13136 NT_STATUS_OK
Close 13124 NT_STATUS_OK
Close 13125 NT_STATUS_OK
Close 13126 NT_STATUS_OK
Close 13127 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.VAL" 0x6 NT_STATUS_OK
Close 13129 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__S31.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__S31.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13139 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13139 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13140 NT_STATUS_OK
ReadX 13140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13141 NT_STATUS_OK
ReadX 13141 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13142 NT_STATUS_OK
ReadX 13142 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13143 NT_STATUS_OK
ReadX 13143 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13144 NT_STATUS_OK
ReadX 13144 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x2 13148 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13148 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13149 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 1004 NT_STATUS_OK
WriteX 13149 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13149 258 NT_STATUS_OK
WriteX 13149 0 2048 2048 NT_STATUS_OK
Close 13149 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13150 NT_STATUS_OK
ReadX 13150 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13150 0 4096 4096 NT_STATUS_OK
Flush 13150 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
WriteX 13150 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x2 13154 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13154 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13155 NT_STATUS_OK
WriteX 13155 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13155 258 NT_STATUS_OK
WriteX 13155 0 2048 2048 NT_STATUS_OK
Close 13155 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x40 0x1 13156 NT_STATUS_OK
ReadX 13156 0 2048 2048 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 8781 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x2 13160 NT_STATUS_OK
Close 13160 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13161 NT_STATUS_OK
WriteX 13161 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13161 258 NT_STATUS_OK
WriteX 13161 0 2048 2048 NT_STATUS_OK
Close 13161 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x40 0x1 13162 NT_STATUS_OK
ReadX 13162 0 2048 2048 NT_STATUS_OK
ReadX 13140 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ERRORCHG.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13162 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 1035 NT_STATUS_OK
Close 13144 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ERRORCHG.DB" 0x6 NT_STATUS_OK
WriteX 13156 0 4096 4096 NT_STATUS_OK
WriteX 13140 0 8192 8192 NT_STATUS_OK
WriteX 13141 0 4096 4096 NT_STATUS_OK
WriteX 13142 0 4096 4096 NT_STATUS_OK
ReadX 13156 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\TIMECHG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13140 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13165 NT_STATUS_OK
ReadX 13165 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13150 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x40 0x1 13166 NT_STATUS_OK
QUERY_FILE_INFORMATION 13166 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
Close 13166 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 1035 NT_STATUS_OK
Close 13165 NT_STATUS_OK
Close 13141 NT_STATUS_OK
Close 13142 NT_STATUS_OK
Close 13143 NT_STATUS_OK
Close 13156 NT_STATUS_OK
Close 13140 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__3F2C4.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13168 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13168 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13169 NT_STATUS_OK
ReadX 13169 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13170 NT_STATUS_OK
ReadX 13170 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13171 NT_STATUS_OK
ReadX 13171 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13172 NT_STATUS_OK
ReadX 13172 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13173 NT_STATUS_OK
ReadX 13173 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13174 NT_STATUS_OK
ReadX 13174 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13175 NT_STATUS_OK
ReadX 13175 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13176 NT_STATUS_OK
ReadX 13176 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13177 NT_STATUS_OK
ReadX 13177 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13178 NT_STATUS_OK
ReadX 13178 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13179 NT_STATUS_OK
ReadX 13179 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13180 NT_STATUS_OK
ReadX 13180 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13181 NT_STATUS_OK
ReadX 13181 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x2 13185 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13185 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13186 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 1004 NT_STATUS_OK
WriteX 13186 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13186 258 NT_STATUS_OK
WriteX 13186 0 2048 2048 NT_STATUS_OK
Close 13186 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13187 NT_STATUS_OK
ReadX 13187 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13177 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13188 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13188 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13189 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13189 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x2 13193 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13193 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13194 NT_STATUS_OK
QUERY_FILE_INFORMATION 13194 1004 NT_STATUS_OK
WriteX 13194 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13194 258 NT_STATUS_OK
WriteX 13194 0 2048 2048 NT_STATUS_OK
Close 13194 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13195 NT_STATUS_OK
ReadX 13195 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
Flush 13187 NT_STATUS_OK
WriteX 13195 0 4096 4096 NT_STATUS_OK
Flush 13195 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
WriteX 13187 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
WriteX 13195 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13189 4096 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x2 13196 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13196 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13197 NT_STATUS_OK
WriteX 13197 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13197 258 NT_STATUS_OK
WriteX 13197 0 4096 4096 NT_STATUS_OK
Close 13197 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x40 0x1 13198 NT_STATUS_OK
ReadX 13198 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x2 13199 NT_STATUS_OK
Close 13199 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13200 NT_STATUS_OK
WriteX 13200 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13200 258 NT_STATUS_OK
WriteX 13200 0 4096 4096 NT_STATUS_OK
Close 13200 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x40 0x1 13201 NT_STATUS_OK
ReadX 13201 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB4.FAM" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
WriteX 13201 0 4096 4096 NT_STATUS_OK
Close 13198 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 1035 NT_STATUS_OK
Close 13181 NT_STATUS_OK
Close 13175 NT_STATUS_OK
Close 13189 NT_STATUS_OK
Close 13178 NT_STATUS_OK
Close 13179 NT_STATUS_OK
Close 13180 NT_STATUS_OK
Close 13176 NT_STATUS_OK
Close 13169 NT_STATUS_OK
Close 13170 NT_STATUS_OK
Close 13173 NT_STATUS_OK
Close 13174 NT_STATUS_OK
Close 13171 NT_STATUS_OK
Close 13172 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__QB4.MB" 0x6 NT_STATUS_OK
Close 13201 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__QB5.MB" 0x0 0x1 13204 NT_STATUS_OK
Close 13204 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PARADOX\__QB5.MB" "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x40 0x1 13206 NT_STATUS_OK
ReadX 13206 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x2 13207 NT_STATUS_OK
Close 13207 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13208 NT_STATUS_OK
WriteX 13208 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13208 258 NT_STATUS_OK
WriteX 13208 0 2048 2048 NT_STATUS_OK
Close 13208 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13209 NT_STATUS_OK
ReadX 13209 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CLASSROL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13210 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13210 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13211 NT_STATUS_OK
ReadX 13211 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13212 NT_STATUS_OK
ReadX 13212 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13213 NT_STATUS_OK
ReadX 13213 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13214 NT_STATUS_OK
ReadX 13214 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13215 NT_STATUS_OK
ReadX 13215 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13216 NT_STATUS_OK
ReadX 13216 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13217 NT_STATUS_OK
ReadX 13217 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13218 NT_STATUS_OK
ReadX 13218 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13219 NT_STATUS_OK
ReadX 13219 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13220 NT_STATUS_OK
ReadX 13220 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13221 NT_STATUS_OK
ReadX 13221 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13222 NT_STATUS_OK
ReadX 13222 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13187 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x40 0x1 13223 NT_STATUS_OK
QUERY_FILE_INFORMATION 13223 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
Close 13223 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 1035 NT_STATUS_OK
Close 13206 NT_STATUS_OK
Close 13209 NT_STATUS_OK
Close 13221 NT_STATUS_OK
Close 13216 NT_STATUS_OK
Close 13217 NT_STATUS_OK
Close 13218 NT_STATUS_OK
Close 13219 NT_STATUS_OK
Close 13220 NT_STATUS_OK
Close 13222 NT_STATUS_OK
Close 13210 NT_STATUS_OK
Close 13211 NT_STATUS_OK
Close 13214 NT_STATUS_OK
Close 13215 NT_STATUS_OK
Close 13212 NT_STATUS_OK
Close 13213 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__40D6B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13195 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x40 0x1 13225 NT_STATUS_OK
QUERY_FILE_INFORMATION 13225 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
Close 13225 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__414F2.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13227 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ENROLL" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13227 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13228 NT_STATUS_OK
ReadX 13228 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13229 NT_STATUS_OK
ReadX 13229 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13230 NT_STATUS_OK
ReadX 13230 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13231 NT_STATUS_OK
ReadX 13231 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13232 NT_STATUS_OK
ReadX 13232 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13233 NT_STATUS_OK
ReadX 13233 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13234 NT_STATUS_OK
ReadX 13234 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13235 NT_STATUS_OK
ReadX 13235 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13236 NT_STATUS_OK
ReadX 13236 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13237 NT_STATUS_OK
ReadX 13237 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13238 NT_STATUS_OK
ReadX 13238 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13239 NT_STATUS_OK
ReadX 13239 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13240 NT_STATUS_OK
ReadX 13240 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x2 13244 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13244 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13245 NT_STATUS_OK
QUERY_FILE_INFORMATION 13245 1004 NT_STATUS_OK
WriteX 13245 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13245 258 NT_STATUS_OK
WriteX 13245 0 2048 2048 NT_STATUS_OK
Close 13245 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13246 NT_STATUS_OK
ReadX 13246 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13247 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13247 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13248 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13248 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13249 NT_STATUS_OK
ReadX 13249 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13250 NT_STATUS_OK
ReadX 13250 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13251 NT_STATUS_OK
ReadX 13251 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13252 NT_STATUS_OK
ReadX 13252 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x2 13256 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13256 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13257 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 1004 NT_STATUS_OK
WriteX 13257 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13257 258 NT_STATUS_OK
WriteX 13257 0 2048 2048 NT_STATUS_OK
Close 13257 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13258 NT_STATUS_OK
ReadX 13258 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13233 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13260 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13260 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x2 13264 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13264 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13265 NT_STATUS_OK
QUERY_FILE_INFORMATION 13265 1004 NT_STATUS_OK
WriteX 13265 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13265 258 NT_STATUS_OK
WriteX 13265 0 2048 2048 NT_STATUS_OK
Close 13265 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13266 NT_STATUS_OK
ReadX 13266 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13246 0 4096 4096 NT_STATUS_OK
Flush 13246 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
Flush 13258 NT_STATUS_OK
WriteX 13266 0 4096 4096 NT_STATUS_OK
Flush 13266 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
WriteX 13246 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
WriteX 13258 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
WriteX 13266 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13248 4096 16384 16384 NT_STATUS_OK
ReadX 13228 4096 16384 16384 NT_STATUS_OK
ReadX 13260 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13267 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13267 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13268 NT_STATUS_OK
ReadX 13268 0 2048 2048 NT_STATUS_OK
WriteX 13268 0 19584 19584 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\SCHED" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13246 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x40 0x1 13269 NT_STATUS_OK
QUERY_FILE_INFORMATION 13269 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
Close 13269 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 1035 NT_STATUS_OK
Close 13268 NT_STATUS_OK
Close 13252 NT_STATUS_OK
Close 13240 NT_STATUS_OK
Close 13232 NT_STATUS_OK
Close 13248 NT_STATUS_OK
Close 13249 NT_STATUS_OK
Close 13250 NT_STATUS_OK
Close 13251 NT_STATUS_OK
Close 13239 NT_STATUS_OK
Close 13260 NT_STATUS_OK
Close 13234 NT_STATUS_OK
Close 13237 NT_STATUS_OK
Close 13238 NT_STATUS_OK
Close 13235 NT_STATUS_OK
Close 13236 NT_STATUS_OK
Close 13228 NT_STATUS_OK
Close 13229 NT_STATUS_OK
Close 13230 NT_STATUS_OK
Close 13231 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__42B96.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13258 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x40 0x1 13271 NT_STATUS_OK
QUERY_FILE_INFORMATION 13271 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
Close 13271 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43212.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43212.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13266 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x40 0x1 13273 NT_STATUS_OK
QUERY_FILE_INFORMATION 13273 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
Close 13273 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__43904.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__43904.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13275 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13275 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 0x40 0x1 13276 NT_STATUS_OK
ReadX 13276 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.PX" 0x40 0x1 13277 NT_STATUS_OK
ReadX 13277 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.X04" 0x40 0x1 13278 NT_STATUS_OK
ReadX 13278 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.Y04" 0x40 0x1 13279 NT_STATUS_OK
ReadX 13279 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x40 0x1 13280 NT_STATUS_OK
ReadX 13280 0 543 543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13276 4096 16384 16384 NT_STATUS_OK
WriteX 13276 0 4096 4096 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13278 0 4096 4096 NT_STATUS_OK
WriteX 13279 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13281 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13281 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13282 NT_STATUS_OK
ReadX 13282 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13283 NT_STATUS_OK
ReadX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13284 NT_STATUS_OK
ReadX 13284 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13285 NT_STATUS_OK
ReadX 13285 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13286 NT_STATUS_OK
ReadX 13286 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13287 NT_STATUS_OK
ReadX 13287 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13288 NT_STATUS_OK
ReadX 13288 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13289 NT_STATUS_OK
ReadX 13289 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13290 NT_STATUS_OK
ReadX 13290 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13291 NT_STATUS_OK
ReadX 13291 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13292 NT_STATUS_OK
ReadX 13292 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13293 NT_STATUS_OK
ReadX 13293 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13294 NT_STATUS_OK
ReadX 13294 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.TV" 0x40 0x1 13295 NT_STATUS_OK
ReadX 13295 0 8192 8192 NT_STATUS_OK
ReadX 13282 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\PXTOOLS.FT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13296 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13296 0 4096 4096 NT_STATUS_OK
ReadX 13296 4096 4096 4096 NT_STATUS_OK
ReadX 13296 8192 4096 4096 NT_STATUS_OK
WriteX 13282 0 4096 4096 NT_STATUS_OK
WriteX 13283 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\COURSES.FSL" 0x40 0x1 13297 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13297 0 4096 4096 NT_STATUS_OK
ReadX 13297 4096 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.DB" 1004 NT_STATUS_OK
WriteX 13276 0 4096 4096 NT_STATUS_OK
WriteX 13277 0 4096 4096 NT_STATUS_OK
WriteX 13278 0 4096 4096 NT_STATUS_OK
WriteX 13279 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x2 13301 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13301 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13302 NT_STATUS_OK
QUERY_FILE_INFORMATION 13302 1004 NT_STATUS_OK
WriteX 13302 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13302 258 NT_STATUS_OK
WriteX 13302 0 2048 2048 NT_STATUS_OK
Close 13302 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13303 NT_STATUS_OK
ReadX 13303 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13303 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13304 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13304 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13305 NT_STATUS_OK
ReadX 13305 0 4096 4096 NT_STATUS_OK
ReadX 13305 4096 4096 4096 NT_STATUS_OK
WriteX 13305 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
WriteX 13303 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13305 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13306 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13306 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x40 0x1 13307 NT_STATUS_OK
ReadX 13307 0 4096 4096 NT_STATUS_OK
ReadX 13307 4096 4096 4096 NT_STATUS_OK
WriteX 13307 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\DEFAULT.TV" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13303 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x40 0x1 13308 NT_STATUS_OK
QUERY_FILE_INFORMATION 13308 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
Close 13308 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__50172.DB" 1035 NT_STATUS_OK
Close 13295 NT_STATUS_OK
Close 13280 NT_STATUS_OK
Close 13276 NT_STATUS_OK
Close 13277 NT_STATUS_OK
Close 13278 NT_STATUS_OK
Close 13279 NT_STATUS_OK
Close 13288 NT_STATUS_OK
Close 13293 NT_STATUS_OK
Close 13289 NT_STATUS_OK
Close 13290 NT_STATUS_OK
Close 13291 NT_STATUS_OK
Close 13292 NT_STATUS_OK
Close 13294 NT_STATUS_OK
Close 13282 NT_STATUS_OK
Close 13283 NT_STATUS_OK
Close 13286 NT_STATUS_OK
Close 13287 NT_STATUS_OK
Close 13284 NT_STATUS_OK
Close 13285 NT_STATUS_OK
Close 13307 NT_STATUS_OK
Close 13296 NT_STATUS_OK
Close 13297 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__50172.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.FSL" 0x40 0x1 13310 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\STUDENTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13310 0 4096 4096 NT_STATUS_OK
ReadX 13310 4096 4096 4096 NT_STATUS_OK
ReadX 13310 8192 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.DB" 0x40 0x1 13311 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13311 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.PX" 0x40 0x1 13312 NT_STATUS_OK
ReadX 13312 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG0" 0x40 0x1 13313 NT_STATUS_OK
ReadX 13313 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG0" 0x40 0x1 13314 NT_STATUS_OK
ReadX 13314 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.XG1" 0x40 0x1 13315 NT_STATUS_OK
ReadX 13315 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.YG1" 0x40 0x1 13316 NT_STATUS_OK
ReadX 13316 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.VAL" 0x40 0x1 13317 NT_STATUS_OK
ReadX 13317 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.DB" 0x40 0x1 13318 NT_STATUS_OK
ReadX 13318 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.PX" 0x40 0x1 13319 NT_STATUS_OK
ReadX 13319 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.X03" 0x40 0x1 13320 NT_STATUS_OK
ReadX 13320 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.Y03" 0x40 0x1 13321 NT_STATUS_OK
ReadX 13321 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\ENROLL.VAL" 0x40 0x1 13322 NT_STATUS_OK
ReadX 13322 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\STUDENTS.MB" 0x40 0x1 13323 NT_STATUS_OK
ReadX 13323 0 4096 4096 NT_STATUS_OK
ReadX 13311 4096 16384 16384 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\QUENRD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x2 13327 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13327 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13328 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 1004 NT_STATUS_OK
WriteX 13328 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13328 258 NT_STATUS_OK
WriteX 13328 0 2048 2048 NT_STATUS_OK
Close 13328 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13329 NT_STATUS_OK
ReadX 13329 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
WriteX 13329 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 23640 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.FAM" 0x40 0x1 12320 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x2 13333 NT_STATUS_OK
Close 13333 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13334 NT_STATUS_OK
QUERY_FILE_INFORMATION 13334 1004 NT_STATUS_OK
WriteX 13334 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13334 258 NT_STATUS_OK
WriteX 13334 0 2048 2048 NT_STATUS_OK
Close 13334 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13335 NT_STATUS_OK
ReadX 13335 0 2048 2048 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
WriteX 13335 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13318 4096 16384 16384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13329 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x40 0x1 13336 NT_STATUS_OK
QUERY_FILE_INFORMATION 13336 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
Close 13336 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 1035 NT_STATUS_OK
Close 13322 NT_STATUS_OK
Close 13317 NT_STATUS_OK
Close 13323 NT_STATUS_OK
Close 13311 NT_STATUS_OK
Close 13312 NT_STATUS_OK
Close 13315 NT_STATUS_OK
Close 13316 NT_STATUS_OK
Close 13313 NT_STATUS_OK
Close 13314 NT_STATUS_OK
Close 13318 NT_STATUS_OK
Close 13319 NT_STATUS_OK
Close 13320 NT_STATUS_OK
Close 13321 NT_STATUS_OK
Close 13310 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52E2B.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13335 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x40 0x1 13338 NT_STATUS_OK
QUERY_FILE_INFORMATION 13338 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
Close 13338 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\__52EF7.DB" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13340 NT_STATUS_OK
ReadX 13340 61440 4096 4096 NT_STATUS_OK
ReadX 13340 126976 4096 4096 NT_STATUS_OK
WriteX 13340 0 65536 65536 NT_STATUS_OK
WriteX 13340 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13341 NT_STATUS_OK
ReadX 13341 61440 4096 4096 NT_STATUS_OK
ReadX 13341 126976 4096 4096 NT_STATUS_OK
ReadX 13341 192512 4096 4096 NT_STATUS_OK
ReadX 13341 258048 4096 4096 NT_STATUS_OK
WriteX 13341 0 65536 65536 NT_STATUS_OK
WriteX 13341 65536 65536 65536 NT_STATUS_OK
WriteX 13341 131072 65536 65536 NT_STATUS_OK
WriteX 13341 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13342 NT_STATUS_OK
ReadX 13342 61440 4096 4096 NT_STATUS_OK
ReadX 13342 126976 4096 4096 NT_STATUS_OK
ReadX 13342 192512 4096 4096 NT_STATUS_OK
ReadX 13342 258048 4096 4096 NT_STATUS_OK
ReadX 13342 323584 4096 4096 NT_STATUS_OK
ReadX 13342 389120 4096 4096 NT_STATUS_OK
ReadX 13342 454656 4096 4096 NT_STATUS_OK
ReadX 13342 520192 4096 4096 NT_STATUS_OK
WriteX 13342 0 65536 65536 NT_STATUS_OK
WriteX 13342 65536 65536 65536 NT_STATUS_OK
WriteX 13342 131072 65536 65536 NT_STATUS_OK
WriteX 13342 196608 65536 65536 NT_STATUS_OK
WriteX 13342 262144 65536 65536 NT_STATUS_OK
WriteX 13342 327680 65536 65536 NT_STATUS_OK
WriteX 13342 393216 65536 65536 NT_STATUS_OK
WriteX 13342 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\XLSTART\XL5GALRY.XLS" 1004 NT_STATUS_OBJECT_PATH_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13343 NT_STATUS_OK
ReadX 13343 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13343 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13343 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13343 8192 4096 4096 NT_STATUS_OK
ReadX 13343 12288 4096 4096 NT_STATUS_OK
ReadX 13343 16384 4096 4096 NT_STATUS_OK
ReadX 13343 20480 4096 4096 NT_STATUS_OK
ReadX 13343 24576 4096 4096 NT_STATUS_OK
ReadX 13343 28672 4096 4096 NT_STATUS_OK
ReadX 13343 32768 4096 4096 NT_STATUS_OK
ReadX 13343 36864 4096 4096 NT_STATUS_OK
ReadX 13343 40960 4096 4096 NT_STATUS_OK
ReadX 13343 45056 4096 4096 NT_STATUS_OK
ReadX 13343 49152 4096 4096 NT_STATUS_OK
ReadX 13343 53248 4096 4096 NT_STATUS_OK
ReadX 13343 57344 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13343 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x2 13344 NT_STATUS_OK
Close 13344 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Close 13340 NT_STATUS_OK
Close 13341 NT_STATUS_OK
Close 13342 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x40 0x2 13346 NT_STATUS_OK
WriteX 13346 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13346 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13346 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13346 1004 NT_STATUS_OK
WriteX 13346 0 57088 57088 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
Flush 13346 NT_STATUS_OK
Close 13343 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\PCMAGCD.XLS" 0x40 0x1 13347 NT_STATUS_OK
SET_FILE_INFORMATION 13347 1004 NT_STATUS_OK
Close 13347 NT_STATUS_OK
SET_FILE_INFORMATION 13346 1004 NT_STATUS_OK
WriteX 13346 0 4096 4096 NT_STATUS_OK
Close 13346 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\5D7C0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\5D7C0000" 0x0 0x1 13348 NT_STATUS_OK
Close 13348 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\5D7C0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13350 NT_STATUS_OK
ReadX 13350 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13350 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x40 0x2 13351 NT_STATUS_OK
WriteX 13351 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13351 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
WriteX 13351 0 51456 51456 NT_STATUS_OK
WriteX 13351 0 4096 4096 NT_STATUS_OK
Flush 13351 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13351 1004 NT_STATUS_OK
WriteX 13351 0 4096 4096 NT_STATUS_OK
Close 13351 NT_STATUS_OK
Close 13350 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\0BBC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\0BBC0000" 0x0 0x1 13353 NT_STATUS_OK
Close 13353 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\0BBC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13355 NT_STATUS_OK
ReadX 13355 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13355 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13357 NT_STATUS_OK
Close 13357 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x40 0x2 13360 NT_STATUS_OK
WriteX 13360 4045 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13360 258 NT_STATUS_OK
WriteX 13360 0 53077 53077 NT_STATUS_OK
Close 13360 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x40 0x2 13361 NT_STATUS_OK
WriteX 13361 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13361 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FILE_INFORMATION 13361 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13361 1004 NT_STATUS_OK
WriteX 13361 0 65536 65536 NT_STATUS_OK
WriteX 13361 65536 1856 1856 NT_STATUS_OK
WriteX 13361 0 4096 4096 NT_STATUS_OK
Flush 13361 NT_STATUS_OK
SET_FILE_INFORMATION 13361 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13361 1004 NT_STATUS_OK
WriteX 13361 0 4096 4096 NT_STATUS_OK
Close 13361 NT_STATUS_OK
Close 13355 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\51EC0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\51EC0000" 0x0 0x1 13363 NT_STATUS_OK
Close 13363 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\51EC0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13365 NT_STATUS_OK
ReadX 13365 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13367 NT_STATUS_OK
Close 13367 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x40 0x2 13370 NT_STATUS_OK
WriteX 13370 4076 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13370 258 NT_STATUS_OK
WriteX 13370 0 7983 7983 NT_STATUS_OK
Close 13370 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 17746 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13372 NT_STATUS_OK
Close 13372 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x1 8246 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x40 0x2 13375 NT_STATUS_OK
WriteX 13375 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13375 258 NT_STATUS_OK
WriteX 13375 0 65536 65536 NT_STATUS_OK
WriteX 13375 65536 65536 65536 NT_STATUS_OK
WriteX 13375 131072 65536 65536 NT_STATUS_OK
WriteX 13375 196608 65536 65536 NT_STATUS_OK
WriteX 13375 262144 65536 65536 NT_STATUS_OK
WriteX 13375 327680 65536 65536 NT_STATUS_OK
WriteX 13375 393216 65536 65536 NT_STATUS_OK
WriteX 13375 458752 46731 46731 NT_STATUS_OK
Close 13375 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x40 0x2 13376 NT_STATUS_OK
WriteX 13376 1535 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13365 4096 4096 4096 NT_STATUS_OK
QUERY_FILE_INFORMATION 13376 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13376 1004 NT_STATUS_OK
WriteX 13376 0 65536 65536 NT_STATUS_OK
WriteX 13376 65536 22848 22848 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Flush 13376 NT_STATUS_OK
SET_FILE_INFORMATION 13376 1004 NT_STATUS_OK
SET_FILE_INFORMATION 13376 1004 NT_STATUS_OK
WriteX 13376 0 4096 4096 NT_STATUS_OK
Close 13376 NT_STATUS_OK
Close 13365 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\62AD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\62AD0000" 0x0 0x1 13378 NT_STATUS_OK
Close 13378 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\62AD0000" "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x40 0x1 13380 NT_STATUS_OK
ReadX 13380 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13380 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLA" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES.XLW" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13381 NT_STATUS_OK
ReadX 13381 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13381 4096 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13381 1004 NT_STATUS_OK
ReadX 13381 8192 4096 4096 NT_STATUS_OK
ReadX 13381 12288 4096 4096 NT_STATUS_OK
ReadX 13381 16384 4096 4096 NT_STATUS_OK
ReadX 13381 20480 4096 4096 NT_STATUS_OK
ReadX 13381 24576 4096 4096 NT_STATUS_OK
ReadX 13381 28672 4096 4096 NT_STATUS_OK
ReadX 13381 32768 4096 4096 NT_STATUS_OK
ReadX 13381 36864 4096 4096 NT_STATUS_OK
ReadX 13381 40960 4096 4096 NT_STATUS_OK
ReadX 13381 45056 4096 4096 NT_STATUS_OK
ReadX 13381 49152 4096 4096 NT_STATUS_OK
ReadX 13381 53248 4096 4096 NT_STATUS_OK
ReadX 13381 57344 4096 4096 NT_STATUS_OK
ReadX 13381 61440 4096 4096 NT_STATUS_OK
ReadX 13381 65536 4096 4096 NT_STATUS_OK
ReadX 13381 69632 4096 4096 NT_STATUS_OK
ReadX 13381 73728 4096 4096 NT_STATUS_OK
ReadX 13381 77824 4096 4096 NT_STATUS_OK
ReadX 13381 81920 4096 4096 NT_STATUS_OK
ReadX 13381 86016 4096 4096 NT_STATUS_OK
ReadX 13381 90112 4096 4096 NT_STATUS_OK
ReadX 13381 94208 4096 4096 NT_STATUS_OK
ReadX 13381 98304 4096 4096 NT_STATUS_OK
ReadX 13381 102400 4096 4096 NT_STATUS_OK
ReadX 13381 106496 4096 4096 NT_STATUS_OK
ReadX 13381 110592 4096 4096 NT_STATUS_OK
ReadX 13381 114688 4096 4096 NT_STATUS_OK
ReadX 13381 118784 4096 4096 NT_STATUS_OK
ReadX 13381 122880 4096 4096 NT_STATUS_OK
ReadX 13381 126976 4096 4096 NT_STATUS_OK
ReadX 13381 131072 4096 4096 NT_STATUS_OK
ReadX 13381 135168 4096 4096 NT_STATUS_OK
ReadX 13381 139264 4096 4096 NT_STATUS_OK
ReadX 13381 143360 4096 4096 NT_STATUS_OK
ReadX 13381 147456 4096 4096 NT_STATUS_OK
ReadX 13381 151552 4096 4096 NT_STATUS_OK
ReadX 13381 155648 4096 4096 NT_STATUS_OK
ReadX 13381 159744 4096 4096 NT_STATUS_OK
ReadX 13381 163840 4096 4096 NT_STATUS_OK
ReadX 13381 167936 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13381 0 8192 8192 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x2 13382 NT_STATUS_OK
Close 13382 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Close 13380 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x40 0x2 13384 NT_STATUS_OK
WriteX 13384 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13384 258 NT_STATUS_OK
Close 13381 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES.XLS" 0x40 0x1 13385 NT_STATUS_OK
SET_FILE_INFORMATION 13385 1004 NT_STATUS_OK
Close 13385 NT_STATUS_OK
WriteX 13384 0 42388 42388 NT_STATUS_OK
Close 13384 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\E0BD0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\E0BD0000" 0x0 0x1 13386 NT_STATUS_OK
Close 13386 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\E0BD0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13388 NT_STATUS_OK
ReadX 13388 0 4096 4096 NT_STATUS_OK
ReadX 13388 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x40 0x2 13389 NT_STATUS_OK
WriteX 13389 2047 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13389 258 NT_STATUS_OK
SET_FILE_INFORMATION 13389 1004 NT_STATUS_OK
WriteX 13389 0 42652 42652 NT_STATUS_OK
Close 13389 NT_STATUS_OK
Close 13388 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\BEED0000" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\BEED0000" 0x0 0x1 13391 NT_STATUS_OK
Close 13391 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\EXCEL\BEED0000" "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x40 0x1 13393 NT_STATUS_OK
ReadX 13393 0 4096 4096 NT_STATUS_OK
ReadX 13393 4096 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 16723 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13395 NT_STATUS_OK
Close 13395 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x40 0x2 13398 NT_STATUS_OK
WriteX 13398 4080 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13398 258 NT_STATUS_OK
WriteX 13398 0 65536 65536 NT_STATUS_OK
WriteX 13398 65536 49 49 NT_STATUS_OK
Close 13398 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\SEED" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13399 NT_STATUS_OK
ReadX 13399 0 61440 61440 NT_STATUS_OK
ReadX 13399 61440 4096 4096 NT_STATUS_OK
ReadX 13399 65536 61440 61440 NT_STATUS_OK
ReadX 13399 126976 4096 4096 NT_STATUS_OK
ReadX 13399 131072 61440 61440 NT_STATUS_OK
ReadX 13399 192512 4096 4096 NT_STATUS_OK
ReadX 13399 196608 61440 61440 NT_STATUS_OK
ReadX 13399 258048 4096 4096 NT_STATUS_OK
ReadX 13399 262144 61440 61440 NT_STATUS_OK
ReadX 13399 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13400 NT_STATUS_OK
ReadX 13400 0 61440 61440 NT_STATUS_OK
ReadX 13400 61440 4096 4096 NT_STATUS_OK
ReadX 13400 65536 61440 61440 NT_STATUS_OK
ReadX 13400 126976 4096 4096 NT_STATUS_OK
ReadX 13400 131072 61440 61440 NT_STATUS_OK
ReadX 13400 192512 4096 4096 NT_STATUS_OK
ReadX 13400 196608 61440 61440 NT_STATUS_OK
ReadX 13400 258048 4096 4096 NT_STATUS_OK
ReadX 13400 262144 61440 61440 NT_STATUS_OK
ReadX 13400 323584 4096 4096 NT_STATUS_OK
ReadX 13400 327680 61440 61440 NT_STATUS_OK
ReadX 13400 389120 4096 4096 NT_STATUS_OK
ReadX 13400 393216 61440 61440 NT_STATUS_OK
ReadX 13400 454656 4096 4096 NT_STATUS_OK
ReadX 13400 458752 61440 61440 NT_STATUS_OK
ReadX 13400 520192 4096 4096 NT_STATUS_OK
ReadX 13400 524288 61440 61440 NT_STATUS_OK
ReadX 13400 585728 4096 4096 NT_STATUS_OK
ReadX 13400 589824 61440 61440 NT_STATUS_OK
ReadX 13400 651264 4096 4096 NT_STATUS_OK
ReadX 13400 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13401 NT_STATUS_OK
ReadX 13401 0 61440 61440 NT_STATUS_OK
ReadX 13401 61440 4096 4096 NT_STATUS_OK
ReadX 13401 65536 61440 61440 NT_STATUS_OK
ReadX 13401 126976 4096 4096 NT_STATUS_OK
ReadX 13401 131072 61440 61440 NT_STATUS_OK
ReadX 13401 192512 4096 4096 NT_STATUS_OK
ReadX 13401 196608 61440 61440 NT_STATUS_OK
ReadX 13401 258048 4096 4096 NT_STATUS_OK
ReadX 13401 262144 61440 61440 NT_STATUS_OK
ReadX 13401 323584 4096 4096 NT_STATUS_OK
ReadX 13401 327680 61440 61440 NT_STATUS_OK
ReadX 13401 389120 4096 4096 NT_STATUS_OK
ReadX 13401 393216 61440 61440 NT_STATUS_OK
ReadX 13401 454656 4096 4096 NT_STATUS_OK
ReadX 13401 458752 61440 61440 NT_STATUS_OK
ReadX 13401 520192 4096 4096 NT_STATUS_OK
ReadX 13401 524288 61440 61440 NT_STATUS_OK
ReadX 13401 585728 4096 4096 NT_STATUS_OK
ReadX 13401 589824 61440 61440 NT_STATUS_OK
ReadX 13401 651264 4096 4096 NT_STATUS_OK
ReadX 13401 655360 61440 61440 NT_STATUS_OK
ReadX 13401 716800 4096 4096 NT_STATUS_OK
ReadX 13401 720896 61440 61440 NT_STATUS_OK
ReadX 13401 782336 4096 4096 NT_STATUS_OK
ReadX 13401 786432 61440 61440 NT_STATUS_OK
ReadX 13401 847872 4096 4096 NT_STATUS_OK
ReadX 13401 851968 61440 61440 NT_STATUS_OK
ReadX 13401 913408 4096 4096 NT_STATUS_OK
ReadX 13401 917504 61440 61440 NT_STATUS_OK
ReadX 13401 978944 4096 4096 NT_STATUS_OK
ReadX 13401 983040 61440 61440 NT_STATUS_OK
ReadX 13401 1044480 4096 4096 NT_STATUS_OK
ReadX 13401 1048576 61440 61440 NT_STATUS_OK
ReadX 13401 1110016 4096 4096 NT_STATUS_OK
ReadX 13401 1114112 61440 61440 NT_STATUS_OK
ReadX 13401 1175552 4096 4096 NT_STATUS_OK
ReadX 13401 1179648 61440 61440 NT_STATUS_OK
ReadX 13401 1241088 4096 4096 NT_STATUS_OK
ReadX 13401 1245184 61440 61440 NT_STATUS_OK
ReadX 13401 1306624 4096 4096 NT_STATUS_OK
ReadX 13401 1310720 61440 61440 NT_STATUS_OK
ReadX 13401 1372160 4096 4096 NT_STATUS_OK
ReadX 13401 1376256 61440 61440 NT_STATUS_OK
ReadX 13401 1437696 4096 4096 NT_STATUS_OK
ReadX 13401 1441792 61440 61440 NT_STATUS_OK
ReadX 13401 1503232 4096 4096 NT_STATUS_OK
ReadX 13401 1507328 61440 61440 NT_STATUS_OK
ReadX 13401 1568768 4096 4096 NT_STATUS_OK
ReadX 13401 1572864 61440 61440 NT_STATUS_OK
ReadX 13401 1634304 4096 4096 NT_STATUS_OK
ReadX 13401 1638400 61440 61440 NT_STATUS_OK
ReadX 13401 1699840 4096 4096 NT_STATUS_OK
ReadX 13401 1703936 61440 61440 NT_STATUS_OK
ReadX 13401 1765376 4096 4096 NT_STATUS_OK
ReadX 13401 1769472 61440 61440 NT_STATUS_OK
ReadX 13401 1830912 4096 4096 NT_STATUS_OK
ReadX 13401 1835008 32768 32768 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS.LWP" 0x40 0x1 13403 NT_STATUS_OK
QUERY_FILE_INFORMATION 13403 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13403 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13403 1005 NT_STATUS_OK
ReadX 13403 2156 24 24 NT_STATUS_OK
ReadX 13403 2139 276 276 NT_STATUS_OK
ReadX 13403 2136 14 14 NT_STATUS_OK
ReadX 13403 2136 7 7 NT_STATUS_OK
ReadX 13403 2138 12 12 NT_STATUS_OK
ReadX 13403 2137 8 8 NT_STATUS_OK
ReadX 13403 2135 15 15 NT_STATUS_OK
ReadX 13403 0 16 16 NT_STATUS_OK
ReadX 13403 16 2048 2048 NT_STATUS_OK
ReadX 13403 2064 2048 2048 NT_STATUS_OK
ReadX 13403 257 2048 2048 NT_STATUS_OK
ReadX 13403 385 2048 2048 NT_STATUS_OK
ReadX 13403 513 2048 2048 NT_STATUS_OK
ReadX 13403 641 2048 2048 NT_STATUS_OK
ReadX 13403 769 2048 2048 NT_STATUS_OK
ReadX 13403 897 2048 2048 NT_STATUS_OK
ReadX 13403 1025 2048 2048 NT_STATUS_OK
ReadX 13403 1153 2048 2048 NT_STATUS_OK
ReadX 13403 1281 2048 2048 NT_STATUS_OK
ReadX 13403 1409 2048 2048 NT_STATUS_OK
ReadX 13403 1537 408 408 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x2 13405 NT_STATUS_OK
Close 13405 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Close 13399 NT_STATUS_OK
Close 13400 NT_STATUS_OK
Close 13401 NT_STATUS_OK
Close 13393 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13408 NT_STATUS_OK
WriteX 13408 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13408 258 NT_STATUS_OK
WriteX 13408 0 10575 10575 NT_STATUS_OK
Flush 13408 NT_STATUS_OK
Close 13408 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13409 NT_STATUS_OK
Close 13409 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13411 NT_STATUS_OK
ReadX 13411 0 4096 4096 NT_STATUS_OK
Close 13403 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13412 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13413 NT_STATUS_OK
LockX 13413 2147483538 1 NT_STATUS_OK
UnlockX 13413 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 1005 NT_STATUS_OK
ReadX 13413 0 512 512 NT_STATUS_OK
ReadX 13413 512 512 512 NT_STATUS_OK
ReadX 13413 1024 512 512 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13413 1004 NT_STATUS_OK
Close 13413 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13414 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1005 NT_STATUS_OK
ReadX 13414 0 24 24 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\RESULTS.XLS" 0x40 0x1 13415 NT_STATUS_OK
LockX 13415 2147483538 1 NT_STATUS_OK
UnlockX 13415 2147483538 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13415 1005 NT_STATUS_OK
ReadX 13415 0 512 512 NT_STATUS_OK
ReadX 13415 512 512 512 NT_STATUS_OK
ReadX 13415 1024 512 512 NT_STATUS_OK
ReadX 13415 288 20 20 NT_STATUS_OK
ReadX 13415 308 2084 2084 NT_STATUS_OK
ReadX 13415 388 2084 2084 NT_STATUS_OK
ReadX 13415 388 2084 2084 NT_STATUS_OK
ReadX 13402 2157 1386 1386 NT_STATUS_OK
ReadX 13415 2472 399 399 NT_STATUS_OK
ReadX 13415 3072 1536 1536 NT_STATUS_OK
ReadX 13415 544 149 149 NT_STATUS_OK
ReadX 13415 693 485 485 NT_STATUS_OK
Close 13415 NT_STATUS_OK
ReadX 13402 2157 4096 4096 NT_STATUS_OK
ReadX 13402 6253 4096 4096 NT_STATUS_OK
ReadX 13402 10349 4096 4096 NT_STATUS_OK
ReadX 13402 14445 4096 4096 NT_STATUS_OK
ReadX 13402 18541 4096 4096 NT_STATUS_OK
ReadX 13402 22637 256 256 NT_STATUS_OK
ReadX 13402 22893 4096 4096 NT_STATUS_OK
ReadX 13402 26989 4096 4096 NT_STATUS_OK
ReadX 13402 31085 4096 4096 NT_STATUS_OK
ReadX 13402 35181 4096 4096 NT_STATUS_OK
ReadX 13402 39277 4096 4096 NT_STATUS_OK
ReadX 13402 43373 4096 4096 NT_STATUS_OK
ReadX 13402 47469 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13402 2157 1024 1024 NT_STATUS_OK
ReadX 13402 1667 4688 4688 NT_STATUS_OK
ReadX 13402 6355 3516 3516 NT_STATUS_OK
ReadX 13402 9871 16384 16384 NT_STATUS_OK
ReadX 13402 26255 3771 3771 NT_STATUS_OK
ReadX 13402 30026 2048 2048 NT_STATUS_OK
ReadX 13402 32074 1024 1024 NT_STATUS_OK
ReadX 13402 33098 6652 6652 NT_STATUS_OK
ReadX 13402 39750 16384 16384 NT_STATUS_OK
ReadX 13402 56134 10496 10496 NT_STATUS_OK
ReadX 13402 66630 1784 1784 NT_STATUS_OK
ReadX 13402 68414 90 90 NT_STATUS_OK
ReadX 13402 68504 273 273 NT_STATUS_OK
ReadX 13402 68777 1600 1600 NT_STATUS_OK
ReadX 13402 70377 640 640 NT_STATUS_OK
ReadX 13402 71017 1280 1280 NT_STATUS_OK
ReadX 13402 72297 8464 8464 NT_STATUS_OK
ReadX 13402 80761 158 158 NT_STATUS_OK
ReadX 13402 80919 912 912 NT_STATUS_OK
ReadX 13402 81831 1980 1980 NT_STATUS_OK
ReadX 13402 83811 2256 2256 NT_STATUS_OK
ReadX 13402 86067 400 400 NT_STATUS_OK
ReadX 13402 86467 252 252 NT_STATUS_OK
ReadX 13402 86719 42 42 NT_STATUS_OK
ReadX 13402 86761 725 725 NT_STATUS_OK
ReadX 13402 2009 512 512 NT_STATUS_OK
ReadX 13402 3895 9 9 NT_STATUS_OK
ReadX 13402 3781 46 46 NT_STATUS_OK
ReadX 13402 4059 92 92 NT_STATUS_OK
ReadX 13402 3781 92 92 NT_STATUS_OK
ReadX 13402 3986 184 184 NT_STATUS_OK
ReadX 13402 3987 16384 16384 NT_STATUS_OK
ReadX 13402 3902 16384 16384 NT_STATUS_OK
ReadX 13402 3781 10240 10240 NT_STATUS_OK
ReadX 13402 3821 16384 16384 NT_STATUS_OK
ReadX 13402 3891 935 935 NT_STATUS_OK
ReadX 13402 4060 10240 10240 NT_STATUS_OK
ReadX 13402 4059 184 184 NT_STATUS_OK
ReadX 13402 256 184 184 NT_STATUS_OK
ReadX 13402 256 1026 1026 NT_STATUS_OK
ReadX 13402 3901 326 326 NT_STATUS_OK
ReadX 13402 3899 652 652 NT_STATUS_OK
ReadX 13402 256 2 2 NT_STATUS_OK
ReadX 13402 258 4948 4948 NT_STATUS_OK
Close 13402 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13417 NT_STATUS_OK
Close 13417 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x40 0x2 13420 NT_STATUS_OK
WriteX 13420 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13420 258 NT_STATUS_OK
WriteX 13420 0 65536 65536 NT_STATUS_OK
WriteX 13420 65536 65536 65536 NT_STATUS_OK
WriteX 13420 131072 65536 65536 NT_STATUS_OK
WriteX 13420 196608 65536 65536 NT_STATUS_OK
WriteX 13420 262144 65536 65536 NT_STATUS_OK
WriteX 13420 327680 65536 65536 NT_STATUS_OK
WriteX 13420 393216 65536 65536 NT_STATUS_OK
WriteX 13420 458752 65536 65536 NT_STATUS_OK
WriteX 13420 524288 65536 65536 NT_STATUS_OK
WriteX 13420 589824 35257 35257 NT_STATUS_OK
Close 13420 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13422 NT_STATUS_OK
Close 13422 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x1 13944 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x40 0x2 13425 NT_STATUS_OK
WriteX 13425 4055 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13425 258 NT_STATUS_OK
WriteX 13425 0 65536 65536 NT_STATUS_OK
WriteX 13425 65536 65536 65536 NT_STATUS_OK
WriteX 13425 131072 65536 65536 NT_STATUS_OK
WriteX 13425 196608 65536 65536 NT_STATUS_OK
WriteX 13425 262144 65536 65536 NT_STATUS_OK
WriteX 13425 327680 65536 65536 NT_STATUS_OK
WriteX 13425 393216 65536 65536 NT_STATUS_OK
WriteX 13425 458752 65536 65536 NT_STATUS_OK
WriteX 13425 524288 65536 65536 NT_STATUS_OK
WriteX 13425 589824 57598 57598 NT_STATUS_OK
Close 13425 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 2087 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13427 NT_STATUS_OK
WriteX 13427 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13427 258 NT_STATUS_OK
WriteX 13427 0 12543 12543 NT_STATUS_OK
Flush 13427 NT_STATUS_OK
Close 13427 NT_STATUS_OK
Close 13411 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13429 NT_STATUS_OK
Close 13429 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x40 0x1 13431 NT_STATUS_OK
ReadX 13431 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13432 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.LWP" 0x40 0x1 13433 NT_STATUS_OK
QUERY_FILE_INFORMATION 13433 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13433 1005 NT_STATUS_OK
QUERY_FILE_INFORMATION 13433 1005 NT_STATUS_OK
ReadX 13433 1938 24 24 NT_STATUS_OK
ReadX 13433 1920 276 276 NT_STATUS_OK
ReadX 13433 1918 14 14 NT_STATUS_OK
ReadX 13433 1918 7 7 NT_STATUS_OK
ReadX 13433 1919 12 12 NT_STATUS_OK
ReadX 13433 1919 8 8 NT_STATUS_OK
ReadX 13433 1917 15 15 NT_STATUS_OK
ReadX 13433 0 16 16 NT_STATUS_OK
ReadX 13433 16 2048 2048 NT_STATUS_OK
ReadX 13433 2064 2048 2048 NT_STATUS_OK
ReadX 13433 257 2048 2048 NT_STATUS_OK
ReadX 13433 385 2048 2048 NT_STATUS_OK
ReadX 13433 513 2048 2048 NT_STATUS_OK
ReadX 13433 641 2048 2048 NT_STATUS_OK
ReadX 13433 769 2048 2048 NT_STATUS_OK
ReadX 13433 897 2048 2048 NT_STATUS_OK
ReadX 13433 1025 2048 2048 NT_STATUS_OK
ReadX 13433 1153 1385 1385 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x2 13435 NT_STATUS_OK
Close 13435 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13438 NT_STATUS_OK
WriteX 13438 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13438 258 NT_STATUS_OK
WriteX 13438 0 11588 11588 NT_STATUS_OK
Flush 13438 NT_STATUS_OK
Close 13438 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13439 NT_STATUS_OK
Close 13439 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13441 NT_STATUS_OK
ReadX 13441 0 4096 4096 NT_STATUS_OK
Close 13433 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13443 NT_STATUS_OK
WriteX 13443 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13443 258 NT_STATUS_OK
WriteX 13443 0 11615 11615 NT_STATUS_OK
Flush 13443 NT_STATUS_OK
Close 13443 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13441 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13445 NT_STATUS_OK
Close 13445 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13447 NT_STATUS_OK
ReadX 13447 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13449 NT_STATUS_OK
Close 13449 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x40 0x2 13452 NT_STATUS_OK
WriteX 13452 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13452 258 NT_STATUS_OK
WriteX 13452 0 65536 65536 NT_STATUS_OK
WriteX 13452 65536 16050 16050 NT_STATUS_OK
Close 13452 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13432 1939 64 64 NT_STATUS_OK
ReadX 13432 128 248 248 NT_STATUS_OK
ReadX 13432 128 568 568 NT_STATUS_OK
ReadX 13432 3872 1536 1536 NT_STATUS_OK
ReadX 13432 3456 2560 2560 NT_STATUS_OK
ReadX 13432 3136 512 512 NT_STATUS_OK
ReadX 13432 2880 4096 4096 NT_STATUS_OK
ReadX 13432 3264 3072 3072 NT_STATUS_OK
ReadX 13432 320 4096 4096 NT_STATUS_OK
ReadX 13432 1024 4096 4096 NT_STATUS_OK
ReadX 13432 3616 4096 4096 NT_STATUS_OK
ReadX 13432 1939 64 64 NT_STATUS_OK
ReadX 13432 128 248 248 NT_STATUS_OK
ReadX 13432 128 608 608 NT_STATUS_OK
ReadX 13432 2858 1024 1024 NT_STATUS_OK
ReadX 13432 2810 4096 4096 NT_STATUS_OK
ReadX 13432 2826 4096 4096 NT_STATUS_OK
ReadX 13432 2580 2048 2048 NT_STATUS_OK
ReadX 13432 2800 2560 2560 NT_STATUS_OK
ReadX 13432 2100 4096 4096 NT_STATUS_OK
ReadX 13432 2084 4096 4096 NT_STATUS_OK
ReadX 13432 868 4096 4096 NT_STATUS_OK
ReadX 13432 2324 4096 4096 NT_STATUS_OK
ReadX 13432 884 4096 4096 NT_STATUS_OK
ReadX 13432 2604 1024 1024 NT_STATUS_OK
ReadX 13432 580 4096 4096 NT_STATUS_OK
ReadX 13432 596 4096 4096 NT_STATUS_OK
ReadX 13432 2752 4096 4096 NT_STATUS_OK
ReadX 13432 2842 1024 1024 NT_STATUS_OK
ReadX 13432 660 4096 4096 NT_STATUS_OK
ReadX 13432 2720 4096 4096 NT_STATUS_OK
ReadX 13432 2736 4096 4096 NT_STATUS_OK
ReadX 13432 628 4096 4096 NT_STATUS_OK
ReadX 13432 2704 4096 4096 NT_STATUS_OK
ReadX 13432 1556 4096 4096 NT_STATUS_OK
ReadX 13432 576 4096 4096 NT_STATUS_OK
ReadX 13432 3168 1536 1536 NT_STATUS_OK
ReadX 13432 832 4096 4096 NT_STATUS_OK
ReadX 13432 1088 4096 4096 NT_STATUS_OK
ReadX 13432 1344 4096 4096 NT_STATUS_OK
ReadX 13432 1600 4096 4096 NT_STATUS_OK
ReadX 13432 1856 4096 4096 NT_STATUS_OK
ReadX 13432 2112 4096 4096 NT_STATUS_OK
ReadX 13432 1892 4096 4096 NT_STATUS_OK
ReadX 13432 820 4096 4096 NT_STATUS_OK
ReadX 13432 788 4096 4096 NT_STATUS_OK
ReadX 13432 1604 4096 4096 NT_STATUS_OK
ReadX 13432 3648 4096 4096 NT_STATUS_OK
ReadX 13432 2608 4096 4096 NT_STATUS_OK
ReadX 13432 548 4096 4096 NT_STATUS_OK
ReadX 13432 740 4096 4096 NT_STATUS_OK
ReadX 13432 1344 4096 4096 NT_STATUS_OK
ReadX 13432 3392 4096 4096 NT_STATUS_OK
ReadX 13432 3904 4096 4096 NT_STATUS_OK
ReadX 13432 644 4096 4096 NT_STATUS_OK
ReadX 13432 676 4096 4096 NT_STATUS_OK
ReadX 13432 2688 4096 4096 NT_STATUS_OK
ReadX 13432 320 4096 4096 NT_STATUS_OK
ReadX 13432 900 4096 4096 NT_STATUS_OK
ReadX 13432 1908 4096 4096 NT_STATUS_OK
ReadX 13432 852 4096 4096 NT_STATUS_OK
ReadX 13432 724 4096 4096 NT_STATUS_OK
ReadX 13432 2292 4096 4096 NT_STATUS_OK
ReadX 13432 612 4096 4096 NT_STATUS_OK
ReadX 13432 388 4096 4096 NT_STATUS_OK
ReadX 13432 2368 4096 4096 NT_STATUS_OK
ReadX 13432 2624 4096 4096 NT_STATUS_OK
ReadX 13432 500 4096 4096 NT_STATUS_OK
ReadX 13432 356 4096 4096 NT_STATUS_OK
ReadX 13432 1024 4096 4096 NT_STATUS_OK
ReadX 13432 576 4096 4096 NT_STATUS_OK
ReadX 13432 340 4096 4096 NT_STATUS_OK
ReadX 13432 420 4096 4096 NT_STATUS_OK
ReadX 13432 1600 4096 4096 NT_STATUS_OK
ReadX 13432 404 4096 4096 NT_STATUS_OK
ReadX 13432 1428 4096 4096 NT_STATUS_OK
ReadX 13432 2656 4096 4096 NT_STATUS_OK
ReadX 13432 2624 4096 4096 NT_STATUS_OK
ReadX 13432 452 4096 4096 NT_STATUS_OK
ReadX 13432 692 4096 4096 NT_STATUS_OK
ReadX 13432 564 4096 4096 NT_STATUS_OK
ReadX 13432 372 4096 4096 NT_STATUS_OK
ReadX 13432 468 4096 4096 NT_STATUS_OK
ReadX 13432 484 4096 4096 NT_STATUS_OK
ReadX 13432 1088 4096 4096 NT_STATUS_OK
ReadX 13432 1924 4096 4096 NT_STATUS_OK
ReadX 13432 2768 4096 4096 NT_STATUS_OK
ReadX 13432 832 4096 4096 NT_STATUS_OK
ReadX 13432 836 4096 4096 NT_STATUS_OK
ReadX 13432 1856 4096 4096 NT_STATUS_OK
ReadX 13432 2640 4096 4096 NT_STATUS_OK
ReadX 13432 436 4096 4096 NT_STATUS_OK
ReadX 13432 1828 4096 4096 NT_STATUS_OK
ReadX 13432 804 4096 4096 NT_STATUS_OK
ReadX 13432 1860 4096 4096 NT_STATUS_OK
ReadX 13432 1812 4096 4096 NT_STATUS_OK
ReadX 13432 756 4096 4096 NT_STATUS_OK
ReadX 13432 1636 4096 4096 NT_STATUS_OK
ReadX 13432 772 4096 4096 NT_STATUS_OK
ReadX 13432 2036 4096 4096 NT_STATUS_OK
ReadX 13432 1220 4096 4096 NT_STATUS_OK
ReadX 13432 1652 4096 4096 NT_STATUS_OK
ReadX 13432 2588 4096 4096 NT_STATUS_OK
ReadX 13432 916 4096 4096 NT_STATUS_OK
ReadX 13432 260 4096 4096 NT_STATUS_OK
ReadX 13432 932 4096 4096 NT_STATUS_OK
ReadX 13432 2624 4096 4096 NT_STATUS_OK
ReadX 13432 308 4096 4096 NT_STATUS_OK
ReadX 13432 292 4096 4096 NT_STATUS_OK
ReadX 13432 1140 4096 4096 NT_STATUS_OK
ReadX 13432 276 4096 4096 NT_STATUS_OK
ReadX 13432 2020 4096 4096 NT_STATUS_OK
ReadX 13432 2880 4096 4096 NT_STATUS_OK
ReadX 13432 516 4096 4096 NT_STATUS_OK
ReadX 13432 1844 4096 4096 NT_STATUS_OK
ReadX 13432 1124 4096 4096 NT_STATUS_OK
ReadX 13432 3136 4096 4096 NT_STATUS_OK
ReadX 13432 324 4096 4096 NT_STATUS_OK
ReadX 13432 1156 4096 4096 NT_STATUS_OK
ReadX 13432 1172 4096 4096 NT_STATUS_OK
ReadX 13432 2112 4096 4096 NT_STATUS_OK
ReadX 13432 2368 4096 4096 NT_STATUS_OK
ReadX 13432 964 4096 4096 NT_STATUS_OK
ReadX 13432 980 4096 4096 NT_STATUS_OK
ReadX 13432 1012 4096 4096 NT_STATUS_OK
ReadX 13432 532 4096 4096 NT_STATUS_OK
ReadX 13432 1876 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13432 1620 4096 4096 NT_STATUS_OK
ReadX 13432 1604 4096 4096 NT_STATUS_OK
ReadX 13432 2116 4096 4096 NT_STATUS_OK
ReadX 13432 2132 4096 4096 NT_STATUS_OK
ReadX 13432 2148 4096 4096 NT_STATUS_OK
ReadX 13432 2276 4096 4096 NT_STATUS_OK
ReadX 13432 1540 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 23631 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13454 NT_STATUS_OK
Close 13454 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x1 30768 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x40 0x2 13457 NT_STATUS_OK
QUERY_FILE_INFORMATION 13412 1004 NT_STATUS_OK
Close 13412 NT_STATUS_OK
WriteX 13457 4088 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13457 258 NT_STATUS_OK
QUERY_FILE_INFORMATION 13414 1004 NT_STATUS_OK
Close 13414 NT_STATUS_OK
WriteX 13457 0 65536 65536 NT_STATUS_OK
WriteX 13457 65536 64850 64850 NT_STATUS_OK
Close 13457 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x40 0x2 13459 NT_STATUS_OK
WriteX 13459 15 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13459 258 NT_STATUS_OK
ReadX 13432 2068 4096 4096 NT_STATUS_OK
ReadX 13432 1588 4096 4096 NT_STATUS_OK
ReadX 13432 1572 4096 4096 NT_STATUS_OK
WriteX 13459 0 18630 18630 NT_STATUS_OK
Flush 13459 NT_STATUS_OK
Close 13459 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
Close 13447 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" 0x0 0x1 13461 NT_STATUS_OK
Close 13461 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\WORDPRO\LWPSAV0.TMP" "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x40 0x1 13463 NT_STATUS_OK
ReadX 13463 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13432 612 4096 4096 NT_STATUS_OK
ReadX 13432 564 4096 4096 NT_STATUS_OK
ReadX 13432 1876 4096 4096 NT_STATUS_OK
ReadX 13432 628 4096 4096 NT_STATUS_OK
ReadX 13432 740 4096 4096 NT_STATUS_OK
ReadX 13432 724 4096 4096 NT_STATUS_OK
ReadX 13432 644 4096 4096 NT_STATUS_OK
ReadX 13432 2324 4096 4096 NT_STATUS_OK
ReadX 13432 660 4096 4096 NT_STATUS_OK
ReadX 13432 852 4096 4096 NT_STATUS_OK
ReadX 13432 868 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.~TS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
ReadX 13432 2368 4096 4096 NT_STATUS_OK
ReadX 13432 1024 4096 4096 NT_STATUS_OK
ReadX 13432 320 4096 4096 NT_STATUS_OK
ReadX 13432 580 4096 4096 NT_STATUS_OK
ReadX 13432 3136 512 512 NT_STATUS_OK
ReadX 13432 2880 4096 4096 NT_STATUS_OK
Close 13432 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13464 NT_STATUS_OK
ReadX 13464 61440 4096 4096 NT_STATUS_OK
ReadX 13464 126976 4096 4096 NT_STATUS_OK
WriteX 13464 0 65536 65536 NT_STATUS_OK
WriteX 13464 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13465 NT_STATUS_OK
ReadX 13465 61440 4096 4096 NT_STATUS_OK
ReadX 13465 126976 4096 4096 NT_STATUS_OK
ReadX 13465 192512 4096 4096 NT_STATUS_OK
ReadX 13465 258048 4096 4096 NT_STATUS_OK
WriteX 13465 0 65536 65536 NT_STATUS_OK
WriteX 13465 65536 65536 65536 NT_STATUS_OK
WriteX 13465 131072 65536 65536 NT_STATUS_OK
WriteX 13465 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13466 NT_STATUS_OK
ReadX 13466 61440 4096 4096 NT_STATUS_OK
ReadX 13466 126976 4096 4096 NT_STATUS_OK
ReadX 13466 192512 4096 4096 NT_STATUS_OK
ReadX 13466 258048 4096 4096 NT_STATUS_OK
ReadX 13466 323584 4096 4096 NT_STATUS_OK
ReadX 13466 389120 4096 4096 NT_STATUS_OK
ReadX 13466 454656 4096 4096 NT_STATUS_OK
ReadX 13466 520192 4096 4096 NT_STATUS_OK
WriteX 13466 0 65536 65536 NT_STATUS_OK
WriteX 13466 65536 65536 65536 NT_STATUS_OK
WriteX 13466 131072 65536 65536 NT_STATUS_OK
WriteX 13466 196608 65536 65536 NT_STATUS_OK
WriteX 13466 262144 65536 65536 NT_STATUS_OK
WriteX 13466 327680 65536 65536 NT_STATUS_OK
WriteX 13466 393216 65536 65536 NT_STATUS_OK
WriteX 13466 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.MDB" 0x40 0x1 13467 NT_STATUS_OK
ReadX 13467 0 16384 16384 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x2 13468 NT_STATUS_OK
Close 13468 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x40 0x1 13469 NT_STATUS_OK
WriteX 13469 63 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13469 258 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13467 0 8192 8192 NT_STATUS_OK
Flush 13467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13467 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13467 0 8192 8192 NT_STATUS_OK
Flush 13467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13467 0 8192 8192 NT_STATUS_OK
Flush 13467 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
WriteX 13467 0 8192 8192 NT_STATUS_OK
Flush 13467 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 18780 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13471 NT_STATUS_OK
Close 13471 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Close 13463 NT_STATUS_OK
Close 13431 NT_STATUS_OK
Close 13464 NT_STATUS_OK
Close 13465 NT_STATUS_OK
Close 13466 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x1 21343 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x40 0x2 13474 NT_STATUS_OK
WriteX 13474 4065 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13474 258 NT_STATUS_OK
WriteX 13474 0 62591 62591 NT_STATUS_OK
Close 13474 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21340 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13476 NT_STATUS_OK
Close 13476 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x40 0x2 13479 NT_STATUS_OK
WriteX 13479 4094 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13479 258 NT_STATUS_OK
WriteX 13479 0 10845 10845 NT_STATUS_OK
Close 13479 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 19548 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13481 NT_STATUS_OK
Close 13481 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x1 20000 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x40 0x2 13484 NT_STATUS_OK
WriteX 13484 4081 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13484 258 NT_STATUS_OK
WriteX 13484 0 30118 30118 NT_STATUS_OK
Close 13484 NT_STATUS_OK
WriteX 13467 0 4096 4096 NT_STATUS_OK
WriteX 13469 0 64 64 NT_STATUS_OK
Close 13469 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 1035 NT_STATUS_OK
Close 13467 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\FASTENER.LDB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13486 NT_STATUS_OK
ReadX 13486 0 61440 61440 NT_STATUS_OK
ReadX 13486 61440 4096 4096 NT_STATUS_OK
ReadX 13486 65536 61440 61440 NT_STATUS_OK
ReadX 13486 126976 4096 4096 NT_STATUS_OK
ReadX 13486 131072 61440 61440 NT_STATUS_OK
ReadX 13486 192512 4096 4096 NT_STATUS_OK
ReadX 13486 196608 61440 61440 NT_STATUS_OK
ReadX 13486 258048 4096 4096 NT_STATUS_OK
ReadX 13486 262144 61440 61440 NT_STATUS_OK
ReadX 13486 323584 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13487 NT_STATUS_OK
ReadX 13487 0 61440 61440 NT_STATUS_OK
ReadX 13487 61440 4096 4096 NT_STATUS_OK
ReadX 13487 65536 61440 61440 NT_STATUS_OK
ReadX 13487 126976 4096 4096 NT_STATUS_OK
ReadX 13487 131072 61440 61440 NT_STATUS_OK
ReadX 13487 192512 4096 4096 NT_STATUS_OK
ReadX 13487 196608 61440 61440 NT_STATUS_OK
ReadX 13487 258048 4096 4096 NT_STATUS_OK
ReadX 13487 262144 61440 61440 NT_STATUS_OK
ReadX 13487 323584 4096 4096 NT_STATUS_OK
ReadX 13487 327680 61440 61440 NT_STATUS_OK
ReadX 13487 389120 4096 4096 NT_STATUS_OK
ReadX 13487 393216 61440 61440 NT_STATUS_OK
ReadX 13487 454656 4096 4096 NT_STATUS_OK
ReadX 13487 458752 61440 61440 NT_STATUS_OK
ReadX 13487 520192 4096 4096 NT_STATUS_OK
ReadX 13487 524288 61440 61440 NT_STATUS_OK
ReadX 13487 585728 4096 4096 NT_STATUS_OK
ReadX 13487 589824 61440 61440 NT_STATUS_OK
ReadX 13487 651264 4096 4096 NT_STATUS_OK
ReadX 13487 655360 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13488 NT_STATUS_OK
ReadX 13488 0 61440 61440 NT_STATUS_OK
ReadX 13488 61440 4096 4096 NT_STATUS_OK
ReadX 13488 65536 61440 61440 NT_STATUS_OK
ReadX 13488 126976 4096 4096 NT_STATUS_OK
ReadX 13488 131072 61440 61440 NT_STATUS_OK
ReadX 13488 192512 4096 4096 NT_STATUS_OK
ReadX 13488 196608 61440 61440 NT_STATUS_OK
ReadX 13488 258048 4096 4096 NT_STATUS_OK
ReadX 13488 262144 61440 61440 NT_STATUS_OK
ReadX 13488 323584 4096 4096 NT_STATUS_OK
ReadX 13488 327680 61440 61440 NT_STATUS_OK
ReadX 13488 389120 4096 4096 NT_STATUS_OK
ReadX 13488 393216 61440 61440 NT_STATUS_OK
ReadX 13488 454656 4096 4096 NT_STATUS_OK
ReadX 13488 458752 61440 61440 NT_STATUS_OK
ReadX 13488 520192 4096 4096 NT_STATUS_OK
ReadX 13488 524288 61440 61440 NT_STATUS_OK
ReadX 13488 585728 4096 4096 NT_STATUS_OK
ReadX 13488 589824 61440 61440 NT_STATUS_OK
ReadX 13488 651264 4096 4096 NT_STATUS_OK
ReadX 13488 655360 61440 61440 NT_STATUS_OK
ReadX 13488 716800 4096 4096 NT_STATUS_OK
ReadX 13488 720896 61440 61440 NT_STATUS_OK
ReadX 13488 782336 4096 4096 NT_STATUS_OK
ReadX 13488 786432 61440 61440 NT_STATUS_OK
ReadX 13488 847872 4096 4096 NT_STATUS_OK
ReadX 13488 851968 61440 61440 NT_STATUS_OK
ReadX 13488 913408 4096 4096 NT_STATUS_OK
ReadX 13488 917504 61440 61440 NT_STATUS_OK
ReadX 13488 978944 4096 4096 NT_STATUS_OK
ReadX 13488 983040 61440 61440 NT_STATUS_OK
ReadX 13488 1044480 4096 4096 NT_STATUS_OK
ReadX 13488 1048576 61440 61440 NT_STATUS_OK
ReadX 13488 1110016 4096 4096 NT_STATUS_OK
ReadX 13488 1114112 61440 61440 NT_STATUS_OK
ReadX 13488 1175552 4096 4096 NT_STATUS_OK
ReadX 13488 1179648 61440 61440 NT_STATUS_OK
ReadX 13488 1241088 4096 4096 NT_STATUS_OK
ReadX 13488 1245184 61440 61440 NT_STATUS_OK
ReadX 13488 1306624 4096 4096 NT_STATUS_OK
ReadX 13488 1310720 61440 61440 NT_STATUS_OK
ReadX 13488 1372160 4096 4096 NT_STATUS_OK
ReadX 13488 1376256 61440 61440 NT_STATUS_OK
ReadX 13488 1437696 4096 4096 NT_STATUS_OK
ReadX 13488 1441792 61440 61440 NT_STATUS_OK
ReadX 13488 1503232 4096 4096 NT_STATUS_OK
ReadX 13488 1507328 61440 61440 NT_STATUS_OK
ReadX 13488 1568768 4096 4096 NT_STATUS_OK
ReadX 13488 1572864 61440 61440 NT_STATUS_OK
ReadX 13488 1634304 4096 4096 NT_STATUS_OK
ReadX 13488 1638400 61440 61440 NT_STATUS_OK
ReadX 13488 1699840 4096 4096 NT_STATUS_OK
ReadX 13488 1703936 61440 61440 NT_STATUS_OK
ReadX 13488 1765376 4096 4096 NT_STATUS_OK
ReadX 13488 1769472 61440 61440 NT_STATUS_OK
ReadX 13488 1830912 4096 4096 NT_STATUS_OK
ReadX 13488 1835008 32768 32768 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13489 NT_STATUS_OK
Close 13489 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13486 NT_STATUS_OK
Close 13487 NT_STATUS_OK
Close 13488 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13491 NT_STATUS_OK
ReadX 13491 0 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13492 NT_STATUS_OK
ReadX 13492 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ARTISTIC.ACL" 0x40 0x1 13493 NT_STATUS_OK
ReadX 13493 0 4096 4096 NT_STATUS_OK
ReadX 13493 4096 4096 4096 NT_STATUS_OK
ReadX 13493 8192 4096 4096 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\CDRMENU.CFG" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13494 NT_STATUS_OK
Close 13494 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13491 NT_STATUS_OK
Close 13492 NT_STATUS_OK
Close 13493 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13496 NT_STATUS_OK
ReadX 13496 0 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13497 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13497 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13498 NT_STATUS_OK
Close 13498 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13496 NT_STATUS_OK
Close 13497 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13500 NT_STATUS_OK
ReadX 13500 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC1.CDR" 0x40 0x1 13501 NT_STATUS_OK
ReadX 13501 0 8192 8192 NT_STATUS_OK
ReadX 13501 8192 8192 8192 NT_STATUS_OK
ReadX 13501 16384 8192 8192 NT_STATUS_OK
ReadX 13501 24576 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13503 NT_STATUS_OK
Close 13503 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13501 NT_STATUS_OK
Close 13500 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13506 NT_STATUS_OK
WriteX 13506 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13506 258 NT_STATUS_OK
WriteX 13506 0 10438 10438 NT_STATUS_OK
Close 13506 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13507 NT_STATUS_OK
Close 13507 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\MAILBOX2.CPT" 0x40 0x1 13508 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13509 NT_STATUS_OK
Close 13509 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TEAPOT2.CPT" 0x40 0x1 13510 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13511 NT_STATUS_OK
Close 13511 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\SIGN2.CPT" 0x40 0x1 13512 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13513 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13513 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13514 NT_STATUS_OK
Close 13514 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\TRAIN.CDR" 0x40 0x1 13515 NT_STATUS_OK
ReadX 13515 0 4096 4096 NT_STATUS_OK
ReadX 13515 4096 4096 4096 NT_STATUS_OK
ReadX 13515 8192 4096 4096 NT_STATUS_OK
ReadX 13515 12288 8192 8192 NT_STATUS_OK
ReadX 13515 20480 8192 8192 NT_STATUS_OK
ReadX 13515 28672 8192 8192 NT_STATUS_OK
ReadX 13515 36864 8192 8192 NT_STATUS_OK
ReadX 13515 45056 8192 8192 NT_STATUS_OK
ReadX 13515 53248 8192 8192 NT_STATUS_OK
ReadX 13515 61440 8192 8192 NT_STATUS_OK
ReadX 13515 69632 8192 8192 NT_STATUS_OK
ReadX 13515 77824 8192 8192 NT_STATUS_OK
ReadX 13515 86016 8192 8192 NT_STATUS_OK
ReadX 13515 94208 8192 8192 NT_STATUS_OK
ReadX 13515 102400 8192 8192 NT_STATUS_OK
ReadX 13515 110592 8192 8192 NT_STATUS_OK
ReadX 13515 118784 8192 8192 NT_STATUS_OK
ReadX 13515 126976 8192 8192 NT_STATUS_OK
ReadX 13515 135168 8192 8192 NT_STATUS_OK
ReadX 13515 143360 8192 8192 NT_STATUS_OK
ReadX 13515 151552 8192 8192 NT_STATUS_OK
ReadX 13515 159744 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 13516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13516 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Close 13515 NT_STATUS_OK
Close 13508 NT_STATUS_OK
Close 13510 NT_STATUS_OK
Close 13512 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x0 0x1 13517 NT_STATUS_OK
Close 13517 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x40 0x2 13520 NT_STATUS_OK
WriteX 13520 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13520 258 NT_STATUS_OK
WriteX 13520 0 28489 28489 NT_STATUS_OK
Close 13520 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13521 NT_STATUS_OK
Close 13521 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13523 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
ReadX 13523 0 8192 8192 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13524 NT_STATUS_OK
Close 13524 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Close 13523 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CORELDRW.CDT" 0x40 0x1 13526 NT_STATUS_OK
ReadX 13526 0 8192 8192 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPHIC2.CDR" 0x40 0x1 13527 NT_STATUS_OK
ReadX 13527 0 8192 8192 NT_STATUS_OK
ReadX 13527 8192 8192 8192 NT_STATUS_OK
ReadX 13527 16384 8192 8192 NT_STATUS_OK
ReadX 13527 24576 8192 8192 NT_STATUS_OK
ReadX 13527 32768 16384 16384 NT_STATUS_OK
ReadX 13527 49152 8192 8192 NT_STATUS_OK
ReadX 13527 57344 8192 8192 NT_STATUS_OK
ReadX 13527 65536 8192 8192 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13529 NT_STATUS_OK
Close 13529 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13527 NT_STATUS_OK
Close 13526 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 21063 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13532 NT_STATUS_OK
WriteX 13532 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13532 258 NT_STATUS_OK
WriteX 13532 0 29253 29253 NT_STATUS_OK
Close 13532 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13533 NT_STATUS_OK
Close 13533 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\ROSE.CPT" 0x40 0x1 13534 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 13535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
Close 13535 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Close 13534 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x0 0x1 13536 NT_STATUS_OK
Close 13536 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x40 0x2 13539 NT_STATUS_OK
WriteX 13539 8191 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13539 258 NT_STATUS_OK
WriteX 13539 0 30183 30183 NT_STATUS_OK
Close 13539 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x0 0x1 13540 NT_STATUS_OK
Close 13540 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRBARS.CFG" 0x40 0x1 13542 NT_STATUS_OK
WriteX 13542 0 510 510 NT_STATUS_OK
WriteX 13542 510 512 512 NT_STATUS_OK
WriteX 13542 1022 510 510 NT_STATUS_OK
WriteX 13542 1532 510 510 NT_STATUS_OK
WriteX 13542 2042 168 168 NT_STATUS_OK
Close 13542 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x40 0x2 13543 NT_STATUS_OK
Close 13543 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\@@@CDRW.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\COREL\CDRROLS.CFG" 0x40 0x1 13545 NT_STATUS_OK
ReadX 13545 0 4096 4096 NT_STATUS_OK
WriteX 13545 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13546 NT_STATUS_OK
ReadX 13546 61440 4096 4096 NT_STATUS_OK
ReadX 13546 126976 4096 4096 NT_STATUS_OK
WriteX 13546 0 65536 65536 NT_STATUS_OK
WriteX 13546 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13547 NT_STATUS_OK
ReadX 13547 61440 4096 4096 NT_STATUS_OK
ReadX 13547 126976 4096 4096 NT_STATUS_OK
ReadX 13547 192512 4096 4096 NT_STATUS_OK
ReadX 13547 258048 4096 4096 NT_STATUS_OK
WriteX 13547 0 65536 65536 NT_STATUS_OK
WriteX 13547 65536 65536 65536 NT_STATUS_OK
WriteX 13547 131072 65536 65536 NT_STATUS_OK
WriteX 13547 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13548 NT_STATUS_OK
ReadX 13548 61440 4096 4096 NT_STATUS_OK
ReadX 13548 126976 4096 4096 NT_STATUS_OK
ReadX 13548 192512 4096 4096 NT_STATUS_OK
ReadX 13548 258048 4096 4096 NT_STATUS_OK
ReadX 13548 323584 4096 4096 NT_STATUS_OK
ReadX 13548 389120 4096 4096 NT_STATUS_OK
ReadX 13548 454656 4096 4096 NT_STATUS_OK
ReadX 13548 520192 4096 4096 NT_STATUS_OK
WriteX 13548 0 65536 65536 NT_STATUS_OK
WriteX 13548 65536 65536 65536 NT_STATUS_OK
WriteX 13548 131072 65536 65536 NT_STATUS_OK
WriteX 13548 196608 65536 65536 NT_STATUS_OK
WriteX 13548 262144 65536 65536 NT_STATUS_OK
WriteX 13548 327680 65536 65536 NT_STATUS_OK
WriteX 13548 393216 65536 65536 NT_STATUS_OK
WriteX 13548 458752 65536 65536 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM" 1004 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13549 NT_STATUS_OK
Close 13549 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Close 13545 NT_STATUS_OK
Close 13546 NT_STATUS_OK
Close 13547 NT_STATUS_OK
Close 13548 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x40 0x2 13551 NT_STATUS_OK
Close 13551 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC162.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC162.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 16914 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x40 0x2 13555 NT_STATUS_OK
Close 13555 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC175.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC175.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x40 0x2 13558 NT_STATUS_OK
Close 13558 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC176.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC176.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x40 0x2 13560 NT_STATUS_OK
Close 13560 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC180.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC180.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13564 NT_STATUS_OK
Close 13564 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13567 NT_STATUS_OK
Close 13567 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x40 0x2 13569 NT_STATUS_OK
Close 13569 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC183.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC183.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\B" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13573 NT_STATUS_OK
Close 13573 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\B" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13578 NT_STATUS_OK
Close 13578 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BEN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13583 NT_STATUS_OK
Close 13583 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BEN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENC" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 8771 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x40 0x2 13588 NT_STATUS_OK
Close 13588 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC184.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC184.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENC" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCH" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13593 NT_STATUS_OK
Close 13593 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCH" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHD" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13598 NT_STATUS_OK
Close 13598 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHD" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDE" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x40 0x2 13603 NT_STATUS_OK
Close 13603 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC185.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC185.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDE" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 18499 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x40 0x2 13608 NT_STATUS_OK
Close 13608 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC186.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC186.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BENCHDES" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BENCHDES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x40 0x2 13611 NT_STATUS_OK
Close 13611 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMC1A2.TMP" 0x6 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 12627 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13614 NT_STATUS_OK
Close 13614 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x1 16724 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x40 0x2 13617 NT_STATUS_OK
WriteX 13617 4095 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13617 258 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
WriteX 13617 0 65536 65536 NT_STATUS_OK
WriteX 13617 65536 65536 65536 NT_STATUS_OK
WriteX 13617 131072 65536 65536 NT_STATUS_OK
WriteX 13617 196608 65536 65536 NT_STATUS_OK
WriteX 13617 262144 26634 26634 NT_STATUS_OK
Close 13617 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.X" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XL" 0x40 0x1 13617 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13622 NT_STATUS_OK
Close 13622 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13623 NT_STATUS_OK
Close 13623 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13624 NT_STATUS_OK
ReadX 13624 0 4096 4096 NT_STATUS_OK
Close 13624 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\T1.XLS" 0x40 0x1 13625 NT_STATUS_OK
ReadX 13625 0 4096 4096 NT_STATUS_OK
ReadX 13625 4096 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13626 NT_STATUS_OK
Close 13626 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Close 13625 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13630 NT_STATUS_OK
Close 13630 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13633 NT_STATUS_OK
Close 13633 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x40 0x2 13635 NT_STATUS_OK
Close 13635 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD383.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD383.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 8244 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13639 NT_STATUS_OK
Close 13639 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x40 0x2 13642 NT_STATUS_OK
Close 13642 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD391.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD391.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13644 NT_STATUS_OK
Close 13644 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\C" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 12337 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13648 NT_STATUS_OK
Close 13648 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 12576 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13653 NT_STATUS_OK
Close 13653 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CS" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 8226 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13658 NT_STATUS_OK
Close 13658 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 8753 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x40 0x2 13663 NT_STATUS_OK
Close 13663 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD392.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD392.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13668 NT_STATUS_OK
Close 13668 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x40 0x2 13673 NT_STATUS_OK
Close 13673 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD393.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD393.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 12832 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13677 NT_STATUS_OK
Close 13677 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.P" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13682 NT_STATUS_OK
Close 13682 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.P" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2.PM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 24369 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x40 0x2 13687 NT_STATUS_OK
Close 13687 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD394.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD394.TMP" 0x6 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\CSN1_2.PM" 0x40 0x1 21587 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x40 0x2 13690 NT_STATUS_OK
Close 13690 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD395.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD395.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x40 0x2 13692 NT_STATUS_OK
Close 13692 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\PMD3A4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\CSN1_2A" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\E" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EV" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVE" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVEN" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENT" 0x40 0x1 14389 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.D" 0x40 0x1 13361 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DO" 0x40 0x1 12664 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13702 NT_STATUS_OK
Close 13702 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13703 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13703 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13704 NT_STATUS_OK
ReadX 13704 0 4096 4096 NT_STATUS_OK
Close 13704 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13705 NT_STATUS_OK
ReadX 13705 0 4096 4096 NT_STATUS_OK
Close 13705 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\EVENTS.DOC" 0x40 0x1 13706 NT_STATUS_OK
ReadX 13706 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\C" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\P" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\M" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MO" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOV" 0x40 0x1 8242 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVE" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED" 0x40 0x1 12852 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.D" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DO" 0x40 0x1 12849 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13716 NT_STATUS_OK
Close 13716 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13717 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
Close 13717 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13718 NT_STATUS_OK
ReadX 13718 0 4096 4096 NT_STATUS_OK
Close 13718 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13719 NT_STATUS_OK
ReadX 13719 0 4096 4096 NT_STATUS_OK
Close 13719 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PM\MOVED.DOC" 0x40 0x1 13720 NT_STATUS_OK
ReadX 13720 0 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORD\*" 260 1366 7 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 1035 NT_STATUS_OK
Close 13706 NT_STATUS_OK
Close 13720 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\HANDOUT.DOC" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TIPS.DOC" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORD\TIPS.DOC" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\EXCEL\*" 260 1366 10 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS2.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\RESULTS3.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.XLS" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\EXCEL\SALES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PWRPNT\*" 260 1366 9 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\COREL\*" 260 1366 17 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.CDR" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH1.BAK" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\COREL\GRAPH2.BAK" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\WORDPRO\*" 260 1366 11 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\BENCHS1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1A.LWP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\WORDPRO\NEWS1_1B.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PM\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PM\BDES1.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PM\BDES1.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX" 1004 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\PARADOX\*" 260 1366 26 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\COURSES.VAL" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\CHANGED.DB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.MB" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PARADOX\ANSWER.DB" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\ACCESS\*" 260 1366 6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\INV.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\INV.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\SALES.PRN" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\ACCESS\LABELS.PRN" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\SEED\*" 260 1366 5 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\*" 260 1366 11 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PCBENCHM" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13749 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13749 0 4096 4096 NT_STATUS_OK
Close 13749 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13750 NT_STATUS_OK
ReadX 13750 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13750 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13751 NT_STATUS_OK
ReadX 13751 0 4096 4096 NT_STATUS_OK
ReadX 13751 4096 4096 4096 NT_STATUS_OK
ReadX 13751 8192 4096 4096 NT_STATUS_OK
ReadX 13751 12288 4096 4096 NT_STATUS_OK
ReadX 13751 16384 4096 4096 NT_STATUS_OK
ReadX 13751 20480 4096 4096 NT_STATUS_OK
ReadX 13751 24576 4096 4096 NT_STATUS_OK
ReadX 13751 28672 4096 4096 NT_STATUS_OK
ReadX 13751 32768 4096 4096 NT_STATUS_OK
ReadX 13751 36864 4096 4096 NT_STATUS_OK
ReadX 13751 40960 4096 4096 NT_STATUS_OK
ReadX 13751 45056 4096 4096 NT_STATUS_OK
ReadX 13751 49152 4096 4096 NT_STATUS_OK
ReadX 13751 53248 4096 4096 NT_STATUS_OK
ReadX 13751 57344 4096 4096 NT_STATUS_OK
ReadX 13751 61440 4096 4096 NT_STATUS_OK
ReadX 13751 65536 4096 4096 NT_STATUS_OK
ReadX 13751 69632 4096 4096 NT_STATUS_OK
ReadX 13751 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13751 1004 NT_STATUS_OK
WriteX 13751 0 4096 4096 NT_STATUS_OK
Close 13751 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13752 NT_STATUS_OK
SET_FILE_INFORMATION 13752 1004 NT_STATUS_OK
Close 13752 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PCBENCHM.PPT" 0x40 0x1 13753 NT_STATUS_OK
ReadX 13753 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13754 NT_STATUS_OK
Close 13754 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 21582 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13757 NT_STATUS_OK
WriteX 13757 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13757 258 NT_STATUS_OK
WriteX 13757 0 65536 65536 NT_STATUS_OK
WriteX 13757 65536 19979 19979 NT_STATUS_OK
Close 13757 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13758 NT_STATUS_OK
ReadX 13758 0 4096 4096 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
QUERY_FILE_INFORMATION 13758 1004 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
SET_FILE_INFORMATION 13758 1004 NT_STATUS_OK
WriteX 13758 0 4096 4096 NT_STATUS_OK
Flush 13758 NT_STATUS_OK
Close 13758 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13759 NT_STATUS_OK
ReadX 13759 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\ZD16.BMP" 0x40 0x1 13760 NT_STATUS_OK
ReadX 13760 0 4096 4096 NT_STATUS_OK
Close 13759 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13761 NT_STATUS_OK
ReadX 13761 0 4096 4096 NT_STATUS_OK
Close 13761 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13762 NT_STATUS_OK
ReadX 13762 0 4096 4096 NT_STATUS_OK
Close 13762 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13763 NT_STATUS_OK
ReadX 13763 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13763 1004 NT_STATUS_OK
WriteX 13763 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x2 13764 NT_STATUS_OK
Close 13764 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Close 13760 NT_STATUS_OK
Close 13763 NT_STATUS_OK
Close 13753 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13766 NT_STATUS_OK
Close 13766 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13769 NT_STATUS_OK
WriteX 13769 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13769 258 NT_STATUS_OK
WriteX 13769 0 65536 65536 NT_STATUS_OK
WriteX 13769 65536 17654 17654 NT_STATUS_OK
Close 13769 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13770 NT_STATUS_OK
ReadX 13770 0 4096 4096 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
QUERY_FILE_INFORMATION 13770 1004 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
SET_FILE_INFORMATION 13770 1004 NT_STATUS_OK
WriteX 13770 0 4096 4096 NT_STATUS_OK
Flush 13770 NT_STATUS_OK
Close 13770 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13771 NT_STATUS_OK
SET_FILE_INFORMATION 13771 1004 NT_STATUS_OK
Close 13771 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13772 NT_STATUS_OK
ReadX 13772 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x40 0x1 13773 NT_STATUS_OK
Close 13773 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTB1E4.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTOOLS1.PPA" 0x40 0x1 13775 NT_STATUS_OK
ReadX 13775 0 4096 4096 NT_STATUS_OK
ReadX 13775 4096 4096 4096 NT_STATUS_OK
ReadX 13775 8192 4096 4096 NT_STATUS_OK
ReadX 13775 12288 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
ReadX 13775 16384 4096 4096 NT_STATUS_OK
ReadX 13775 20480 4096 4096 NT_STATUS_OK
ReadX 13775 24576 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13772 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13776 NT_STATUS_OK
ReadX 13776 0 4096 4096 NT_STATUS_OK
Close 13776 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13777 NT_STATUS_OK
ReadX 13777 0 4096 4096 NT_STATUS_OK
Close 13777 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13778 NT_STATUS_OK
ReadX 13778 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13778 1004 NT_STATUS_OK
WriteX 13778 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x2 13779 NT_STATUS_OK
Close 13779 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Close 13778 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x0 0x1 13781 NT_STATUS_OK
Close 13781 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x2 13784 NT_STATUS_OK
WriteX 13784 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13784 258 NT_STATUS_OK
WriteX 13784 0 65536 65536 NT_STATUS_OK
WriteX 13784 65536 19490 19490 NT_STATUS_OK
Close 13784 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13785 NT_STATUS_OK
ReadX 13785 0 4096 4096 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
QUERY_FILE_INFORMATION 13785 1004 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
SET_FILE_INFORMATION 13785 1004 NT_STATUS_OK
WriteX 13785 0 4096 4096 NT_STATUS_OK
Flush 13785 NT_STATUS_OK
Close 13785 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13786 NT_STATUS_OK
SET_FILE_INFORMATION 13786 1004 NT_STATUS_OK
Close 13786 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWPCB.PPT" 0x40 0x1 13787 NT_STATUS_OK
ReadX 13787 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x40 0x1 13788 NT_STATUS_OK
Close 13788 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC112.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TIPS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13790 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13790 0 4096 4096 NT_STATUS_OK
Close 13790 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13791 NT_STATUS_OK
ReadX 13791 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13791 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13792 NT_STATUS_OK
ReadX 13792 0 4096 4096 NT_STATUS_OK
ReadX 13792 4096 4096 4096 NT_STATUS_OK
ReadX 13792 8192 4096 4096 NT_STATUS_OK
ReadX 13792 12288 4096 4096 NT_STATUS_OK
ReadX 13792 16384 4096 4096 NT_STATUS_OK
ReadX 13792 20480 4096 4096 NT_STATUS_OK
ReadX 13792 24576 4096 4096 NT_STATUS_OK
ReadX 13792 28672 4096 4096 NT_STATUS_OK
ReadX 13792 32768 4096 4096 NT_STATUS_OK
ReadX 13792 36864 4096 4096 NT_STATUS_OK
ReadX 13792 40960 4096 4096 NT_STATUS_OK
ReadX 13792 45056 4096 4096 NT_STATUS_OK
ReadX 13792 49152 4096 4096 NT_STATUS_OK
ReadX 13792 53248 4096 4096 NT_STATUS_OK
ReadX 13792 57344 4096 4096 NT_STATUS_OK
ReadX 13792 61440 4096 4096 NT_STATUS_OK
ReadX 13792 65536 4096 4096 NT_STATUS_OK
ReadX 13792 69632 4096 4096 NT_STATUS_OK
ReadX 13792 73728 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13792 1004 NT_STATUS_OK
WriteX 13792 0 4096 4096 NT_STATUS_OK
Close 13792 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13793 NT_STATUS_OK
SET_FILE_INFORMATION 13793 1004 NT_STATUS_OK
Close 13793 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TIPS.PPT" 0x40 0x1 13794 NT_STATUS_OK
ReadX 13794 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13795 NT_STATUS_OK
Close 13795 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
Close 13787 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 109 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13798 NT_STATUS_OK
WriteX 13798 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13798 258 NT_STATUS_OK
WriteX 13798 0 65536 65536 NT_STATUS_OK
WriteX 13798 65536 8866 8866 NT_STATUS_OK
Close 13798 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13799 NT_STATUS_OK
ReadX 13799 0 4096 4096 NT_STATUS_OK
WriteX 13799 0 4096 4096 NT_STATUS_OK
Flush 13799 NT_STATUS_OK
SET_FILE_INFORMATION 13799 1004 NT_STATUS_OK
WriteX 13799 0 4096 4096 NT_STATUS_OK
Flush 13799 NT_STATUS_OK
Close 13799 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13800 NT_STATUS_OK
ReadX 13800 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
Close 13800 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13801 NT_STATUS_OK
ReadX 13801 0 4096 4096 NT_STATUS_OK
Close 13801 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13802 NT_STATUS_OK
ReadX 13802 0 4096 4096 NT_STATUS_OK
Close 13802 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13803 NT_STATUS_OK
ReadX 13803 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13803 1004 NT_STATUS_OK
WriteX 13803 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x2 13804 NT_STATUS_OK
Close 13804 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Close 13803 NT_STATUS_OK
Close 13794 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13806 NT_STATUS_OK
Close 13806 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13809 NT_STATUS_OK
WriteX 13809 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13809 258 NT_STATUS_OK
WriteX 13809 0 65536 65536 NT_STATUS_OK
WriteX 13809 65536 9298 9298 NT_STATUS_OK
Close 13809 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13810 NT_STATUS_OK
ReadX 13810 0 4096 4096 NT_STATUS_OK
WriteX 13810 0 4096 4096 NT_STATUS_OK
Flush 13810 NT_STATUS_OK
SET_FILE_INFORMATION 13810 1004 NT_STATUS_OK
WriteX 13810 0 4096 4096 NT_STATUS_OK
Flush 13810 NT_STATUS_OK
Close 13810 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13811 NT_STATUS_OK
SET_FILE_INFORMATION 13811 1004 NT_STATUS_OK
Close 13811 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13812 NT_STATUS_OK
ReadX 13812 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x40 0x1 13813 NT_STATUS_OK
Close 13813 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC241.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\Designs" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\Designs" 0x40 0x1 8819 NT_STATUS_OBJECT_NAME_NOT_FOUND
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.PPT" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13816 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13816 0 4096 4096 NT_STATUS_OK
Close 13816 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\TRIDOTS.POT" 0x40 0x1 13817 NT_STATUS_OK
ReadX 13817 0 4096 4096 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
ReadX 13817 4096 4096 4096 NT_STATUS_OK
ReadX 13817 8192 4096 4096 NT_STATUS_OK
ReadX 13817 12288 4096 4096 NT_STATUS_OK
ReadX 13817 16384 4096 4096 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
Close 13812 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13818 NT_STATUS_OK
ReadX 13818 0 4096 4096 NT_STATUS_OK
Close 13818 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13819 NT_STATUS_OK
ReadX 13819 0 4096 4096 NT_STATUS_OK
Close 13819 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13820 NT_STATUS_OK
ReadX 13820 0 4096 4096 NT_STATUS_OK
SET_FILE_INFORMATION 13820 1004 NT_STATUS_OK
WriteX 13820 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x2 13821 NT_STATUS_OK
Close 13821 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Close 13817 NT_STATUS_OK
Close 13820 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1004 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 1035 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x0 0x1 13823 NT_STATUS_OK
Close 13823 NT_STATUS_OK
Rename "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 0 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x2 13826 NT_STATUS_OK
WriteX 13826 4607 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13826 258 NT_STATUS_OK
WriteX 13826 0 65536 65536 NT_STATUS_OK
WriteX 13826 65536 11540 11540 NT_STATUS_OK
Close 13826 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13827 NT_STATUS_OK
ReadX 13827 0 4096 4096 NT_STATUS_OK
WriteX 13827 0 4096 4096 NT_STATUS_OK
Flush 13827 NT_STATUS_OK
SET_FILE_INFORMATION 13827 1004 NT_STATUS_OK
WriteX 13827 0 4096 4096 NT_STATUS_OK
Flush 13827 NT_STATUS_OK
Close 13827 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13828 NT_STATUS_OK
SET_FILE_INFORMATION 13828 1004 NT_STATUS_OK
Close 13828 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\NEWTIPS.PPT" 0x40 0x1 13829 NT_STATUS_OK
ReadX 13829 0 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x40 0x1 13830 NT_STATUS_OK
Close 13830 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 1035 NT_STATUS_OK
Unlink "\clients\client1\~dmtmp\PWRPNT\PPTC321.TMP" 0x6 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
NTCreateX "\clients\client1\~dmtmp\SEED\SMALL.FIL" 0x40 0x1 13832 NT_STATUS_OK
ReadX 13832 61440 4096 4096 NT_STATUS_OK
ReadX 13832 126976 4096 4096 NT_STATUS_OK
WriteX 13832 0 65536 65536 NT_STATUS_OK
WriteX 13832 65536 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\MEDIUM.FIL" 0x40 0x1 13833 NT_STATUS_OK
ReadX 13833 61440 4096 4096 NT_STATUS_OK
ReadX 13833 126976 4096 4096 NT_STATUS_OK
ReadX 13833 192512 4096 4096 NT_STATUS_OK
ReadX 13833 258048 4096 4096 NT_STATUS_OK
WriteX 13833 0 65536 65536 NT_STATUS_OK
WriteX 13833 65536 65536 65536 NT_STATUS_OK
WriteX 13833 131072 65536 65536 NT_STATUS_OK
WriteX 13833 196608 65536 65536 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\SEED\LARGE.FIL" 0x40 0x1 13834 NT_STATUS_OK
ReadX 13834 61440 4096 4096 NT_STATUS_OK
ReadX 13834 126976 4096 4096 NT_STATUS_OK
ReadX 13834 192512 4096 4096 NT_STATUS_OK
ReadX 13834 258048 4096 4096 NT_STATUS_OK
ReadX 13834 323584 4096 4096 NT_STATUS_OK
ReadX 13834 389120 4096 4096 NT_STATUS_OK
ReadX 13834 454656 4096 4096 NT_STATUS_OK
ReadX 13834 520192 4096 4096 NT_STATUS_OK
WriteX 13834 0 65536 65536 NT_STATUS_OK
WriteX 13834 65536 65536 65536 NT_STATUS_OK
WriteX 13834 131072 65536 65536 NT_STATUS_OK
WriteX 13834 196608 65536 65536 NT_STATUS_OK
WriteX 13834 262144 65536 65536 NT_STATUS_OK
WriteX 13834 327680 65536 65536 NT_STATUS_OK
WriteX 13834 393216 65536 65536 NT_STATUS_OK
WriteX 13834 458752 65536 65536 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\TEMPLATES" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\STARTUP" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\FOO" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
QUERY_FS_INFORMATION 259 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_FS_INFORMATION 259 NT_STATUS_OK
QUERY_PATH_INFORMATION "\clients\client1\~dmtmp\WORD\CHAP10" 1004 NT_STATUS_OBJECT_NAME_NOT_FOUND
NTCreateX "\clients\client1\~dmtmp\WORD\CHAP10.DOC" 0x40 0x1 13835 NT_STATUS_OK
ReadX 13835 0 4096 4096 NT_STATUS_OK
ReadX 13835 4096 4096 4096 NT_STATUS_OK
NTCreateX "\clients\client1\~dmtmp\WORD\~$CHAP10.DOC" 0x40 0x2 13836 NT_STATUS_OK
WriteX 13836 52 1 1 NT_STATUS_OK
QUERY_FILE_INFORMATION 13836 258 NT_STATUS_OK
WriteX 13836 0 53 53 NT_STATUS_OK
Close 13836 NT_STATUS_OK
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<.JNK" 260 1366 0 NT_STATUS_NO_SUCH_FILE
FIND_FIRST "\clients\client1\~dmtmp\<